$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68e71159-4fd5-4cd0-b793-4a39e9e3639f.roa File: 68e71159-4fd5-4cd0-b793-4a39e9e3639f.roa (raw, json) Hash identifier: H1j/zT4zTLPMwAFhpzvikM+6eI/60V5JGUwZUcSeG2o= Subject key identifier: DE:2F:8A:EA:55:82:B1:0B:CD:EB:79:7E:51:CB:C1:FD:20:92:17:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 28AAF84BD3C3DF16441A9F3402E7959B92BD80F1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68e71159-4fd5-4cd0-b793-4a39e9e3639f.roa Signing time: Wed 13 May 2026 21:07:50 +0000 ROA not before: Wed 13 May 2026 21:07:50 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:e000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 18 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:aa:f8:4b:d3:c3:df:16:44:1a:9f:34:02:e7:95:9b:92:bd:80:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 21:07:50 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=d7a7e7cb48f46d738721f8f69d69ff1df45a9fe4efd5381768256a981a18280d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:02:63:d6:4f:2d:9d:9d:ba:31:72:95:a8: 86:8a:dd:02:fc:8a:86:4b:54:b7:bb:02:f8:4e:b8: c0:1d:99:e0:96:3b:aa:0d:c3:8e:1a:87:77:42:d4: 5a:8b:1f:ae:82:57:35:ee:38:91:bc:13:b2:3f:0e: 6e:2b:e1:c4:2f:89:75:91:1d:94:db:a9:b8:3e:aa: d6:15:ba:9c:9a:d7:cf:a9:7e:6c:61:a6:b3:d4:90: da:66:4f:04:24:19:8c:15:fb:4a:63:dd:1c:f1:79: e3:a2:05:ce:6e:68:c4:08:aa:e4:86:db:b3:24:ac: bd:c3:57:98:3e:47:b3:4b:d4:b4:b0:36:ff:29:c5: f6:be:1f:41:c4:97:fe:2b:6b:52:fc:8d:44:6a:7f: 99:ab:5d:f7:4a:ac:90:b8:5b:33:9a:74:f0:9c:79: 82:a0:01:16:d5:c3:0e:d3:01:e1:f8:45:ca:5a:c1: ce:93:24:c7:1d:dd:cb:e4:09:a3:fd:90:b3:d9:e4: a6:f0:fe:c6:73:f2:de:be:78:a7:3e:4c:e7:20:b6: 91:a9:c4:4d:d7:88:b1:d8:2a:52:15:7e:b3:63:1f: 2b:0f:c1:06:7f:4c:92:89:26:72:ec:ca:ce:58:c4: 05:59:0b:91:da:40:37:ba:fe:b9:d1:b7:70:65:dd: bf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2F:8A:EA:55:82:B1:0B:CD:EB:79:7E:51:CB:C1:FD:20:92:17:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68e71159-4fd5-4cd0-b793-4a39e9e3639f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:e000::/44 Signature Algorithm: sha256WithRSAEncryption 3e:21:01:ba:29:84:19:a5:97:4c:46:b7:f9:5e:44:22:7e:d6: 31:b1:7d:b8:6a:ae:ac:62:d6:21:99:f9:60:01:4c:20:79:0b: 27:c2:6e:0a:03:b8:f4:b5:bd:7c:de:03:4b:bc:04:61:de:ab: 63:75:8b:d5:6d:f6:29:e1:86:95:1d:d6:42:49:1e:f0:49:70: eb:97:bd:9b:a4:aa:38:67:62:29:31:29:a9:6e:7d:6d:61:1c: a0:70:5c:87:5e:94:aa:f5:d5:12:45:4b:06:d1:b6:ac:e2:b5: 57:f9:20:8d:55:af:9d:cd:0f:b5:25:3c:8c:dc:1b:f6:55:b7: ca:da:18:2c:e6:cf:ba:0e:35:6d:ad:6a:3a:da:2a:d8:93:5d: 35:42:ca:96:87:64:81:fd:e0:13:9c:96:5b:16:8c:e1:6a:46: 28:64:18:b6:fc:2f:65:93:39:43:66:0b:c2:01:60:ec:1d:ad: e6:73:82:e2:0b:93:1f:68:bb:8a:bb:e1:5d:cc:1b:59:7a:06: 70:23:0b:77:4a:bf:20:72:5e:43:f5:ba:ee:3c:d7:72:df:14: 6f:23:83:46:f0:fa:34:d1:8e:73:96:e3:de:ec:7f:f9:9e:04: 39:5e:b9:69:da:ff:75:36:b5:35:b0:43:cb:68:f0:d8:68:bd: 8a:11:95:e4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKKr4S9PD3xZEGp80AueVm5K9gPEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEzMjEwNzUwWhcNMjYwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0BkN2E3ZTdjYjQ4ZjQ2ZDczODcyMWY4ZjY5ZDY5ZmYxZGY0 NWE5ZmU0ZWZkNTM4MTc2ODI1NmE5ODFhMTgyODBkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6jQJj1k8tnZ26MXKVqIaK3QL8ioZLVLe7AvhOuMAdmeCW O6oNw44ah3dC1FqLH66CVzXuOJG8E7I/Dm4r4cQviXWRHZTbqbg+qtYVupya18+p fmxhprPUkNpmTwQkGYwV+0pj3RzxeeOiBc5uaMQIquSG27MkrL3DV5g+R7NL1LSw Nv8pxfa+H0HEl/4ra1L8jURqf5mrXfdKrJC4WzOadPCceYKgARbVww7TAeH4Rcpa wc6TJMcd3cvkCaP9kLPZ5Kbw/sZz8t6+eKc+TOcgtpGpxE3XiLHYKlIVfrNjHysP wQZ/TJKJJnLsys5YxAVZC5HaQDe6/rnRt3Bl3b9tAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3i+K6lWCsQvN63l+UcvB/SCSFxMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4ZTcxMTU5LTRmZDUtNGNkMC1iNzkzLTRhMzllOWUzNjM5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAB9h4AAwDQYJKoZIhvcNAQELBQADggEBAD4hAbophBmll0xGt/leRCJ+ 1jGxfbhqrqxi1iGZ+WABTCB5CyfCbgoDuPS1vXzeA0u8BGHeq2N1i9Vt9inhhpUd 1kJJHvBJcOuXvZukqjhnYikxKalufW1hHKBwXIdelKr11RJFSwbRtqzitVf5II1V r53ND7UlPIzcG/ZVt8raGCzmz7oONW2tajraKtiTXTVCypaHZIH94BOcllsWjOFq RihkGLb8L2WTOUNmC8IBYOwdreZzguILkx9ou4q74V3MG1l6BnAjC3dKvyByXkP1 uu4813LfFG8jg0bw+jTRjnOW497sf/meBDleuWna/3U2tTWwQ8to8NhovYoRleQ= -----END CERTIFICATE-----Generated at Sun May 17 05:02:24 2026 by rpki-client