$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6695e343-ce55-46e6-be0a-3fb2feddac24.roa File: 6695e343-ce55-46e6-be0a-3fb2feddac24.roa (raw, json) Hash identifier: cmfOcCxJI9iNR352HXOISdlVXFdAV6AcHBDK2fTTt5I= Subject key identifier: A5:28:DF:7E:E5:57:72:26:75:61:5D:92:1E:8F:60:C5:74:AA:9D:A4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0CB1261992FF29563C20534557B9A64C8154CD72 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6695e343-ce55-46e6-be0a-3fb2feddac24.roa Signing time: Sat 02 May 2026 01:01:30 +0000 ROA not before: Sat 02 May 2026 01:01:30 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fea:8090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b1:26:19:92:ff:29:56:3c:20:53:45:57:b9:a6:4c:81:54:cd:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 01:01:30 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=66b5005da51b0f14f4b52bf8ed37a70b468510de3f1616fc46629165bf0a01ba, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:70:be:80:00:df:14:1c:32:df:00:ea:9c:71: b5:5d:f8:0e:6d:ab:f1:56:be:bc:7c:9d:61:68:d6: 86:20:f5:84:02:30:a0:02:c0:89:40:9d:ae:2c:de: 7b:9b:2d:a3:fb:df:b7:07:42:d6:a0:c5:0f:04:57: 88:99:c2:2a:c9:a9:1f:70:d3:87:e7:2d:fe:60:91: 11:1c:4a:8f:4b:27:7a:8d:7b:c3:03:88:74:41:6c: 4e:44:0a:05:c3:30:26:53:16:38:fe:d4:48:08:25: 5a:10:ce:5b:30:59:e5:8e:9f:ce:18:73:c2:5b:d6: 60:67:f3:d5:03:58:38:13:9a:90:43:45:a4:4e:51: d2:2e:2c:3b:00:f0:5d:ef:4a:57:c6:3a:c2:d5:8c: 2d:54:d2:3d:39:54:6d:e1:f4:0c:f6:94:61:a2:7b: be:9b:23:1b:59:93:32:48:5a:97:84:33:67:af:d9: f0:ab:ff:b0:39:db:e1:93:11:f7:bb:1a:2a:d1:f5: ad:e7:a0:c9:a0:66:a4:fc:76:95:61:8a:9c:25:07: db:c5:62:0b:79:cc:a6:e7:ec:f6:18:d9:b3:a5:d8: 03:34:2b:6d:02:a0:8c:84:93:16:de:32:d8:f0:bc: 72:ee:2b:6e:84:54:e8:66:a6:65:ac:7a:07:46:09: b2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:28:DF:7E:E5:57:72:26:75:61:5D:92:1E:8F:60:C5:74:AA:9D:A4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6695e343-ce55-46e6-be0a-3fb2feddac24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea:8090::/48 Signature Algorithm: sha256WithRSAEncryption 3a:e6:04:79:b8:15:13:c1:59:58:1b:10:44:ad:4e:d7:8b:a9: ff:cb:9a:08:7b:9e:41:2e:9d:c7:a8:49:17:c9:a7:75:e2:84: 5e:dc:7c:3f:d8:15:d4:49:85:01:56:52:3e:5c:96:e6:30:42: 15:e1:85:70:6f:ef:88:4f:d6:29:68:84:4b:66:0b:10:c5:7c: 7d:ad:11:2c:49:f3:24:89:e5:d7:53:4e:61:0b:57:d5:26:51: e0:2f:87:48:51:52:d1:dc:c3:a0:79:95:a8:75:f6:a4:07:5d: ca:19:1c:1a:dd:53:40:62:93:c1:b1:91:63:4a:e6:40:ac:32: 86:83:ad:08:e2:bc:b4:e9:fa:12:b1:ea:da:28:9f:d7:e6:15: 86:fa:7c:5f:dd:c5:bf:1c:83:9c:2e:c4:da:b4:9d:72:1f:8e: 05:a9:0e:2b:02:20:78:c3:eb:89:93:fd:dd:34:1b:1f:77:a3: ad:56:d0:06:f6:f2:c0:aa:68:9f:eb:07:5b:69:41:6d:b0:65: b4:52:de:e9:7c:e5:be:84:f7:f2:89:98:e1:58:c6:60:af:bb: 4a:4a:36:c8:c7:a9:0f:fc:44:7c:4f:df:57:3b:fa:ce:e3:b4: 0a:22:76:f2:f0:7c:f9:8b:2f:32:29:ef:fb:af:69:5b:cc:0c: ea:ec:ba:c6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDLEmGZL/KVY8IFNFV7mmTIFUzXIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAyMDEwMTMwWhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NmI1MDA1ZGE1MWIwZjE0ZjRiNTJiZjhlZDM3YTcwYjQ2 ODUxMGRlM2YxNjE2ZmM0NjYyOTE2NWJmMGEwMWJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCccL6AAN8UHDLfAOqccbVd+A5tq/FWvrx8nWFo1oYg9YQC MKACwIlAna4s3nubLaP737cHQtagxQ8EV4iZwirJqR9w04fnLf5gkREcSo9LJ3qN e8MDiHRBbE5ECgXDMCZTFjj+1EgIJVoQzlswWeWOn84Yc8Jb1mBn89UDWDgTmpBD RaROUdIuLDsA8F3vSlfGOsLVjC1U0j05VG3h9Az2lGGie76bIxtZkzJIWpeEM2ev 2fCr/7A52+GTEfe7GirR9a3noMmgZqT8dpVhipwlB9vFYgt5zKbn7PYY2bOl2AM0 K20CoIyEkxbeMtjwvHLuK26EVOhmpmWsegdGCbLBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpSjffuVXciZ1YV2SHo9gxXSqnaQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY2OTVlMzQzLWNlNTUtNDZlNi1iZTBhLTNmYjJmZWRkYWMyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/qgJAwDQYJKoZIhvcNAQELBQADggEBADrmBHm4FRPBWVgbEEStTteL qf/Lmgh7nkEunceoSRfJp3XihF7cfD/YFdRJhQFWUj5cluYwQhXhhXBv74hP1ilo hEtmCxDFfH2tESxJ8ySJ5ddTTmELV9UmUeAvh0hRUtHcw6B5lah19qQHXcoZHBrd U0Bik8GxkWNK5kCsMoaDrQjivLTp+hKx6toon9fmFYb6fF/dxb8cg5wuxNq0nXIf jgWpDisCIHjD64mT/d00Gx93o61W0Ab28sCqaJ/rB1tpQW2wZbRS3ul85b6E9/KJ mOFYxmCvu0pKNsjHqQ/8RHxP31c7+s7jtAoidvLwfPmLLzIp7/uvaVvMDOrsusY= -----END CERTIFICATE-----Generated at Sun May 3 14:46:05 2026 by rpki-client