$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b500c1c5-2bd3-45ba-a83b-279e0fae4a75.roa File: b500c1c5-2bd3-45ba-a83b-279e0fae4a75.roa (raw, json) Hash identifier: AJqG+AORs7ZiP4ICMpGBtfV7xFMHSO/RBMqM/OlVaHY= Subject key identifier: 9F:DE:0D:D8:7D:31:47:69:BB:ED:62:F8:4C:1A:6B:96:49:D8:5E:43 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5AF32F93F465C5A1982D43D76DAEFDB2B7F1D7C1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b500c1c5-2bd3-45ba-a83b-279e0fae4a75.roa Signing time: Wed 13 May 2026 21:07:42 +0000 ROA not before: Wed 13 May 2026 21:07:42 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:1000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 18 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f3:2f:93:f4:65:c5:a1:98:2d:43:d7:6d:ae:fd:b2:b7:f1:d7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 21:07:42 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=57845637de7abccb23dff9d5b75b9c1a361951024c72765a853be0e7aa74165d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:df:5c:39:30:a1:55:3b:d7:85:11:46:d5:ef: e0:1b:25:b9:96:ef:9c:e4:b0:8c:ab:f1:4a:a5:3a: 33:d9:d6:1b:0a:d8:84:c9:32:a6:7a:9b:8b:84:7c: 89:82:3d:f6:31:46:ab:8b:ea:1a:bf:f7:86:22:f4: 98:e8:fc:af:9c:dd:8d:02:33:90:14:0a:04:94:25: 9c:a5:30:c6:13:6d:6f:b7:6f:62:db:9f:dc:0a:ea: 63:81:40:d3:b2:4e:16:58:47:e7:7b:f6:ad:ea:88: e9:6b:9c:42:52:f9:d7:4a:58:f1:51:99:35:a0:67: 1c:c1:d2:a4:85:d0:e6:f7:38:54:d5:25:40:60:cd: 4b:84:fe:cc:86:f9:b8:5e:86:b5:b4:f6:16:20:77: d4:8a:fc:67:9a:9f:c0:3b:d3:9d:69:f3:1f:e0:b7: f7:8d:c2:7b:a1:4a:ef:21:1b:4e:7b:15:b2:88:5b: 90:9a:1e:66:2c:43:5d:af:b3:e4:cb:5e:8b:a7:17: 64:f2:9d:6a:73:85:3e:44:d0:5e:98:7c:dd:1d:33: ad:a1:75:ea:e4:9e:ab:c5:4c:64:c8:c4:a1:39:c7: 0e:56:03:f5:c8:9b:29:6f:0c:79:5b:73:70:e2:f4: 76:b9:70:57:b3:da:fe:b8:c7:ee:85:95:3d:f8:65: bb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DE:0D:D8:7D:31:47:69:BB:ED:62:F8:4C:1A:6B:96:49:D8:5E:43 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b500c1c5-2bd3-45ba-a83b-279e0fae4a75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:1000::/44 Signature Algorithm: sha256WithRSAEncryption 70:82:25:84:6f:12:89:6b:d3:d6:2b:f9:cb:50:d9:67:3a:7d: bc:63:5c:85:db:71:5a:a1:4b:64:11:89:ca:d8:72:60:d1:bf: 4a:03:e9:dd:d1:45:3a:71:5f:50:36:af:37:27:cf:28:87:7a: 3f:91:ae:da:d7:11:14:91:54:70:e6:45:63:6d:8f:ed:d1:ba: 72:c2:5f:83:32:e8:83:86:d8:e8:8b:4a:cb:db:5d:c4:19:3a: ec:ad:ca:c5:cf:0b:f4:fe:0e:09:cc:dc:12:38:c9:9f:4d:c7: c1:8d:9d:30:c6:1b:1e:03:22:a7:4d:65:af:fe:7a:90:a4:45: 79:76:c9:95:5d:5a:12:df:57:15:f2:91:4c:b0:05:47:39:db: 8d:74:3b:96:84:22:7a:42:20:18:bc:74:9e:df:f5:5d:83:e2: 22:a5:c7:d1:a8:3e:e0:c4:e3:a1:d5:6c:cc:ba:dc:9a:d0:7a: 53:f0:a4:a8:23:0a:ff:fb:f2:f6:3c:d7:94:d0:33:15:3a:42: f1:0d:a6:38:49:7d:54:cc:07:b7:70:8b:76:64:f7:e6:44:6e: 94:93:26:72:91:0d:be:cf:a6:d1:ad:47:37:3a:8b:28:76:c1: 00:1f:97:81:0e:e4:c0:6f:54:49:30:46:0a:ae:4a:e9:63:08: 60:40:a8:96 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWvMvk/RlxaGYLUPXba79srfx18EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEzMjEwNzQyWhcNMjYwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0A1Nzg0NTYzN2RlN2FiY2NiMjNkZmY5ZDViNzViOWMxYTM2 MTk1MTAyNGM3Mjc2NWE4NTNiZTBlN2FhNzQxNjVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx31w5MKFVO9eFEUbV7+AbJbmW75zksIyr8UqlOjPZ1hsK 2ITJMqZ6m4uEfImCPfYxRquL6hq/94Yi9Jjo/K+c3Y0CM5AUCgSUJZylMMYTbW+3 b2Lbn9wK6mOBQNOyThZYR+d79q3qiOlrnEJS+ddKWPFRmTWgZxzB0qSF0Ob3OFTV JUBgzUuE/syG+bhehrW09hYgd9SK/Gean8A7051p8x/gt/eNwnuhSu8hG057FbKI W5CaHmYsQ12vs+TLXounF2TynWpzhT5E0F6YfN0dM62hderknqvFTGTIxKE5xw5W A/XImylvDHlbc3Di9Ha5cFez2v64x+6FlT34Zbt9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUn94N2H0xR2m77WL4TBprlknYXkMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I1MDBjMWM1LTJiZDMtNDViYS1hODNiLTI3OWUwZmFlNGE3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAB9hEAAwDQYJKoZIhvcNAQELBQADggEBAHCCJYRvEolr09Yr+ctQ2Wc6 fbxjXIXbcVqhS2QRicrYcmDRv0oD6d3RRTpxX1A2rzcnzyiHej+RrtrXERSRVHDm RWNtj+3RunLCX4My6IOG2OiLSsvbXcQZOuytysXPC/T+DgnM3BI4yZ9Nx8GNnTDG Gx4DIqdNZa/+epCkRXl2yZVdWhLfVxXykUywBUc52410O5aEInpCIBi8dJ7f9V2D 4iKlx9GoPuDE46HVbMy63JrQelPwpKgjCv/78vY815TQMxU6QvENpjhJfVTMB7dw i3Zk9+ZEbpSTJnKRDb7PptGtRzc6iyh2wQAfl4EO5MBvVEkwRgquSuljCGBAqJY= -----END CERTIFICATE-----Generated at Sun May 17 05:02:24 2026 by rpki-client