$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7720073f-dffb-42ea-b26e-95074e3774c4.roa File: 7720073f-dffb-42ea-b26e-95074e3774c4.roa (raw, json) Hash identifier: DIgzf2JoTRuvabkAvn8i2+GPjpy2c7649lqXSMNZhs8= Subject key identifier: FD:AF:CF:94:58:BF:DD:46:04:35:17:EC:B2:57:FF:93:77:DA:0D:92 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48C867BD547EEC84C0BBCD8766D500D1320E54E0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7720073f-dffb-42ea-b26e-95074e3774c4.roa Signing time: Fri 15 May 2026 02:00:10 +0000 ROA not before: Fri 15 May 2026 02:00:10 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fff:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c8:67:bd:54:7e:ec:84:c0:bb:cd:87:66:d5:00:d1:32:0e:54:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 02:00:10 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=731cbea0557acbe9c9857329c9a5dfe36bc1bd303d1de6fbf230b6517e2cb5c2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b0:f2:86:ab:49:62:78:a1:65:76:90:f5:68: 9d:00:32:8e:df:af:67:ec:0d:9d:80:bb:30:a3:bb: a9:3a:95:5e:18:07:2b:c3:03:25:5a:62:29:0c:04: 4d:53:cf:af:e1:7b:fb:6d:fd:df:6f:04:34:ca:e2: ca:7d:1a:3f:2c:94:38:5d:be:d0:b2:4e:11:6d:47: b6:41:d4:33:77:cb:c9:52:98:b0:09:9b:b5:d2:cc: d1:63:c2:0b:97:5f:e8:74:86:bc:1e:79:70:f1:1e: 20:12:20:7a:e6:a0:e2:f3:00:ae:70:8f:80:4f:8a: f2:9a:96:d1:1f:51:56:40:8b:33:92:37:ff:e6:24: c7:32:ac:61:c1:d0:46:0f:fa:10:ef:42:0b:ba:cd: 7a:5c:44:19:a7:00:a6:3d:dd:bb:6e:85:73:75:6a: f1:40:05:9e:6d:7a:85:9b:d2:b9:a5:ed:5e:13:16: 85:24:45:e2:75:bb:b9:e1:65:65:e9:13:fe:41:1a: b8:34:5c:9e:17:6e:e5:48:0e:a9:65:93:5b:c8:64: 6d:90:b2:13:16:8b:f4:18:30:91:cc:26:af:30:77: e6:97:fb:5d:79:a4:0a:6c:db:e8:e8:c1:fc:be:ee: b3:0d:4f:4f:a9:5e:dd:29:15:96:29:97:4b:ef:a8: 87:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AF:CF:94:58:BF:DD:46:04:35:17:EC:B2:57:FF:93:77:DA:0D:92 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7720073f-dffb-42ea-b26e-95074e3774c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:2080::/48 Signature Algorithm: sha256WithRSAEncryption 49:9d:6e:2b:7e:ac:d7:ec:17:93:76:07:45:b4:0b:12:73:63: 3f:b7:6d:85:5e:e1:56:7d:82:d9:bd:46:1c:35:7b:b6:7e:eb: e0:5a:45:01:2a:51:cd:6d:08:cc:a2:ee:1a:2d:7c:81:b9:e5: bc:e2:ec:b9:8d:91:6f:35:23:d8:f0:62:43:76:6b:77:f8:fd: d5:93:45:44:73:51:48:6d:8b:8c:72:05:b6:f1:52:d9:e5:8e: ab:73:4b:be:f0:06:8c:f5:8f:68:14:f8:d9:40:94:f9:1d:8e: 0d:85:cf:70:85:93:e3:c1:0c:c3:2b:1f:0d:25:82:45:10:02: 04:41:3a:de:bc:3a:fe:9a:29:e7:68:5b:18:8f:97:04:63:19: 72:a7:58:d2:5e:fe:24:6a:c7:14:96:db:c2:2a:fa:6b:e7:84: ea:42:60:cd:71:c7:f4:b7:c1:fc:da:9e:74:03:3b:19:2f:85: 56:15:bf:b4:9d:12:ca:af:53:5d:60:cd:e1:2a:41:96:7d:e0: 13:ec:59:12:5d:bc:27:e3:ae:ab:7d:db:34:48:85:be:12:af: 0f:61:fd:4b:5c:76:be:a7:72:44:1f:f0:70:65:3a:26:d9:14: b4:87:c8:eb:ab:4d:33:2f:93:6a:15:5d:29:76:b5:db:f6:f3: 6c:ef:6a:3f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSMhnvVR+7ITAu82HZtUA0TIOVOAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDIwMDEwWhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzFjYmVhMDU1N2FjYmU5Yzk4NTczMjljOWE1ZGZlMzZi YzFiZDMwM2QxZGU2ZmJmMjMwYjY1MTdlMmNiNWMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcsPKGq0lieKFldpD1aJ0AMo7fr2fsDZ2AuzCju6k6lV4Y ByvDAyVaYikMBE1Tz6/he/tt/d9vBDTK4sp9Gj8slDhdvtCyThFtR7ZB1DN3y8lS mLAJm7XSzNFjwguXX+h0hrweeXDxHiASIHrmoOLzAK5wj4BPivKaltEfUVZAizOS N//mJMcyrGHB0EYP+hDvQgu6zXpcRBmnAKY93btuhXN1avFABZ5teoWb0rml7V4T FoUkReJ1u7nhZWXpE/5BGrg0XJ4XbuVIDqllk1vIZG2QshMWi/QYMJHMJq8wd+aX +115pAps2+jowfy+7rMNT0+pXt0pFZYpl0vvqIfpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/a/PlFi/3UYENRfsslf/k3faDZIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc3MjAwNzNmLWRmZmItNDJlYS1iMjZlLTk1MDc0ZTM3NzRjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//IIAwDQYJKoZIhvcNAQELBQADggEBAEmdbit+rNfsF5N2B0W0CxJz Yz+3bYVe4VZ9gtm9Rhw1e7Z+6+BaRQEqUc1tCMyi7hotfIG55bzi7LmNkW81I9jw YkN2a3f4/dWTRURzUUhti4xyBbbxUtnljqtzS77wBoz1j2gU+NlAlPkdjg2Fz3CF k+PBDMMrHw0lgkUQAgRBOt68Ov6aKedoWxiPlwRjGXKnWNJe/iRqxxSW28Iq+mvn hOpCYM1xx/S3wfzannQDOxkvhVYVv7SdEsqvU11gzeEqQZZ94BPsWRJdvCfjrqt9 2zRIhb4Srw9h/Utcdr6nckQf8HBlOibZFLSHyOurTTMvk2oVXSl2tdv282zvaj8= -----END CERTIFICATE-----Generated at Wed Jun 3 20:36:44 2026 by rpki-client