$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5e5261b-ddc5-4de8-890e-3592feaf85d0.roa File: d5e5261b-ddc5-4de8-890e-3592feaf85d0.roa (raw, json) Hash identifier: zjsPA3uoBWqKWJq0Zn6xyK+WWn0JudYi6n+1z0lVqHo= Subject key identifier: DB:01:09:58:0B:20:3D:F3:47:31:0A:5E:3E:C3:98:58:4D:ED:23:89 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 383ECF4917714F410382F8E7160A7311193FDBFF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5e5261b-ddc5-4de8-890e-3592feaf85d0.roa Signing time: Sun 31 May 2026 01:00:06 +0000 ROA not before: Sun 31 May 2026 01:00:06 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe9:e0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:3e:cf:49:17:71:4f:41:03:82:f8:e7:16:0a:73:11:19:3f:db:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 31 01:00:06 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=8b46d442ca4c7239b4d0397395f615d78124736f5959837492eb768cd99b0ce9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:55:9c:f1:43:85:9e:fe:79:e5:21:c6:42:78: 98:15:6b:97:10:e0:b7:ff:16:bb:3b:20:00:49:38: 3f:1e:c7:2f:ee:19:54:6f:42:7f:61:4d:5c:30:5b: 74:ff:9b:a5:71:ad:86:88:69:cc:75:b9:64:1c:3a: 72:9e:f7:cb:a6:ee:a7:0a:5c:2e:21:c5:77:7c:df: 6c:83:6f:cb:ef:c4:82:70:15:25:43:69:bf:82:8a: e1:41:bd:3d:2d:93:c1:67:9d:d2:88:da:2f:13:dc: db:51:0b:28:0c:ca:69:8b:63:d3:aa:d2:e7:d9:70: 57:37:5f:03:e3:2b:58:e0:69:f8:d5:03:4a:b0:de: 60:b5:f8:ae:cf:09:aa:2e:2d:01:e2:e7:81:5a:a9: 03:3e:58:7d:4a:29:52:d4:4c:e1:de:8f:4e:58:06: 17:25:3a:6f:99:a1:57:ac:df:4a:7b:27:c5:48:fa: e8:51:e3:75:8e:fd:5c:25:5c:d2:9f:38:ce:4c:6a: 59:22:4a:fe:53:ca:4f:dc:d5:0c:f6:7b:d9:17:e6: b6:2d:76:c9:95:90:bf:55:f1:df:36:bf:ff:b5:62: 51:fd:58:c5:a9:93:be:6c:cf:76:34:7e:55:5b:04: 70:c2:2c:0b:7c:11:c2:1a:f6:72:a3:13:80:56:b1: df:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:01:09:58:0B:20:3D:F3:47:31:0A:5E:3E:C3:98:58:4D:ED:23:89 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5e5261b-ddc5-4de8-890e-3592feaf85d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe9:e0c0::/48 Signature Algorithm: sha256WithRSAEncryption d1:e1:6a:f8:49:53:c5:03:ce:cc:e7:1b:67:c1:e3:23:8b:e6: 05:43:d3:a5:6f:21:14:22:c8:4a:30:4d:3f:4d:7a:0e:ff:ec: 15:22:5d:c8:a1:27:c5:09:84:c7:d6:d8:c9:79:22:1d:83:12: c6:43:4e:4c:33:c4:6c:0a:6d:c1:21:f6:07:39:53:94:a1:9d: 0d:c8:02:b6:25:f3:68:1f:5b:96:78:66:67:aa:ae:94:c3:69: 00:7a:85:36:94:70:54:37:84:8d:6a:68:14:46:a7:17:c2:13: ff:ea:26:4b:92:63:5a:38:8f:4d:37:25:ac:59:66:92:96:4c: 84:38:ba:90:52:f3:8f:df:76:30:7a:9e:56:ab:89:ec:e8:83: 94:a5:6e:3a:fb:93:7b:a8:cb:e8:50:78:5c:71:24:c8:e7:a4: b2:34:f0:ca:91:f8:11:6f:d2:19:38:cf:1e:0b:38:c1:83:72: 73:f3:ae:c7:49:2d:d2:8e:e9:4d:a5:7b:f6:15:d4:07:d1:70: 36:8a:98:c1:6f:66:14:21:c9:64:a0:ba:2f:49:b1:3e:fb:ad: cd:8d:dd:4d:77:b1:4d:c3:dd:8c:6b:d3:7f:3d:11:ce:15:eb: 7c:b9:3c:3a:59:0a:cf:4d:31:ce:7c:e7:40:7e:b1:a5:6a:ce: be:98:7b:ca -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOD7PSRdxT0EDgvjnFgpzERk/2/8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTMxMDEwMDA2WhcNMjYwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YjQ2ZDQ0MmNhNGM3MjM5YjRkMDM5NzM5NWY2MTVkNzgx MjQ3MzZmNTk1OTgzNzQ5MmViNzY4Y2Q5OWIwY2U5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDwVZzxQ4We/nnlIcZCeJgVa5cQ4Lf/Frs7IABJOD8exy/u GVRvQn9hTVwwW3T/m6VxrYaIacx1uWQcOnKe98um7qcKXC4hxXd832yDb8vvxIJw FSVDab+CiuFBvT0tk8FnndKI2i8T3NtRCygMymmLY9Oq0ufZcFc3XwPjK1jgafjV A0qw3mC1+K7PCaouLQHi54FaqQM+WH1KKVLUTOHej05YBhclOm+ZoVes30p7J8VI +uhR43WO/VwlXNKfOM5MalkiSv5Tyk/c1Qz2e9kX5rYtdsmVkL9V8d82v/+1YlH9 WMWpk75sz3Y0flVbBHDCLAt8EcIa9nKjE4BWsd8fAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2wEJWAsgPfNHMQpePsOYWE3tI4kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q1ZTUyNjFiLWRkYzUtNGRlOC04OTBlLTM1OTJmZWFmODVkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/p4MAwDQYJKoZIhvcNAQELBQADggEBANHhavhJU8UDzsznG2fB4yOL 5gVD06VvIRQiyEowTT9Neg7/7BUiXcihJ8UJhMfW2Ml5Ih2DEsZDTkwzxGwKbcEh 9gc5U5ShnQ3IArYl82gfW5Z4ZmeqrpTDaQB6hTaUcFQ3hI1qaBRGpxfCE//qJkuS Y1o4j003JaxZZpKWTIQ4upBS84/fdjB6nlariezog5Slbjr7k3uoy+hQeFxxJMjn pLI08MqR+BFv0hk4zx4LOMGDcnPzrsdJLdKO6U2le/YV1AfRcDaKmMFvZhQhyWSg ui9JsT77rc2N3U13sU3D3Yxr0389Ec4V63y5PDpZCs9NMc5850B+saVqzr6Ye8o= -----END CERTIFICATE-----Generated at Sat Jun 13 05:46:59 2026 by rpki-client