$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9355f99b-88eb-4905-a2f8-3d8bfdfabde2.roa File: 9355f99b-88eb-4905-a2f8-3d8bfdfabde2.roa (raw, json) Hash identifier: 5LGWrF/8q/tfnWG/J5nyq6VALTUcq1VJaDQLGdr6bMs= Subject key identifier: 50:FA:AE:E2:AC:78:75:5B:5F:43:A8:89:76:7C:BA:94:A5:C7:87:9A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B29CB704974BE411161DDEF1FBA70761EE6217D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9355f99b-88eb-4905-a2f8-3d8bfdfabde2.roa Signing time: Wed 13 May 2026 21:02:31 +0000 ROA not before: Wed 13 May 2026 21:02:31 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f61:8090::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:29:cb:70:49:74:be:41:11:61:dd:ef:1f:ba:70:76:1e:e6:21:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 21:02:31 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=237c1040c090e4272fe7d94066d3303f83e178a4037cee82788b9c482e8f21fd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ac:b7:68:a9:16:6c:e1:95:76:7f:69:92:ba: 55:a6:c7:2e:81:2a:a2:3a:7b:b9:94:b1:c4:51:e4: 12:cc:16:db:f8:e7:fd:c5:8a:b8:16:92:6c:eb:e7: 65:9f:27:05:8c:7e:ef:d1:21:98:b2:f7:8a:23:3c: be:dd:96:3c:78:0a:fb:2f:77:75:d6:87:6a:aa:2e: 9a:75:43:a4:f1:0a:ea:ef:79:eb:7c:b2:26:0a:6e: f4:c9:35:be:89:d2:c5:7f:61:91:8b:d5:c9:0e:f7: 7c:64:d9:2e:fc:02:6d:e0:8f:e9:eb:88:db:12:03: d7:b6:92:34:25:b9:de:ce:6c:b7:27:a4:a5:1a:e3: 98:12:ed:48:3c:a0:c3:28:c0:5b:56:74:0f:a6:2f: 5f:e6:9e:e5:7b:13:7c:2c:71:65:4e:68:f2:13:cf: b8:71:be:da:ae:93:d8:08:2a:d1:02:d7:25:c5:8f: 79:83:5b:b9:7e:e5:a4:ea:bf:a7:a6:2a:62:1f:e5: bc:0c:65:dd:ac:3a:6d:d5:b7:dd:44:e9:20:92:09: f3:f1:03:8b:10:4f:fc:1b:ee:23:b3:ba:83:60:03: 87:99:9d:66:e6:18:bd:be:7e:d3:a8:5b:1c:fa:7c: 45:ae:07:f3:e5:6c:c4:13:48:06:c4:c6:9e:6d:83: b1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:FA:AE:E2:AC:78:75:5B:5F:43:A8:89:76:7C:BA:94:A5:C7:87:9A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9355f99b-88eb-4905-a2f8-3d8bfdfabde2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:8090::/44 Signature Algorithm: sha256WithRSAEncryption 27:9c:91:45:51:26:dd:ad:0d:e6:fe:0a:56:c7:d8:36:52:2d: da:56:57:bc:44:47:32:d9:6a:2c:30:d9:0e:ed:34:85:47:14: 6c:95:95:8d:7d:c0:26:12:b0:f6:07:8a:97:b5:70:bf:58:58: 39:f6:2d:f7:a7:a8:fb:68:14:c5:aa:10:04:49:de:45:d1:7b: b2:ca:ce:73:4b:20:8d:16:d2:c3:a2:d4:70:04:e3:ec:fa:ca: 99:97:bc:0a:49:68:7d:eb:5a:7d:a7:58:03:b1:3e:ac:5c:d2: 1c:37:da:5f:ad:19:76:35:37:6b:a7:24:b1:15:5e:cc:57:9f: 12:5c:a4:37:c7:9a:bc:dd:a3:a2:8b:96:6f:bf:31:47:bb:12: 1f:a0:70:60:3b:d0:7f:06:74:16:84:7e:01:30:37:14:10:2a: 74:aa:45:0b:6b:78:f3:3f:fe:a8:b5:b4:5d:0c:6f:1a:8d:9e: d3:ad:d6:5a:3d:9b:99:13:73:3e:db:57:ec:f0:10:e0:91:cb: fd:de:4f:ab:bc:03:a1:71:2b:47:e9:5a:8a:f3:6c:6a:08:5a: 03:72:c5:d2:e2:dd:e0:da:c8:ff:ee:24:3d:29:d5:09:81:45: 3d:34:89:2a:e8:8b:37:5c:ef:30:54:1b:72:3c:11:2d:53:ee: e1:ce:ec:c4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOynLcEl0vkERYd3vH7pwdh7mIX0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEzMjEwMjMxWhcNMjYwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzdjMTA0MGMwOTBlNDI3MmZlN2Q5NDA2NmQzMzAzZjgz ZTE3OGE0MDM3Y2VlODI3ODhiOWM0ODJlOGYyMWZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZrLdoqRZs4ZV2f2mSulWmxy6BKqI6e7mUscRR5BLMFtv4 5/3FirgWkmzr52WfJwWMfu/RIZiy94ojPL7dljx4Cvsvd3XWh2qqLpp1Q6TxCurv eet8siYKbvTJNb6J0sV/YZGL1ckO93xk2S78Am3gj+nriNsSA9e2kjQlud7ObLcn pKUa45gS7Ug8oMMowFtWdA+mL1/mnuV7E3wscWVOaPITz7hxvtquk9gIKtEC1yXF j3mDW7l+5aTqv6emKmIf5bwMZd2sOm3Vt91E6SCSCfPxA4sQT/wb7iOzuoNgA4eZ nWbmGL2+ftOoWxz6fEWuB/PlbMQTSAbExp5tg7FvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUPqu4qx4dVtfQ6iJdny6lKXHh5owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkzNTVmOTliLTg4ZWItNDkwNS1hMmY4LTNkOGJmZGZhYmRlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAB9hgJAwDQYJKoZIhvcNAQELBQADggEBACeckUVRJt2tDeb+ClbH2DZS LdpWV7xERzLZaiww2Q7tNIVHFGyVlY19wCYSsPYHipe1cL9YWDn2LfenqPtoFMWq EARJ3kXRe7LKznNLII0W0sOi1HAE4+z6ypmXvApJaH3rWn2nWAOxPqxc0hw32l+t GXY1N2unJLEVXsxXnxJcpDfHmrzdo6KLlm+/MUe7Eh+gcGA70H8GdBaEfgEwNxQQ KnSqRQtrePM//qi1tF0MbxqNntOt1lo9m5kTcz7bV+zwEOCRy/3eT6u8A6FxK0fp WorzbGoIWgNyxdLi3eDayP/uJD0p1QmBRT00iSroizdc7zBUG3I8ES1T7uHO7MQ= -----END CERTIFICATE-----Generated at Fri May 22 14:18:40 2026 by rpki-client