$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dffe7c41-91f1-4ad3-a375-4c43d7b3ade4.roa File: dffe7c41-91f1-4ad3-a375-4c43d7b3ade4.roa (raw, json) Hash identifier: AhiBkg7moBudE6KdCDXvKtwVLaDCrce3GDldio3EnYc= Subject key identifier: 0B:63:ED:95:B4:AB:03:FA:3C:A1:5C:44:6B:2C:6D:87:3D:F7:E1:B7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 29D449D4A6EECE81EBA9D626451FF899AE56FC0D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dffe7c41-91f1-4ad3-a375-4c43d7b3ade4.roa Signing time: Wed 29 Apr 2026 00:20:31 +0000 ROA not before: Wed 29 Apr 2026 00:20:31 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fa0:a400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d4:49:d4:a6:ee:ce:81:eb:a9:d6:26:45:1f:f8:99:ae:56:fc:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:20:31 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=562b707d5875447c7503f61fc15d3ed71ae57be52401a3cf41d21ce2dd3e4270, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:89:18:d1:12:c5:70:3d:92:56:72:32:ef:4a: 2f:cb:0f:58:dc:f5:c9:eb:25:6c:f2:27:8a:03:b3: 56:a9:12:47:1c:eb:71:62:2c:02:75:29:68:cc:f6: 47:17:03:3b:b9:59:7d:67:0b:51:96:8f:97:15:48: e1:13:96:cc:ea:39:5b:f9:5f:6f:ca:48:f1:5b:f5: ef:ad:91:cf:4a:e5:e0:8d:5d:2e:f6:09:df:0c:2b: 22:28:90:8e:0d:5b:f2:c5:0f:75:4c:46:06:e0:b6: 59:f5:ff:ab:c4:a3:a6:9d:b2:81:eb:2f:42:b2:95: bb:7c:93:75:fa:03:a7:2a:53:c4:da:9c:ef:c5:5e: f9:8d:aa:78:05:8e:0d:5c:2a:d4:67:e2:1b:79:eb: d9:91:bc:46:00:42:d9:ea:0a:5b:fe:07:9a:b1:a9: 5c:de:73:92:4d:47:fb:9e:52:54:71:cf:8d:c0:a2: 03:fe:81:93:84:87:c3:cb:9e:28:45:92:fb:c1:3a: 5b:fb:dd:76:21:13:18:b4:3f:ea:6e:cd:f5:f1:4c: 76:fc:c1:85:3c:ad:f5:41:87:9d:a7:f0:a9:48:d5: 45:c5:81:ce:c6:c7:9d:d9:ed:ae:29:68:69:b0:2b: 68:45:86:b7:e8:2a:e8:29:ea:bf:24:f7:16:a7:08: fc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:63:ED:95:B4:AB:03:FA:3C:A1:5C:44:6B:2C:6D:87:3D:F7:E1:B7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dffe7c41-91f1-4ad3-a375-4c43d7b3ade4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:a400::/40 Signature Algorithm: sha256WithRSAEncryption d5:97:4a:65:6c:8a:96:9a:ff:f9:d8:13:57:22:33:fd:3a:df: 8e:9a:8e:5a:9a:36:a1:54:29:d1:61:df:cf:63:17:1b:0a:b8: 1a:f7:97:76:b4:b6:98:bc:37:81:c3:b2:20:85:e1:2e:87:4d: a7:6a:21:0c:95:39:b6:05:d7:41:27:70:e0:e5:3c:8e:9c:9f: 58:d1:40:a0:d3:39:bc:35:56:79:82:b1:c6:47:3d:2d:b1:be: d7:86:f5:2b:be:ac:e4:0a:25:f6:fd:fc:65:e1:63:6f:4d:13: f8:ec:1b:30:30:da:7a:2c:11:93:ca:53:54:88:ea:82:13:71: b1:37:6c:93:4b:fc:70:da:5a:d6:1a:09:16:b0:f8:fc:21:9d: f4:f2:42:cc:fd:39:7e:be:f7:2c:10:ae:7e:45:b2:77:9d:77: 05:99:01:25:d9:fe:fb:a8:40:ae:1f:f5:eb:ff:7c:eb:06:19: 77:19:03:e8:43:9b:d9:aa:62:3a:66:47:06:ce:20:00:ee:ac: 01:f7:61:49:4a:fb:24:2e:47:34:33:e9:dd:15:b4:be:ae:83: 5b:b7:cd:24:62:0b:bc:17:6b:f5:e3:36:52:c0:ee:e0:56:4a: ee:d6:5c:5a:40:e2:f4:15:03:19:76:55:6d:c7:1b:57:9c:62: e1:78:4e:39 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUKdRJ1KbuzoHrqdYmRR/4ma5W/A0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDAyMDMxWhcNMjYwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NjJiNzA3ZDU4NzU0NDdjNzUwM2Y2MWZjMTVkM2VkNzFh ZTU3YmU1MjQwMWEzY2Y0MWQyMWNlMmRkM2U0MjcwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTiRjREsVwPZJWcjLvSi/LD1jc9cnrJWzyJ4oDs1apEkcc 63FiLAJ1KWjM9kcXAzu5WX1nC1GWj5cVSOETlszqOVv5X2/KSPFb9e+tkc9K5eCN XS72Cd8MKyIokI4NW/LFD3VMRgbgtln1/6vEo6adsoHrL0Kylbt8k3X6A6cqU8Ta nO/FXvmNqngFjg1cKtRn4ht569mRvEYAQtnqClv+B5qxqVzec5JNR/ueUlRxz43A ogP+gZOEh8PLnihFkvvBOlv73XYhExi0P+puzfXxTHb8wYU8rfVBh52n8KlI1UXF gc7Gx53Z7a4paGmwK2hFhrfoKugp6r8k9xanCPy/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUC2PtlbSrA/o8oVxEayxthz334bcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RmZmU3YzQxLTkxZjEtNGFkMy1hMzc1LTRjNDNkN2IzYWRlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+gpDANBgkqhkiG9w0BAQsFAAOCAQEA1ZdKZWyKlpr/+dgTVyIz/Trf jpqOWpo2oVQp0WHfz2MXGwq4GveXdrS2mLw3gcOyIIXhLodNp2ohDJU5tgXXQSdw 4OU8jpyfWNFAoNM5vDVWeYKxxkc9LbG+14b1K76s5Aol9v38ZeFjb00T+OwbMDDa eiwRk8pTVIjqghNxsTdsk0v8cNpa1hoJFrD4/CGd9PJCzP05fr73LBCufkWyd513 BZkBJdn++6hArh/16/986wYZdxkD6EOb2apiOmZHBs4gAO6sAfdhSUr7JC5HNDPp 3RW0vq6DW7fNJGILvBdr9eM2UsDu4FZK7tZcWkDi9BUDGXZVbccbV5xi4XhOOQ== -----END CERTIFICATE-----Generated at Sun May 3 16:13:25 2026 by rpki-client