$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a11e225b-98ed-449c-b7a7-d2a17a7803ea.roa File: a11e225b-98ed-449c-b7a7-d2a17a7803ea.roa (raw, json) Hash identifier: mHEHJsNcx13hVgoDOlFkAVEQTiwtAquB/vfb8GiNXGg= Subject key identifier: 82:84:0F:DC:91:3A:75:D8:06:05:8D:85:AA:87:15:15:18:39:00:8C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6B2149B917A7FD4F48B56BBC2A2A8DC1987CC79C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a11e225b-98ed-449c-b7a7-d2a17a7803ea.roa Signing time: Wed 13 May 2026 21:06:07 +0000 ROA not before: Wed 13 May 2026 21:06:07 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:c000::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 18 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:21:49:b9:17:a7:fd:4f:48:b5:6b:bc:2a:2a:8d:c1:98:7c:c7:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 21:06:07 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=656ac922ffe68e476033fa6c9dbd357552da078d37852293dbb5db276af7438e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:52:d2:7a:2f:d5:7a:78:fa:63:04:17:49: d9:ed:85:e1:27:fa:33:3d:76:d2:6c:67:f2:58:93: eb:1f:66:7f:5d:1b:fc:54:b5:f6:ee:fa:51:0b:ae: df:0e:66:4f:ef:ce:b7:4c:c7:53:cf:d5:ce:70:c6: 71:cb:60:b7:e7:14:a7:f8:8b:b6:a5:2c:85:e0:b6: c5:a1:60:53:b1:7e:ec:97:c5:0e:c9:6b:34:12:31: c7:50:a7:a6:42:b8:ec:f0:8f:d4:8b:23:7e:1c:48: fc:22:2e:eb:08:27:b6:f1:cf:1d:34:63:52:f2:41: 87:d3:84:b8:5f:0f:30:c8:2b:c0:3b:6b:d9:da:05: d3:e5:33:a8:28:2b:93:2f:3c:a2:90:d4:4c:b8:bf: 62:11:a3:86:aa:6f:10:9c:e2:f9:19:4a:66:85:aa: f8:cf:47:80:48:a8:f7:1d:f5:0f:5b:72:f1:7d:14: e8:d4:b2:39:88:cd:eb:a7:46:22:e6:b2:e1:07:40: 55:89:c5:12:d6:97:0c:65:b5:36:71:d9:b6:60:d9: 76:36:be:67:05:7b:00:9d:57:ee:67:8b:d9:42:a4: 53:2f:d3:5c:5c:a1:90:91:e3:32:a4:4a:c8:81:38: 76:53:de:02:03:4d:5d:69:09:98:4b:78:f7:ba:6f: 1c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:84:0F:DC:91:3A:75:D8:06:05:8D:85:AA:87:15:15:18:39:00:8C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a11e225b-98ed-449c-b7a7-d2a17a7803ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:c000::/46 Signature Algorithm: sha256WithRSAEncryption 11:9e:74:f9:15:49:4a:39:de:ea:ba:03:83:c0:f7:a4:58:a8: 83:04:c1:30:a5:e9:53:45:22:d6:19:1b:0f:0d:c1:0b:63:aa: 11:5d:28:68:f3:10:8f:5c:9c:37:db:92:9b:d1:49:fc:e0:75: 2a:07:26:36:e3:18:22:84:c8:2f:a9:d4:99:4e:2e:30:a3:e2: b2:36:7d:f1:32:05:d1:ea:4d:2d:23:97:9e:1d:da:2b:4b:ac: 6d:bd:73:09:ea:99:58:0b:d6:97:d3:d6:82:7e:4a:2e:d7:ac: 65:e5:38:b4:a8:d5:31:7b:a8:3f:23:45:5e:f6:54:09:a0:d4: 37:c1:b3:1e:c0:18:53:2a:a2:f6:8e:73:3f:f7:56:dd:45:32: c4:17:b5:d8:a1:00:73:58:19:99:8a:74:c1:52:31:1f:e2:a7: 6a:0d:04:c5:99:37:2b:97:16:f8:cb:66:6e:59:1d:01:7c:a6: 4d:16:94:9c:63:fb:29:68:28:f1:3b:70:1d:bf:85:96:5d:0a: 1b:a7:43:35:06:5e:bd:e2:a8:c2:17:07:2f:c3:5c:91:f4:ca: db:b7:a4:91:9b:a5:05:df:b1:af:c9:e3:4a:b2:0a:dc:31:cf: d0:42:5c:0f:81:af:0c:d7:65:12:43:b9:43:1d:20:54:07:a7: 2d:ec:36:6a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUayFJuRen/U9ItWu8KiqNwZh8x5wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEzMjEwNjA3WhcNMjYwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTZhYzkyMmZmZTY4ZTQ3NjAzM2ZhNmM5ZGJkMzU3NTUy ZGEwNzhkMzc4NTIyOTNkYmI1ZGIyNzZhZjc0MzhlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpgFLSei/Venj6YwQXSdntheEn+jM9dtJsZ/JYk+sfZn9d G/xUtfbu+lELrt8OZk/vzrdMx1PP1c5wxnHLYLfnFKf4i7alLIXgtsWhYFOxfuyX xQ7JazQSMcdQp6ZCuOzwj9SLI34cSPwiLusIJ7bxzx00Y1LyQYfThLhfDzDIK8A7 a9naBdPlM6goK5MvPKKQ1Ey4v2IRo4aqbxCc4vkZSmaFqvjPR4BIqPcd9Q9bcvF9 FOjUsjmIzeunRiLmsuEHQFWJxRLWlwxltTZx2bZg2XY2vmcFewCdV+5ni9lCpFMv 01xcoZCR4zKkSsiBOHZT3gIDTV1pCZhLePe6bxzvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgoQP3JE6ddgGBY2FqocVFRg5AIwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ExMWUyMjViLTk4ZWQtNDQ5Yy1iN2E3LWQyYTE3YTc4MDNlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9hwAAwDQYJKoZIhvcNAQELBQADggEBABGedPkVSUo53uq6A4PA96RY qIMEwTCl6VNFItYZGw8NwQtjqhFdKGjzEI9cnDfbkpvRSfzgdSoHJjbjGCKEyC+p 1JlOLjCj4rI2ffEyBdHqTS0jl54d2itLrG29cwnqmVgL1pfT1oJ+Si7XrGXlOLSo 1TF7qD8jRV72VAmg1DfBsx7AGFMqovaOcz/3Vt1FMsQXtdihAHNYGZmKdMFSMR/i p2oNBMWZNyuXFvjLZm5ZHQF8pk0WlJxj+yloKPE7cB2/hZZdChunQzUGXr3iqMIX By/DXJH0ytu3pJGbpQXfsa/J40qyCtwxz9BCXA+BrwzXZRJDuUMdIFQHpy3sNmo= -----END CERTIFICATE-----Generated at Sun May 17 05:02:25 2026 by rpki-client