$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/160933c3-b761-41a9-87a6-9e744a40b1ba.roa File: 160933c3-b761-41a9-87a6-9e744a40b1ba.roa (raw, json) Hash identifier: lCRcJmH02dT9SIpUR2o2HgWAonpgLf/irY6RxqD9DSM= Subject key identifier: 26:9A:D9:4C:4D:7F:89:EB:60:40:67:54:A0:F0:10:8E:7F:D7:70:7E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 31555C01D25EA59D9EFC2FE1DBCCF0D5C0C1FA7B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/160933c3-b761-41a9-87a6-9e744a40b1ba.roa Signing time: Sat 02 May 2026 01:20:04 +0000 ROA not before: Sat 02 May 2026 01:20:04 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:55:5c:01:d2:5e:a5:9d:9e:fc:2f:e1:db:cc:f0:d5:c0:c1:fa:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 01:20:04 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=4ebb1d6d5ce06e9724ee5f3549c2b1d88ca349f0433161ea01e64e5feec69a64, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:35:e5:98:b9:57:07:72:a3:8a:da:8e:2e:47: 03:f5:27:31:d9:ae:95:b5:01:c3:54:c6:e2:88:38: f7:51:7e:39:c0:91:0d:50:0c:73:18:35:d4:1f:05: be:9a:06:07:a5:e4:d6:ca:5f:d2:1c:23:41:4e:26: 14:fa:aa:23:3b:16:28:8c:7d:1d:a2:14:78:3c:14: 3f:f7:05:40:5c:3a:d0:4f:31:e0:9e:00:63:b8:68: 16:c4:48:aa:13:ff:cc:9c:52:d8:a0:9c:92:02:a9: 89:ba:ab:a1:30:37:e3:bd:cf:42:4a:d4:bc:ce:93: 09:9f:ec:e1:21:6a:9a:fb:bb:2b:ae:f4:cb:b7:ad: ab:4f:4d:e5:02:02:27:0d:ec:eb:6e:e4:0a:b8:dd: a1:a6:15:3c:7a:ee:bd:23:e2:dd:54:ca:10:f9:9d: a5:ac:71:e6:27:52:6b:46:8c:2c:03:c2:35:97:2e: d6:51:9e:c9:dd:8b:f4:58:71:11:80:ce:10:55:8d: 2c:de:4d:9b:a2:a2:23:06:78:4c:04:6d:2b:da:62: c2:e6:b7:6f:3e:91:7d:18:71:2f:06:c1:51:24:15: 64:11:d3:0d:57:69:6c:63:9b:7e:09:a1:6d:a4:28: ff:a6:86:8e:9e:f1:25:25:f2:45:35:f6:7a:52:53: a6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9A:D9:4C:4D:7F:89:EB:60:40:67:54:A0:F0:10:8E:7F:D7:70:7E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/160933c3-b761-41a9-87a6-9e744a40b1ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:1000::/40 Signature Algorithm: sha256WithRSAEncryption 18:fa:58:aa:55:6c:86:01:49:08:2b:85:63:cf:c0:91:72:29: e5:ae:30:37:1d:41:8a:b1:e7:be:07:54:06:99:93:48:ef:bf: 80:04:ba:da:ad:cd:49:a2:06:6e:a5:52:d3:cc:e5:48:a3:f2: 12:00:10:8c:c5:da:d9:bf:57:0e:1c:96:f0:3d:c3:37:f5:c1: 2b:1e:32:fa:9a:2c:9e:9f:09:f4:65:f6:6a:c0:83:01:a0:79: 3b:83:d1:bc:9f:c0:2a:9d:ad:8b:70:ea:81:e7:68:0f:dc:3d: cb:ec:6d:10:f0:8e:98:f6:43:20:17:10:50:2c:07:86:d6:ad: e7:2e:a1:ff:4b:3d:b8:01:79:83:ac:c3:a2:cb:9d:c5:23:73: 78:1a:f0:6a:cb:6a:2b:73:29:eb:80:0f:a0:91:d5:41:57:cc: 09:26:65:73:ae:07:fe:51:ff:ec:3d:ef:5c:ff:a7:62:b5:a9: 36:b4:76:1d:45:d8:1f:fc:46:75:3f:ef:ca:8d:72:96:1c:5b: de:ac:bf:be:ed:57:e0:ea:fe:5f:5b:f9:c7:f8:c5:ac:4a:b0: d1:f6:07:f5:4a:fe:d9:a4:53:39:95:bb:d6:43:08:72:17:85: f0:ac:30:f8:23:3b:2e:83:c2:87:a4:56:ea:63:26:40:ef:3d: e7:29:c8:55 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUMVVcAdJepZ2e/C/h28zw1cDB+nswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAyMDEyMDA0WhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZWJiMWQ2ZDVjZTA2ZTk3MjRlZTVmMzU0OWMyYjFkODhj YTM0OWYwNDMzMTYxZWEwMWU2NGU1ZmVlYzY5YTY0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrNeWYuVcHcqOK2o4uRwP1JzHZrpW1AcNUxuKIOPdRfjnA kQ1QDHMYNdQfBb6aBgel5NbKX9IcI0FOJhT6qiM7FiiMfR2iFHg8FD/3BUBcOtBP MeCeAGO4aBbESKoT/8ycUtignJICqYm6q6EwN+O9z0JK1LzOkwmf7OEhapr7uyuu 9Mu3ratPTeUCAicN7Otu5Aq43aGmFTx67r0j4t1UyhD5naWsceYnUmtGjCwDwjWX LtZRnsndi/RYcRGAzhBVjSzeTZuioiMGeEwEbSvaYsLmt28+kX0YcS8GwVEkFWQR 0w1XaWxjm34JoW2kKP+mho6e8SUl8kU19npSU6anAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUJprZTE1/ietgQGdUoPAQjn/XcH4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE2MDkzM2MzLWI3NjEtNDFhOS04N2E2LTllNzQ0YTQwYjFiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+4EDANBgkqhkiG9w0BAQsFAAOCAQEAGPpYqlVshgFJCCuFY8/AkXIp 5a4wNx1BirHnvgdUBpmTSO+/gAS62q3NSaIGbqVS08zlSKPyEgAQjMXa2b9XDhyW 8D3DN/XBKx4y+posnp8J9GX2asCDAaB5O4PRvJ/AKp2ti3DqgedoD9w9y+xtEPCO mPZDIBcQUCwHhtat5y6h/0s9uAF5g6zDosudxSNzeBrwastqK3Mp64APoJHVQVfM CSZlc64H/lH/7D3vXP+nYrWpNrR2HUXYH/xGdT/vyo1ylhxb3qy/vu1X4Or+X1v5 x/jFrEqw0fYH9Ur+2aRTOZW71kMIcheF8Kww+CM7LoPCh6RW6mMmQO895ynIVQ== -----END CERTIFICATE-----Generated at Sun May 3 14:46:44 2026 by rpki-client