$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5c3687f-79b7-4dda-a7f1-7099e551c04e.roa File: d5c3687f-79b7-4dda-a7f1-7099e551c04e.roa (raw, json) Hash identifier: HT+nVMU6dnzxZsG1csigz+BuDDF9I72ksnLpiy0ik3Y= Subject key identifier: 70:84:0B:0A:E0:C1:DC:D1:0D:EF:57:0C:81:2F:5E:6C:2D:8F:4D:D8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 747DCF94E6CEAF11AE474EB7048526B133AEEB81 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5c3687f-79b7-4dda-a7f1-7099e551c04e.roa Signing time: Fri 01 May 2026 00:41:28 +0000 ROA not before: Fri 01 May 2026 00:41:28 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f32:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7d:cf:94:e6:ce:af:11:ae:47:4e:b7:04:85:26:b1:33:ae:eb:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 1 00:41:28 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=0b50bf40d700a8ac27316602bdfb221fdba484ee91a694d3fc45525f85eabd81, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1e:b1:9e:7a:4a:8f:bd:4e:5e:d7:20:1a:03: 16:aa:74:4a:a0:05:8e:04:46:61:a6:25:3d:08:92: a7:38:53:88:6d:5f:92:b5:66:3c:31:c5:a8:cd:20: 9d:74:0b:29:de:38:53:73:7e:09:72:53:28:ef:d0: 58:2e:15:bd:a8:b8:27:ae:f1:32:ae:9d:20:7d:66: 12:b7:79:1d:a5:e4:8d:2a:74:99:ac:58:0b:26:f9: 4d:f4:65:cc:b2:7e:59:c0:1f:8e:7d:c3:d5:45:c8: 99:15:1e:f5:cb:3e:df:66:f8:21:67:d1:09:9b:27: 2d:11:31:0e:b0:7c:ca:99:79:5a:c0:db:d2:4f:f5: a0:06:e1:3f:56:f6:c6:7e:31:41:3c:d8:d2:71:e1: 6d:ea:ff:50:ef:0c:ee:de:23:77:28:e0:1c:5d:6b: 71:0d:a3:9b:88:5a:f1:fb:ce:b5:fa:81:e2:4d:db: 13:e7:fe:a0:e4:c6:91:cc:3b:1f:7e:2b:f4:94:29: 15:32:4f:f5:f4:51:4b:43:84:e7:ff:66:96:7f:1f: 44:e9:35:3b:8b:4e:31:95:f4:27:06:ba:cc:23:9b: 3a:5b:88:3d:9a:ec:3b:2c:de:21:6d:5d:93:90:1f: de:60:26:86:30:6c:18:93:b6:ed:e0:01:2b:f9:b2: b6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:84:0B:0A:E0:C1:DC:D1:0D:EF:57:0C:81:2F:5E:6C:2D:8F:4D:D8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5c3687f-79b7-4dda-a7f1-7099e551c04e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f32:1000::/40 Signature Algorithm: sha256WithRSAEncryption 16:3f:4b:96:21:58:df:37:e2:27:2d:5b:27:58:f4:d2:bd:c1: b5:98:4c:e6:b6:01:58:6d:23:fc:cb:0e:cc:40:22:3b:66:c9: 24:be:c8:ef:b2:be:a7:1c:f0:30:a2:ff:f8:85:d5:2c:6b:a2: 3d:b5:81:e2:11:b8:8e:b2:7a:73:51:49:9a:3a:d2:6f:f5:f0: ea:2e:3a:0e:80:19:46:19:70:00:05:77:59:61:2b:c0:1f:aa: 9a:5f:ea:41:af:e1:fe:ab:b8:f1:8b:3c:84:d4:55:2a:21:ed: d8:cd:33:cc:f8:17:cc:56:78:ef:23:d3:98:2b:04:3a:e0:f2: 05:16:7f:e6:6d:40:11:fd:84:91:22:be:2e:8d:31:bb:51:dd: af:ca:5a:b1:08:4b:22:cc:c6:fc:6f:42:84:cc:34:b8:8e:74: 47:67:ea:02:12:ce:70:dc:1a:0e:83:73:e0:d0:ab:b2:09:ef: a7:a4:ba:b2:87:fb:fb:85:aa:24:0c:65:95:b5:07:9a:00:52: 6c:77:cf:09:71:ee:25:e6:16:08:9a:cf:e2:b9:97:4f:a9:c0: 06:69:dd:ea:13:15:21:54:84:21:6d:bf:e4:8d:6c:28:5f:de: f8:43:00:51:84:61:fb:71:88:2a:d0:5d:da:4d:ed:8a:e0:2e: c7:55:d1:66 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUdH3PlObOrxGuR063BIUmsTOu64EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDA0MTI4WhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjUwYmY0MGQ3MDBhOGFjMjczMTY2MDJiZGZiMjIxZmRi YTQ4NGVlOTFhNjk0ZDNmYzQ1NTI1Zjg1ZWFiZDgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXHrGeekqPvU5e1yAaAxaqdEqgBY4ERmGmJT0Ikqc4U4ht X5K1ZjwxxajNIJ10CyneOFNzfglyUyjv0FguFb2ouCeu8TKunSB9ZhK3eR2l5I0q dJmsWAsm+U30ZcyyflnAH459w9VFyJkVHvXLPt9m+CFn0QmbJy0RMQ6wfMqZeVrA 29JP9aAG4T9W9sZ+MUE82NJx4W3q/1DvDO7eI3co4Bxda3ENo5uIWvH7zrX6geJN 2xPn/qDkxpHMOx9+K/SUKRUyT/X0UUtDhOf/ZpZ/H0TpNTuLTjGV9CcGuswjmzpb iD2a7Dss3iFtXZOQH95gJoYwbBiTtu3gASv5srZ9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUcIQLCuDB3NEN71cMgS9ebC2PTdgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q1YzM2ODdmLTc5YjctNGRkYS1hN2YxLTcwOTllNTUxYzA0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8yEDANBgkqhkiG9w0BAQsFAAOCAQEAFj9LliFY3zfiJy1bJ1j00r3B tZhM5rYBWG0j/MsOzEAiO2bJJL7I77K+pxzwMKL/+IXVLGuiPbWB4hG4jrJ6c1FJ mjrSb/Xw6i46DoAZRhlwAAV3WWErwB+qml/qQa/h/qu48Ys8hNRVKiHt2M0zzPgX zFZ47yPTmCsEOuDyBRZ/5m1AEf2EkSK+Lo0xu1Hdr8pasQhLIszG/G9ChMw0uI50 R2fqAhLOcNwaDoNz4NCrsgnvp6S6sof7+4WqJAxllbUHmgBSbHfPCXHuJeYWCJrP 4rmXT6nABmnd6hMVIVSEIW2/5I1sKF/e+EMAUYRh+3GIKtBd2k3tiuAux1XRZg== -----END CERTIFICATE-----Generated at Sun May 3 16:14:03 2026 by rpki-client