$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ae342fb-de66-464c-8f28-7b4773186fe8.roa File: 0ae342fb-de66-464c-8f28-7b4773186fe8.roa (raw, json) Hash identifier: tPh2Frn1QAwvE2CHrO8Ch128sJGL1WrouDlDG68jjTQ= Subject key identifier: 2A:E4:7C:9D:F6:27:0A:CC:2D:22:68:77:AB:59:15:4C:92:B4:AD:1E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F4ACF207D4377D59877CD6F6D2E19790FF9E2EB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ae342fb-de66-464c-8f28-7b4773186fe8.roa Signing time: Mon 04 May 2026 00:20:05 +0000 ROA not before: Mon 04 May 2026 00:20:05 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f12:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:4a:cf:20:7d:43:77:d5:98:77:cd:6f:6d:2e:19:79:0f:f9:e2:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 00:20:05 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=a6cc9123e29ce5d18e00e543c32961e9f25d8494be50df35a83f8f3293168361, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fe:e8:f8:0d:99:94:9d:ad:17:ef:02:96:9c: 77:c6:73:60:9c:51:8b:f4:4a:5d:dc:a7:f9:7c:fd: dc:70:b6:0c:ff:e1:45:27:68:de:32:e8:1d:25:20: 8b:55:44:d8:d3:60:83:1f:20:08:de:dc:9d:8a:10: 1a:90:17:d2:2f:46:18:7c:8d:13:82:f1:ba:17:a1: 61:1b:09:07:0b:72:40:dc:8d:9f:fa:5e:e5:0a:ed: 5d:99:90:83:63:b8:2d:55:88:13:1a:fb:16:a5:93: 22:15:7f:b2:ee:11:fe:00:98:65:5d:fc:44:ef:92: e6:92:04:e4:60:36:34:e4:93:30:ff:dc:4e:3d:5d: 2c:da:d6:43:aa:68:33:fa:c9:97:b9:15:fb:6c:1f: 0f:d4:e6:54:e6:6e:94:5c:4c:ee:8c:c8:7b:0e:3a: 08:ab:a6:67:77:9c:16:7b:6d:61:fc:15:b8:04:b8: 86:d6:32:43:3c:d4:0d:2c:78:8f:d5:2e:91:51:23: e3:52:80:b1:e2:0e:d5:65:27:8f:b1:8c:a1:4d:df: 97:79:14:83:fc:8e:f7:9c:ae:a9:43:78:2e:bd:c6: 32:96:cf:5d:60:fa:c4:38:1b:2f:40:4b:e7:bb:a4: 40:a7:59:31:9e:22:64:bf:b2:1f:1c:92:cb:3c:31: 5d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E4:7C:9D:F6:27:0A:CC:2D:22:68:77:AB:59:15:4C:92:B4:AD:1E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ae342fb-de66-464c-8f28-7b4773186fe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f12:c000::/36 Signature Algorithm: sha256WithRSAEncryption 87:e3:1f:77:22:69:58:83:46:50:ad:0f:c4:03:c7:59:d6:42: 26:d3:17:39:94:56:e2:fe:56:23:1d:50:0b:05:30:e8:00:64: 20:98:41:04:6a:85:61:10:f0:fa:13:0b:64:61:f3:cf:8b:5e: 5a:ea:0d:fc:e6:ce:6b:62:82:fb:88:f6:42:64:3b:cc:35:97: 7b:be:41:3c:ea:b8:ec:3e:0a:53:e3:b2:6b:2d:04:31:b1:3a: 70:29:eb:33:fa:b9:7b:ad:b7:13:73:d6:b6:52:c0:32:36:6c: 3c:b6:9b:96:2e:15:ed:05:9c:c4:63:fe:bc:2f:3b:be:03:74: 99:10:33:ec:23:22:d6:75:c9:52:6d:87:77:66:c7:6f:51:ec: ca:1c:18:7d:36:b9:2d:da:a7:e5:d1:f3:e3:ef:4e:b7:66:72: b1:e9:a8:c4:09:70:91:2c:f2:1e:1e:db:87:2f:a8:11:d9:39: b1:ca:d7:b6:cf:91:cc:f1:7a:d2:6b:48:26:94:ac:88:0c:b8: 72:85:11:c4:11:9b:38:c6:54:99:0e:fa:2e:6d:7e:da:0e:82: 00:52:bc:3b:01:50:4e:e7:f4:8c:06:82:f6:59:bd:da:43:7b: 4c:9a:ed:06:e8:c4:8a:e0:26:06:73:94:0c:db:7a:dc:c6:02: ce:e0:f3:59 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUD0rPIH1Dd9WYd81vbS4ZeQ/54uswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDAyMDA1WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNmNjOTEyM2UyOWNlNWQxOGUwMGU1NDNjMzI5NjFlOWYy NWQ4NDk0YmU1MGRmMzVhODNmOGYzMjkzMTY4MzYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCj/uj4DZmUna0X7wKWnHfGc2CcUYv0Sl3cp/l8/dxwtgz/ 4UUnaN4y6B0lIItVRNjTYIMfIAje3J2KEBqQF9IvRhh8jROC8boXoWEbCQcLckDc jZ/6XuUK7V2ZkINjuC1ViBMa+xalkyIVf7LuEf4AmGVd/ETvkuaSBORgNjTkkzD/ 3E49XSza1kOqaDP6yZe5FftsHw/U5lTmbpRcTO6MyHsOOgirpmd3nBZ7bWH8FbgE uIbWMkM81A0seI/VLpFRI+NSgLHiDtVlJ4+xjKFN35d5FIP8jvecrqlDeC69xjKW z11g+sQ4Gy9AS+e7pECnWTGeImS/sh8ckss8MV2/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUKuR8nfYnCswtImh3q1kVTJK0rR4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBhZTM0MmZiLWRlNjYtNDY0Yy04ZjI4LTdiNDc3MzE4NmZlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8SwDANBgkqhkiG9w0BAQsFAAOCAQEAh+MfdyJpWINGUK0PxAPHWdZC JtMXOZRW4v5WIx1QCwUw6ABkIJhBBGqFYRDw+hMLZGHzz4teWuoN/ObOa2KC+4j2 QmQ7zDWXe75BPOq47D4KU+Oyay0EMbE6cCnrM/q5e623E3PWtlLAMjZsPLabli4V 7QWcxGP+vC87vgN0mRAz7CMi1nXJUm2Hd2bHb1HsyhwYfTa5Ldqn5dHz4+9Ot2Zy semoxAlwkSzyHh7bhy+oEdk5scrXts+RzPF60mtIJpSsiAy4coURxBGbOMZUmQ76 Lm1+2g6CAFK8OwFQTuf0jAaC9lm92kN7TJrtBujEiuAmBnOUDNt63MYCzuDzWQ== -----END CERTIFICATE-----Generated at Mon May 4 21:39:36 2026 by rpki-client