$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6daca87-48c5-4a75-8da6-fb81094e9851.roa File: d6daca87-48c5-4a75-8da6-fb81094e9851.roa (raw, json) Hash identifier: RbzNz24mKBHIe+JCIrWT1y9cRukKnMDWghALmydLipE= Subject key identifier: 08:1F:E3:EE:78:2A:EA:73:CD:D7:A2:59:3F:17:ED:72:C0:11:7D:B5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 03BC6299DF7B203AFC3B7397C11F0D0F48020E8D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6daca87-48c5-4a75-8da6-fb81094e9851.roa Signing time: Tue 12 May 2026 01:31:48 +0000 ROA not before: Tue 12 May 2026 01:31:48 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff7:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:bc:62:99:df:7b:20:3a:fc:3b:73:97:c1:1f:0d:0f:48:02:0e:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:31:48 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=3e86e9f512d7720c608f15ef74a5a0d10c3459bee670121406dedc56fec3e867, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:80:72:5f:65:c9:e4:55:6f:34:cb:95:60:d2: 8f:e7:31:60:90:95:41:c2:d4:19:fe:bd:5c:8a:1e: a5:79:c5:3b:ea:72:79:44:e5:74:94:42:ea:f5:6d: f9:86:74:00:1f:ba:03:1c:3b:9b:67:e5:0c:c6:ab: 24:f4:5d:d8:42:32:36:0a:43:6d:92:6d:de:9f:11: 0f:96:58:ba:c0:9d:4e:63:0d:ef:ec:55:38:6c:04: ef:de:89:ee:28:c2:61:6c:60:f8:71:dd:20:8e:bf: 96:79:b9:e5:60:81:23:5e:68:76:c5:95:3d:2b:7e: 0d:da:2f:ac:6c:9d:e4:1e:f1:c5:9b:3d:51:bb:02: fe:6a:8f:fd:bb:1f:1d:8e:6a:b1:ff:f2:38:4b:14: f0:b8:ce:27:0f:7b:9a:e8:9b:72:8b:3e:95:4c:3d: 04:d3:58:92:0d:6b:ef:f9:7c:a7:fb:22:75:13:8b: e0:ec:e2:c9:fc:f2:fc:1a:4f:b7:f6:f4:55:5c:e9: cb:28:2a:68:cd:5b:92:a2:a3:8d:5e:7b:7c:ab:e5: 7e:d0:31:86:fa:cf:38:9b:3c:74:1c:5a:70:24:32: 5e:1a:22:c0:f5:34:d3:35:56:67:f6:99:99:8f:45: 32:9d:45:27:7c:9a:3e:3c:a5:ad:65:ff:84:0c:04: f7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1F:E3:EE:78:2A:EA:73:CD:D7:A2:59:3F:17:ED:72:C0:11:7D:B5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6daca87-48c5-4a75-8da6-fb81094e9851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:8000::/39 Signature Algorithm: sha256WithRSAEncryption a3:00:28:5e:ab:00:5e:2e:40:25:8b:6f:26:24:d1:b8:b6:df: 8e:0c:e4:7b:65:63:77:60:b9:b4:f2:7d:a4:b4:82:cd:fc:57: 6f:ea:b1:fc:ba:49:1e:fd:4f:7a:84:47:a8:d3:a3:e4:a4:ba: 90:aa:9a:2f:74:3c:78:8b:f2:eb:85:79:07:c2:a4:69:07:a9: fd:bd:75:94:df:2f:32:a8:88:b2:a4:d8:73:ed:25:0a:ec:82: e9:cb:ba:d9:dc:02:78:51:8d:bf:59:da:d1:47:2a:38:95:20: 71:17:8a:3f:57:eb:f2:36:82:cb:d2:65:9f:01:cf:df:dd:43: c4:f7:94:dc:90:f1:30:15:f3:97:95:00:60:85:e2:7c:46:39: c6:42:81:7d:c1:0f:1a:df:a6:9c:35:ee:b5:bd:46:7d:5f:0b: dc:d2:f1:6c:9d:8f:e9:dd:47:f6:d5:02:a8:d5:dc:6f:c5:34: a8:82:c5:de:79:d7:be:74:cc:6d:7b:34:61:de:a0:f4:32:11: b7:ea:97:f0:99:90:3b:ad:f4:12:d0:e5:af:dc:1a:38:00:ec: 9d:3e:37:bb:6e:3e:fa:16:aa:b7:6d:ee:69:dd:a4:8e:e4:49: d9:1e:e6:e7:7d:25:fd:8c:b8:94:91:c0:06:d7:ad:de:3d:54: 1a:26:dd:e0 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUA7ximd97IDr8O3OXwR8ND0gCDo0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDEzMTQ4WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTg2ZTlmNTEyZDc3MjBjNjA4ZjE1ZWY3NGE1YTBkMTBj MzQ1OWJlZTY3MDEyMTQwNmRlZGM1NmZlYzNlODY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDgHJfZcnkVW80y5Vg0o/nMWCQlUHC1Bn+vVyKHqV5xTvq cnlE5XSUQur1bfmGdAAfugMcO5tn5QzGqyT0XdhCMjYKQ22Sbd6fEQ+WWLrAnU5j De/sVThsBO/eie4owmFsYPhx3SCOv5Z5ueVggSNeaHbFlT0rfg3aL6xsneQe8cWb PVG7Av5qj/27Hx2OarH/8jhLFPC4zicPe5rom3KLPpVMPQTTWJINa+/5fKf7InUT i+Ds4sn88vwaT7f29FVc6csoKmjNW5Kio41ee3yr5X7QMYb6zzibPHQcWnAkMl4a IsD1NNM1Vmf2mZmPRTKdRSd8mj48pa1l/4QMBPfhAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUCB/j7ngq6nPN16JZPxftcsARfbUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q2ZGFjYTg3LTQ4YzUtNGE3NS04ZGE2LWZiODEwOTRlOTg1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/3gDANBgkqhkiG9w0BAQsFAAOCAQEAowAoXqsAXi5AJYtvJiTRuLbf jgzke2Vjd2C5tPJ9pLSCzfxXb+qx/LpJHv1PeoRHqNOj5KS6kKqaL3Q8eIvy64V5 B8KkaQep/b11lN8vMqiIsqTYc+0lCuyC6cu62dwCeFGNv1na0UcqOJUgcReKP1fr 8jaCy9JlnwHP391DxPeU3JDxMBXzl5UAYIXifEY5xkKBfcEPGt+mnDXutb1GfV8L 3NLxbJ2P6d1H9tUCqNXcb8U0qILF3nnXvnTMbXs0Yd6g9DIRt+qX8JmQO630EtDl r9waOADsnT43u24++haqt23uad2kjuRJ2R7m530l/Yy4lJHABtet3j1UGibd4A== -----END CERTIFICATE-----Generated at Wed May 13 01:17:19 2026 by rpki-client