$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89de9e52-4387-4a27-8ef0-f21212663bb4.roa File: 89de9e52-4387-4a27-8ef0-f21212663bb4.roa (raw, json) Hash identifier: KpDzEaC5UNK5RrjmVg2kHw76jp2y9E4LAEt7IUfwQqE= Subject key identifier: 07:34:E5:B7:C7:C4:6B:0E:8B:73:68:CC:FA:B1:20:48:79:BF:2E:B0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 524BCAE5546B0F58AF6ADB84B653AE23CB330002 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89de9e52-4387-4a27-8ef0-f21212663bb4.roa Signing time: Sat 16 May 2026 01:31:24 +0000 ROA not before: Sat 16 May 2026 01:31:24 +0000 ROA not after: Fri 14 Aug 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f15::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:4b:ca:e5:54:6b:0f:58:af:6a:db:84:b6:53:ae:23:cb:33:00:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 01:31:24 2026 GMT Not After : Aug 14 23:59:59 2026 GMT Subject: serialNumber=8e07037037771579f4fca5fe14bb13748fe026fec7a8d4283fe3f02af3de8855, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ae:ae:3d:c1:63:f0:86:0f:87:27:4e:8e:17: 7f:e5:5c:57:63:1b:b0:f4:04:55:e1:4d:df:1d:66: 98:84:16:5b:bf:6a:51:cd:19:af:d1:47:e2:be:13: 55:d7:b5:26:54:38:5a:ca:57:64:45:be:da:d6:40: 43:c5:3c:b6:b5:d3:8e:61:b8:df:d2:9d:33:cc:63: 50:b9:31:eb:38:e3:f8:ae:26:d0:ba:8b:e3:f2:52: f7:8d:c0:25:f5:e8:ca:b9:bc:68:72:cc:c8:12:1a: e0:b3:47:9d:29:5a:a7:7c:f4:98:82:42:6a:53:cc: 82:24:02:bc:8c:53:78:cd:73:4f:c6:d0:6e:6b:f4: 34:4b:00:85:39:a6:2c:1a:7d:2c:7d:b9:6b:42:e7: a2:87:31:0d:12:0a:a1:08:45:1b:cc:5d:72:e2:50: e3:de:35:dc:d3:ed:54:e7:67:5f:ee:20:28:29:ed: 3f:0a:07:07:65:74:07:77:6d:ce:aa:9d:c4:b7:b7: ea:c7:9d:50:fe:cc:4f:70:b7:f6:11:9e:1e:21:fc: 5a:81:83:a0:49:9c:9c:5c:6e:b9:aa:0e:cf:7e:4c: 2c:f7:f4:36:86:75:1b:39:3b:4c:c7:d3:ac:bd:21: 29:3c:ec:2e:91:c8:d3:aa:85:1a:81:c3:72:96:4b: c3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:34:E5:B7:C7:C4:6B:0E:8B:73:68:CC:FA:B1:20:48:79:BF:2E:B0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89de9e52-4387-4a27-8ef0-f21212663bb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f15::/36 Signature Algorithm: sha256WithRSAEncryption 78:82:8c:b8:09:5e:ee:ec:a4:17:de:e3:e6:4e:76:a1:34:e2: 48:ca:81:10:c3:10:9d:7f:9a:b3:98:df:d7:26:c6:b1:93:fd: a8:ca:f3:72:20:98:98:20:c3:85:ef:2b:f0:34:0c:d0:f9:a0: 97:81:0b:12:80:2c:6a:e8:11:91:8d:a4:4f:7c:3a:c5:33:04: 12:aa:94:0b:d9:e9:15:9f:68:52:27:7b:34:80:ee:10:84:bb: b9:bf:43:de:6d:0c:13:bb:ad:73:9b:ca:7a:da:ce:93:da:67: 7c:f0:ae:59:bd:9c:10:bd:3d:cd:64:47:df:7d:11:f7:39:92: 3c:21:d5:3c:e0:4d:61:43:ac:7c:68:25:89:c6:26:1c:73:94: f4:98:9c:69:7b:ea:ac:26:86:c0:31:b4:53:96:06:d8:98:89: b7:52:7f:d0:bb:63:24:a5:35:b1:f9:47:7c:5a:ad:31:30:28: b1:ce:43:ad:2f:a8:03:96:8e:08:c1:6f:d5:da:99:e9:59:03: 91:fa:81:fb:e3:ba:c5:01:dc:1d:23:4a:88:78:3e:c4:36:e8: d8:58:66:3d:4b:4b:3f:db:b2:e7:fe:e2:0c:ca:68:0b:98:be: 65:15:c4:04:9d:6a:63:bc:b2:c0:3b:97:0d:7c:9b:be:c1:d5: 16:62:e1:d7 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUkvK5VRrD1ivatuEtlOuI8szAAIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDEzMTI0WhcNMjYwODE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTA3MDM3MDM3NzcxNTc5ZjRmY2E1ZmUxNGJiMTM3NDhm ZTAyNmZlYzdhOGQ0MjgzZmUzZjAyYWYzZGU4ODU1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMrq49wWPwhg+HJ06OF3/lXFdjG7D0BFXhTd8dZpiEFlu/ alHNGa/RR+K+E1XXtSZUOFrKV2RFvtrWQEPFPLa1045huN/SnTPMY1C5Mes44/iu JtC6i+PyUveNwCX16Mq5vGhyzMgSGuCzR50pWqd89JiCQmpTzIIkAryMU3jNc0/G 0G5r9DRLAIU5piwafSx9uWtC56KHMQ0SCqEIRRvMXXLiUOPeNdzT7VTnZ1/uICgp 7T8KBwdldAd3bc6qncS3t+rHnVD+zE9wt/YRnh4h/FqBg6BJnJxcbrmqDs9+TCz3 9DaGdRs5O0zH06y9ISk87C6RyNOqhRqBw3KWS8PlAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUBzTlt8fEaw6Lc2jM+rEgSHm/LrAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5ZGU5ZTUyLTQzODctNGEyNy04ZWYwLWYyMTIxMjY2M2JiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8VADANBgkqhkiG9w0BAQsFAAOCAQEAeIKMuAle7uykF97j5k52oTTi SMqBEMMQnX+as5jf1ybGsZP9qMrzciCYmCDDhe8r8DQM0Pmgl4ELEoAsaugRkY2k T3w6xTMEEqqUC9npFZ9oUid7NIDuEIS7ub9D3m0ME7utc5vKetrOk9pnfPCuWb2c EL09zWRH330R9zmSPCHVPOBNYUOsfGglicYmHHOU9JicaXvqrCaGwDG0U5YG2JiJ t1J/0LtjJKU1sflHfFqtMTAosc5DrS+oA5aOCMFv1dqZ6VkDkfqB++O6xQHcHSNK iHg+xDbo2FhmPUtLP9uy5/7iDMpoC5i+ZRXEBJ1qY7yywDuXDXybvsHVFmLh1w== -----END CERTIFICATE-----Generated at Sat Jun 6 09:56:28 2026 by rpki-client