$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a68c932f-bd36-4bd5-ab44-c49a2f3bdb4a.roa File: a68c932f-bd36-4bd5-ab44-c49a2f3bdb4a.roa (raw, json) Hash identifier: xmLe7jVKw22o0Gf3Rb0vZRPoSo/JCiZoNmYYQ5/rzB8= Subject key identifier: 7A:FC:64:C5:A4:28:3A:43:23:44:0E:F6:B9:93:FA:BF:A2:D9:09:DD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 72F2DBC1ABBC6E7FE65C2F92237201894F1BC06F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a68c932f-bd36-4bd5-ab44-c49a2f3bdb4a.roa Signing time: Tue 12 May 2026 00:40:05 +0000 ROA not before: Tue 12 May 2026 00:40:05 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:3800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f2:db:c1:ab:bc:6e:7f:e6:5c:2f:92:23:72:01:89:4f:1b:c0:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 00:40:05 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=96e92ea7c0c8cf509f3b584e840f47403aba6c8a5a01b492ed639387ef67b3b0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:22:f6:38:35:ff:51:65:1e:12:22:a5:c1:8b: 07:b2:ea:fb:61:26:a0:bb:fa:90:9d:b0:4d:9e:e6: 3b:16:a5:98:14:ef:0e:cf:58:52:09:43:fa:88:8b: 63:e4:9c:31:01:2a:21:92:11:e1:59:1b:b7:ab:38: 71:d3:22:ef:9f:d8:29:52:ed:da:6c:05:fe:95:51: 80:01:c6:12:e3:ca:1c:4f:0f:06:20:90:2a:da:5d: b8:4e:ab:eb:09:d2:9e:c4:ff:29:a7:95:03:e3:ec: d2:4b:d5:2e:99:eb:20:0f:8b:9e:96:91:42:09:b9: e4:6d:8d:35:10:e9:1e:98:4e:e6:5e:ac:1f:c8:7f: dc:d9:ad:f8:bc:d7:04:c3:40:17:88:90:04:44:6e: bc:57:dd:0d:18:25:4d:45:4d:17:89:e1:a1:a8:0c: 01:21:4b:a7:e8:93:7c:fd:56:b3:d8:1e:57:2a:3a: 1c:25:02:13:8a:01:2a:60:7a:d7:83:05:6f:7b:5e: 4c:c5:9f:d4:8b:4f:d1:ea:b0:4b:81:10:79:7c:67: 72:82:66:74:14:de:63:a6:ab:0d:fe:31:50:7b:fa: 42:d4:25:c8:bf:df:aa:79:72:35:31:e9:9f:8d:7d: 5f:75:ec:0c:40:b3:af:1a:c8:2b:ef:24:6b:6c:c3: fc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FC:64:C5:A4:28:3A:43:23:44:0E:F6:B9:93:FA:BF:A2:D9:09:DD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a68c932f-bd36-4bd5-ab44-c49a2f3bdb4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:3800::/48 Signature Algorithm: sha256WithRSAEncryption 68:7f:e3:2f:86:45:ff:2c:e2:9f:6f:33:17:09:ed:50:e9:d7: 90:99:0a:f4:92:77:4f:91:d4:3e:df:54:bc:e8:01:cb:f4:d8: 98:a6:26:a3:18:f0:2a:f1:03:cd:c4:36:9e:3e:19:19:ca:3d: 62:61:20:e5:0c:4d:0f:c2:a0:e0:d2:c4:ea:b8:07:2a:91:44: 55:c0:7f:f1:7f:43:26:81:75:b5:f4:20:65:f4:bc:10:df:90: da:5f:59:f2:d4:9b:a3:75:25:f4:84:34:2b:3c:7f:eb:75:78: f7:68:5c:ff:8a:22:e2:52:0e:05:51:10:bb:65:0c:6b:86:e6: cd:eb:48:35:da:49:b0:91:3e:89:92:c2:17:e8:10:50:e5:99: a5:fd:d0:b6:40:34:27:66:7f:e6:7b:12:90:aa:4c:88:c3:84: 40:2d:e6:94:9d:90:e1:df:47:e7:c6:da:0a:b4:bf:4a:e5:be: 8f:9f:0d:83:4a:38:63:71:05:29:ce:f3:8f:a4:c2:34:ac:aa: e9:42:b9:76:c1:a6:f9:1b:da:e4:2b:8e:c8:8c:cc:3c:ca:98: c5:a5:3b:3f:5d:52:a7:e1:35:bb:f5:77:0a:5f:3f:d2:95:c1: c0:59:d7:07:e8:67:ea:62:0a:c3:c0:a2:f6:ce:64:3b:a9:7f: c3:fb:39:53 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcvLbwau8bn/mXC+SI3IBiU8bwG8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDA0MDA1WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NmU5MmVhN2MwYzhjZjUwOWYzYjU4NGU4NDBmNDc0MDNh YmE2YzhhNWEwMWI0OTJlZDYzOTM4N2VmNjdiM2IwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtIvY4Nf9RZR4SIqXBiwey6vthJqC7+pCdsE2e5jsWpZgU 7w7PWFIJQ/qIi2PknDEBKiGSEeFZG7erOHHTIu+f2ClS7dpsBf6VUYABxhLjyhxP DwYgkCraXbhOq+sJ0p7E/ymnlQPj7NJL1S6Z6yAPi56WkUIJueRtjTUQ6R6YTuZe rB/If9zZrfi81wTDQBeIkAREbrxX3Q0YJU1FTReJ4aGoDAEhS6fok3z9VrPYHlcq OhwlAhOKASpgeteDBW97XkzFn9SLT9HqsEuBEHl8Z3KCZnQU3mOmqw3+MVB7+kLU Jci/36p5cjUx6Z+NfV917AxAs68ayCvvJGtsw/ypAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUevxkxaQoOkMjRA72uZP6v6LZCd0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E2OGM5MzJmLWJkMzYtNGJkNS1hYjQ0LWM0OWEyZjNiZGI0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sOAAwDQYJKoZIhvcNAQELBQADggEBAGh/4y+GRf8s4p9vMxcJ7VDp 15CZCvSSd0+R1D7fVLzoAcv02JimJqMY8CrxA83ENp4+GRnKPWJhIOUMTQ/CoODS xOq4ByqRRFXAf/F/QyaBdbX0IGX0vBDfkNpfWfLUm6N1JfSENCs8f+t1ePdoXP+K IuJSDgVRELtlDGuG5s3rSDXaSbCRPomSwhfoEFDlmaX90LZANCdmf+Z7EpCqTIjD hEAt5pSdkOHfR+fG2gq0v0rlvo+fDYNKOGNxBSnO84+kwjSsqulCuXbBpvkb2uQr jsiMzDzKmMWlOz9dUqfhNbv1dwpfP9KVwcBZ1wfoZ+piCsPAovbOZDupf8P7OVM= -----END CERTIFICATE-----Generated at Wed May 13 01:45:53 2026 by rpki-client