$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9c00e36-c7b5-4de9-b622-e141f8360604.roa File: d9c00e36-c7b5-4de9-b622-e141f8360604.roa (raw, json) Hash identifier: KKPg9FJOkQNST5Nmgd5ePKpww4y1sVTbXM0noD3tbqA= Subject key identifier: E7:C2:71:DF:C5:6A:08:58:C2:A0:3C:81:6C:9F:41:F7:FA:B5:12:F4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 063786B7733645A7F657E4DD86CCC813E16AC6F3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9c00e36-c7b5-4de9-b622-e141f8360604.roa Signing time: Fri 22 May 2026 16:32:29 +0000 ROA not before: Fri 22 May 2026 16:32:29 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:37:86:b7:73:36:45:a7:f6:57:e4:dd:86:cc:c8:13:e1:6a:c6:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 22 16:32:29 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=1660ac7aa1d86cb692456ff5f63accb0b39b206f2689d8ba933e4e3d7f046694, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:00:f0:98:b5:62:0b:52:43:45:f0:fa:c1:12: bf:5a:4d:8e:bf:9f:51:6e:ba:65:da:3a:52:b6:13: 82:fb:d6:f1:a5:f3:d7:84:c0:f0:4d:4c:aa:ae:b7: 31:5f:ed:b5:8f:e6:72:1c:1f:b3:5b:31:83:5f:75: 61:9e:89:4d:8d:15:80:0c:84:4b:ea:a3:d4:aa:ee: 7f:34:ea:20:14:d5:18:77:56:18:12:f4:f2:4b:99: 16:35:cd:96:18:b5:d8:bd:35:4d:03:6f:b1:54:8f: a3:85:47:87:3a:e5:a5:6c:ca:55:3b:32:29:3b:b6: d4:9e:a8:ea:80:d0:4f:24:4e:d4:10:4c:a8:e4:3c: 65:25:da:90:8b:26:20:7a:3a:63:d0:66:66:81:d2: ee:ad:a8:6c:8f:93:6e:c7:28:dc:17:c4:f2:c9:2e: 83:ab:42:8b:b0:e3:f4:6c:2b:ef:ff:1f:91:4a:03: a8:2a:79:d7:f8:de:26:41:48:85:b1:15:18:9c:f8: 14:fe:84:f3:09:7f:7c:e8:95:97:6b:b2:c2:73:b5: 53:ca:fd:4a:1a:94:19:ac:40:0a:a9:f8:f4:45:7e: 50:94:c2:29:41:a3:5b:93:7d:ee:cc:06:e3:5b:e8: 51:bd:8b:62:b9:e2:d9:8c:81:87:0c:65:9b:80:b2: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C2:71:DF:C5:6A:08:58:C2:A0:3C:81:6C:9F:41:F7:FA:B5:12:F4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9c00e36-c7b5-4de9-b622-e141f8360604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:c000::/40 Signature Algorithm: sha256WithRSAEncryption 4a:71:23:a8:be:fd:ce:7d:ba:13:ff:cd:68:83:d0:f2:ad:06: 1d:f4:36:af:38:cb:66:8c:69:ba:f2:c5:ef:a0:4f:84:c3:a1: 35:4c:2e:e5:1b:78:5f:6a:64:f7:6a:2e:38:36:2d:0f:e4:f2: 18:3e:5b:94:c7:0a:97:ea:8c:cb:81:83:cd:1d:05:7d:df:3f: 94:f5:7a:78:a7:23:2c:c5:a7:15:6f:c3:8b:6e:8d:87:1b:98: 17:d4:fe:a0:e1:d9:20:78:50:d9:f0:76:f4:2a:39:dd:99:b5: f7:5e:9a:c1:45:37:c1:f6:5d:1a:df:98:ba:5f:57:00:df:00: af:7e:d9:a7:39:62:70:1b:79:37:5b:34:cf:36:10:b0:bb:7c: fb:cb:84:ce:d1:a3:f6:23:bb:59:12:60:4d:54:fd:51:2f:f0: 46:57:c2:a4:f5:67:a3:d9:28:cc:07:c8:75:71:5f:22:1e:b1: 2d:22:42:bb:55:bb:6c:78:f6:50:8d:63:c6:fa:98:58:f7:5c: 9f:25:42:2a:fe:58:98:8c:1f:3f:28:e3:59:bf:40:c7:4c:21: 1e:82:43:bb:58:6a:8f:ff:2e:e2:71:78:09:95:e8:13:29:49: 3a:54:f2:86:1d:93:b2:7c:f9:13:bf:65:58:e3:55:e6:73:0d: f4:c1:4f:85 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBjeGt3M2Raf2V+TdhszIE+FqxvMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIyMTYzMjI5WhcNMjYwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjYwYWM3YWExZDg2Y2I2OTI0NTZmZjVmNjNhY2NiMGIz OWIyMDZmMjY4OWQ4YmE5MzNlNGUzZDdmMDQ2Njk0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfAPCYtWILUkNF8PrBEr9aTY6/n1FuumXaOlK2E4L71vGl 89eEwPBNTKqutzFf7bWP5nIcH7NbMYNfdWGeiU2NFYAMhEvqo9Sq7n806iAU1Rh3 VhgS9PJLmRY1zZYYtdi9NU0Db7FUj6OFR4c65aVsylU7Mik7ttSeqOqA0E8kTtQQ TKjkPGUl2pCLJiB6OmPQZmaB0u6tqGyPk27HKNwXxPLJLoOrQouw4/RsK+//H5FK A6gqedf43iZBSIWxFRic+BT+hPMJf3zolZdrssJztVPK/UoalBmsQAqp+PRFflCU wilBo1uTfe7MBuNb6FG9i2K54tmMgYcMZZuAsj49AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU58Jx38VqCFjCoDyBbJ9B9/q1EvQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q5YzAwZTM2LWM3YjUtNGRlOS1iNjIyLWUxNDFmODM2MDYwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9hwDANBgkqhkiG9w0BAQsFAAOCAQEASnEjqL79zn26E//NaIPQ8q0G HfQ2rzjLZoxpuvLF76BPhMOhNUwu5Rt4X2pk92ouODYtD+TyGD5blMcKl+qMy4GD zR0Ffd8/lPV6eKcjLMWnFW/Di26NhxuYF9T+oOHZIHhQ2fB29Co53Zm1916awUU3 wfZdGt+Yul9XAN8Ar37ZpzlicBt5N1s0zzYQsLt8+8uEztGj9iO7WRJgTVT9US/w RlfCpPVno9kozAfIdXFfIh6xLSJCu1W7bHj2UI1jxvqYWPdcnyVCKv5YmIwfPyjj Wb9Ax0whHoJDu1hqj/8u4nF4CZXoEylJOlTyhh2Tsnz5E79lWONV5nMN9MFPhQ== -----END CERTIFICATE-----Generated at Sat Jun 13 05:35:25 2026 by rpki-client