$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6368c6d7-8280-4417-bceb-f9ea5fb02475.roa File: 6368c6d7-8280-4417-bceb-f9ea5fb02475.roa (raw, json) Hash identifier: zHuioy0M1gtx8G6KSbOLf0xUGA9u69Gi8IKyDb2J8mg= Subject key identifier: 03:3A:F2:56:EE:2E:E7:AB:58:BD:80:CD:D5:04:A6:DC:8E:3E:6E:20 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 248694D7441FCF72A35D3BEB5709C1430D8C8A60 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6368c6d7-8280-4417-bceb-f9ea5fb02475.roa Signing time: Sat 02 May 2026 00:41:24 +0000 ROA not before: Sat 02 May 2026 00:41:24 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fea:c0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:86:94:d7:44:1f:cf:72:a3:5d:3b:eb:57:09:c1:43:0d:8c:8a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 00:41:24 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=06419e4b83adb14ed1d93dfa449e169ba147d164fe0a2ea3dfc9f4ca72af60ed, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8a:c9:2f:b7:61:e4:f8:f0:8f:d3:3a:ef:02: 77:f0:1e:a8:2f:f3:70:34:e8:46:3d:ae:c9:fe:c4: 1b:64:60:ae:4b:d4:be:85:d9:4d:2e:49:06:89:ce: 28:6e:be:6e:a0:ac:9b:b7:dd:fe:53:26:9c:b4:bb: 18:ac:5b:ed:f0:93:78:cd:e2:ff:91:51:8b:93:60: e8:41:92:fa:09:ca:34:02:4f:9a:1f:9c:69:28:e2: e1:54:43:4e:bf:0b:e3:a6:28:c1:47:ec:fa:f6:b0: 0b:2f:1f:6e:0b:83:b9:2b:49:32:91:0d:b7:3f:d3: 4f:68:83:29:d7:e7:ff:64:00:94:98:00:ab:86:13: b1:7c:e4:64:43:48:e8:56:76:9f:0b:6d:d4:19:f5: cf:2e:df:a2:97:61:ef:c6:bd:1f:d2:31:23:10:6e: 0f:36:59:ed:b2:ea:30:21:2b:a6:06:5f:f2:33:02: e0:ed:1b:88:c1:cd:e4:4e:8c:a5:6e:6e:b2:bc:d5: 8a:09:f9:78:cd:e4:71:7b:04:7a:f0:27:d6:80:15: a0:79:8b:79:68:08:65:04:dd:81:d9:ac:9c:5a:fe: 4f:34:45:9a:c9:8a:56:8a:31:da:45:08:f8:18:1d: b7:a7:2d:88:98:cb:e7:a7:f3:4d:ad:f2:a5:fe:e0: 17:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3A:F2:56:EE:2E:E7:AB:58:BD:80:CD:D5:04:A6:DC:8E:3E:6E:20 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6368c6d7-8280-4417-bceb-f9ea5fb02475.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea:c0c0::/48 Signature Algorithm: sha256WithRSAEncryption a6:b9:05:c8:8d:f8:0f:f5:6e:2f:0f:29:3c:7d:2f:08:14:09: ec:c3:06:45:97:5a:13:e3:90:60:87:84:32:d7:e4:ae:ca:19: 11:75:44:02:2f:70:de:04:4a:8e:67:0c:68:c7:2b:c9:5e:f5: 5c:c4:68:00:40:87:7e:57:d1:43:84:86:f1:e5:ae:26:6e:8c: 50:03:ca:0f:c5:35:2f:cb:a3:08:ca:ea:9e:01:9a:1c:19:10: 43:ad:a7:d2:4f:f8:84:ae:35:3a:e8:7d:f4:09:16:c9:88:9c: aa:f1:7f:5b:e0:dd:da:64:51:78:24:82:ca:ab:b0:8e:a8:f8: e3:40:b1:09:34:c7:bd:78:d8:9d:ee:f9:24:32:23:4d:19:bb: d2:30:7f:d2:8f:67:b2:ad:09:5c:ea:03:d8:26:18:54:8f:77: 5e:c5:99:c7:f1:b6:8b:c7:bb:b1:d8:92:b7:fc:03:be:4d:a9: 25:bf:89:78:4e:43:70:11:11:7d:c4:c1:82:99:16:ed:ac:61: 69:bf:48:6d:62:ee:90:ec:ac:a0:d2:ad:67:09:db:56:98:d3: 0a:d5:99:28:aa:3a:6a:ce:62:c8:2f:3b:7a:d4:2c:ad:50:ba: 96:bc:68:b2:a3:75:e9:e4:b7:57:a7:63:bc:f5:75:68:e6:04: 52:f2:aa:72 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJIaU10Qfz3KjXTvrVwnBQw2MimAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAyMDA0MTI0WhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNjQxOWU0YjgzYWRiMTRlZDFkOTNkZmE0NDllMTY5YmEx NDdkMTY0ZmUwYTJlYTNkZmM5ZjRjYTcyYWY2MGVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqiskvt2Hk+PCP0zrvAnfwHqgv83A06EY9rsn+xBtkYK5L 1L6F2U0uSQaJzihuvm6grJu33f5TJpy0uxisW+3wk3jN4v+RUYuTYOhBkvoJyjQC T5ofnGko4uFUQ06/C+OmKMFH7Pr2sAsvH24Lg7krSTKRDbc/009ogynX5/9kAJSY AKuGE7F85GRDSOhWdp8LbdQZ9c8u36KXYe/GvR/SMSMQbg82We2y6jAhK6YGX/Iz AuDtG4jBzeROjKVubrK81YoJ+XjN5HF7BHrwJ9aAFaB5i3loCGUE3YHZrJxa/k80 RZrJilaKMdpFCPgYHbenLYiYy+en802t8qX+4BcdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAzryVu4u56tYvYDN1QSm3I4+biAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYzNjhjNmQ3LTgyODAtNDQxNy1iY2ViLWY5ZWE1ZmIwMjQ3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/qwMAwDQYJKoZIhvcNAQELBQADggEBAKa5BciN+A/1bi8PKTx9LwgU CezDBkWXWhPjkGCHhDLX5K7KGRF1RAIvcN4ESo5nDGjHK8le9VzEaABAh35X0UOE hvHlriZujFADyg/FNS/LowjK6p4BmhwZEEOtp9JP+ISuNTroffQJFsmInKrxf1vg 3dpkUXgkgsqrsI6o+ONAsQk0x7142J3u+SQyI00Zu9Iwf9KPZ7KtCVzqA9gmGFSP d17FmcfxtovHu7HYkrf8A75NqSW/iXhOQ3AREX3EwYKZFu2sYWm/SG1i7pDsrKDS rWcJ21aY0wrVmSiqOmrOYsgvO3rULK1Qupa8aLKjdenkt1enY7z1dWjmBFLyqnI= -----END CERTIFICATE-----Generated at Sun May 3 14:47:14 2026 by rpki-client