$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e85b1bf-8016-42cc-8783-728df4462db7.roa File: 8e85b1bf-8016-42cc-8783-728df4462db7.roa (raw, json) Hash identifier: DaysjFz/eskZgNV0u8e/zBPh+6a3P+iihkHdL5RJtnc= Subject key identifier: EF:1D:44:3B:99:C6:35:9D:71:FB:BD:FD:60:38:A3:38:23:C7:E8:AC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3856413489461013697D3055CB57F4099D18E9F6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e85b1bf-8016-42cc-8783-728df4462db7.roa Signing time: Sat 02 May 2026 00:50:48 +0000 ROA not before: Sat 02 May 2026 00:50:48 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff3:4000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:56:41:34:89:46:10:13:69:7d:30:55:cb:57:f4:09:9d:18:e9:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 00:50:48 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=86cad70a11643852d7fe4428f4e6cfe2199de4e925414f57a2dc26e447e45fc8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:73:ec:8f:54:06:ba:42:af:c7:38:a4:5a: e7:f1:ee:0c:fc:19:0c:e6:d7:7a:25:4b:f9:dd:f9: 15:96:5d:31:84:81:4e:89:4e:dd:cf:7b:78:2c:66: ef:8e:54:21:fb:88:01:5e:e7:8d:62:18:88:fa:53: 4e:97:7f:5f:81:8d:42:bb:7e:75:e5:1a:b0:d0:de: b1:45:de:fc:03:3b:87:4c:3b:ad:6e:f8:e9:08:cd: e9:a4:68:63:d8:eb:f4:66:54:71:6f:47:04:30:f3: 91:91:68:9a:8d:da:cd:af:dd:28:9a:43:3f:77:ad: 19:cc:f1:58:dc:b0:66:71:3c:e4:b2:a8:b7:b3:fe: 93:ff:fe:b8:de:b9:0c:22:37:02:95:9d:7e:33:8a: 49:cf:5b:1b:47:0c:e8:13:b8:72:de:29:c7:19:43: 58:fb:0d:49:d2:11:98:40:37:0c:ca:5e:da:84:87: 7d:24:20:96:95:cc:2b:7c:a6:e5:35:b3:57:c8:d7: 20:5c:d8:55:ec:39:46:3d:51:5f:5a:65:8d:0a:b8: f2:81:5f:73:64:03:3e:e1:25:36:62:47:58:25:52: 72:fd:3e:af:95:b9:3f:fd:16:d5:b1:d8:49:e0:f2: f9:f0:1a:b3:96:ab:ad:a3:fa:e9:9d:09:30:5c:79: db:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1D:44:3B:99:C6:35:9D:71:FB:BD:FD:60:38:A3:38:23:C7:E8:AC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e85b1bf-8016-42cc-8783-728df4462db7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:4000::/39 Signature Algorithm: sha256WithRSAEncryption c4:30:61:e6:83:83:7f:46:5f:52:f8:a4:91:8d:a5:50:b4:68: 5b:99:a7:9f:89:9d:b6:eb:bd:12:15:06:80:af:bb:2a:47:ab: 1f:b0:99:90:3d:5a:f4:56:87:cf:b4:40:a7:7c:db:f9:1f:71: 87:61:52:1f:b7:57:c5:4b:9b:2f:c9:0a:93:f7:dd:ae:a7:56: 31:bc:2b:15:f8:b5:a5:6f:0b:a0:5f:05:1b:46:a2:f3:3f:ac: 76:a7:f3:b8:66:69:52:b6:eb:39:80:7c:6b:26:50:fe:51:88: bb:c3:e1:e2:65:69:90:26:f3:a8:f0:d0:34:2f:33:38:ef:54: 55:12:0e:07:61:50:a7:5e:12:26:fc:b9:4c:4b:77:ae:d2:69: 82:d0:73:07:ec:eb:bc:7b:ff:45:74:3c:24:21:0c:68:9e:97: 8a:bb:55:1d:00:fc:40:73:ce:bd:05:83:5c:bd:c7:21:88:f5: 51:a1:ef:cd:70:d3:6d:13:ca:88:da:64:d2:b6:de:b5:4d:ab: 31:6d:39:81:ca:07:a5:17:1a:8e:09:8a:53:80:c1:81:0e:c3: eb:20:28:22:ae:59:f5:e4:3b:b8:26:06:0d:b3:75:f4:66:da: 32:d8:52:81:51:2e:d7:7d:45:57:83:2b:f2:c8:35:d8:21:6c: 5a:a2:4b:68 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOFZBNIlGEBNpfTBVy1f0CZ0Y6fYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAyMDA1MDQ4WhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NmNhZDcwYTExNjQzODUyZDdmZTQ0MjhmNGU2Y2ZlMjE5 OWRlNGU5MjU0MTRmNTdhMmRjMjZlNDQ3ZTQ1ZmM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyFHPsj1QGukKvxzikWufx7gz8GQzm13olS/nd+RWWXTGE gU6JTt3Pe3gsZu+OVCH7iAFe541iGIj6U06Xf1+BjUK7fnXlGrDQ3rFF3vwDO4dM O61u+OkIzemkaGPY6/RmVHFvRwQw85GRaJqN2s2v3SiaQz93rRnM8VjcsGZxPOSy qLez/pP//rjeuQwiNwKVnX4ziknPWxtHDOgTuHLeKccZQ1j7DUnSEZhANwzKXtqE h30kIJaVzCt8puU1s1fI1yBc2FXsOUY9UV9aZY0KuPKBX3NkAz7hJTZiR1glUnL9 Pq+VuT/9FtWx2Eng8vnwGrOWq62j+umdCTBcedsJAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU7x1EO5nGNZ1x+739YDijOCPH6KwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhlODViMWJmLTgwMTYtNDJjYy04NzgzLTcyOGRmNDQ2MmRiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/zQDANBgkqhkiG9w0BAQsFAAOCAQEAxDBh5oODf0ZfUvikkY2lULRo W5mnn4mdtuu9EhUGgK+7KkerH7CZkD1a9FaHz7RAp3zb+R9xh2FSH7dXxUubL8kK k/fdrqdWMbwrFfi1pW8LoF8FG0ai8z+sdqfzuGZpUrbrOYB8ayZQ/lGIu8Ph4mVp kCbzqPDQNC8zOO9UVRIOB2FQp14SJvy5TEt3rtJpgtBzB+zrvHv/RXQ8JCEMaJ6X irtVHQD8QHPOvQWDXL3HIYj1UaHvzXDTbRPKiNpk0rbetU2rMW05gcoHpRcajgmK U4DBgQ7D6yAoIq5Z9eQ7uCYGDbN19GbaMthSgVEu131FV4Mr8sg12CFsWqJLaA== -----END CERTIFICATE-----Generated at Mon May 4 21:38:59 2026 by rpki-client