$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a58feff9-88a6-4564-8529-2be1d91940ab.roa File: a58feff9-88a6-4564-8529-2be1d91940ab.roa (raw, json) Hash identifier: 6r6fmpO6LxbC39In1toLTd7GpcklMcDtTtuKXwht4cQ= Subject key identifier: 3D:2E:F8:FB:16:48:5C:09:07:BA:63:3E:5D:11:C7:AC:70:EE:FB:48 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5C369A0577868AF0A1297D02B17E97C813DE491E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a58feff9-88a6-4564-8529-2be1d91940ab.roa Signing time: Sat 02 May 2026 00:30:07 +0000 ROA not before: Sat 02 May 2026 00:30:07 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff3:c080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:36:9a:05:77:86:8a:f0:a1:29:7d:02:b1:7e:97:c8:13:de:49:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 00:30:07 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=26ae79e30ae1ddd1378243d493cb5005f85b9602c11d9d0bd265ad54b44ebb9d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ad:04:e5:9c:a3:51:9e:c1:2d:ad:6e:93:37: f4:30:f7:2e:3b:c3:a4:ca:b1:68:f5:79:5a:09:d6: 12:ae:2b:3a:05:4c:97:63:de:6f:46:f0:1b:28:ce: 1f:28:7d:5f:e7:fc:44:d2:93:0f:83:7a:0f:01:37: 8a:a9:af:f5:f0:3a:6e:15:5f:d0:8f:11:0c:29:6f: d7:4e:49:77:4f:dc:06:e3:93:70:2d:4c:2b:73:93: 0e:04:bc:0c:21:1c:82:30:6e:3d:a3:e0:e1:17:c3: 05:eb:f7:18:2d:07:d4:22:eb:af:68:66:06:39:93: 96:b4:af:c8:a3:41:a6:75:e8:c5:67:63:35:22:30: 30:8f:0a:ff:fc:3f:a8:74:66:bb:a3:27:27:b6:92: 9d:48:8d:dd:77:d9:5a:98:a4:89:c6:6f:47:eb:44: 6e:9f:db:66:91:45:70:4f:29:66:01:bb:a3:ba:65: 17:0b:ec:fc:58:b7:2d:a3:3f:12:7e:16:b4:96:65: f1:7a:44:3b:e3:ca:b8:2a:ef:b9:4a:5c:f0:82:c3: 9d:e9:5e:77:f6:d6:31:a5:c6:57:3f:f7:38:70:68: 8c:26:be:80:53:5c:92:11:eb:b0:fc:80:d1:3d:9e: c9:fc:f5:64:46:fc:05:cf:51:3e:d1:a1:bd:f0:f6: aa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2E:F8:FB:16:48:5C:09:07:BA:63:3E:5D:11:C7:AC:70:EE:FB:48 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a58feff9-88a6-4564-8529-2be1d91940ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:c080::/46 Signature Algorithm: sha256WithRSAEncryption 84:12:04:24:8f:82:d6:54:50:af:9e:7f:c2:df:c5:17:0a:43: 85:f2:2b:11:71:32:1c:e9:37:fe:8f:0b:2a:17:d6:fb:1f:a5: e7:4d:4b:77:a5:ef:9d:80:8e:c1:d8:a0:56:53:b3:31:0f:04: a7:a6:95:76:d6:ce:81:d6:80:28:5d:74:c7:f1:83:28:38:b6: b2:e6:23:ed:9c:62:4d:06:54:48:5b:25:1b:48:44:24:9a:ea: dd:5b:61:58:79:15:79:c8:1d:63:41:79:b1:cf:dd:01:bf:50: 7f:f0:2e:8b:db:9f:68:b1:7e:de:31:1c:20:2f:0c:ea:b5:f3: 94:74:8f:b6:bc:9b:ff:d1:99:e5:c4:33:b1:cf:68:02:f8:d8: 3a:05:32:47:78:07:cd:55:5f:98:11:06:35:69:ff:79:63:2c: 55:c0:6b:c3:12:3e:82:e1:1c:82:c0:f0:14:f1:ec:77:da:22: ea:06:4d:c4:0a:71:5a:ea:6c:aa:e5:b6:de:29:9c:d4:63:5d: df:d0:38:5d:d4:4f:b0:de:7f:2e:fe:08:42:db:4d:99:54:da: 81:ed:c7:a6:02:bc:3e:65:1f:1d:bb:cb:83:73:2c:a5:64:cd: 89:85:54:ea:4d:db:bf:0e:82:5c:37:2e:a4:17:5e:1c:1e:e5: 9a:d6:ed:8c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXDaaBXeGivChKX0CsX6XyBPeSR4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAyMDAzMDA3WhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNmFlNzllMzBhZTFkZGQxMzc4MjQzZDQ5M2NiNTAwNWY4 NWI5NjAyYzExZDlkMGJkMjY1YWQ1NGI0NGViYjlkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDarQTlnKNRnsEtrW6TN/Qw9y47w6TKsWj1eVoJ1hKuKzoF TJdj3m9G8Bsozh8ofV/n/ETSkw+Deg8BN4qpr/XwOm4VX9CPEQwpb9dOSXdP3Abj k3AtTCtzkw4EvAwhHIIwbj2j4OEXwwXr9xgtB9Qi669oZgY5k5a0r8ijQaZ16MVn YzUiMDCPCv/8P6h0ZrujJye2kp1Ijd132VqYpInGb0frRG6f22aRRXBPKWYBu6O6 ZRcL7PxYty2jPxJ+FrSWZfF6RDvjyrgq77lKXPCCw53pXnf21jGlxlc/9zhwaIwm voBTXJIR67D8gNE9nsn89WRG/AXPUT7Rob3w9qrHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPS74+xZIXAkHumM+XRHHrHDu+0gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E1OGZlZmY5LTg4YTYtNDU2NC04NTI5LTJiZTFkOTE5NDBhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/zwIAwDQYJKoZIhvcNAQELBQADggEBAIQSBCSPgtZUUK+ef8LfxRcK Q4XyKxFxMhzpN/6PCyoX1vsfpedNS3el752AjsHYoFZTszEPBKemlXbWzoHWgChd dMfxgyg4trLmI+2cYk0GVEhbJRtIRCSa6t1bYVh5FXnIHWNBebHP3QG/UH/wLovb n2ixft4xHCAvDOq185R0j7a8m//RmeXEM7HPaAL42DoFMkd4B81VX5gRBjVp/3lj LFXAa8MSPoLhHILA8BTx7HfaIuoGTcQKcVrqbKrltt4pnNRjXd/QOF3UT7Defy7+ CELbTZlU2oHtx6YCvD5lHx27y4NzLKVkzYmFVOpN278Oglw3LqQXXhwe5ZrW7Yw= -----END CERTIFICATE-----Generated at Mon May 4 21:38:57 2026 by rpki-client