$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c14546f-f38c-431d-9be7-a4ffe6127ae5.roa File: 4c14546f-f38c-431d-9be7-a4ffe6127ae5.roa (raw, json) Hash identifier: EzKPH15Co8TCAIMT7HvZYB8gLJCj9x3gvPFSlyi0tEo= Subject key identifier: BC:14:BF:B5:C7:0E:0A:79:9F:FF:D3:0B:69:BB:CB:9B:18:9D:B8:8B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1458DD5E54241EF39935B806258028A973658C80 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c14546f-f38c-431d-9be7-a4ffe6127ae5.roa Signing time: Fri 01 May 2026 00:30:14 +0000 ROA not before: Fri 01 May 2026 00:30:14 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff8:a400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:58:dd:5e:54:24:1e:f3:99:35:b8:06:25:80:28:a9:73:65:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 1 00:30:14 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=d6f6e028942b5c90c7ecb72c300d8c08aafe4f69ab9a49b748e2fb0b86ab9f3a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ae:15:40:97:60:5f:c6:cf:05:49:c7:a3:2c: 16:8e:6c:a2:32:e5:28:6f:01:57:2b:cb:b5:5e:76: b5:26:81:d6:cd:42:c6:41:a8:b2:78:14:17:2e:45: a9:64:f6:f7:70:2c:b8:ec:4b:e2:e1:85:34:9f:0a: 4b:7b:87:b0:cd:b9:b2:87:33:ed:9d:04:41:9d:ca: b9:d3:23:9d:43:33:67:ba:c7:42:67:7b:1e:c3:e6: 3d:4a:b8:74:be:41:bb:33:c6:27:32:7b:3b:b9:8e: a3:3b:7a:8f:13:53:b4:e1:10:2f:a3:5f:d9:e3:6f: d1:e6:28:98:1e:b9:56:67:09:15:9c:9b:af:19:a0: 7c:af:92:17:81:0d:5c:45:ea:7c:39:20:77:79:90: 96:ed:32:46:6a:93:b7:06:db:d8:6d:7f:05:04:c6: cc:4b:cf:f4:38:e1:09:75:78:4a:7d:df:bc:09:1a: 65:cd:2d:df:7a:7c:c3:e2:ac:07:ca:f6:de:b4:52: 14:f5:67:fa:39:8e:dc:b2:d8:16:c9:a4:2f:19:5b: c3:a4:59:08:d3:ed:42:b4:b3:63:72:58:b4:b8:f9: ca:9d:9c:4d:28:b9:b8:cb:ee:53:66:cb:5f:ff:ce: af:02:81:fb:11:8e:2c:38:df:7e:57:72:70:18:de: ab:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:14:BF:B5:C7:0E:0A:79:9F:FF:D3:0B:69:BB:CB:9B:18:9D:B8:8B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c14546f-f38c-431d-9be7-a4ffe6127ae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff8:a400::/40 Signature Algorithm: sha256WithRSAEncryption ab:b5:92:a7:e0:a0:30:38:aa:45:8a:0a:1f:94:6d:f9:44:c7: ec:2d:ea:c9:39:3e:3c:91:91:f4:8c:5f:e7:0f:4e:11:15:bd: a0:52:0d:51:36:77:80:d4:a8:27:c1:b2:e2:a9:64:f6:71:f4: 82:82:dc:67:9b:72:1e:58:10:2f:bd:53:7a:ef:6a:90:00:af: d4:7f:79:55:29:57:38:62:16:d8:5d:26:d7:2d:cc:cf:86:b5: 29:76:c6:a4:0b:73:ef:5e:40:8c:93:92:99:e7:a1:a3:33:96: 78:d8:27:ce:cd:e0:02:26:0d:42:6e:41:7c:67:4f:25:35:66: b1:94:ce:b1:a4:b7:71:78:1d:da:4c:fd:4c:b9:5a:3a:40:67: ab:b3:80:95:45:0b:07:a6:18:2f:2a:6a:cb:a5:be:a9:d0:65: 6d:e2:f4:ed:79:a4:51:c7:cb:e5:80:d9:24:92:9c:27:78:ca: 3a:bd:9e:6e:80:f5:68:33:e5:82:90:fc:5a:9d:e4:40:ae:83: df:18:27:0c:fd:32:7e:ad:7f:e6:bc:22:37:10:8d:3c:a9:ed: 20:48:43:df:a8:d8:38:1d:a6:9b:d1:03:aa:28:70:07:71:43: 77:e8:14:59:41:46:1b:16:ce:22:d4:d5:f9:87:f8:2e:b9:db: 62:74:80:fc -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFFjdXlQkHvOZNbgGJYAoqXNljIAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDAzMDE0WhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNmY2ZTAyODk0MmI1YzkwYzdlY2I3MmMzMDBkOGMwOGFh ZmU0ZjY5YWI5YTQ5Yjc0OGUyZmIwYjg2YWI5ZjNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCprhVAl2Bfxs8FScejLBaObKIy5ShvAVcry7VedrUmgdbN QsZBqLJ4FBcuRalk9vdwLLjsS+LhhTSfCkt7h7DNubKHM+2dBEGdyrnTI51DM2e6 x0Jnex7D5j1KuHS+Qbszxicyezu5jqM7eo8TU7ThEC+jX9njb9HmKJgeuVZnCRWc m68ZoHyvkheBDVxF6nw5IHd5kJbtMkZqk7cG29htfwUExsxLz/Q44Ql1eEp937wJ GmXNLd96fMPirAfK9t60UhT1Z/o5jtyy2BbJpC8ZW8OkWQjT7UK0s2NyWLS4+cqd nE0oubjL7lNmy1//zq8CgfsRjiw4335XcnAY3qvPAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUvBS/tccOCnmf/9MLabvLmxiduIswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjMTQ1NDZmLWYzOGMtNDMxZC05YmU3LWE0ZmZlNjEyN2FlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/4pDANBgkqhkiG9w0BAQsFAAOCAQEAq7WSp+CgMDiqRYoKH5Rt+UTH 7C3qyTk+PJGR9Ixf5w9OERW9oFINUTZ3gNSoJ8Gy4qlk9nH0goLcZ5tyHlgQL71T eu9qkACv1H95VSlXOGIW2F0m1y3Mz4a1KXbGpAtz715AjJOSmeehozOWeNgnzs3g AiYNQm5BfGdPJTVmsZTOsaS3cXgd2kz9TLlaOkBnq7OAlUULB6YYLypqy6W+qdBl beL07XmkUcfL5YDZJJKcJ3jKOr2eboD1aDPlgpD8Wp3kQK6D3xgnDP0yfq1/5rwi NxCNPKntIEhD36jYOB2mm9EDqihwB3FDd+gUWUFGGxbOItTV+Yf4LrnbYnSA/A== -----END CERTIFICATE-----Generated at Sun May 3 14:47:17 2026 by rpki-client