$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a21e2f3a-774f-49cf-933b-09a2486675c4.roa File: a21e2f3a-774f-49cf-933b-09a2486675c4.roa (raw, json) Hash identifier: 9QXJf4onbQUaquLm4MI3xPn+TaoK0S0elEHYkj2gR94= Subject key identifier: 7A:B1:29:F4:6A:53:36:6A:CE:C7:D6:BA:9A:3E:D5:3D:71:FC:3E:4D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 22AB31C0D37A9AAE891BE990CC3F5A0B7EA4AB47 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a21e2f3a-774f-49cf-933b-09a2486675c4.roa Signing time: Wed 13 May 2026 21:06:04 +0000 ROA not before: Wed 13 May 2026 21:06:04 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:80f4::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 18 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ab:31:c0:d3:7a:9a:ae:89:1b:e9:90:cc:3f:5a:0b:7e:a4:ab:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 21:06:04 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=e7347a65e5d315482ad1484f6cd462d4cf90c8167fe23bf9e65f7b023ed66096, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8c:31:e3:d5:50:e8:57:8c:05:e4:55:ef:a3: 55:d5:ee:fc:67:31:32:59:70:67:46:5e:f1:7c:a0: 65:8a:2b:e9:ef:e5:bc:4c:84:05:16:b8:9e:7b:65: 33:69:ad:05:a9:2b:46:2e:89:d9:48:a0:0d:3a:ea: b8:46:6a:f2:f9:16:3a:da:2a:81:e7:eb:21:da:60: 59:2b:54:58:db:6a:06:0f:01:2b:20:f3:b1:e6:1b: 24:b7:cd:16:db:c5:38:2c:92:37:bf:61:a1:23:97: d0:16:99:45:33:ba:d8:c7:b8:1c:05:c5:b9:a7:66: cd:4a:e5:9e:de:d1:ee:bf:c7:03:d6:31:86:02:5a: 2c:84:b5:55:ab:0b:63:1b:fb:15:db:81:aa:8c:40: 3d:5f:4b:a2:f5:21:89:1c:c0:6a:e1:9f:dd:e7:06: 91:1f:ef:1b:88:b4:6a:1b:50:02:f2:52:8c:cb:4f: b9:a0:04:ff:70:44:97:2d:c7:07:95:ab:01:d2:6b: b5:2f:b6:52:88:95:09:a3:18:56:5c:84:f5:6e:e4: 18:6e:f9:8a:76:4e:4f:80:2c:70:ca:71:f1:36:db: 1e:1f:56:c6:bb:ae:75:57:0d:00:6e:0d:8f:2f:bc: c7:a5:8d:61:f1:d4:8a:b9:cb:ae:99:c1:f0:d9:8a: 4e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B1:29:F4:6A:53:36:6A:CE:C7:D6:BA:9A:3E:D5:3D:71:FC:3E:4D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a21e2f3a-774f-49cf-933b-09a2486675c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:80f4::/46 Signature Algorithm: sha256WithRSAEncryption 44:c8:2d:c8:30:4c:ac:c2:48:bc:d4:50:09:7b:2f:e6:cf:65: a6:88:01:b0:55:7b:8e:aa:4f:ce:07:be:e8:db:48:70:4c:3d: 00:e4:c1:c8:13:98:f6:0e:73:54:db:60:e4:be:15:43:64:8e: f4:0c:6f:a1:f1:dd:cd:9c:21:ac:27:97:f9:2d:3a:83:96:23: 1e:d1:f9:71:8c:07:65:eb:5a:9c:cb:dc:65:b1:5d:a8:d6:87: 26:01:e5:d1:c3:85:9b:3c:ee:cc:7e:3a:e9:ef:1f:7f:d2:8d: da:0f:51:e5:9f:27:0e:c9:81:d0:77:f3:f7:cd:f0:19:44:02: 19:21:37:a2:cb:6f:26:48:e8:d9:ec:9b:ca:7c:3f:84:86:a0: 68:f5:ce:24:fd:8f:a9:43:ef:ec:b1:d1:50:87:bf:f4:3d:6a: 8b:7d:52:69:e0:8f:60:56:f6:7f:50:b0:d6:d9:23:55:65:98: dc:d3:74:ee:28:f2:c7:bb:dc:24:a2:f6:60:2f:bf:92:3f:8c: ba:41:0c:c8:c5:4f:b6:c5:95:de:7d:38:f2:99:3b:19:c2:fe: 52:fe:dc:bc:bc:0d:75:76:7b:0f:db:e2:8a:a4:c5:b6:6f:a5: 6a:00:ba:0b:92:b0:58:58:34:a8:42:d4:06:58:f9:cc:84:d3: 86:d6:1f:6a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIqsxwNN6mq6JG+mQzD9aC36kq0cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEzMjEwNjA0WhcNMjYwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNzM0N2E2NWU1ZDMxNTQ4MmFkMTQ4NGY2Y2Q0NjJkNGNm OTBjODE2N2ZlMjNiZjllNjVmN2IwMjNlZDY2MDk2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpjDHj1VDoV4wF5FXvo1XV7vxnMTJZcGdGXvF8oGWKK+nv 5bxMhAUWuJ57ZTNprQWpK0YuidlIoA066rhGavL5FjraKoHn6yHaYFkrVFjbagYP ASsg87HmGyS3zRbbxTgskje/YaEjl9AWmUUzutjHuBwFxbmnZs1K5Z7e0e6/xwPW MYYCWiyEtVWrC2Mb+xXbgaqMQD1fS6L1IYkcwGrhn93nBpEf7xuItGobUALyUozL T7mgBP9wRJctxweVqwHSa7UvtlKIlQmjGFZchPVu5Bhu+Yp2Tk+ALHDKcfE22x4f Vsa7rnVXDQBuDY8vvMeljWHx1Iq5y66ZwfDZik59AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUerEp9GpTNmrOx9a6mj7VPXH8Pk0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyMWUyZjNhLTc3NGYtNDljZi05MzNiLTA5YTI0ODY2NzVjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9hgPQwDQYJKoZIhvcNAQELBQADggEBAETILcgwTKzCSLzUUAl7L+bP ZaaIAbBVe46qT84HvujbSHBMPQDkwcgTmPYOc1TbYOS+FUNkjvQMb6Hx3c2cIawn l/ktOoOWIx7R+XGMB2XrWpzL3GWxXajWhyYB5dHDhZs87sx+OunvH3/SjdoPUeWf Jw7JgdB38/fN8BlEAhkhN6LLbyZI6Nnsm8p8P4SGoGj1ziT9j6lD7+yx0VCHv/Q9 aot9Umngj2BW9n9QsNbZI1VlmNzTdO4o8se73CSi9mAvv5I/jLpBDMjFT7bFld59 OPKZOxnC/lL+3Ly8DXV2ew/b4oqkxbZvpWoAuguSsFhYNKhC1AZY+cyE04bWH2o= -----END CERTIFICATE-----Generated at Sun May 17 05:02:46 2026 by rpki-client