$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e4270ce-d16a-440d-9bed-c361a878288d.roa File: 8e4270ce-d16a-440d-9bed-c361a878288d.roa (raw, json) Hash identifier: 0wKNKed9jYPFl1G55e4mVrJsq+rUbSHS4bGyf7m8Bak= Subject key identifier: BF:DB:88:AC:63:5B:44:13:22:52:69:34:A0:3F:4F:FD:35:B0:55:DD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 252B7C617B56309BFC39C016910DFD0F617BD32D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e4270ce-d16a-440d-9bed-c361a878288d.roa Signing time: Wed 13 May 2026 21:06:03 +0000 ROA not before: Wed 13 May 2026 21:06:03 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f61:80f0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:2b:7c:61:7b:56:30:9b:fc:39:c0:16:91:0d:fd:0f:61:7b:d3:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 21:06:03 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=a322ffaede0cb4bd752c8022b603bc2e193d042db89c17a4f9e832b10ebe2bfb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8e:44:78:b4:87:09:8e:85:20:4c:0c:6c:e1: e5:c8:0b:e7:b8:bb:95:4a:97:91:de:29:e2:96:77: ac:5a:2d:04:48:3a:8b:df:a8:1f:da:a7:fc:a3:e1: db:87:9f:5a:3a:b0:cd:2d:7f:9f:d4:00:a9:d7:35: 5c:2f:94:e2:e9:19:ff:2c:a8:f9:ce:25:b3:ef:46: 66:c8:d2:dc:5d:81:09:7e:16:f6:e8:83:00:41:3e: 50:d8:e4:f9:dc:9b:77:56:31:52:44:22:35:a7:4b: 93:6d:f5:23:a3:a2:e1:35:8c:ea:71:10:9f:e1:9f: 05:eb:ef:d9:64:5d:60:ab:00:6d:f7:9f:73:50:fd: 31:f9:cf:33:75:20:04:2b:6a:8a:ce:c1:ee:46:2c: 6d:21:22:83:15:03:12:c0:ec:92:f6:93:f5:50:86: 62:00:a2:0e:f9:f8:bb:c0:83:44:2c:f4:49:18:e9: 83:a5:93:75:f1:f1:85:bc:80:f7:3a:59:02:2a:59: 5f:13:6f:0e:13:4b:27:19:de:12:3f:54:6d:c5:7d: 73:83:ee:8f:22:03:e1:0a:b4:e2:42:d9:5c:fc:a1: cc:ff:ee:c5:6b:8f:35:21:e8:9c:b7:33:60:9a:38: 94:27:1b:d1:ff:fb:a1:3c:6a:ba:09:c3:40:5f:e5: 5e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DB:88:AC:63:5B:44:13:22:52:69:34:A0:3F:4F:FD:35:B0:55:DD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e4270ce-d16a-440d-9bed-c361a878288d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:80f0::/46 Signature Algorithm: sha256WithRSAEncryption af:d8:67:9f:c2:5d:b7:3f:81:e6:6d:3f:e8:e5:eb:2b:ea:6a: bc:7e:d1:3a:53:03:44:35:5c:29:5b:d4:d7:a8:36:ad:43:58: d3:1e:50:db:7e:17:88:e1:52:7b:97:45:a1:0a:b5:d0:f1:d2: 5c:be:c9:65:24:c4:82:4b:0d:fb:db:b1:94:3b:19:d6:1a:9b: 3d:1e:1a:82:7c:14:ad:80:7e:ac:da:06:17:38:72:f4:56:35: 29:57:fa:52:4b:64:9b:75:e8:84:fb:90:99:9e:48:71:47:1e: 52:ad:3c:8e:49:13:69:ed:cd:a8:ff:36:a9:eb:3e:f7:a0:a0: e7:b3:aa:41:bb:ac:86:68:3e:11:3d:39:b4:b3:28:cc:18:ae: 4c:f8:c8:cb:4c:6f:6b:68:77:5f:9f:59:1b:d5:c2:12:0d:41: 84:a0:e4:5b:2a:b3:9f:69:81:7c:c8:e6:55:8b:4d:e6:65:2c: 40:3b:61:49:4d:23:17:f5:e7:a4:dc:ce:aa:4e:a5:5c:52:90: 64:6a:0d:09:68:c0:7d:ce:8e:a9:c6:f0:a6:8b:5c:01:c9:fc: f9:46:94:75:12:e6:19:4a:22:8c:37:bf:80:13:7e:a0:f8:bf: f7:6f:69:3f:0d:79:8b:5e:e6:a3:59:0b:9b:7c:68:0d:e2:01: 80:ae:b2:87 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJSt8YXtWMJv8OcAWkQ39D2F70y0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEzMjEwNjAzWhcNMjYwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzIyZmZhZWRlMGNiNGJkNzUyYzgwMjJiNjAzYmMyZTE5 M2QwNDJkYjg5YzE3YTRmOWU4MzJiMTBlYmUyYmZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQjkR4tIcJjoUgTAxs4eXIC+e4u5VKl5HeKeKWd6xaLQRI OovfqB/ap/yj4duHn1o6sM0tf5/UAKnXNVwvlOLpGf8sqPnOJbPvRmbI0txdgQl+ FvbogwBBPlDY5Pncm3dWMVJEIjWnS5Nt9SOjouE1jOpxEJ/hnwXr79lkXWCrAG33 n3NQ/TH5zzN1IAQraorOwe5GLG0hIoMVAxLA7JL2k/VQhmIAog75+LvAg0Qs9EkY 6YOlk3Xx8YW8gPc6WQIqWV8Tbw4TSycZ3hI/VG3FfXOD7o8iA+EKtOJC2Vz8ocz/ 7sVrjzUh6Jy3M2CaOJQnG9H/+6E8aroJw0Bf5V7FAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUv9uIrGNbRBMiUmk0oD9P/TWwVd0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhlNDI3MGNlLWQxNmEtNDQwZC05YmVkLWMzNjFhODc4Mjg4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9hgPAwDQYJKoZIhvcNAQELBQADggEBAK/YZ5/CXbc/geZtP+jl6yvq arx+0TpTA0Q1XClb1NeoNq1DWNMeUNt+F4jhUnuXRaEKtdDx0ly+yWUkxIJLDfvb sZQ7GdYamz0eGoJ8FK2AfqzaBhc4cvRWNSlX+lJLZJt16IT7kJmeSHFHHlKtPI5J E2ntzaj/NqnrPvegoOezqkG7rIZoPhE9ObSzKMwYrkz4yMtMb2tod1+fWRvVwhIN QYSg5Fsqs59pgXzI5lWLTeZlLEA7YUlNIxf156TczqpOpVxSkGRqDQlowH3OjqnG 8KaLXAHJ/PlGlHUS5hlKIow3v4ATfqD4v/dvaT8NeYte5qNZC5t8aA3iAYCusoc= -----END CERTIFICATE-----Generated at Fri May 22 14:18:37 2026 by rpki-client