$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af5094d8-4e87-445b-9653-4201e15ce055.roa File: af5094d8-4e87-445b-9653-4201e15ce055.roa (raw, json) Hash identifier: 3iKE6KFbZaIsXkbOmUVLSB97dYBBpVDr/AkzZRBxaQ8= Subject key identifier: 9D:3A:74:A2:E6:4B:A3:E3:AD:FF:4F:14:2C:94:89:A7:C4:BF:2B:28 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6587BE95DD3FC9210246EA40E626FF830FDAC0F5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af5094d8-4e87-445b-9653-4201e15ce055.roa Signing time: Sat 02 May 2026 01:00:09 +0000 ROA not before: Sat 02 May 2026 01:00:09 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff3:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:87:be:95:dd:3f:c9:21:02:46:ea:40:e6:26:ff:83:0f:da:c0:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 01:00:09 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=214f4bbf92065e8cc80de4a85fa3f00d56858178879a3cee0e501e00892e7b24, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7a:05:d4:a0:4e:23:38:d2:88:34:27:93:df: a3:60:d7:71:11:d4:4b:05:a8:78:d3:3f:29:d0:b3: 0d:cf:67:36:7b:d2:ac:b5:1c:0b:fe:fc:72:eb:e1: bb:b7:87:63:b4:ec:b8:ac:87:f3:a7:c3:1f:00:71: f5:78:7b:e5:78:5e:fb:10:55:09:29:22:c9:2b:04: 78:51:6b:b1:74:f4:e8:d8:6d:51:62:e9:2e:12:1d: 35:52:77:50:0c:ae:12:bc:d6:7f:09:c2:6f:cd:78: 73:dc:1c:e1:92:78:ea:74:2c:76:d5:7f:63:86:1a: 2f:ec:99:7c:cd:11:5b:ad:f4:b5:ee:e5:35:34:0d: 1c:15:a8:77:b4:b0:f0:b3:b1:c5:32:f1:b5:16:b4: a0:47:6e:57:dd:f4:a1:a8:52:a4:6d:05:a0:03:a5: 7d:c1:50:ab:54:e3:92:3b:78:f5:37:3e:9d:2b:60: c6:02:6b:09:8a:21:1d:07:22:7a:8d:11:74:3e:26: 03:dc:80:a9:29:44:12:20:c6:2d:f1:90:10:57:11: a8:6f:da:b7:04:66:2a:ac:c9:d9:55:0c:fd:3f:db: a1:38:a5:ac:1d:53:2e:ac:b1:85:51:9b:e3:e5:c7: 57:ed:ce:04:e4:e0:67:b4:86:60:e9:4d:f2:3d:23: 0e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3A:74:A2:E6:4B:A3:E3:AD:FF:4F:14:2C:94:89:A7:C4:BF:2B:28 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af5094d8-4e87-445b-9653-4201e15ce055.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:6000::/40 Signature Algorithm: sha256WithRSAEncryption 34:cf:93:84:c7:81:a7:c3:a8:3e:7a:cc:1a:1b:f8:a8:ad:34: 3d:c4:3a:0d:02:bd:67:f1:09:df:a9:05:2e:92:80:32:45:3f: 6d:52:07:9f:82:4b:a6:9c:c5:0e:6a:2f:2f:37:ea:2a:fc:77: f5:fc:eb:d1:cf:1e:a5:91:1b:d7:4d:49:a4:bc:4f:52:f2:8b: 94:99:ce:5b:a9:1f:bd:2c:1f:05:a8:04:a9:cf:2e:12:8a:30: cf:13:ea:78:1c:31:ae:41:af:3f:b9:0b:5c:e8:00:20:8e:8a: 1f:80:f1:bc:73:d7:e8:82:2f:0b:2c:da:fe:e2:ba:ef:b2:53: 7f:99:9d:69:82:09:91:02:f2:78:92:62:7b:4e:1e:e4:8d:e8: b5:4e:ea:24:32:44:7b:43:59:e7:37:c4:d7:be:ef:a5:b3:f2: 42:f7:69:9b:5e:b7:20:f1:17:61:fc:d9:8f:b0:10:70:24:80: 99:11:0b:ba:b5:21:f3:6f:e3:5c:2e:ee:31:2a:b7:11:5f:67: 81:d8:4d:b4:05:85:8f:30:3b:64:c7:1d:8e:a9:1f:0b:1a:c4: eb:a1:8d:5a:a6:6e:77:e1:91:e3:23:96:f2:14:ef:cb:93:5a: 75:43:f9:88:c1:0d:05:cd:e6:a1:e6:78:f6:40:f2:9a:84:74: e4:91:9f:0c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUZYe+ld0/ySECRupA5ib/gw/awPUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAyMDEwMDA5WhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTRmNGJiZjkyMDY1ZThjYzgwZGU0YTg1ZmEzZjAwZDU2 ODU4MTc4ODc5YTNjZWUwZTUwMWUwMDg5MmU3YjI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSegXUoE4jONKINCeT36Ng13ER1EsFqHjTPynQsw3PZzZ7 0qy1HAv+/HLr4bu3h2O07Lish/Onwx8AcfV4e+V4XvsQVQkpIskrBHhRa7F09OjY bVFi6S4SHTVSd1AMrhK81n8Jwm/NeHPcHOGSeOp0LHbVf2OGGi/smXzNEVut9LXu 5TU0DRwVqHe0sPCzscUy8bUWtKBHblfd9KGoUqRtBaADpX3BUKtU45I7ePU3Pp0r YMYCawmKIR0HInqNEXQ+JgPcgKkpRBIgxi3xkBBXEahv2rcEZiqsydlVDP0/26E4 pawdUy6ssYVRm+Plx1ftzgTk4Ge0hmDpTfI9Iw6zAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUnTp0ouZLo+Ot/08ULJSJp8S/KygwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmNTA5NGQ4LTRlODctNDQ1Yi05NjUzLTQyMDFlMTVjZTA1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/zYDANBgkqhkiG9w0BAQsFAAOCAQEANM+ThMeBp8OoPnrMGhv4qK00 PcQ6DQK9Z/EJ36kFLpKAMkU/bVIHn4JLppzFDmovLzfqKvx39fzr0c8epZEb101J pLxPUvKLlJnOW6kfvSwfBagEqc8uEoowzxPqeBwxrkGvP7kLXOgAII6KH4DxvHPX 6IIvCyza/uK677JTf5mdaYIJkQLyeJJie04e5I3otU7qJDJEe0NZ5zfE177vpbPy Qvdpm163IPEXYfzZj7AQcCSAmRELurUh82/jXC7uMSq3EV9ngdhNtAWFjzA7ZMcd jqkfCxrE66GNWqZud+GR4yOW8hTvy5NadUP5iMENBc3moeZ49kDymoR05JGfDA== -----END CERTIFICATE-----Generated at Sun May 3 16:14:47 2026 by rpki-client