$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da53b24d-89f1-42ad-9e90-95a121b707e0.roa File: da53b24d-89f1-42ad-9e90-95a121b707e0.roa (raw, json) Hash identifier: iIqqYsgV9CMnbNYiwhTvfVVrYy1pzZ4nvyjpPvo+0KM= Subject key identifier: D2:30:BE:23:2B:8E:A7:0B:80:C0:C3:BE:A3:84:06:4D:8B:62:D7:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5BE5F7E926817D7A7E9CA62D63762A8FCC3142E9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da53b24d-89f1-42ad-9e90-95a121b707e0.roa Signing time: Fri 15 May 2026 01:01:23 +0000 ROA not before: Fri 15 May 2026 01:01:23 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e5:f7:e9:26:81:7d:7a:7e:9c:a6:2d:63:76:2a:8f:cc:31:42:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 01:01:23 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=f7ec4ea1cfe09a19ca7adc667388e4feaf7f3617bdbd63ab27c5f6b2e2a10a99, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5c:aa:fd:52:7d:69:8c:cb:60:df:44:37:36: 24:4e:93:f8:43:aa:8b:05:cb:54:76:7f:fc:e9:6f: c7:c2:70:22:52:88:6c:01:b4:56:2e:76:df:93:70: 15:2f:63:fc:bd:04:fb:82:3e:08:ee:ba:80:90:68: 94:7e:92:37:44:4c:87:98:66:27:a7:8c:de:45:1e: 2b:ed:33:95:02:ea:fd:7a:38:61:7d:a2:9e:f7:71: f4:2d:6b:d5:92:38:b0:90:66:05:31:24:c8:41:62: 93:9f:cc:ba:2c:e1:ec:84:6f:63:25:73:92:55:5f: ab:1b:6b:08:fa:8c:cc:e1:0c:67:82:6d:eb:e3:55: 6d:e2:59:ac:42:95:15:1d:85:a2:ed:1b:4b:38:b0: 77:56:09:6b:48:ac:e9:2d:d3:85:56:49:d2:f0:39: c2:25:63:fb:e6:ef:1d:c3:0a:49:5c:72:a1:09:8d: d5:6b:50:b0:bd:7f:e9:d7:12:8e:6c:16:c8:ee:2f: e6:cc:73:c6:d8:a5:e0:07:e1:e1:58:f1:cf:64:55: bf:87:45:4e:c8:7c:f2:2d:71:94:43:fa:b0:75:dc: 92:93:a5:74:1f:1c:46:fc:1e:55:9d:eb:df:b0:95: 17:a0:65:64:ec:20:f8:67:8a:43:b3:e3:57:4f:40: 67:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:30:BE:23:2B:8E:A7:0B:80:C0:C3:BE:A3:84:06:4D:8B:62:D7:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da53b24d-89f1-42ad-9e90-95a121b707e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:2040::/48 Signature Algorithm: sha256WithRSAEncryption 1c:82:5b:9f:f2:99:83:91:ee:5a:e8:e3:07:25:8c:c8:5d:5f: df:6c:63:b0:a5:9a:b7:f5:ae:46:35:77:78:42:4d:f6:9f:92: af:0f:b3:b2:99:53:d0:2a:c4:85:94:f5:33:2f:d3:69:55:01: 04:a7:e1:ea:4a:c6:41:e3:f8:71:05:bd:72:99:3a:33:58:78: 3c:42:97:3e:00:b4:24:99:7a:13:f4:71:d0:86:3b:35:1c:37: d2:f9:e4:11:3b:ce:f8:b1:43:ad:bd:72:92:91:9f:17:93:65: bb:d1:f2:32:0e:99:93:5b:2e:39:dc:15:f1:98:5f:89:6c:af: 08:48:68:7a:5e:f5:b4:fb:55:c1:c6:f1:5d:a0:39:46:aa:89: 76:a2:21:9c:cc:83:36:10:d1:56:36:20:08:02:97:36:41:13: 73:9f:10:bd:51:99:e4:05:09:74:03:0f:4f:82:a9:da:49:8a: 31:4a:25:97:54:9e:4b:17:7d:d8:08:20:cd:2b:e9:c9:0b:2f: e4:5a:aa:2a:b6:67:3c:ac:bb:1c:ae:17:26:36:e7:19:46:8b: 93:af:a6:b1:97:73:c8:01:63:88:cf:15:58:c0:b2:74:9b:ae: 30:5d:9e:5b:db:c9:f4:18:f8:a1:18:ca:42:b2:ba:61:11:96: 15:f6:70:a2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUW+X36SaBfXp+nKYtY3Yqj8wxQukwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDEwMTIzWhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmN2VjNGVhMWNmZTA5YTE5Y2E3YWRjNjY3Mzg4ZTRmZWFm N2YzNjE3YmRiZDYzYWIyN2M1ZjZiMmUyYTEwYTk5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdXKr9Un1pjMtg30Q3NiROk/hDqosFy1R2f/zpb8fCcCJS iGwBtFYudt+TcBUvY/y9BPuCPgjuuoCQaJR+kjdETIeYZienjN5FHivtM5UC6v16 OGF9op73cfQta9WSOLCQZgUxJMhBYpOfzLos4eyEb2Mlc5JVX6sbawj6jMzhDGeC bevjVW3iWaxClRUdhaLtG0s4sHdWCWtIrOkt04VWSdLwOcIlY/vm7x3DCklccqEJ jdVrULC9f+nXEo5sFsjuL+bMc8bYpeAH4eFY8c9kVb+HRU7IfPItcZRD+rB13JKT pXQfHEb8HlWd69+wlRegZWTsIPhnikOz41dPQGdJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0jC+IyuOpwuAwMO+o4QGTYti1xMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RhNTNiMjRkLTg5ZjEtNDJhZC05ZTkwLTk1YTEyMWI3MDdlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//IEAwDQYJKoZIhvcNAQELBQADggEBAByCW5/ymYOR7lro4wcljMhd X99sY7Clmrf1rkY1d3hCTfafkq8Ps7KZU9AqxIWU9TMv02lVAQSn4epKxkHj+HEF vXKZOjNYeDxClz4AtCSZehP0cdCGOzUcN9L55BE7zvixQ629cpKRnxeTZbvR8jIO mZNbLjncFfGYX4lsrwhIaHpe9bT7VcHG8V2gOUaqiXaiIZzMgzYQ0VY2IAgClzZB E3OfEL1RmeQFCXQDD0+CqdpJijFKJZdUnksXfdgIIM0r6ckLL+Raqiq2Zzysuxyu FyY25xlGi5OvprGXc8gBY4jPFVjAsnSbrjBdnlvbyfQY+KEYykKyumERlhX2cKI= -----END CERTIFICATE-----Generated at Sat Jun 13 05:50:20 2026 by rpki-client