$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc5bb9af-33c6-4f3d-b4d1-783f308b45c9.roa File: dc5bb9af-33c6-4f3d-b4d1-783f308b45c9.roa (raw, json) Hash identifier: nQU10N7+i5NVZRH7ih+ekGgLR7JXgM7NWfXxwiltbAM= Subject key identifier: D5:E7:18:B6:31:D2:AA:09:66:CE:00:1E:0C:05:AF:4A:3B:1A:1B:98 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D4454D5298484AF59B23B313C84CE418DD46149 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc5bb9af-33c6-4f3d-b4d1-783f308b45c9.roa Signing time: Fri 22 May 2026 16:50:22 +0000 ROA not before: Fri 22 May 2026 16:50:22 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe8:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:44:54:d5:29:84:84:af:59:b2:3b:31:3c:84:ce:41:8d:d4:61:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 22 16:50:22 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=bec9eba861c398fe4671b6213e2f917368b81d1243d1969319679428858b46b2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0c:2f:ed:93:59:70:89:2c:58:25:c4:7e:d4: 2a:b0:9b:29:a4:c8:69:cf:e7:7e:15:f0:e7:ed:88: 1c:4f:5d:ab:20:dd:a4:5c:5e:5d:56:83:12:af:b9: a0:ec:cd:59:47:fb:08:c3:6a:31:49:d7:9d:02:89: 33:d8:cb:4c:c8:94:c7:79:2b:45:6b:6d:f0:e8:f7: f2:a0:68:79:f8:38:7d:9a:96:00:30:6f:50:19:d3: b0:8e:cd:c2:48:08:21:8a:34:50:af:ed:f1:ea:da: 05:7b:32:99:f0:b5:79:c6:72:ce:f4:7b:99:35:9d: 48:26:ca:56:78:ec:9d:de:6e:f6:74:8d:2c:70:6f: 6f:a8:e7:d8:aa:12:ee:ee:f0:e0:73:d0:ab:c8:a8: 6f:c9:5f:95:6e:16:d6:1f:07:db:d4:41:1f:1c:78: 02:f6:74:8b:23:b1:d1:f6:d0:a8:d1:a6:ef:11:32: 08:2e:39:38:e1:45:7c:76:a0:b7:bf:01:ed:17:9f: 14:2e:a1:b6:4f:f9:df:d3:83:4b:ba:c0:df:25:f6: a4:52:36:c4:6f:5d:05:3f:6e:14:4f:9a:11:7c:cc: a2:0b:47:98:e7:9d:5b:1e:6e:c7:34:f8:ee:e5:46: 28:40:75:cc:b0:49:b7:26:87:a3:c2:54:27:d8:18: 40:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E7:18:B6:31:D2:AA:09:66:CE:00:1E:0C:05:AF:4A:3B:1A:1B:98 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc5bb9af-33c6-4f3d-b4d1-783f308b45c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe8:1000::/40 Signature Algorithm: sha256WithRSAEncryption 3c:c9:29:3f:4f:93:85:1f:6e:4b:98:bc:6d:a3:85:41:6b:15: b2:cd:f0:c1:0d:b7:20:c4:fb:79:6d:aa:d5:00:81:e6:ea:e4: 90:83:63:ae:73:df:69:a4:f8:cc:0a:33:dd:eb:d6:ec:21:7d: e9:d5:e3:ce:83:3a:e7:3a:56:51:bd:0a:85:44:a5:54:e4:05: 9e:39:73:64:2d:4c:88:f6:05:0b:26:a7:5c:0c:b9:5b:45:20: 16:0d:88:b5:53:b9:ec:53:88:1d:ea:ad:37:64:a7:9b:9b:ab: cc:b7:1c:63:96:a3:97:82:2c:8c:e1:0e:9d:c7:51:f9:86:8c: 3a:90:bd:23:91:98:a0:3c:77:e2:2a:a1:f7:39:b3:89:ac:57: 73:cf:07:a6:02:e1:99:ff:ef:fa:24:ce:b2:ec:cc:df:bb:50: 28:a7:e0:89:9b:20:f6:4f:79:3c:14:60:1c:22:c0:6e:a6:14: e0:62:bb:81:c6:1b:34:1e:d3:51:2a:0a:3b:d7:e2:a8:47:20: bf:f2:20:cb:09:ee:f6:54:14:ef:f0:fb:3e:28:9f:44:9e:d5: 8b:08:6e:91:88:57:a1:b4:2b:59:17:14:52:63:04:22:df:41: 46:96:1a:a9:5e:a7:b5:7a:38:d0:ab:8f:83:d6:41:9f:47:12: 1c:e6:2b:45 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPURU1SmEhK9ZsjsxPITOQY3UYUkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIyMTY1MDIyWhcNMjYwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZWM5ZWJhODYxYzM5OGZlNDY3MWI2MjEzZTJmOTE3MzY4 YjgxZDEyNDNkMTk2OTMxOTY3OTQyODg1OGI0NmIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0DC/tk1lwiSxYJcR+1CqwmymkyGnP534V8OftiBxPXasg 3aRcXl1WgxKvuaDszVlH+wjDajFJ150CiTPYy0zIlMd5K0VrbfDo9/KgaHn4OH2a lgAwb1AZ07COzcJICCGKNFCv7fHq2gV7MpnwtXnGcs70e5k1nUgmylZ47J3ebvZ0 jSxwb2+o59iqEu7u8OBz0KvIqG/JX5VuFtYfB9vUQR8ceAL2dIsjsdH20KjRpu8R MgguOTjhRXx2oLe/Ae0XnxQuobZP+d/Tg0u6wN8l9qRSNsRvXQU/bhRPmhF8zKIL R5jnnVsebsc0+O7lRihAdcywSbcmh6PCVCfYGEA5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU1ecYtjHSqglmzgAeDAWvSjsaG5gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RjNWJiOWFmLTMzYzYtNGYzZC1iNGQxLTc4M2YzMDhiNDVjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/oEDANBgkqhkiG9w0BAQsFAAOCAQEAPMkpP0+ThR9uS5i8baOFQWsV ss3wwQ23IMT7eW2q1QCB5urkkINjrnPfaaT4zAoz3evW7CF96dXjzoM65zpWUb0K hUSlVOQFnjlzZC1MiPYFCyanXAy5W0UgFg2ItVO57FOIHeqtN2Snm5urzLccY5aj l4IsjOEOncdR+YaMOpC9I5GYoDx34iqh9zmziaxXc88HpgLhmf/v+iTOsuzM37tQ KKfgiZsg9k95PBRgHCLAbqYU4GK7gcYbNB7TUSoKO9fiqEcgv/Igywnu9lQU7/D7 PiifRJ7ViwhukYhXobQrWRcUUmMEIt9BRpYaqV6ntXo40KuPg9ZBn0cSHOYrRQ== -----END CERTIFICATE-----Generated at Sat Jun 13 05:35:15 2026 by rpki-client