$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7821898f-d5c0-464a-b040-f76ba08bb57f.roa File: 7821898f-d5c0-464a-b040-f76ba08bb57f.roa (raw, json) Hash identifier: Ig0OVIfqLJoTeh02MynWLeAtq+/Xxry8JqNbIIjH8X0= Subject key identifier: 8F:03:76:AF:95:43:A1:9E:41:17:79:62:02:97:D8:D7:4B:E3:F8:9F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3BD15B6C24E0796090C3BD4A0D8B18592AECB6A1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7821898f-d5c0-464a-b040-f76ba08bb57f.roa Signing time: Sat 02 May 2026 01:00:54 +0000 ROA not before: Sat 02 May 2026 01:00:54 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fea:8000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d1:5b:6c:24:e0:79:60:90:c3:bd:4a:0d:8b:18:59:2a:ec:b6:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 01:00:54 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=ef36ceec873d337861bc60436347c7a5a6e355215e9e3f1763d3dfd382759679, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:29:26:4d:2e:1a:c7:b8:9d:0a:48:a6:a9:79: d4:6c:5e:c6:b1:ae:50:75:9e:4e:cc:af:65:ac:ff: 52:82:03:1c:8a:10:3c:58:9b:3a:79:13:ea:72:9f: 23:af:20:1f:cf:49:cd:4b:c2:34:69:0a:6a:87:31: e1:29:09:76:f9:46:ca:09:36:36:3a:7d:fe:a9:78: bc:f5:25:f9:a9:b7:4c:e6:49:e8:42:0a:f1:cc:8c: b4:e7:58:05:26:4b:65:3a:cb:bc:c2:d3:0e:f7:4b: 3a:b2:24:36:9e:2f:3d:30:1f:f9:80:94:1a:f5:66: 0f:2d:3f:09:a8:cf:04:e1:0a:aa:53:13:47:d0:01: 0c:d7:6b:9f:04:8f:8c:45:e0:bc:dc:93:dc:3a:10: 29:5c:11:9a:79:1a:31:6e:11:27:2a:8c:25:4a:cb: 4e:92:15:93:71:14:f5:82:c8:09:bc:3f:27:74:43: f1:0f:94:57:d0:6f:80:66:bf:c9:24:b5:55:11:05: 00:33:2b:f7:99:9f:bc:98:d9:03:d5:44:b2:87:27: 52:e8:55:66:5b:26:a2:e4:03:b7:f2:ef:2c:3d:bf: fe:da:f2:57:bc:30:a6:ce:84:b3:f8:e3:d6:bd:a5: 74:31:39:66:cc:89:5e:91:71:65:46:fd:c9:e9:e6: f1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:03:76:AF:95:43:A1:9E:41:17:79:62:02:97:D8:D7:4B:E3:F8:9F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7821898f-d5c0-464a-b040-f76ba08bb57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea:8000::/39 Signature Algorithm: sha256WithRSAEncryption 89:36:0a:18:7d:6c:b5:38:c1:f6:f6:2d:8e:28:4a:4f:87:d2: 3c:aa:46:3d:96:80:6b:82:25:4a:ff:9c:2a:5d:e9:9b:e6:b7: 96:41:fa:9c:d5:21:1a:16:ea:45:d9:44:70:f5:b4:d8:c8:20: 18:b3:da:09:2d:eb:a8:09:1f:83:b7:1d:3e:ee:80:28:09:93: 93:51:fe:07:9b:97:59:12:bb:46:c4:6f:a8:37:31:a4:fb:e7: 7c:44:95:4e:60:1a:a9:2a:7b:a3:85:57:71:5a:7a:91:ee:c3: 3c:c7:3b:5e:9d:ba:8c:36:6d:23:06:4e:9a:3d:b6:fe:fe:50: fa:9f:6c:c0:5a:f9:59:c4:77:4e:74:61:79:0c:6e:57:d7:b2: 1b:16:ff:a1:77:8f:02:f0:c9:f3:aa:2d:b5:80:9f:2e:54:0e: ae:24:57:f0:5e:f9:5b:8f:7b:37:5b:80:6a:90:0c:3c:f3:b5: b7:6f:ae:ba:bf:a9:13:d8:f0:3f:2d:aa:ee:9b:fd:6d:21:36: 2e:85:7e:62:82:6f:89:e3:8e:7e:e8:ca:8a:51:0a:5c:34:88: 31:7b:c3:22:69:27:fd:0d:de:5d:d3:1d:d0:a6:73:a3:14:c9: 4e:78:b0:a2:e2:f4:5b:dc:60:d7:bf:f2:1f:85:41:17:bd:38: 87:ae:b8:ad -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUO9FbbCTgeWCQw71KDYsYWSrstqEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAyMDEwMDU0WhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjM2Y2VlYzg3M2QzMzc4NjFiYzYwNDM2MzQ3YzdhNWE2 ZTM1NTIxNWU5ZTNmMTc2M2QzZGZkMzgyNzU5Njc5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdKSZNLhrHuJ0KSKapedRsXsaxrlB1nk7Mr2Ws/1KCAxyK EDxYmzp5E+pynyOvIB/PSc1LwjRpCmqHMeEpCXb5RsoJNjY6ff6peLz1Jfmpt0zm SehCCvHMjLTnWAUmS2U6y7zC0w73SzqyJDaeLz0wH/mAlBr1Zg8tPwmozwThCqpT E0fQAQzXa58Ej4xF4Lzck9w6EClcEZp5GjFuEScqjCVKy06SFZNxFPWCyAm8Pyd0 Q/EPlFfQb4Bmv8kktVURBQAzK/eZn7yY2QPVRLKHJ1LoVWZbJqLkA7fy7yw9v/7a 8le8MKbOhLP449a9pXQxOWbMiV6RcWVG/cnp5vGVAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUjwN2r5VDoZ5BF3liApfY10vj+J8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4MjE4OThmLWQ1YzAtNDY0YS1iMDQwLWY3NmJhMDhiYjU3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/qgDANBgkqhkiG9w0BAQsFAAOCAQEAiTYKGH1stTjB9vYtjihKT4fS PKpGPZaAa4IlSv+cKl3pm+a3lkH6nNUhGhbqRdlEcPW02MggGLPaCS3rqAkfg7cd Pu6AKAmTk1H+B5uXWRK7RsRvqDcxpPvnfESVTmAaqSp7o4VXcVp6ke7DPMc7Xp26 jDZtIwZOmj22/v5Q+p9swFr5WcR3TnRheQxuV9eyGxb/oXePAvDJ86ottYCfLlQO riRX8F75W497N1uAapAMPPO1t2+uur+pE9jwPy2q7pv9bSE2LoV+YoJvieOOfujK ilEKXDSIMXvDImkn/Q3eXdMd0KZzoxTJTniwouL0W9xg17/yH4VBF704h664rQ== -----END CERTIFICATE-----Generated at Mon May 4 21:40:05 2026 by rpki-client