$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa66475-4425-4e85-b798-e003ebb71081.roa File: faa66475-4425-4e85-b798-e003ebb71081.roa (raw, json) Hash identifier: L3sPZVzh7jPV9ZHl/6OU37+/ZkAlXpJUArg5U3exrPQ= Subject key identifier: F7:07:9D:85:6E:82:BD:24:3C:85:03:CA:10:46:47:1A:88:1C:51:E4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 083B9A77D0859E5ED0EDE50123712EDCD92F26AF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa66475-4425-4e85-b798-e003ebb71081.roa Signing time: Tue 12 May 2026 00:50:45 +0000 ROA not before: Tue 12 May 2026 00:50:45 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:ac00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:3b:9a:77:d0:85:9e:5e:d0:ed:e5:01:23:71:2e:dc:d9:2f:26:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 00:50:45 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=1840fbd95920d5a3a1503217b539e4bfd24d2f9dc4398c9a309ac646002b78cb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f5:fe:05:39:61:38:96:ae:2c:6f:83:c2:0b: ec:9f:20:08:d5:f9:28:9e:5f:4a:c9:94:7e:44:09: 69:aa:52:7f:03:73:33:2d:fc:7b:c7:18:27:f7:74: e6:4e:59:f2:56:a2:06:fa:a9:27:c3:86:58:39:62: da:32:74:dd:f8:3e:1d:64:67:c2:4a:27:ae:7b:ca: 43:03:ea:01:ee:e2:34:56:50:bd:78:33:05:1b:ab: d2:66:d8:eb:c6:db:bd:79:3f:2c:fa:61:7c:fe:d8: d5:97:58:b7:ef:cd:8c:fb:31:d1:be:d5:e0:72:82: b8:62:27:10:b6:88:4c:4e:a6:1b:8e:a8:9e:8e:28: 9a:c5:98:d6:fb:19:23:b7:c1:9d:c1:11:0b:2d:02: c4:fa:6f:7e:e0:b5:8b:68:e1:dc:ed:04:96:23:54: b6:da:a4:b8:12:83:ff:f9:a9:86:64:ab:f3:34:a6: 56:88:79:90:44:82:c1:3c:f1:b3:fb:06:fd:01:98: 9c:fe:cb:66:5d:6c:11:61:4c:9b:43:18:ce:3f:ef: 1a:24:5a:8b:88:32:5a:91:54:40:b1:5b:36:13:7e: ea:46:81:0b:b0:f9:06:db:2d:50:0f:88:37:8e:2d: ab:69:fe:23:06:a7:4d:1d:a7:30:24:64:db:cb:28: 13:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:07:9D:85:6E:82:BD:24:3C:85:03:CA:10:46:47:1A:88:1C:51:E4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa66475-4425-4e85-b798-e003ebb71081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:ac00::/48 Signature Algorithm: sha256WithRSAEncryption 94:4b:f7:52:d3:f8:f0:e1:84:36:cf:96:7d:8c:54:7e:c1:c1: 0d:dc:ee:9a:07:13:10:10:b5:cb:ec:dd:5d:ee:e3:35:b2:55: 25:1f:0f:af:a0:7c:23:f1:5c:7c:33:47:fc:23:e8:8a:56:36: 4b:3a:e1:2a:87:9d:2a:af:03:08:bf:62:bc:cf:1e:f6:ef:b2: 46:f7:dc:2c:1f:a7:87:18:50:02:c4:db:2b:ea:8f:eb:68:a6: 61:a9:70:5b:f8:e7:58:02:c1:68:dd:2d:47:11:cf:72:56:18: b4:6b:d1:a6:77:36:b8:41:e0:e8:41:ab:4f:6f:d5:52:bb:32: 8c:6c:64:10:b1:a7:a2:d7:f3:de:a6:b1:73:9a:d9:03:3e:29: f2:17:7f:f8:d4:7b:0e:a1:5e:db:b1:45:d2:58:1b:82:ec:57: 93:b2:ae:30:b3:f9:6a:18:6e:85:d0:ce:b7:ea:53:14:2a:0b: 1c:19:29:45:a2:c3:9b:3c:88:40:63:ca:2e:37:24:f0:a6:ab: fe:d8:ea:7a:05:65:17:b8:15:44:02:22:b8:9a:f6:7c:db:a8: 9f:07:4d:4a:62:b5:cb:85:75:59:2d:cc:9c:bc:e2:99:8f:6a: 0d:24:99:1a:68:02:f8:25:fb:59:37:b8:1e:62:29:7f:a6:eb: 91:88:c4:83 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCDuad9CFnl7Q7eUBI3Eu3NkvJq8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDA1MDQ1WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxODQwZmJkOTU5MjBkNWEzYTE1MDMyMTdiNTM5ZTRiZmQy NGQyZjlkYzQzOThjOWEzMDlhYzY0NjAwMmI3OGNiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz9f4FOWE4lq4sb4PCC+yfIAjV+SieX0rJlH5ECWmqUn8D czMt/HvHGCf3dOZOWfJWogb6qSfDhlg5YtoydN34Ph1kZ8JKJ657ykMD6gHu4jRW UL14MwUbq9Jm2OvG2715Pyz6YXz+2NWXWLfvzYz7MdG+1eBygrhiJxC2iExOphuO qJ6OKJrFmNb7GSO3wZ3BEQstAsT6b37gtYto4dztBJYjVLbapLgSg//5qYZkq/M0 plaIeZBEgsE88bP7Bv0BmJz+y2ZdbBFhTJtDGM4/7xokWouIMlqRVECxWzYTfupG gQuw+QbbLVAPiDeOLatp/iMGp00dpzAkZNvLKBPBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU9wedhW6CvSQ8hQPKEEZHGogcUeQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZhYTY2NDc1LTQ0MjUtNGU4NS1iNzk4LWUwMDNlYmI3MTA4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/srAAwDQYJKoZIhvcNAQELBQADggEBAJRL91LT+PDhhDbPln2MVH7B wQ3c7poHExAQtcvs3V3u4zWyVSUfD6+gfCPxXHwzR/wj6IpWNks64SqHnSqvAwi/ YrzPHvbvskb33Cwfp4cYUALE2yvqj+topmGpcFv451gCwWjdLUcRz3JWGLRr0aZ3 NrhB4OhBq09v1VK7MoxsZBCxp6LX896msXOa2QM+KfIXf/jUew6hXtuxRdJYG4Ls V5OyrjCz+WoYboXQzrfqUxQqCxwZKUWiw5s8iEBjyi43JPCmq/7Y6noFZRe4FUQC Iria9nzbqJ8HTUpitcuFdVktzJy84pmPag0kmRpoAvgl+1k3uB5iKX+m65GIxIM= -----END CERTIFICATE-----Generated at Sat Jun 13 05:46:18 2026 by rpki-client