$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9351f214-2425-4b5a-b4c3-873ed288ebfe.roa File: 9351f214-2425-4b5a-b4c3-873ed288ebfe.roa (raw, json) Hash identifier: YLP8PppdZGV4deZjX/q9MdgePjyaXZ2ZuUup8Li4gnw= Subject key identifier: 2B:E6:8D:12:3B:90:74:3B:DA:3F:CA:48:1D:2F:D4:74:41:98:16:95 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6AC31691F1982EF6ADB68BA0B176A716904B77EB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9351f214-2425-4b5a-b4c3-873ed288ebfe.roa Signing time: Sat 02 May 2026 01:00:53 +0000 ROA not before: Sat 02 May 2026 01:00:53 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fea:3440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c3:16:91:f1:98:2e:f6:ad:b6:8b:a0:b1:76:a7:16:90:4b:77:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 01:00:53 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=2b673e610eb6f57ef10daf5253f6858c7ab11fa87a86bd07ffd9cc0569b3e2ce, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d1:13:fe:7f:18:b8:db:c6:2d:30:cd:be:34: 05:ab:0d:6c:e2:26:80:5e:d7:f0:0e:4e:57:38:4b: a2:4b:50:1a:cd:60:e9:ef:7a:5f:d0:52:1f:3b:5a: 32:9f:56:db:1d:fd:00:74:bc:d0:5e:63:90:72:74: f2:1b:75:90:1f:d8:18:fc:af:60:36:41:7b:b7:02: 3e:aa:1a:02:bd:61:97:df:55:69:9d:26:43:3a:a8: 56:38:ca:eb:ea:fa:c5:54:a7:33:be:f2:c7:66:f2: af:06:8b:c8:fe:49:e3:65:0c:d6:2b:b5:3f:45:1b: 7f:84:30:89:0d:fa:e9:7f:d2:69:67:15:c7:df:93: cc:c3:43:db:5d:28:03:f8:01:7e:13:76:42:3d:7e: b1:89:60:ba:99:c8:f3:0d:9a:99:a8:8e:fb:bd:e3: 26:1e:bb:4b:4c:e4:06:8f:22:df:5c:1b:f5:98:bf: 6b:9e:74:53:88:cc:03:9d:e5:71:9b:56:12:f7:c0: d7:85:ac:71:30:45:a5:45:f1:8e:81:12:58:84:1d: 8b:a9:75:c4:e8:30:74:45:4d:04:42:a4:f5:8e:12: 4f:c3:ba:4a:60:41:9c:aa:3d:17:b7:1a:f2:c1:f0: bc:27:3a:51:87:d1:06:d9:96:09:1e:7e:bf:77:e2: 42:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E6:8D:12:3B:90:74:3B:DA:3F:CA:48:1D:2F:D4:74:41:98:16:95 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9351f214-2425-4b5a-b4c3-873ed288ebfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea:3440::/48 Signature Algorithm: sha256WithRSAEncryption 4f:f8:5e:c6:80:f7:6b:74:42:85:d6:f8:bf:84:b5:ea:60:1d: ef:c6:b1:9b:10:ff:e3:e3:c3:70:d2:10:94:e4:64:31:06:94: 4c:83:75:81:6d:a9:f3:2f:13:36:c0:8d:07:c0:cb:44:2b:ea: 99:ed:2a:10:48:4a:6b:1b:e1:39:f6:7c:b8:17:10:e9:42:38: 4b:cc:7b:7c:5c:4f:f6:cb:2c:aa:5f:4b:70:1c:10:64:e8:86: 44:21:0b:13:c4:17:6c:4e:87:e8:3c:10:ff:77:f9:91:07:3c: 39:9b:ae:4e:d8:ac:8f:55:58:90:0c:53:06:88:0c:5f:bf:79: 54:a6:a0:8b:36:67:4a:f2:9b:0b:3b:fb:f6:d5:c3:b2:5a:2c: 32:b8:26:12:41:c5:83:93:c9:f0:7b:6c:c6:1a:45:47:71:02: e9:d6:ab:4a:d5:e4:aa:dd:9b:cc:2e:21:51:c1:0f:79:ce:6f: 08:e7:76:ed:65:73:03:03:33:69:f2:e0:79:a1:32:b0:1c:07: dc:eb:fb:ff:e6:dc:39:bb:28:3e:a5:b5:12:f2:ba:c1:76:d7: 8d:00:25:99:7b:52:67:d3:01:6a:bf:be:eb:4d:a2:9e:e4:cf: 18:1d:54:18:9b:c8:9a:20:49:1c:36:46:81:5c:30:12:46:2a: 51:86:2d:ec -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUasMWkfGYLvattougsXanFpBLd+swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAyMDEwMDUzWhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjY3M2U2MTBlYjZmNTdlZjEwZGFmNTI1M2Y2ODU4Yzdh YjExZmE4N2E4NmJkMDdmZmQ5Y2MwNTY5YjNlMmNlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCa0RP+fxi428YtMM2+NAWrDWziJoBe1/AOTlc4S6JLUBrN YOnvel/QUh87WjKfVtsd/QB0vNBeY5BydPIbdZAf2Bj8r2A2QXu3Aj6qGgK9YZff VWmdJkM6qFY4yuvq+sVUpzO+8sdm8q8Gi8j+SeNlDNYrtT9FG3+EMIkN+ul/0mln Fcffk8zDQ9tdKAP4AX4TdkI9frGJYLqZyPMNmpmojvu94yYeu0tM5AaPIt9cG/WY v2uedFOIzAOd5XGbVhL3wNeFrHEwRaVF8Y6BEliEHYupdcToMHRFTQRCpPWOEk/D ukpgQZyqPRe3GvLB8LwnOlGH0QbZlgkefr934kJTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUK+aNEjuQdDvaP8pIHS/UdEGYFpUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkzNTFmMjE0LTI0MjUtNGI1YS1iNGMzLTg3M2VkMjg4ZWJmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/qNEAwDQYJKoZIhvcNAQELBQADggEBAE/4XsaA92t0QoXW+L+Etepg He/GsZsQ/+Pjw3DSEJTkZDEGlEyDdYFtqfMvEzbAjQfAy0Qr6pntKhBISmsb4Tn2 fLgXEOlCOEvMe3xcT/bLLKpfS3AcEGTohkQhCxPEF2xOh+g8EP93+ZEHPDmbrk7Y rI9VWJAMUwaIDF+/eVSmoIs2Z0rymws7+/bVw7JaLDK4JhJBxYOTyfB7bMYaRUdx AunWq0rV5Krdm8wuIVHBD3nObwjndu1lcwMDM2ny4HmhMrAcB9zr+//m3Dm7KD6l tRLyusF2140AJZl7UmfTAWq/vutNop7kzxgdVBibyJogSRw2RoFcMBJGKlGGLew= -----END CERTIFICATE-----Generated at Sun May 3 15:30:00 2026 by rpki-client