$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c035dfe-7e91-4935-b091-c83689b46906.roa File: 3c035dfe-7e91-4935-b091-c83689b46906.roa (raw, json) Hash identifier: wM0SgNV+Zzbad/rM7xxcwqilfZN7Te0qPrmRBy9YZG0= Subject key identifier: 36:50:EB:9B:D1:05:43:74:DA:A6:26:FA:09:BE:7E:1C:4D:56:15:D4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5BA5B5ED5BB2F23F548CFBDD5EC36D0637174D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c035dfe-7e91-4935-b091-c83689b46906.roa Signing time: Sat 02 May 2026 00:40:12 +0000 ROA not before: Sat 02 May 2026 00:40:12 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fea:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a5:b5:ed:5b:b2:f2:3f:54:8c:fb:dd:5e:c3:6d:06:37:17:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 00:40:12 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=ab3d69eff2284a147d5e25e8604decd7c6ed66765683543f8fbc97076c76383c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:49:bf:35:30:45:9f:25:c6:cd:31:32:32:de: fc:ac:f2:ff:dd:cb:e7:a5:69:07:86:11:08:ca:b8: 8a:03:fc:0a:b1:d5:34:a5:ed:77:63:87:ad:4f:03: 86:21:79:4f:48:96:88:9e:b9:f2:07:44:32:48:7f: da:8c:96:89:37:21:69:3c:7f:77:4f:70:03:58:83: 6b:f1:75:81:14:6a:a5:06:1f:af:76:50:cb:60:24: e6:d5:82:53:85:2f:21:41:18:bb:40:58:3a:72:7b: a0:2b:63:6c:d5:ab:b6:ff:38:cf:b5:24:1e:9c:8d: ec:d1:a4:ca:7d:23:7b:c5:70:e0:45:9e:28:31:a4: 43:6b:e1:96:86:f1:87:70:a2:4c:30:1d:d5:28:8f: e0:f2:dd:df:70:7c:00:98:b9:c9:fd:0f:ad:a5:00: 3d:d8:42:f3:89:20:16:88:54:0a:6c:e8:65:c9:b6: f5:24:53:4f:c4:be:2b:44:be:dd:70:73:15:ee:46: f6:aa:f2:b5:79:e3:a7:0d:76:ca:2c:b9:bb:82:89: 05:b7:72:90:c1:0e:0c:c5:5c:13:7f:dc:0e:15:a2: d3:43:71:bc:42:16:a6:49:5f:e1:a8:71:2a:8b:0d: de:4f:ca:1f:07:b0:65:f3:28:59:6f:98:fc:12:cd: 98:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:50:EB:9B:D1:05:43:74:DA:A6:26:FA:09:BE:7E:1C:4D:56:15:D4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c035dfe-7e91-4935-b091-c83689b46906.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea:5000::/40 Signature Algorithm: sha256WithRSAEncryption a6:23:68:f0:c5:7b:25:28:ab:0e:83:0e:f3:0c:bf:2d:2f:c8: c9:ef:9b:1b:5f:ee:f3:bd:dd:4f:6a:a2:64:fe:cf:dc:91:51: 1d:de:4e:42:e9:d1:52:96:8d:64:4b:92:a0:ef:20:34:00:d3: 35:37:68:ac:b2:8a:f4:f3:83:a4:bb:8c:2b:42:de:01:e7:7e: 41:c1:e3:10:65:30:02:33:17:59:c8:54:21:c5:b6:dd:9f:1c: bf:9c:d2:3a:2a:c1:a1:9f:72:55:85:c4:14:b8:94:39:2a:9a: 24:a7:af:61:80:ab:bd:2f:80:ef:44:45:b6:2a:30:12:c9:d6: a1:4f:d2:28:df:ce:1a:e8:29:b6:07:8f:e5:63:7f:83:46:f1: 70:12:50:24:fd:94:a4:51:12:ae:66:50:b3:cc:9b:40:af:ce: e7:21:94:37:3e:d7:0c:34:54:ca:da:3e:f5:e5:92:87:40:96: 84:f4:8c:09:99:ac:a7:03:1a:6f:b6:80:01:0c:3f:8e:4a:8b: 3f:d0:54:ff:94:3d:4f:ce:d2:54:4f:73:93:e7:f8:ac:95:58: a5:fa:de:3d:8f:68:3c:c1:a3:0c:4d:34:02:7a:a7:49:1e:f8: b3:2e:94:f2:67:64:55:64:27:38:b3:39:22:65:86:12:f4:b0: cc:17:ef:77 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgITW6W17Vuy8j9UjPvdXsNtBjcXTTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjA1MDIwMDQwMTJaFw0yNjA3MzEyMzU5NTla MHoxSTBHBgNVBAUTQGFiM2Q2OWVmZjIyODRhMTQ3ZDVlMjVlODYwNGRlY2Q3YzZl ZDY2NzY1NjgzNTQzZjhmYmM5NzA3NmM3NjM4M2MxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKdJvzUwRZ8lxs0xMjLe/Kzy/93L56VpB4YRCMq4igP8CrHV NKXtd2OHrU8DhiF5T0iWiJ658gdEMkh/2oyWiTchaTx/d09wA1iDa/F1gRRqpQYf r3ZQy2Ak5tWCU4UvIUEYu0BYOnJ7oCtjbNWrtv84z7UkHpyN7NGkyn0je8Vw4EWe KDGkQ2vhlobxh3CiTDAd1SiP4PLd33B8AJi5yf0PraUAPdhC84kgFohUCmzoZcm2 9SRTT8S+K0S+3XBzFe5G9qrytXnjpw12yiy5u4KJBbdykMEODMVcE3/cDhWi00Nx vEIWpklf4ahxKosN3k/KHwewZfMoWW+Y/BLNmF0CAwEAAaOCArMwggKvMB0GA1Ud DgQWBBQ2UOub0QVDdNqmJvoJvn4cTVYV1DAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvM2MwMzVkZmUtN2U5MS00OTM1LWIwOTEtYzgzNjg5YjQ2OTA2LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGACYAH+pQMA0GCSqGSIb3DQEBCwUAA4IBAQCmI2jwxXslKKsOgw7zDL8tL8jJ 75sbX+7zvd1PaqJk/s/ckVEd3k5C6dFSlo1kS5Kg7yA0ANM1N2issor084Oku4wr Qt4B535BweMQZTACMxdZyFQhxbbdnxy/nNI6KsGhn3JVhcQUuJQ5Kpokp69hgKu9 L4DvREW2KjASydahT9Io384a6Cm2B4/lY3+DRvFwElAk/ZSkURKuZlCzzJtAr87n IZQ3PtcMNFTK2j715ZKHQJaE9IwJmaynAxpvtoABDD+OSos/0FT/lD1PztJUT3OT 5/islVil+t49j2g8waMMTTQCeqdJHvizLpTyZ2RVZCc4szkiZYYS9LDMF+93 -----END CERTIFICATE-----Generated at Sun May 3 14:46:18 2026 by rpki-client