$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/089a9530-fe26-4bbb-b150-6e821d16225e.roa File: 089a9530-fe26-4bbb-b150-6e821d16225e.roa (raw, json) Hash identifier: I1WzD5MU6XP9RxA7Nosyy04zx38j9TqzAfu9U6fhlGc= Subject key identifier: 0D:17:5D:81:1A:D4:59:FA:59:93:AC:F5:0F:86:F3:EE:D9:63:54:14 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3451C37103F049EF50D2415474438703368076B1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/089a9530-fe26-4bbb-b150-6e821d16225e.roa Signing time: Fri 15 May 2026 01:01:56 +0000 ROA not before: Fri 15 May 2026 01:01:56 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f38:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:51:c3:71:03:f0:49:ef:50:d2:41:54:74:43:87:03:36:80:76:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 01:01:56 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=e1345604d548585b70b0336b92a128f3ddd4040c05f08cd2865054f588344d19, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6f:bc:3c:55:c9:04:c8:f1:b7:68:b5:e4:ce: 19:16:3e:5a:82:56:83:bc:1b:1e:d8:56:38:3b:d4: 11:54:9d:f6:d5:6a:10:2d:f8:da:9a:3f:aa:76:75: 4f:3b:80:8e:cc:18:8c:04:87:77:dd:1e:79:97:7a: 73:5a:3d:d6:a1:0d:1a:bf:66:31:4b:42:37:ec:cb: d7:05:65:90:52:b1:d7:fa:af:d0:32:a6:b4:5b:5d: bf:fd:c7:43:bf:27:c2:65:05:e6:cf:e6:ac:c4:c5: d7:a9:11:2f:d4:b5:5b:80:21:a7:99:8e:23:5e:25: dd:b8:f3:8a:2d:67:a9:b3:4d:f8:8d:ea:11:62:77: 31:2e:6f:91:1f:b4:d5:00:ae:52:75:15:c2:3c:49: 48:fd:a9:96:a9:a9:03:79:c7:6c:fe:f4:b0:a4:c9: 70:80:26:3d:97:e0:38:1d:a2:18:ae:f4:a3:67:87: cc:8e:5f:9e:b6:d1:b6:ff:8a:70:7c:d3:81:5d:2b: d4:48:67:7e:a9:88:ff:56:df:f4:e2:60:4e:aa:96: f0:ca:0c:02:f9:a9:91:85:a4:d2:ab:d8:a1:06:11: b8:2b:6a:64:b5:7c:dc:57:6b:1b:59:0d:ac:21:8c: 68:82:09:73:6f:e5:c9:d0:12:89:0f:af:a2:72:94: a5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:17:5D:81:1A:D4:59:FA:59:93:AC:F5:0F:86:F3:EE:D9:63:54:14 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/089a9530-fe26-4bbb-b150-6e821d16225e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 50:02:85:9c:99:8a:12:15:27:e8:2d:4c:a3:c1:8a:62:b9:a6: d8:e3:b4:86:fd:f7:cb:70:84:9f:3c:b2:6c:31:dc:06:8b:9d: 07:87:6a:90:d7:74:b4:df:4f:02:8e:71:ec:87:60:12:d2:d5: 9c:52:28:06:ca:67:63:6e:b4:9b:cd:16:e4:ba:00:de:59:ef: 4b:d2:9e:d6:03:27:ee:1a:1a:02:22:8d:19:56:3a:e8:6b:80: fe:80:c1:70:dc:24:1a:2d:33:50:a1:a2:65:75:7c:ee:45:f4: a0:f0:6b:85:e9:19:83:49:3d:dd:31:fe:30:02:3a:c8:54:80: a6:86:3a:d8:0a:0b:a1:29:fd:c3:15:dd:41:86:ee:c6:8c:fd: 78:f7:02:ee:57:53:2b:8c:de:3d:9f:c3:4a:ef:79:a4:0b:9c: 96:f8:29:1b:bb:b6:77:23:a6:f3:9c:26:50:7b:3c:29:94:17: 3e:d5:88:15:15:ea:75:a3:8d:84:50:b4:d6:19:6d:07:dc:2b: 1d:de:ae:1d:95:5d:90:c4:19:7f:81:8e:1a:0d:80:ee:5b:03: d6:ce:ad:fc:45:92:81:6f:0b:cd:22:5f:df:60:47:3c:79:ae: b0:11:65:f9:64:6f:53:27:2d:c4:f7:ed:d9:39:2c:bc:6f:95: dc:af:73:b4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNFHDcQPwSe9Q0kFUdEOHAzaAdrEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDEwMTU2WhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTM0NTYwNGQ1NDg1ODViNzBiMDMzNmI5MmExMjhmM2Rk ZDQwNDBjMDVmMDhjZDI4NjUwNTRmNTg4MzQ0ZDE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCCb7w8VckEyPG3aLXkzhkWPlqCVoO8Gx7YVjg71BFUnfbV ahAt+NqaP6p2dU87gI7MGIwEh3fdHnmXenNaPdahDRq/ZjFLQjfsy9cFZZBSsdf6 r9AyprRbXb/9x0O/J8JlBebP5qzExdepES/UtVuAIaeZjiNeJd2484otZ6mzTfiN 6hFidzEub5EftNUArlJ1FcI8SUj9qZapqQN5x2z+9LCkyXCAJj2X4Dgdohiu9KNn h8yOX5620bb/inB804FdK9RIZ36piP9W3/TiYE6qlvDKDAL5qZGFpNKr2KEGEbgr amS1fNxXaxtZDawhjGiCCXNv5cnQEokPr6JylKVnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDRddgRrUWfpZk6z1D4bz7tljVBQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA4OWE5NTMwLWZlMjYtNGJiYi1iMTUwLTZlODIxZDE2MjI1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84gMAwDQYJKoZIhvcNAQELBQADggEBAFAChZyZihIVJ+gtTKPBimK5 ptjjtIb998twhJ88smwx3AaLnQeHapDXdLTfTwKOceyHYBLS1ZxSKAbKZ2NutJvN FuS6AN5Z70vSntYDJ+4aGgIijRlWOuhrgP6AwXDcJBotM1ChomV1fO5F9KDwa4Xp GYNJPd0x/jACOshUgKaGOtgKC6Ep/cMV3UGG7saM/Xj3Au5XUyuM3j2fw0rveaQL nJb4KRu7tncjpvOcJlB7PCmUFz7ViBUV6nWjjYRQtNYZbQfcKx3erh2VXZDEGX+B jhoNgO5bA9bOrfxFkoFvC80iX99gRzx5rrARZflkb1MnLcT37dk5LLxvldyvc7Q= -----END CERTIFICATE-----Generated at Fri May 22 14:19:44 2026 by rpki-client