$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/ef9566d5-9096-4d00-ac93-f3df448013d9.roa File: ef9566d5-9096-4d00-ac93-f3df448013d9.roa (raw, json) Hash identifier: AlZK9E2VCBMZ+b3WZ/iGXgqWiqlt5cHss/hOWiD/GVg= Subject key identifier: 34:02:C4:5D:B9:22:76:25:93:D0:E4:2D:96:D9:35:1E:0B:CA:1C:C8 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 554CB1758475FA463FDD6E5DCE706DF44A305E0C Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/ef9566d5-9096-4d00-ac93-f3df448013d9.roa Signing time: Tue 19 May 2026 00:00:05 +0000 ROA not before: Tue 19 May 2026 00:00:05 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:3002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:4c:b1:75:84:75:fa:46:3f:dd:6e:5d:ce:70:6d:f4:4a:30:5e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: May 19 00:00:05 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=040168ba603a1f3bb322bc731fd8d9c19dac3bda6d50dafbc279a6acb8a8d951, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a3:69:5b:d2:4e:a7:cb:1b:2f:bb:51:38:db: 17:3d:bd:d9:6b:91:2a:08:23:db:ba:a1:ce:9b:d7: 6e:7b:ef:cc:b2:0c:71:da:aa:40:69:c6:ab:10:fe: c8:26:a6:fc:90:c6:52:9e:e7:f6:3b:9f:c9:e1:06: aa:72:5a:99:e1:7b:78:a3:94:94:81:47:5d:82:6f: f9:8f:8e:05:2e:10:a2:8b:33:89:e5:2e:5f:ee:cc: 4f:92:97:82:a7:1d:82:13:f0:21:d8:50:5a:69:1f: b2:7d:40:9e:5e:33:09:ee:0e:42:3e:00:9e:69:1e: f5:5b:83:7b:5b:0d:fc:4e:ab:8b:65:48:be:95:c6: f6:da:f1:91:56:de:c1:1e:65:23:8e:f6:29:64:1f: b3:9f:a6:11:fc:5e:16:06:01:84:4f:ea:84:6a:12: 30:f6:02:79:ab:4d:7b:f2:5c:bf:db:aa:45:68:37: 93:5b:f9:95:37:4c:71:55:d3:71:44:ed:8c:80:06: 5a:91:5d:79:ce:69:f8:94:56:a8:c0:9e:c5:2e:32: 0d:82:70:29:cd:b9:55:3d:0c:f8:66:ae:7f:2e:e6: 4d:db:02:b8:8f:3c:b5:4a:0e:9e:46:3f:c8:46:b2: 17:4d:ff:f0:66:e9:e2:18:66:4b:34:89:c6:12:5f: 16:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:02:C4:5D:B9:22:76:25:93:D0:E4:2D:96:D9:35:1E:0B:CA:1C:C8 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/ef9566d5-9096-4d00-ac93-f3df448013d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:3002::/48 Signature Algorithm: sha256WithRSAEncryption 3f:3c:32:97:39:7b:bf:65:f6:bb:ad:c4:9a:36:7c:f2:07:e6: d0:5a:ed:82:e9:76:f6:4c:68:ad:4a:72:66:98:9b:a3:d8:e9: 36:a9:d5:9b:70:1b:ef:0a:21:97:2d:36:cd:74:cb:fd:93:07: c3:94:4a:ee:f0:f0:89:89:f2:4b:0f:55:7d:f1:d2:97:97:7c: 29:61:d2:ba:ff:bf:6c:90:ad:03:ee:84:c5:8e:ff:0f:71:28: f8:2f:71:5e:fe:17:9c:0e:bb:ed:f5:a2:54:4d:44:90:03:85: 9c:ce:00:85:cf:b4:ea:0f:ad:08:db:91:06:89:da:cc:2d:74: 99:dc:14:ea:07:c6:56:ca:74:fa:45:85:fe:f7:7f:bb:9b:0a: 41:c6:42:cd:d8:4f:9f:4f:eb:a1:c7:fe:ff:d8:a1:af:d0:5a: 9f:ab:a8:f5:0c:6d:f9:f9:8a:4a:a1:f0:a2:c6:35:9b:b6:26: 3c:ec:5a:db:d6:21:bb:f4:82:98:84:f2:c0:e3:0e:8f:23:7f: e5:e1:e7:cf:6c:60:a0:0c:a7:2a:a0:b8:c8:c1:a5:31:bc:27: 49:6a:a0:99:3c:16:bd:89:9e:c4:b1:d5:65:85:5e:2e:3b:de: 79:5d:a8:51:83:4c:36:b3:6d:be:0b:c0:f2:d8:ba:ac:40:75: 47:c7:3d:d5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVUyxdYR1+kY/3W5dznBt9EowXgwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjYwNTE5MDAwMDA1WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDAxNjhiYTYwM2ExZjNiYjMyMmJjNzMxZmQ4ZDljMTlk YWMzYmRhNmQ1MGRhZmJjMjc5YTZhY2I4YThkOTUxMS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCho2lb0k6nyxsvu1E42xc9vdlrkSoII9u6oc6b125778yy DHHaqkBpxqsQ/sgmpvyQxlKe5/Y7n8nhBqpyWpnhe3ijlJSBR12Cb/mPjgUuEKKL M4nlLl/uzE+Sl4KnHYIT8CHYUFppH7J9QJ5eMwnuDkI+AJ5pHvVbg3tbDfxOq4tl SL6Vxvba8ZFW3sEeZSOO9ilkH7OfphH8XhYGAYRP6oRqEjD2AnmrTXvyXL/bqkVo N5Nb+ZU3THFV03FE7YyABlqRXXnOafiUVqjAnsUuMg2CcCnNuVU9DPhmrn8u5k3b AriPPLVKDp5GP8hGshdN//Bm6eIYZks0icYSXxZXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNALEXbkidiWT0OQtltk1HgvKHMgwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjL2VmOTU2NmQ1LTkwOTYtNGQwMC1hYzkzLWYzZGY0NDgwMTNkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHMAIwDQYJKoZIhvcNAQELBQADggEBAD88Mpc5e79l9rutxJo2fPIH 5tBa7YLpdvZMaK1KcmaYm6PY6Tap1ZtwG+8KIZctNs10y/2TB8OUSu7w8ImJ8ksP VX3x0peXfClh0rr/v2yQrQPuhMWO/w9xKPgvcV7+F5wOu+31olRNRJADhZzOAIXP tOoPrQjbkQaJ2swtdJncFOoHxlbKdPpFhf73f7ubCkHGQs3YT59P66HH/v/Yoa/Q Wp+rqPUMbfn5ikqh8KLGNZu2JjzsWtvWIbv0gpiE8sDjDo8jf+Xh589sYKAMpyqg uMjBpTG8J0lqoJk8Fr2JnsSx1WWFXi473nldqFGDTDazbb4LwPLYuqxAdUfHPdU= -----END CERTIFICATE-----Generated at Sat Jun 13 08:16:59 2026 by rpki-client