$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1055b9ad-7786-4a86-bc04-3428d593f23e.roa File: 1055b9ad-7786-4a86-bc04-3428d593f23e.roa (raw, json) Hash identifier: cMC+z1IDbkRPjPX/YOV4ok/eqemBXAl2rn7lpIrGQ+Q= Subject key identifier: 08:F2:E5:2C:AE:2B:98:0B:BD:43:54:55:15:97:D5:B2:36:CD:BA:D2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5BC441FE423C389D26C1666D3013C13162CD4121 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1055b9ad-7786-4a86-bc04-3428d593f23e.roa Signing time: Wed 13 May 2026 21:06:09 +0000 ROA not before: Wed 13 May 2026 21:06:09 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:ec00::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 18 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c4:41:fe:42:3c:38:9d:26:c1:66:6d:30:13:c1:31:62:cd:41:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 21:06:09 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=3623683689b2923205867324d560ef0f9a2835059aeecfb8db1083170004330d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4c:9b:c1:1f:a8:93:a3:35:cb:d0:88:e2:59: dc:81:d2:30:0b:9d:45:4c:93:af:8d:f0:fb:40:b9: 95:a3:08:e2:24:45:5a:0a:fe:47:34:df:ae:58:dc: f5:83:af:eb:57:02:63:d9:32:31:fa:7e:b9:94:1f: 9d:f4:5c:a9:c8:1d:fc:fa:17:6c:7f:15:53:3d:67: 89:cd:3c:78:b1:09:8b:93:37:cc:5b:44:47:c9:d7: 5f:d9:60:a4:30:e7:3e:f3:70:51:01:e4:d8:96:6a: 81:ca:9f:e8:3d:c3:d8:aa:7c:0a:bb:3a:3b:b9:76: 67:51:17:c4:7a:c8:5e:3e:10:62:73:06:00:ec:6f: ee:e3:04:51:48:8c:c0:06:77:0d:1c:ab:e1:d0:69: 33:b9:c0:17:7a:b9:e5:0a:3d:b8:5c:e3:bb:cd:c3: 17:67:9f:a9:2c:d6:61:56:f3:f3:68:91:0b:e4:20: ce:3e:de:4c:1d:5e:48:db:d1:ce:d6:a2:24:50:e6: ae:02:8a:d0:d8:0d:3b:31:5b:36:30:cf:4b:99:eb: 1e:a3:70:23:42:a7:9b:d3:e1:63:63:ac:fe:7d:80: d5:b5:f0:11:44:6e:c9:0b:e8:f4:a0:ec:33:9e:55: 97:8c:49:a7:36:d6:68:fd:39:2b:d2:7e:84:dc:7a: 50:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F2:E5:2C:AE:2B:98:0B:BD:43:54:55:15:97:D5:B2:36:CD:BA:D2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1055b9ad-7786-4a86-bc04-3428d593f23e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:ec00::/46 Signature Algorithm: sha256WithRSAEncryption 63:ae:8a:bf:8a:ff:e0:21:2b:f7:75:02:0e:21:95:dc:7b:67: 9b:1d:a2:63:79:18:df:bf:10:3b:1c:1f:ae:14:82:2c:a1:2c: bf:d8:23:35:31:90:27:ee:f4:16:dd:bd:45:db:e8:27:81:69: df:a3:ce:46:ef:ad:32:9c:f7:03:dc:94:0e:09:cb:97:2a:db: 6a:23:eb:38:55:5d:23:bc:da:34:85:94:4a:4f:2e:22:f3:81: 0a:e1:8a:6b:e8:68:40:60:d0:04:df:d7:bc:71:fe:95:7b:06: 1e:b1:fa:76:c4:5b:64:86:41:d2:4e:8c:c9:42:06:99:cc:59: 01:13:27:de:85:71:fe:c1:e9:05:90:b0:fc:4f:08:44:52:71: 47:aa:51:0b:dc:d0:01:8c:ba:74:b9:08:dc:87:59:95:ce:76: aa:78:9b:95:3d:e7:c5:43:bc:f8:2b:8a:3a:8d:24:20:9f:00: f6:91:7d:6e:eb:16:37:43:64:45:e3:21:5c:00:54:a8:56:ab: 95:f4:d6:4e:b3:0f:5a:fb:0a:e9:a5:57:33:65:e1:30:91:70: 8f:98:96:a8:7b:07:05:49:bc:fa:18:06:66:37:ed:42:bb:69: e4:8b:26:aa:f9:41:90:43:27:20:34:f2:8e:73:e5:f1:e1:85: a5:a4:a0:43 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUW8RB/kI8OJ0mwWZtMBPBMWLNQSEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEzMjEwNjA5WhcNMjYwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjIzNjgzNjg5YjI5MjMyMDU4NjczMjRkNTYwZWYwZjlh MjgzNTA1OWFlZWNmYjhkYjEwODMxNzAwMDQzMzBkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiTJvBH6iTozXL0IjiWdyB0jALnUVMk6+N8PtAuZWjCOIk RVoK/kc0365Y3PWDr+tXAmPZMjH6frmUH530XKnIHfz6F2x/FVM9Z4nNPHixCYuT N8xbREfJ11/ZYKQw5z7zcFEB5NiWaoHKn+g9w9iqfAq7Oju5dmdRF8R6yF4+EGJz BgDsb+7jBFFIjMAGdw0cq+HQaTO5wBd6ueUKPbhc47vNwxdnn6ks1mFW8/NokQvk IM4+3kwdXkjb0c7WoiRQ5q4CitDYDTsxWzYwz0uZ6x6jcCNCp5vT4WNjrP59gNW1 8BFEbskL6PSg7DOeVZeMSac21mj9OSvSfoTcelCDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCPLlLK4rmAu9Q1RVFZfVsjbNutIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEwNTViOWFkLTc3ODYtNGE4Ni1iYzA0LTM0MjhkNTkzZjIzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9h7AAwDQYJKoZIhvcNAQELBQADggEBAGOuir+K/+AhK/d1Ag4hldx7 Z5sdomN5GN+/EDscH64UgiyhLL/YIzUxkCfu9BbdvUXb6CeBad+jzkbvrTKc9wPc lA4Jy5cq22oj6zhVXSO82jSFlEpPLiLzgQrhimvoaEBg0ATf17xx/pV7Bh6x+nbE W2SGQdJOjMlCBpnMWQETJ96Fcf7B6QWQsPxPCERScUeqUQvc0AGMunS5CNyHWZXO dqp4m5U958VDvPgrijqNJCCfAPaRfW7rFjdDZEXjIVwAVKhWq5X01k6zD1r7Cuml VzNl4TCRcI+Ylqh7BwVJvPoYBmY37UK7aeSLJqr5QZBDJyA08o5z5fHhhaWkoEM= -----END CERTIFICATE-----Generated at Sun May 17 05:02:46 2026 by rpki-client