$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3d24829-70cd-44f6-8c59-a47c6d03643b.roa File: f3d24829-70cd-44f6-8c59-a47c6d03643b.roa (raw, json) Hash identifier: DLJByizJXkCBTCeF6F//vpiA2WfTqZQqWj5EzgdL0CQ= Subject key identifier: AA:29:0F:92:F0:5C:16:AD:B4:37:42:BB:06:83:C1:75:39:32:AE:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 16F3A4ED35A32D864369182C7C86581BFCEB1D0D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3d24829-70cd-44f6-8c59-a47c6d03643b.roa Signing time: Sun 31 May 2026 00:31:13 +0000 ROA not before: Sun 31 May 2026 00:31:13 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fba:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f3:a4:ed:35:a3:2d:86:43:69:18:2c:7c:86:58:1b:fc:eb:1d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 31 00:31:13 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=2f4f269d1a527221e0cb27cae65b3976bca1ef66d64cbf358a23fcd55a047905, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:27:70:53:0f:0b:aa:95:a3:80:26:5a:ad:7c: 43:7c:07:9f:1c:f4:e4:27:52:86:15:0e:28:f3:8e: 3a:58:c4:a3:6f:8e:d6:9b:a0:f5:09:be:b4:a2:22: da:72:c6:37:c0:6c:0d:4d:a2:77:ad:98:44:c4:25: 12:ae:e5:cf:e4:ea:d1:88:67:09:a5:1e:17:98:55: 76:f2:f9:a5:07:56:ad:80:c3:3e:cb:b8:6a:ee:6c: 1c:8d:b7:1f:50:9a:fd:c7:07:88:bf:f0:59:d6:99: a1:b6:5d:e8:77:e1:51:53:49:9d:6d:79:95:1d:a8: ec:3f:3d:c2:d7:3e:9b:b4:21:f9:24:d3:1d:04:52: f4:31:57:57:7a:fc:e8:82:b9:fb:6b:42:29:6e:9a: 89:84:95:23:21:0e:f3:6a:cb:2c:0b:25:74:7e:12: 84:50:8a:4e:f1:b8:64:4c:8f:90:31:bc:68:ff:0d: 43:6a:8e:7b:0e:61:7c:a2:dc:53:1a:ab:de:87:89: 18:71:e2:79:ee:cc:74:4d:8a:eb:ee:75:49:c0:1a: e5:d6:ac:97:f3:3d:65:0d:fd:40:9c:2f:60:c3:86: 8f:d4:e1:f1:bc:e9:31:85:f7:41:b6:62:ee:05:50: db:84:47:00:62:fa:d1:41:ba:ed:43:f9:67:00:cc: 5d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:29:0F:92:F0:5C:16:AD:B4:37:42:BB:06:83:C1:75:39:32:AE:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3d24829-70cd-44f6-8c59-a47c6d03643b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fba:20c0::/48 Signature Algorithm: sha256WithRSAEncryption 85:85:32:fb:c5:1c:c1:1c:04:5a:bf:14:e0:3a:d6:8e:3c:96: a5:9b:e3:4d:7f:23:04:16:aa:91:4a:d1:81:36:55:43:51:ad: 6b:f3:69:2c:7f:e2:1e:5d:c5:84:61:ed:dc:33:f5:7a:5a:89: 30:3e:51:07:de:41:98:9d:23:95:28:58:51:d6:24:de:78:47: d5:30:e8:ab:9c:d8:9f:4a:90:17:29:f3:df:5c:60:ec:7a:a6: 82:21:11:00:ab:5a:12:aa:d1:83:ad:dc:7d:16:b0:9a:cd:f9: 53:95:84:0b:e5:d5:34:2d:fe:39:a0:26:b4:66:04:ac:38:7f: e2:02:e4:0c:29:76:0f:92:a0:86:07:fd:a0:03:13:33:db:b8: 70:32:c3:dc:1e:2f:b1:0d:3a:41:46:01:17:6f:f8:0a:25:2e: b1:82:17:3e:d2:66:fd:62:77:e4:d9:e2:b1:06:98:d9:e2:af: 5c:58:25:7e:d6:fb:9b:33:cc:3d:68:cf:0e:a5:9d:66:9b:16: 4c:d7:e2:df:a5:ff:2f:81:76:d7:39:8a:de:b8:dd:2e:3b:64: b4:69:9f:a1:0e:1a:52:6d:c1:8c:5c:30:0d:bb:d2:b2:f7:03: c5:34:94:bb:98:47:ee:aa:01:ff:86:3e:d4:8f:d7:93:d8:53: e2:ae:87:24 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFvOk7TWjLYZDaRgsfIZYG/zrHQ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTMxMDAzMTEzWhcNMjYwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZjRmMjY5ZDFhNTI3MjIxZTBjYjI3Y2FlNjViMzk3NmJj YTFlZjY2ZDY0Y2JmMzU4YTIzZmNkNTVhMDQ3OTA1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSJ3BTDwuqlaOAJlqtfEN8B58c9OQnUoYVDijzjjpYxKNv jtaboPUJvrSiItpyxjfAbA1NonetmETEJRKu5c/k6tGIZwmlHheYVXby+aUHVq2A wz7LuGrubByNtx9Qmv3HB4i/8FnWmaG2Xeh34VFTSZ1teZUdqOw/PcLXPpu0Ifkk 0x0EUvQxV1d6/OiCuftrQilumomElSMhDvNqyywLJXR+EoRQik7xuGRMj5AxvGj/ DUNqjnsOYXyi3FMaq96HiRhx4nnuzHRNiuvudUnAGuXWrJfzPWUN/UCcL2DDho/U 4fG86TGF90G2Yu4FUNuERwBi+tFBuu1D+WcAzF0VAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqikPkvBcFq20N0K7BoPBdTkyrjswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YzZDI0ODI5LTcwY2QtNDRmNi04YzU5LWE0N2M2ZDAzNjQzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB+6IMAwDQYJKoZIhvcNAQELBQADggEBAIWFMvvFHMEcBFq/FOA61o48 lqWb401/IwQWqpFK0YE2VUNRrWvzaSx/4h5dxYRh7dwz9XpaiTA+UQfeQZidI5Uo WFHWJN54R9Uw6Kuc2J9KkBcp899cYOx6poIhEQCrWhKq0YOt3H0WsJrN+VOVhAvl 1TQt/jmgJrRmBKw4f+IC5Awpdg+SoIYH/aADEzPbuHAyw9weL7ENOkFGARdv+Aol LrGCFz7SZv1id+TZ4rEGmNnir1xYJX7W+5szzD1ozw6lnWabFkzX4t+l/y+Bdtc5 it643S47ZLRpn6EOGlJtwYxcMA270rL3A8U0lLuYR+6qAf+GPtSP15PYU+KuhyQ= -----END CERTIFICATE-----Generated at Sat Jun 13 11:16:23 2026 by rpki-client