$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aed1b077-e785-48ca-9897-668f3b060200.roa File: aed1b077-e785-48ca-9897-668f3b060200.roa (raw, json) Hash identifier: /l3RPizamrGQKj2RBevX/T8y4/6DkJso2aiUXV0AzcE= Subject key identifier: 08:DA:73:A8:35:E3:6F:DD:60:E2:4C:78:EF:A2:41:04:AB:C2:C1:5A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 179DA68D8A9E038D639325F46207B5B68A1DDB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aed1b077-e785-48ca-9897-668f3b060200.roa Signing time: Sat 02 May 2026 01:11:20 +0000 ROA not before: Sat 02 May 2026 01:11:20 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff3:e080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:9d:a6:8d:8a:9e:03:8d:63:93:25:f4:62:07:b5:b6:8a:1d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 01:11:20 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=d5fa44974df012749596e7dcfb0ff1f607c15f149cac467ecc9bc5ffb4b71408, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:65:a3:8f:f3:b7:28:9c:68:ca:78:c0:9a:b7: 44:73:f4:3b:7f:ac:ff:59:32:f1:0b:0b:83:11:c6: cb:40:1c:95:39:ab:97:62:c5:d0:4e:18:d8:a6:12: 68:26:1b:22:7c:fa:df:1e:06:35:80:cf:be:cf:55: 3d:bc:dd:6c:ce:60:0a:6f:98:56:2c:9a:6c:fc:5e: d7:4b:c0:13:23:01:e6:b2:dc:11:0f:f4:09:1e:35: d1:9f:c8:a0:86:6e:f7:0a:a8:c9:3c:ee:1d:e9:60: ed:f7:32:60:9d:c6:c1:fe:9a:79:53:71:0d:49:0a: a6:71:1f:92:5f:dc:4d:dd:ee:4f:ee:39:c3:00:c1: 80:8a:6a:85:f4:7a:72:60:4b:58:33:86:fb:9e:69: d1:40:51:d0:d5:1c:0e:74:a4:e0:4b:ca:30:ae:83: c2:1b:d2:43:dc:dd:aa:90:ed:a8:d9:3a:f8:17:48: 44:58:8c:ab:66:5a:b2:7a:94:f3:73:e1:39:23:ca: 1b:0b:cc:c6:27:1c:56:3c:b5:b6:1b:f3:94:b8:01: de:da:0a:7a:4f:4b:9b:b4:50:86:c7:7f:83:68:53: ed:28:67:32:d5:5c:52:5b:f6:35:56:05:38:20:b1: f9:8f:98:e8:92:ad:fa:f6:bb:a8:62:95:3a:ef:5d: e8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DA:73:A8:35:E3:6F:DD:60:E2:4C:78:EF:A2:41:04:AB:C2:C1:5A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aed1b077-e785-48ca-9897-668f3b060200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:e080::/46 Signature Algorithm: sha256WithRSAEncryption 5b:16:1c:44:91:b5:c1:d8:06:60:fd:53:ad:7b:ed:02:d6:6e: b0:f3:33:e5:f7:50:a2:d0:8f:b5:76:09:69:3d:01:38:d1:5d: 22:5a:3c:50:ad:5d:7b:47:c3:09:40:9d:37:ee:63:64:ba:6f: 07:83:e7:09:d3:e0:ae:1b:07:6a:dd:fb:d3:04:96:85:0c:3e: 94:8c:ef:53:75:fc:c6:ce:f3:16:25:55:5e:e2:0f:1e:82:ec: d4:00:df:38:53:98:b6:1d:47:68:cf:e5:2b:94:90:a6:22:b8: b1:aa:b2:f6:d5:5b:a2:f7:c1:3f:b6:2e:28:00:89:28:33:c1: 9b:be:25:88:27:6a:d3:3d:3c:34:0a:94:d9:ff:91:27:6e:f0: 64:60:68:a2:5d:35:8e:b3:5a:0e:f2:4c:5a:bb:cc:00:ba:5e: f5:94:90:f3:63:ca:6c:de:c9:aa:49:9d:f7:ea:99:71:de:04: 8a:c9:f1:99:87:b8:6a:07:dc:19:ef:31:32:81:25:97:dd:85: 41:19:20:75:d2:9c:1b:63:5b:2b:80:a3:5b:ae:35:6c:c2:bc: 13:fd:ca:e2:d8:f4:ee:e0:32:5f:df:5b:89:9c:41:6e:e4:63: a3:53:6f:0d:8f:37:c8:68:79:72:69:0c:c0:29:bc:91:d5:ed: de:eb:4f:65 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITF52mjYqeA41jkyX0Yge1tood2zANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjA1MDIwMTExMjBaFw0yNjA3MzEyMzU5NTla MHoxSTBHBgNVBAUTQGQ1ZmE0NDk3NGRmMDEyNzQ5NTk2ZTdkY2ZiMGZmMWY2MDdj MTVmMTQ5Y2FjNDY3ZWNjOWJjNWZmYjRiNzE0MDgxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALVlo4/ztyicaMp4wJq3RHP0O3+s/1ky8QsLgxHGy0AclTmr l2LF0E4Y2KYSaCYbInz63x4GNYDPvs9VPbzdbM5gCm+YViyabPxe10vAEyMB5rLc EQ/0CR410Z/IoIZu9wqoyTzuHelg7fcyYJ3Gwf6aeVNxDUkKpnEfkl/cTd3uT+45 wwDBgIpqhfR6cmBLWDOG+55p0UBR0NUcDnSk4EvKMK6DwhvSQ9zdqpDtqNk6+BdI RFiMq2ZasnqU83PhOSPKGwvMxiccVjy1thvzlLgB3toKek9Lm7RQhsd/g2hT7Shn MtVcUlv2NVYFOCCx+Y+Y6JKt+va7qGKVOu9d6OsCAwEAAaOCArQwggKwMB0GA1Ud DgQWBBQI2nOoNeNv3WDiTHjvokEEq8LBWjAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvYWVkMWIwNzctZTc4NS00OGNhLTk4OTctNjY4ZjNiMDYwMjAwLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHAiYAH/PggDANBgkqhkiG9w0BAQsFAAOCAQEAWxYcRJG1wdgGYP1TrXvtAtZu sPMz5fdQotCPtXYJaT0BONFdIlo8UK1de0fDCUCdN+5jZLpvB4PnCdPgrhsHat37 0wSWhQw+lIzvU3X8xs7zFiVVXuIPHoLs1ADfOFOYth1HaM/lK5SQpiK4saqy9tVb ovfBP7YuKACJKDPBm74liCdq0z08NAqU2f+RJ27wZGBool01jrNaDvJMWrvMALpe 9ZSQ82PKbN7Jqkmd9+qZcd4EisnxmYe4agfcGe8xMoEll92FQRkgddKcG2NbK4Cj W641bMK8E/3K4tj07uAyX99biZxBbuRjo1NvDY83yGh5cmkMwCm8kdXt3utPZQ== -----END CERTIFICATE-----Generated at Mon May 4 22:28:57 2026 by rpki-client