$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c562af4-41de-41d7-b617-98d66f5c6dc0.roa File: 5c562af4-41de-41d7-b617-98d66f5c6dc0.roa (raw, json) Hash identifier: zuK45tHxdOxdY78OOGSYRy7YhpKPp7mJmqUnXlhq+RE= Subject key identifier: 19:A7:4A:55:B5:20:98:6B:74:E0:07:A3:B4:BA:82:A2:35:96:03:29 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 68F690ACDB1FE1A8063D289D0CF757FAA376175D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c562af4-41de-41d7-b617-98d66f5c6dc0.roa Signing time: Mon 04 May 2026 00:11:20 +0000 ROA not before: Mon 04 May 2026 00:11:20 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:ec00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f6:90:ac:db:1f:e1:a8:06:3d:28:9d:0c:f7:57:fa:a3:76:17:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 00:11:20 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=7da1a136fe85f738c1dfda10769a1891a1f2fcf4c225712524e5ec738f11aa3e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b4:01:c5:af:75:b1:31:4d:8b:c4:93:f5:c7: 1b:25:6a:e6:6f:80:c8:0a:bf:53:a9:3d:ff:d4:f6: ff:61:d4:2f:95:fc:77:ae:3c:a8:fb:8e:10:32:c6: 7d:c5:ce:74:aa:06:27:be:fa:2d:c5:48:81:70:a7: d2:bd:f9:bd:d9:82:89:20:94:e1:cd:c3:eb:63:64: 48:1f:34:41:dd:44:e2:2c:8e:38:c4:ed:90:47:7d: 6a:31:4f:2a:09:cf:0f:cc:7a:c8:e8:e4:2c:42:94: 5f:a8:32:75:0c:e5:ed:82:12:b3:5e:dd:ed:12:55: 75:4e:8e:df:b1:3d:48:70:72:de:cc:17:4c:bf:40: 92:7d:81:71:a9:42:0c:b8:f2:95:de:b7:be:27:7d: 24:2f:5c:99:ef:05:a6:7b:0d:9f:6a:e3:42:19:24: db:6a:5d:78:37:30:e8:91:a9:64:ec:43:d0:ba:0a: b0:43:75:1b:0b:80:7f:25:a1:cc:e7:e1:c9:b7:4e: 88:0a:ac:fc:96:13:7e:88:3d:07:86:51:82:e7:d7: b0:0a:e9:ec:72:0a:ee:69:a2:fd:3a:ca:79:df:30: eb:3e:26:13:42:4f:d3:5b:18:26:f8:52:be:21:03: 27:42:5e:eb:85:ff:9a:bf:7f:20:f3:23:35:94:c0: e4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A7:4A:55:B5:20:98:6B:74:E0:07:A3:B4:BA:82:A2:35:96:03:29 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c562af4-41de-41d7-b617-98d66f5c6dc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:ec00::/40 Signature Algorithm: sha256WithRSAEncryption 3e:94:d0:cf:d0:56:32:92:1f:f9:91:9e:11:e3:06:d5:36:e4: 9e:4d:67:0a:fb:d5:62:28:f9:2f:99:77:62:db:c4:d1:e5:82: b2:0c:45:7f:6c:58:0e:2f:13:96:72:4a:9b:7b:7f:9e:0c:8d: 0e:75:02:5f:f8:1e:d6:09:cd:bf:12:41:53:c8:43:6e:5f:b8: e9:81:5c:fb:a1:17:2d:92:1d:3d:ae:4e:40:aa:59:2a:d6:94: a8:25:3c:70:15:e2:f2:1f:d7:66:7d:5b:a8:dd:c0:f4:55:01: 71:6b:4e:0c:3d:d4:03:c7:4d:f7:87:95:43:dc:ed:10:e8:dc: 21:ee:7c:cf:ec:4c:3c:1f:64:aa:fd:24:70:31:54:8b:c1:8e: 99:63:5c:a4:fe:2e:8a:59:4e:6c:41:83:7f:82:25:a3:34:16: d6:a5:8d:d7:fe:b9:69:0e:4a:a4:ba:e7:8c:24:13:fa:83:62: c4:2c:2f:ea:2c:99:a6:24:e0:18:8b:33:f4:24:1c:1d:67:10: 88:53:b6:3e:44:c3:26:33:f0:d0:ea:77:fe:d5:b8:c5:b9:19: 33:84:b8:d0:8c:b9:e0:4b:7b:22:18:02:a2:52:e1:7c:7f:bf: c1:4a:29:a2:11:42:8b:16:60:eb:7b:46:a2:c7:47:1c:52:2f: 1a:10:21:64 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaPaQrNsf4agGPSidDPdX+qN2F10wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDAxMTIwWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZGExYTEzNmZlODVmNzM4YzFkZmRhMTA3NjlhMTg5MWEx ZjJmY2Y0YzIyNTcxMjUyNGU1ZWM3MzhmMTFhYTNlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0tAHFr3WxMU2LxJP1xxslauZvgMgKv1OpPf/U9v9h1C+V /HeuPKj7jhAyxn3FznSqBie++i3FSIFwp9K9+b3ZgokglOHNw+tjZEgfNEHdROIs jjjE7ZBHfWoxTyoJzw/Mesjo5CxClF+oMnUM5e2CErNe3e0SVXVOjt+xPUhwct7M F0y/QJJ9gXGpQgy48pXet74nfSQvXJnvBaZ7DZ9q40IZJNtqXXg3MOiRqWTsQ9C6 CrBDdRsLgH8loczn4cm3TogKrPyWE36IPQeGUYLn17AK6exyCu5pov06ynnfMOs+ JhNCT9NbGCb4Ur4hAydCXuuF/5q/fyDzIzWUwOQfAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUGadKVbUgmGt04AejtLqCojWWAykwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVjNTYyYWY0LTQxZGUtNDFkNy1iNjE3LTk4ZDY2ZjVjNmRjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB//7DANBgkqhkiG9w0BAQsFAAOCAQEAPpTQz9BWMpIf+ZGeEeMG1Tbk nk1nCvvVYij5L5l3YtvE0eWCsgxFf2xYDi8TlnJKm3t/ngyNDnUCX/ge1gnNvxJB U8hDbl+46YFc+6EXLZIdPa5OQKpZKtaUqCU8cBXi8h/XZn1bqN3A9FUBcWtODD3U A8dN94eVQ9ztEOjcIe58z+xMPB9kqv0kcDFUi8GOmWNcpP4uillObEGDf4IlozQW 1qWN1/65aQ5KpLrnjCQT+oNixCwv6iyZpiTgGIsz9CQcHWcQiFO2PkTDJjPw0Op3 /tW4xbkZM4S40Iy54Et7IhgColLhfH+/wUopohFCixZg63tGosdHHFIvGhAhZA== -----END CERTIFICATE-----Generated at Tue May 12 21:54:39 2026 by rpki-client