$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac4e6d04-48cc-46b4-a930-17ab9b41fcf3.roa File: ac4e6d04-48cc-46b4-a930-17ab9b41fcf3.roa (raw, json) Hash identifier: Eu3IiVWqZilRPXiwYVVnPkqlqIw09GBQXeWWy/KZqY4= Subject key identifier: 7E:D1:8A:80:92:AA:A1:95:8C:82:FF:59:D7:CB:A9:28:74:12:1F:0F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 491FAD1C7D7F51B753904FC1660414481787E12F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac4e6d04-48cc-46b4-a930-17ab9b41fcf3.roa Signing time: Sat 02 May 2026 01:00:52 +0000 ROA not before: Sat 02 May 2026 01:00:52 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff3:4080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:1f:ad:1c:7d:7f:51:b7:53:90:4f:c1:66:04:14:48:17:87:e1:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 01:00:52 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=2e5cd27a5778b3379ce45ddb3b25cf1f4c9d5f538fd1991c548d09dfb336d314, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0f:24:51:7a:a2:61:d1:84:41:1f:b2:51:26: db:2b:3a:31:f1:a6:0c:50:0f:aa:7f:23:fc:05:1a: de:b0:75:c0:29:56:b8:a9:70:c8:d7:ee:d1:12:ba: ff:3b:fa:2e:19:f4:33:b3:59:35:48:24:14:27:38: 01:04:d6:11:ad:db:21:1c:31:0b:4a:09:d6:39:9a: cf:bd:6c:c3:3b:8e:f7:56:d9:dc:c9:66:0b:a1:ec: 96:e2:14:98:6a:29:19:b0:6c:ad:ac:de:ef:cd:c7: d3:78:9c:b2:5b:20:3f:6e:90:2c:f0:8a:1b:e2:de: e9:6f:cf:1c:69:08:86:29:2b:60:06:77:76:d2:93: cf:10:f5:b4:68:be:37:fe:59:47:c1:5c:c1:d0:d4: 98:68:d4:cb:8d:08:14:d7:6d:5e:87:54:a7:f7:da: 5a:cd:3d:22:c5:7d:5d:e4:6e:5e:c8:7f:49:2b:35: 2e:ed:0e:95:fa:72:5d:3d:d0:3c:49:c9:2f:5b:fe: 87:3a:31:98:5c:e8:e0:96:b5:fa:73:e8:a0:07:fb: ce:7d:8a:aa:17:00:92:55:b1:0b:76:87:20:95:f5: 58:36:4c:ca:ec:6d:0f:d4:50:31:13:fc:d4:15:b6: 72:04:50:97:30:eb:ce:41:fd:31:f5:f3:bb:94:fd: 53:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D1:8A:80:92:AA:A1:95:8C:82:FF:59:D7:CB:A9:28:74:12:1F:0F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac4e6d04-48cc-46b4-a930-17ab9b41fcf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:4080::/46 Signature Algorithm: sha256WithRSAEncryption 60:99:2a:ef:b5:7a:51:8e:cd:12:fe:fe:45:05:31:fa:7c:62: 95:5c:cd:af:32:a3:14:3d:e5:9e:56:ac:4f:c2:1d:43:74:97: e0:0a:51:7c:e5:43:af:86:86:d2:98:ad:dc:87:14:27:71:7b: 84:c3:e5:60:bb:1a:2d:78:df:80:01:c1:bd:11:3c:83:14:b1: aa:4b:88:37:8c:98:ec:dd:8e:ab:6c:41:8e:af:74:61:cb:48: 76:fa:1a:10:ee:08:d4:d9:9d:94:dd:fb:74:f3:bf:98:a7:15: c3:63:69:0f:58:98:1a:80:d2:33:08:96:70:90:c0:1e:a8:9b: 1a:86:72:8c:36:6e:a2:42:b5:8d:dc:f3:34:ce:18:eb:a5:4e: 91:af:d6:c3:f6:1a:d4:f1:b3:16:4a:2c:ed:33:5b:87:77:35: 26:c9:a2:e2:72:41:ea:a3:1b:78:bf:f6:75:60:a3:86:3d:12: 05:ab:04:9e:13:fe:4e:4d:e7:e1:d8:8b:cf:f9:9f:ff:b3:5c: ca:40:91:dd:ab:78:df:6b:a0:97:51:7f:b7:8f:75:9c:4e:d5: 4f:fa:3d:53:34:1c:17:4c:b4:41:9f:e7:3b:46:6b:b7:e2:0f: ec:e5:a4:d5:11:41:06:d3:d0:19:82:52:37:79:a0:fa:96:c4: 07:47:a5:d7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSR+tHH1/UbdTkE/BZgQUSBeH4S8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAyMDEwMDUyWhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTVjZDI3YTU3NzhiMzM3OWNlNDVkZGIzYjI1Y2YxZjRj OWQ1ZjUzOGZkMTk5MWM1NDhkMDlkZmIzMzZkMzE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNDyRReqJh0YRBH7JRJtsrOjHxpgxQD6p/I/wFGt6wdcAp VripcMjX7tESuv87+i4Z9DOzWTVIJBQnOAEE1hGt2yEcMQtKCdY5ms+9bMM7jvdW 2dzJZguh7JbiFJhqKRmwbK2s3u/Nx9N4nLJbID9ukCzwihvi3ulvzxxpCIYpK2AG d3bSk88Q9bRovjf+WUfBXMHQ1Jho1MuNCBTXbV6HVKf32lrNPSLFfV3kbl7If0kr NS7tDpX6cl090DxJyS9b/oc6MZhc6OCWtfpz6KAH+859iqoXAJJVsQt2hyCV9Vg2 TMrsbQ/UUDET/NQVtnIEUJcw685B/TH187uU/VODAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUftGKgJKqoZWMgv9Z18upKHQSHw8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FjNGU2ZDA0LTQ4Y2MtNDZiNC1hOTMwLTE3YWI5YjQxZmNmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/zQIAwDQYJKoZIhvcNAQELBQADggEBAGCZKu+1elGOzRL+/kUFMfp8 YpVcza8yoxQ95Z5WrE/CHUN0l+AKUXzlQ6+GhtKYrdyHFCdxe4TD5WC7Gi1434AB wb0RPIMUsapLiDeMmOzdjqtsQY6vdGHLSHb6GhDuCNTZnZTd+3Tzv5inFcNjaQ9Y mBqA0jMIlnCQwB6omxqGcow2bqJCtY3c8zTOGOulTpGv1sP2GtTxsxZKLO0zW4d3 NSbJouJyQeqjG3i/9nVgo4Y9EgWrBJ4T/k5N5+HYi8/5n/+zXMpAkd2reN9roJdR f7ePdZxO1U/6PVM0HBdMtEGf5ztGa7fiD+zlpNURQQbT0BmCUjd5oPqWxAdHpdc= -----END CERTIFICATE-----Generated at Sun May 3 16:11:42 2026 by rpki-client