$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/907c2395-b661-4997-9c87-b20a9e615473.roa File: 907c2395-b661-4997-9c87-b20a9e615473.roa (raw, json) Hash identifier: vo5k5xuvJdzmblbQ2Vvf2kkcXf4wbcYrpAyEOxsWnTE= Subject key identifier: C4:92:BF:69:AC:8D:62:49:A3:72:BF:A2:C9:88:58:3A:10:B5:C7:C0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0CAF9E494E9546CCD6CF68D622852F992F942CDF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/907c2395-b661-4997-9c87-b20a9e615473.roa Signing time: Wed 29 Apr 2026 00:10:08 +0000 ROA not before: Wed 29 Apr 2026 00:10:08 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff1:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:af:9e:49:4e:95:46:cc:d6:cf:68:d6:22:85:2f:99:2f:94:2c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:10:08 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=0fd07207b79301c0bd8c4030a10b3b2bb30020b4f0c0bcefb30ed9746a3f94a8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3a:a7:fa:d8:de:7d:66:1b:74:35:d1:fc:ba: 16:b7:c5:98:0a:d8:f5:a1:c7:91:5a:27:9f:3b:5f: b6:b1:48:39:19:62:32:2c:07:68:5f:a6:24:1a:dc: 37:f2:8a:3b:18:e1:35:a2:a5:e5:94:d1:d7:92:09: fa:60:94:d0:0e:6a:b2:fe:d3:5b:4b:1f:00:a8:e2: ae:8a:76:96:60:40:fc:fc:cb:b5:b3:f9:17:b1:a0: c6:a0:7a:7a:98:6d:52:a8:94:0b:47:4e:ec:b3:ac: ec:c0:fc:5b:45:2b:74:24:79:ef:f8:9a:2f:72:62: e4:55:6c:74:d7:ae:d9:b3:04:70:8a:d8:5f:12:92: 98:14:b0:89:58:b8:27:09:41:98:52:73:4f:63:3f: 22:30:19:d1:bc:8e:46:28:6c:5b:f4:f8:aa:e5:68: 32:20:6a:ea:84:03:59:25:20:22:08:2e:df:49:b9: f1:a1:2b:06:06:38:fc:95:45:14:f0:41:1e:bb:ff: a8:fe:50:2c:96:d8:97:da:a1:7a:aa:36:49:9f:b0: a1:ce:af:4c:15:8c:aa:ef:e6:95:78:dc:33:9a:e0: 5d:b8:57:d3:a6:49:cc:72:6d:1e:f4:17:78:23:1e: a1:63:ac:ec:60:c7:23:e7:9e:fc:2b:24:cd:cd:8a: 9f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:92:BF:69:AC:8D:62:49:A3:72:BF:A2:C9:88:58:3A:10:B5:C7:C0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/907c2395-b661-4997-9c87-b20a9e615473.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff1:5000::/40 Signature Algorithm: sha256WithRSAEncryption b6:2e:06:f0:fa:1a:cb:21:73:58:b9:13:3c:ea:db:ae:32:5e: e8:89:34:0e:54:e9:9c:b3:c2:9f:13:84:0a:59:e8:45:98:6a: 60:0d:b0:ce:5b:28:ed:25:0d:22:e7:0c:a9:87:e6:04:6a:da: 1f:4f:4a:16:89:89:0e:a6:95:d0:f6:fe:61:db:f2:0f:fc:95: 51:d7:37:22:45:64:14:df:4b:d5:74:f7:83:1f:3f:65:6b:e8: 01:e8:f3:e0:af:8f:23:82:61:f8:e6:1d:da:a2:78:5a:a5:da: 08:3f:3e:4d:cc:d2:14:19:86:ed:ce:3a:39:c4:3b:64:6d:51: 2a:1e:d6:28:ad:7e:dc:0f:6e:31:bb:cc:16:82:85:26:6d:d6: 4e:ac:0b:90:55:be:31:ee:d1:60:c9:43:74:9e:5c:94:ea:65: b0:f3:ab:95:0a:5c:4e:01:0a:11:c6:f1:e8:ef:35:3d:41:1c: 3a:c7:58:8d:ab:1c:36:eb:ae:ef:ba:0a:ba:5c:67:04:5f:be: ed:26:eb:48:5a:a5:9b:7a:97:89:95:ca:8f:ab:37:9d:74:25: 47:67:11:8e:d6:29:b0:fc:76:59:92:18:a6:f8:7d:db:fc:b2: 64:33:13:ca:0c:4c:50:2c:6b:cf:cf:b2:a2:60:02:a1:c1:b0: d8:f1:6b:3a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUDK+eSU6VRszWz2jWIoUvmS+ULN8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDAxMDA4WhcNMjYwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZmQwNzIwN2I3OTMwMWMwYmQ4YzQwMzBhMTBiM2IyYmIz MDAyMGI0ZjBjMGJjZWZiMzBlZDk3NDZhM2Y5NGE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1Oqf62N59Zht0NdH8uha3xZgK2PWhx5FaJ587X7axSDkZ YjIsB2hfpiQa3DfyijsY4TWipeWU0deSCfpglNAOarL+01tLHwCo4q6KdpZgQPz8 y7Wz+RexoMagenqYbVKolAtHTuyzrOzA/FtFK3Qkee/4mi9yYuRVbHTXrtmzBHCK 2F8SkpgUsIlYuCcJQZhSc09jPyIwGdG8jkYobFv0+KrlaDIgauqEA1klICIILt9J ufGhKwYGOPyVRRTwQR67/6j+UCyW2JfaoXqqNkmfsKHOr0wVjKrv5pV43DOa4F24 V9OmScxybR70F3gjHqFjrOxgxyPnnvwrJM3Nip+zAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUxJK/aayNYkmjcr+iyYhYOhC1x8AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkwN2MyMzk1LWI2NjEtNDk5Ny05Yzg3LWIyMGE5ZTYxNTQ3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/xUDANBgkqhkiG9w0BAQsFAAOCAQEAti4G8PoayyFzWLkTPOrbrjJe 6Ik0DlTpnLPCnxOEClnoRZhqYA2wzlso7SUNIucMqYfmBGraH09KFomJDqaV0Pb+ YdvyD/yVUdc3IkVkFN9L1XT3gx8/ZWvoAejz4K+PI4Jh+OYd2qJ4WqXaCD8+TczS FBmG7c46OcQ7ZG1RKh7WKK1+3A9uMbvMFoKFJm3WTqwLkFW+Me7RYMlDdJ5clOpl sPOrlQpcTgEKEcbx6O81PUEcOsdYjascNuuu77oKulxnBF++7SbrSFqlm3qXiZXK j6s3nXQlR2cRjtYpsPx2WZIYpvh92/yyZDMTygxMUCxrz8+yomACocGw2PFrOg== -----END CERTIFICATE-----Generated at Sun May 3 15:34:21 2026 by rpki-client