$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd05dea3-b72f-4d49-8b49-9cca7b2b8362.roa File: fd05dea3-b72f-4d49-8b49-9cca7b2b8362.roa (raw, json) Hash identifier: bbKrjHEdIl4Tto0i6oeICRp+uu+8senBeJgxTg19nv8= Subject key identifier: 47:D6:5B:1E:CB:FB:7D:65:49:2E:E7:A3:38:3A:2D:7A:2B:24:C3:C5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1490847C6DC9960DFD0E2C1815F5E16C36E5DB96 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd05dea3-b72f-4d49-8b49-9cca7b2b8362.roa Signing time: Sun 31 May 2026 00:20:09 +0000 ROA not before: Sun 31 May 2026 00:20:09 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fba:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:90:84:7c:6d:c9:96:0d:fd:0e:2c:18:15:f5:e1:6c:36:e5:db:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 31 00:20:09 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=76d553813ac1a524041fd60ea3550ab37de6ade8fc99faf3a8ad4e34a85b7bdc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:1a:5c:5d:4e:4c:c0:12:51:d4:16:4b:b1: cf:7f:21:de:6f:b1:0c:03:b8:61:a5:5c:12:ff:3d: 4d:be:28:cc:86:31:16:14:90:bf:bc:1b:91:5b:ea: 53:61:02:dd:d7:e7:f0:46:23:4e:3a:4d:7c:f3:d2: fb:6f:78:97:c7:ac:6a:66:f1:31:8e:62:4e:af:65: 0e:23:dc:8f:94:fa:7c:da:f5:b4:a6:e9:bf:04:6e: 23:f6:6e:70:e9:98:c7:d7:7e:dc:25:80:af:08:6c: 4f:3b:ad:d3:1a:7c:ad:3e:56:ba:b7:75:e1:51:82: 95:7d:ff:92:73:7c:cb:0f:54:76:df:b1:8a:04:8c: 10:db:b0:c6:5d:b1:7d:f4:18:72:a5:74:ce:91:26: e1:5a:2e:76:5e:52:6b:0d:15:b8:52:41:85:29:82: 8b:42:c1:23:4c:c7:53:42:9f:f9:4d:88:0f:88:7f: f7:af:4b:4d:5a:8a:de:af:fe:cb:88:6f:2d:aa:c2: 85:2b:03:02:92:eb:32:c4:c9:3b:e6:be:31:f1:af: 8c:7e:37:88:27:6f:62:24:d8:37:03:1a:51:e2:d7: 75:38:62:ce:39:ae:0f:e0:e5:57:f6:82:0e:7b:7b: 13:ac:10:13:3d:cf:81:43:d8:ed:5f:d1:12:ad:86: 2a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D6:5B:1E:CB:FB:7D:65:49:2E:E7:A3:38:3A:2D:7A:2B:24:C3:C5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd05dea3-b72f-4d49-8b49-9cca7b2b8362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fba:2080::/48 Signature Algorithm: sha256WithRSAEncryption 32:26:3b:b7:db:d0:31:53:15:82:9b:d3:82:dd:6c:4a:d2:28: 53:4c:0e:32:d6:88:b6:b8:8b:bb:4c:7d:49:5d:ed:97:43:3f: 1d:fc:c8:90:d6:32:6c:f2:9c:41:c2:ba:05:1c:35:33:bf:82: b0:b9:90:4c:2a:69:bc:e5:21:f6:f0:f9:45:28:99:9d:96:e6: 44:e2:68:aa:36:05:c3:74:a0:18:64:85:d7:1f:b8:ef:bd:26: 06:2d:d2:cf:e3:5a:47:79:42:6e:a5:6f:55:38:46:e0:d6:00: b8:f7:0c:7e:3c:27:10:08:95:7c:25:ad:97:17:cc:c7:0f:79: 96:ba:bc:51:4c:0d:d6:51:b4:a6:db:6f:ee:69:66:18:b2:69: 42:22:a0:18:8c:5d:4b:e4:81:4e:90:dd:4f:7f:df:e8:22:d9: a2:ce:01:13:54:00:38:38:dd:bc:25:21:89:6a:d4:97:a1:25: 18:ce:92:32:c6:66:81:6e:1e:c1:24:1a:9b:8d:ed:1d:58:d7: ab:12:20:6e:b2:f3:71:0d:24:95:20:20:76:51:f8:f0:e7:d2: fb:d1:67:3d:4f:6f:22:b9:51:90:c9:16:e3:fc:48:e2:93:4a: bf:bf:bb:dc:7c:52:10:f6:eb:0b:e3:f4:f5:14:9b:c2:a0:13: 92:26:39:67 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFJCEfG3Jlg39DiwYFfXhbDbl25YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTMxMDAyMDA5WhcNMjYwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NmQ1NTM4MTNhYzFhNTI0MDQxZmQ2MGVhMzU1MGFiMzdk ZTZhZGU4ZmM5OWZhZjNhOGFkNGUzNGE4NWI3YmRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4sBpcXU5MwBJR1BZLsc9/Id5vsQwDuGGlXBL/PU2+KMyG MRYUkL+8G5Fb6lNhAt3X5/BGI046TXzz0vtveJfHrGpm8TGOYk6vZQ4j3I+U+nza 9bSm6b8EbiP2bnDpmMfXftwlgK8IbE87rdMafK0+Vrq3deFRgpV9/5JzfMsPVHbf sYoEjBDbsMZdsX30GHKldM6RJuFaLnZeUmsNFbhSQYUpgotCwSNMx1NCn/lNiA+I f/evS01ait6v/suIby2qwoUrAwKS6zLEyTvmvjHxr4x+N4gnb2Ik2DcDGlHi13U4 Ys45rg/g5Vf2gg57exOsEBM9z4FD2O1f0RKthiq5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUR9ZbHsv7fWVJLuejODoteiskw8UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZkMDVkZWEzLWI3MmYtNGQ0OS04YjQ5LTljY2E3YjJiODM2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB+6IIAwDQYJKoZIhvcNAQELBQADggEBADImO7fb0DFTFYKb04LdbErS KFNMDjLWiLa4i7tMfUld7ZdDPx38yJDWMmzynEHCugUcNTO/grC5kEwqabzlIfbw +UUomZ2W5kTiaKo2BcN0oBhkhdcfuO+9JgYt0s/jWkd5Qm6lb1U4RuDWALj3DH48 JxAIlXwlrZcXzMcPeZa6vFFMDdZRtKbbb+5pZhiyaUIioBiMXUvkgU6Q3U9/3+gi 2aLOARNUADg43bwlIYlq1JehJRjOkjLGZoFuHsEkGpuN7R1Y16sSIG6y83ENJJUg IHZR+PDn0vvRZz1PbyK5UZDJFuP8SOKTSr+/u9x8UhD26wvj9PUUm8KgE5ImOWc= -----END CERTIFICATE-----Generated at Sat Jun 13 09:47:46 2026 by rpki-client