$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82d434d3-74fc-47a3-89ec-ed37a23ae562.roa File: 82d434d3-74fc-47a3-89ec-ed37a23ae562.roa (raw, json) Hash identifier: 3Z1w+VLahjwTfAYszgZnzg1MVi4YfXu5qkehKtN9zHw= Subject key identifier: E3:D5:58:D1:73:F6:A0:B0:E9:99:E3:8A:2C:75:4F:70:66:1E:F2:2C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 04571F1BFB147DF816068C32EC0A972BEDD08B73 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82d434d3-74fc-47a3-89ec-ed37a23ae562.roa Signing time: Fri 01 May 2026 00:40:11 +0000 ROA not before: Fri 01 May 2026 00:40:11 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f22:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:57:1f:1b:fb:14:7d:f8:16:06:8c:32:ec:0a:97:2b:ed:d0:8b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 1 00:40:11 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=d4c36a164ff109592e2788e55f382e6fc99f992a2b0519dddb14497167f7006c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b7:2f:cc:a3:b1:33:d0:46:d0:70:b1:56:00: bf:d2:20:14:bd:d3:e2:0e:3a:46:f3:4e:bc:b7:00: a5:93:c3:61:8a:2b:49:36:06:71:54:24:eb:b1:ed: 26:29:d2:13:7b:22:4c:51:a3:6a:38:3f:23:62:1a: 6f:97:18:0a:4b:98:18:a3:76:91:83:e0:f8:55:54: 0c:60:70:a1:bf:eb:91:0f:77:f9:35:8a:63:a4:5f: e2:9c:c3:f6:96:36:c1:c0:c9:76:71:4d:17:6b:74: 4d:bf:2c:1f:7c:ee:4f:44:77:22:53:c5:05:9d:fe: a7:5c:5b:1c:15:ba:d2:cd:41:05:9d:ac:d4:d4:9a: 32:a3:df:65:af:22:eb:a9:96:9d:5c:ab:30:15:02: 62:e9:f2:67:3a:cf:37:a7:da:f9:69:db:f2:8b:07: be:31:d7:01:e9:6b:1a:02:b4:28:da:bd:79:75:a5: e1:a4:ae:f7:5b:96:0e:b4:a1:25:2d:9f:af:74:08: 1b:10:5c:ac:52:a4:f3:6a:fc:67:68:b7:1f:4b:6c: bd:7b:9b:a5:74:9f:36:e8:41:b4:da:b7:7e:d2:df: e7:cd:89:f1:47:5d:a8:1e:96:1f:82:6b:5c:27:4e: 36:62:91:26:dd:fe:46:51:98:57:ac:fc:72:94:c9: 43:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D5:58:D1:73:F6:A0:B0:E9:99:E3:8A:2C:75:4F:70:66:1E:F2:2C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82d434d3-74fc-47a3-89ec-ed37a23ae562.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f22:8000::/36 Signature Algorithm: sha256WithRSAEncryption 2a:2e:c1:a0:1e:f5:aa:c4:0f:a7:61:10:37:73:94:f2:a2:41: 93:c6:55:92:5b:96:ff:c9:45:e1:ed:cf:f0:72:f5:ca:fa:1c: 9f:34:0d:07:bc:fa:29:8d:ce:a6:42:f6:a8:ba:66:83:56:2b: 53:29:61:01:65:ea:f2:54:34:a3:c1:c4:4d:dd:7d:a6:b0:e3: 2f:98:7e:f4:cd:d1:38:80:84:45:04:b8:6b:82:db:85:3a:58: 97:9e:c0:6e:00:26:ed:5e:57:21:16:79:ee:61:c1:79:37:bc: 2f:80:b4:9e:8f:cd:57:df:82:71:73:a9:9f:08:46:8b:86:8b: 92:70:95:28:ff:c0:39:29:45:71:77:3f:55:da:38:03:ce:81: f3:a5:45:68:b1:b0:d9:29:39:f9:5f:d8:f5:8d:5b:92:fc:f2: 3c:8c:6f:31:15:ea:53:d0:ed:fe:d3:b0:d1:e5:9a:3e:95:a0: 08:ba:40:d3:27:b8:57:71:9a:b6:98:f3:83:40:db:1e:61:69: 64:22:bf:a7:03:04:c3:7b:c0:82:02:d8:51:a1:43:59:e6:92: 9a:17:c6:95:18:62:56:d3:a1:36:7d:96:1a:80:b0:45:03:d2: 8e:ec:0e:97:0d:6d:b2:01:b9:3a:c0:b8:26:51:63:49:64:09: 53:8f:20:58 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBFcfG/sUffgWBowy7AqXK+3Qi3MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDA0MDExWhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGMzNmExNjRmZjEwOTU5MmUyNzg4ZTU1ZjM4MmU2ZmM5 OWY5OTJhMmIwNTE5ZGRkYjE0NDk3MTY3ZjcwMDZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkty/Mo7Ez0EbQcLFWAL/SIBS90+IOOkbzTry3AKWTw2GK K0k2BnFUJOux7SYp0hN7IkxRo2o4PyNiGm+XGApLmBijdpGD4PhVVAxgcKG/65EP d/k1imOkX+Kcw/aWNsHAyXZxTRdrdE2/LB987k9EdyJTxQWd/qdcWxwVutLNQQWd rNTUmjKj32WvIuuplp1cqzAVAmLp8mc6zzen2vlp2/KLB74x1wHpaxoCtCjavXl1 peGkrvdblg60oSUtn690CBsQXKxSpPNq/Gdotx9LbL17m6V0nzboQbTat37S3+fN ifFHXagelh+Ca1wnTjZikSbd/kZRmFes/HKUyUOdAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU49VY0XP2oLDpmeOKLHVPcGYe8iwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgyZDQzNGQzLTc0ZmMtNDdhMy04OWVjLWVkMzdhMjNhZTU2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8igDANBgkqhkiG9w0BAQsFAAOCAQEAKi7BoB71qsQPp2EQN3OU8qJB k8ZVkluW/8lF4e3P8HL1yvocnzQNB7z6KY3OpkL2qLpmg1YrUylhAWXq8lQ0o8HE Td19prDjL5h+9M3ROICERQS4a4LbhTpYl57AbgAm7V5XIRZ57mHBeTe8L4C0no/N V9+CcXOpnwhGi4aLknCVKP/AOSlFcXc/Vdo4A86B86VFaLGw2Sk5+V/Y9Y1bkvzy PIxvMRXqU9Dt/tOw0eWaPpWgCLpA0ye4V3Gatpjzg0DbHmFpZCK/pwMEw3vAggLY UaFDWeaSmhfGlRhiVtOhNn2WGoCwRQPSjuwOlw1tsgG5OsC4JlFjSWQJU48gWA== -----END CERTIFICATE-----Generated at Sun May 3 14:50:19 2026 by rpki-client