$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e301f9dc-0e86-40dc-8375-0df0602fc0e5.roa File: e301f9dc-0e86-40dc-8375-0df0602fc0e5.roa (raw, json) Hash identifier: PmXZWrowR5zqrJlAW62Qtmkyv7noo6tFHzON7LIIJQE= Subject key identifier: 19:34:D3:6E:BC:11:9D:69:01:FE:E7:F7:38:51:E9:10:40:42:3C:3E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6E00F6C2DA29BF78953FF5D88A6FFD3130D77FF9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e301f9dc-0e86-40dc-8375-0df0602fc0e5.roa Signing time: Fri 22 May 2026 16:34:09 +0000 ROA not before: Fri 22 May 2026 16:34:09 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fe2:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:00:f6:c2:da:29:bf:78:95:3f:f5:d8:8a:6f:fd:31:30:d7:7f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 22 16:34:09 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=ace1320a2156b37db1e0baf060f87474c0aa3a7d133866d20c81ebd7d09b74bb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a0:eb:94:38:9d:8a:c6:85:a5:93:2e:21:15: 12:f6:70:73:43:2e:04:35:10:4f:40:73:25:46:d9: 18:6a:8a:c1:f3:17:dc:60:4d:85:a2:38:71:73:34: 79:d8:1d:5a:ed:e4:52:5a:9f:41:63:34:c3:ae:43: 32:a7:0c:a8:20:30:d6:e2:98:6b:cc:1f:89:40:f1: c1:a9:35:0a:6c:32:5a:3e:7f:31:c5:c7:ca:81:48: 19:ef:e7:8c:f6:83:e4:06:5a:d5:fc:1c:bf:6b:e6: cf:5b:6e:d1:f0:aa:e9:c0:35:05:77:51:a0:ad:28: df:4f:c0:97:54:9d:b8:67:21:42:96:b6:e6:0c:6d: 68:67:30:f6:b6:19:ab:6b:a5:f6:42:19:79:a3:b0: 19:bd:f1:ff:ef:48:d9:92:05:c8:4b:70:cd:48:a0: 98:3b:87:53:72:4b:2a:7b:42:d2:b0:9b:c7:d0:cc: 55:0d:9c:e7:01:c7:dd:76:90:a0:e7:44:46:a2:24: 5e:81:2e:65:0a:dc:d7:e0:f9:ec:ce:c5:f8:dd:63: 6f:0c:be:52:e7:8a:51:1e:fa:1e:3f:00:43:db:63: 0d:50:5c:5d:3c:b0:19:c1:62:3d:a9:9e:28:f5:a4: 31:97:9c:74:c0:75:e3:42:95:ee:ed:ca:7f:b3:40: f5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:34:D3:6E:BC:11:9D:69:01:FE:E7:F7:38:51:E9:10:40:42:3C:3E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e301f9dc-0e86-40dc-8375-0df0602fc0e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe2:2000::/40 Signature Algorithm: sha256WithRSAEncryption a8:07:50:ba:b9:be:0d:78:4c:14:64:d8:4a:07:52:cd:86:40: 9a:2a:a5:25:e5:f4:f1:99:24:c1:8a:76:65:55:9f:4b:d5:22: b0:df:74:2a:2a:7e:4f:92:5d:62:5e:1f:7c:1f:e3:a1:c5:20: f6:c2:13:d4:68:5e:76:6d:f0:26:4e:22:be:f0:49:f8:d9:ec: b7:73:70:b1:a4:cb:80:59:b1:27:ae:18:ce:c2:07:55:08:ed: 3a:ce:82:d5:5d:87:b8:b0:59:dc:a4:f5:49:e2:4e:fa:58:6c: 21:52:99:83:5c:99:d0:ed:52:21:60:34:cb:d7:f5:83:4a:b7: 93:bd:79:79:ad:42:f1:b7:71:13:76:e0:dc:2d:ce:8a:63:34: 93:67:28:df:59:a4:d6:e3:dc:54:9b:5f:a6:2b:ae:fd:69:c3: 7d:37:02:c9:a4:95:28:2e:12:17:c2:3e:e4:41:f3:04:b8:30: c7:7c:09:ae:17:75:c8:0d:94:09:5b:79:75:33:c3:5b:e1:ee: cd:ba:db:b7:b7:61:7d:cd:dd:bc:36:3c:bd:32:60:2b:5c:7b: 8e:7e:00:59:ef:55:b6:3d:cf:17:29:78:6d:48:7c:29:f9:92: 7b:77:82:98:6b:62:a8:a3:48:d1:44:05:ec:96:c9:16:b0:4b: 5b:35:f3:01 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUbgD2wtopv3iVP/XYim/9MTDXf/kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIyMTYzNDA5WhcNMjYwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhY2UxMzIwYTIxNTZiMzdkYjFlMGJhZjA2MGY4NzQ3NGMw YWEzYTdkMTMzODY2ZDIwYzgxZWJkN2QwOWI3NGJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYoOuUOJ2KxoWlky4hFRL2cHNDLgQ1EE9AcyVG2RhqisHz F9xgTYWiOHFzNHnYHVrt5FJan0FjNMOuQzKnDKggMNbimGvMH4lA8cGpNQpsMlo+ fzHFx8qBSBnv54z2g+QGWtX8HL9r5s9bbtHwqunANQV3UaCtKN9PwJdUnbhnIUKW tuYMbWhnMPa2GatrpfZCGXmjsBm98f/vSNmSBchLcM1IoJg7h1NySyp7QtKwm8fQ zFUNnOcBx912kKDnREaiJF6BLmUK3Nfg+ezOxfjdY28MvlLnilEe+h4/AEPbYw1Q XF08sBnBYj2pnij1pDGXnHTAdeNCle7tyn+zQPWbAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUGTTTbrwRnWkB/uf3OFHpEEBCPD4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UzMDFmOWRjLTBlODYtNDBkYy04Mzc1LTBkZjA2MDJmYzBlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/iIDANBgkqhkiG9w0BAQsFAAOCAQEAqAdQurm+DXhMFGTYSgdSzYZA miqlJeX08ZkkwYp2ZVWfS9UisN90Kip+T5JdYl4ffB/jocUg9sIT1Ghedm3wJk4i vvBJ+Nnst3NwsaTLgFmxJ64YzsIHVQjtOs6C1V2HuLBZ3KT1SeJO+lhsIVKZg1yZ 0O1SIWA0y9f1g0q3k715ea1C8bdxE3bg3C3OimM0k2co31mk1uPcVJtfpiuu/WnD fTcCyaSVKC4SF8I+5EHzBLgwx3wJrhd1yA2UCVt5dTPDW+Huzbrbt7dhfc3dvDY8 vTJgK1x7jn4AWe9Vtj3PFyl4bUh8KfmSe3eCmGtiqKNI0UQF7JbJFrBLWzXzAQ== -----END CERTIFICATE-----Generated at Wed Jun 3 20:38:35 2026 by rpki-client