$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/147ea439-a960-45b9-ac1e-0861693fd665.roa File: 147ea439-a960-45b9-ac1e-0861693fd665.roa (raw, json) Hash identifier: hMErUO5Ez0f7r68olF5ORJbXOra22i69zmYd4uFskY4= Subject key identifier: C8:31:63:E4:E1:DF:EF:0D:42:F0:43:63:21:89:A5:1A:FE:0A:CF:20 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 75D54BCAA0CEB41A47ADD5B17FA2D18F8176AF2C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/147ea439-a960-45b9-ac1e-0861693fd665.roa Signing time: Wed 13 May 2026 21:06:00 +0000 ROA not before: Wed 13 May 2026 21:06:00 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f61:8008::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d5:4b:ca:a0:ce:b4:1a:47:ad:d5:b1:7f:a2:d1:8f:81:76:af:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 21:06:00 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=9b59e909e740245fc3c195fa67dc59e4ebddbbb47da77c532185b192ad004356, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:71:19:61:d3:74:cf:4a:03:1e:2d:e7:5e:0e: 1b:ce:d4:2d:ff:9b:df:63:10:6e:75:18:cb:b9:d2: 4d:f1:bd:98:2d:69:bb:90:7a:86:ac:e2:8a:ef:20: 98:5c:97:3c:f3:14:54:90:f4:bd:66:7e:b5:93:75: 52:57:ab:b8:dd:90:53:00:ce:1a:42:58:be:6d:ee: 63:ca:98:ce:ac:5b:51:e2:41:d6:17:a3:35:98:d5: cb:33:37:83:fc:0a:19:d7:11:13:83:81:b9:76:f7: 3c:db:69:8e:70:9c:e9:5e:0f:e9:70:c3:6f:44:58: 5d:54:9e:46:a8:c4:12:52:33:a7:24:f9:e0:d1:32: 94:77:a4:9c:d1:ab:81:71:45:71:24:ae:22:28:f1: 4a:b8:95:8c:a9:f4:01:24:33:ca:ba:bd:3b:d5:af: 79:65:64:4e:90:a4:e5:2f:31:13:90:a8:b7:02:58: cd:a5:65:68:b8:3b:48:f3:78:69:e0:5f:c2:6b:ef: 0b:1c:5e:32:22:fd:eb:54:03:df:e7:46:80:f9:19: 8c:be:36:5c:54:ad:d6:90:ad:fe:fd:5d:0e:24:0c: 15:54:77:76:b9:8d:ae:96:15:ed:fa:1b:96:a8:4b: ae:e5:11:17:ba:d0:85:94:88:ec:2d:93:5e:f1:27: dd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:31:63:E4:E1:DF:EF:0D:42:F0:43:63:21:89:A5:1A:FE:0A:CF:20 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/147ea439-a960-45b9-ac1e-0861693fd665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:8008::/46 Signature Algorithm: sha256WithRSAEncryption 05:1c:66:ea:71:f3:f2:90:f8:e0:d4:49:7e:47:5f:92:25:de: 25:6b:76:3e:50:89:d9:0a:45:68:d5:e2:d1:13:dc:da:b3:23: 89:c7:ce:49:57:98:e6:f5:b1:1f:4e:63:7f:35:dc:73:a9:8f: a5:88:0a:f5:2b:71:3b:b2:4d:1c:36:b8:8b:3e:6d:41:d0:27: 14:b6:3b:ac:8c:81:82:d7:29:41:79:5f:52:57:8b:c6:05:bf: a5:a2:6d:cd:22:c9:e5:39:af:24:08:54:70:14:51:e1:4a:8f: 26:29:56:b2:ce:87:35:19:0d:5f:e7:73:ed:34:c3:8c:95:c1: 8b:10:7d:77:4b:c9:00:cb:3d:42:62:25:20:f7:75:2a:37:dc: 0c:91:1e:2d:4f:0c:f0:4e:fa:72:32:5c:22:3e:d3:8a:38:dd: 7a:ba:0c:4a:d7:be:9d:1f:ae:f9:5a:99:dc:d3:2b:ff:66:22: b7:51:7b:f3:d3:21:51:50:46:c4:b3:fe:df:83:d9:a0:18:3f: 87:9e:b8:0d:9a:da:86:c5:3f:ba:25:b0:57:51:c7:a7:38:50: 14:06:70:1a:b3:f3:50:50:89:3f:8e:51:9a:25:be:99:d2:b4: 22:3d:3f:fd:a3:df:4e:47:b3:79:fe:72:3a:c0:3b:1e:41:ea: bb:e4:2c:0b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUddVLyqDOtBpHrdWxf6LRj4F2rywwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEzMjEwNjAwWhcNMjYwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YjU5ZTkwOWU3NDAyNDVmYzNjMTk1ZmE2N2RjNTllNGVi ZGRiYmI0N2RhNzdjNTMyMTg1YjE5MmFkMDA0MzU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4cRlh03TPSgMeLedeDhvO1C3/m99jEG51GMu50k3xvZgt abuQeoas4orvIJhclzzzFFSQ9L1mfrWTdVJXq7jdkFMAzhpCWL5t7mPKmM6sW1Hi QdYXozWY1cszN4P8ChnXERODgbl29zzbaY5wnOleD+lww29EWF1UnkaoxBJSM6ck +eDRMpR3pJzRq4FxRXEkriIo8Uq4lYyp9AEkM8q6vTvVr3llZE6QpOUvMROQqLcC WM2lZWi4O0jzeGngX8Jr7wscXjIi/etUA9/nRoD5GYy+NlxUrdaQrf79XQ4kDBVU d3a5ja6WFe36G5aoS67lERe60IWUiOwtk17xJ90VAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyDFj5OHf7w1C8ENjIYmlGv4KzyAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE0N2VhNDM5LWE5NjAtNDViOS1hYzFlLTA4NjE2OTNmZDY2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9hgAgwDQYJKoZIhvcNAQELBQADggEBAAUcZupx8/KQ+ODUSX5HX5Il 3iVrdj5QidkKRWjV4tET3NqzI4nHzklXmOb1sR9OY3813HOpj6WICvUrcTuyTRw2 uIs+bUHQJxS2O6yMgYLXKUF5X1JXi8YFv6Wibc0iyeU5ryQIVHAUUeFKjyYpVrLO hzUZDV/nc+00w4yVwYsQfXdLyQDLPUJiJSD3dSo33AyRHi1PDPBO+nIyXCI+04o4 3Xq6DErXvp0frvlamdzTK/9mIrdRe/PTIVFQRsSz/t+D2aAYP4eeuA2a2obFP7ol sFdRx6c4UBQGcBqz81BQiT+OUZolvpnStCI9P/2j305Hs3n+cjrAOx5B6rvkLAs= -----END CERTIFICATE-----Generated at Fri May 22 14:18:37 2026 by rpki-client