$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa9a86fd-c53a-4ac7-931e-0093677ffdf9.roa File: fa9a86fd-c53a-4ac7-931e-0093677ffdf9.roa (raw, json) Hash identifier: nGKY5cc7Fgbf6tkVMHoLF0w4QvAEl7j9nRG2ZUgyfzI= Subject key identifier: 13:98:F7:AE:D3:C1:53:DD:18:00:3B:6E:52:05:2F:E4:CD:1F:86:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 02BC7484206A61863661D61418B93EAB66296275 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa9a86fd-c53a-4ac7-931e-0093677ffdf9.roa Signing time: Mon 04 May 2026 00:30:11 +0000 ROA not before: Mon 04 May 2026 00:30:11 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff5:a400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:bc:74:84:20:6a:61:86:36:61:d6:14:18:b9:3e:ab:66:29:62:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 00:30:11 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=a1381c7cd33835a215aa451bb6256ca4866f5a17e07f5c1e83c1785eb98071ca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c4:e6:9b:1a:0a:7c:9e:db:4e:81:1f:20:9f: b4:2c:7d:63:10:7d:75:e8:98:08:65:58:a4:b3:20: 6b:4f:47:43:54:48:56:fc:f1:82:b7:0e:78:f8:66: 11:b0:3e:f1:ff:4d:bf:bd:f1:b8:c3:ff:28:a9:e0: 43:60:04:25:25:0b:03:e6:cc:d8:a7:de:53:72:c4: 3f:2c:b8:80:cc:c7:e5:90:d0:2d:43:63:47:08:a0: 7d:91:ad:84:e9:39:c4:8d:82:ef:93:a0:b3:7d:3c: 78:ec:0c:42:f0:55:96:4c:99:22:c6:b1:b5:18:bc: ce:db:68:9b:90:47:e0:71:d5:bd:5f:2b:5b:d8:b8: 6f:5c:a9:42:f4:73:33:66:3a:d7:f0:e4:3f:4a:70: 50:63:f1:97:75:78:ea:24:dd:d4:b3:3e:c0:65:d0: 56:7c:28:05:70:f0:0e:5b:f2:7f:e4:11:bf:df:e7: 4c:0d:19:8d:3a:4d:cf:98:27:81:00:7c:c2:f6:bd: e0:58:2c:9b:7c:61:d1:d0:8a:c2:ed:54:ee:dc:f5: d6:0a:26:f0:4a:a6:77:de:6b:b1:12:0f:72:d3:66: 8b:8c:45:31:19:9f:38:50:3e:93:e4:7e:ff:e2:43: 01:45:1e:2d:4a:51:c4:96:d3:a3:61:57:82:29:86: 49:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:98:F7:AE:D3:C1:53:DD:18:00:3B:6E:52:05:2F:E4:CD:1F:86:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa9a86fd-c53a-4ac7-931e-0093677ffdf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff5:a400::/40 Signature Algorithm: sha256WithRSAEncryption 02:b3:d1:0f:4a:db:6f:a1:14:6b:51:a9:4e:a7:55:6a:74:d6: 70:e2:ee:ac:17:f9:0b:65:a5:71:e0:e1:99:89:56:5e:70:d7: 3a:ff:fd:2e:12:41:88:fe:6f:64:1f:c1:7d:f8:fd:f3:ca:02: 0b:f5:9d:f4:bd:a3:fa:3a:14:04:2f:25:24:d3:03:9d:10:c8: 8c:2c:59:e3:5e:a5:77:09:5b:cc:4f:a2:82:7d:ce:93:82:50: 83:2d:22:9f:ac:ac:4c:bd:c0:d6:bc:d2:d7:e1:d1:e9:39:00: c5:ba:67:4d:12:61:8e:8c:47:db:1c:cc:2e:f6:20:2e:fe:b9: ce:87:a3:6d:a6:41:e1:0c:93:e1:56:9a:71:d5:89:7b:f3:c4: 50:fb:3d:b1:32:ed:c7:4b:32:35:0d:a8:ff:77:85:8c:fd:4a: bf:32:a8:32:e1:cd:9d:6e:bd:93:05:7b:32:e5:97:b6:b3:45: 5d:fc:fd:42:ef:57:fb:08:c7:51:a7:cd:ca:d8:48:d1:8d:60: e7:3d:a1:ab:cf:f6:c4:9d:26:6e:33:41:22:98:3d:48:3e:f4: 3c:58:dc:92:59:d9:86:c0:5a:88:8d:81:62:18:f7:50:cf:8c: c3:a1:29:ec:ac:99:c7:d7:f3:61:bf:9d:1c:d0:73:da:29:0b: 9f:42:8c:0d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUArx0hCBqYYY2YdYUGLk+q2YpYnUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDAzMDExWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTM4MWM3Y2QzMzgzNWEyMTVhYTQ1MWJiNjI1NmNhNDg2 NmY1YTE3ZTA3ZjVjMWU4M2MxNzg1ZWI5ODA3MWNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/xOabGgp8nttOgR8gn7QsfWMQfXXomAhlWKSzIGtPR0NU SFb88YK3Dnj4ZhGwPvH/Tb+98bjD/yip4ENgBCUlCwPmzNin3lNyxD8suIDMx+WQ 0C1DY0cIoH2RrYTpOcSNgu+ToLN9PHjsDELwVZZMmSLGsbUYvM7baJuQR+Bx1b1f K1vYuG9cqUL0czNmOtfw5D9KcFBj8Zd1eOok3dSzPsBl0FZ8KAVw8A5b8n/kEb/f 50wNGY06Tc+YJ4EAfML2veBYLJt8YdHQisLtVO7c9dYKJvBKpnfea7ESD3LTZouM RTEZnzhQPpPkfv/iQwFFHi1KUcSW06NhV4IphkkBAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUE5j3rtPBU90YADtuUgUv5M0fhjswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZhOWE4NmZkLWM1M2EtNGFjNy05MzFlLTAwOTM2NzdmZmRmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/1pDANBgkqhkiG9w0BAQsFAAOCAQEAArPRD0rbb6EUa1GpTqdVanTW cOLurBf5C2WlceDhmYlWXnDXOv/9LhJBiP5vZB/Bffj988oCC/Wd9L2j+joUBC8l JNMDnRDIjCxZ416ldwlbzE+ign3Ok4JQgy0in6ysTL3A1rzS1+HR6TkAxbpnTRJh joxH2xzMLvYgLv65zoejbaZB4QyT4VaacdWJe/PEUPs9sTLtx0syNQ2o/3eFjP1K vzKoMuHNnW69kwV7MuWXtrNFXfz9Qu9X+wjHUafNythI0Y1g5z2hq8/2xJ0mbjNB Ipg9SD70PFjcklnZhsBaiI2BYhj3UM+Mw6Ep7KyZx9fzYb+dHNBz2ikLn0KMDQ== -----END CERTIFICATE-----Generated at Sat Jun 13 05:47:20 2026 by rpki-client