$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e36a6494-8d6f-444b-be50-cb1d5787daa7.roa File: e36a6494-8d6f-444b-be50-cb1d5787daa7.roa (raw, json) Hash identifier: OvkYepvAgS4R+w62cj2/G241T80Nw8UyradHbX1f7r0= Subject key identifier: 28:A6:71:5C:CA:77:57:9D:A5:32:5A:9D:48:46:B5:20:26:F9:CD:A7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 47A4F890FE8DB92A0F5ABA0D1CC884A6F1B88EF8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e36a6494-8d6f-444b-be50-cb1d5787daa7.roa Signing time: Sat 02 May 2026 00:50:10 +0000 ROA not before: Sat 02 May 2026 00:50:10 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f38:8050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a4:f8:90:fe:8d:b9:2a:0f:5a:ba:0d:1c:c8:84:a6:f1:b8:8e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 00:50:10 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=080eef649932894f54a57ee27f1c34a1b9584b372b98a375e49313686e647d93, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a9:37:be:fc:a9:04:e4:1f:fa:c3:f8:2f:34: 07:d4:85:45:b4:fa:72:81:8a:d5:20:09:74:90:8e: 74:a3:a6:a1:d0:d3:84:ed:ca:7d:69:9a:57:fe:9d: b0:01:2e:51:e0:1a:33:95:68:d6:36:a4:90:75:7c: 46:33:ab:c0:3d:7b:98:61:87:a7:30:9e:5c:1e:97: b0:59:71:83:96:3b:da:96:34:17:b8:d5:a2:16:9c: 93:d6:ec:e3:e8:da:60:30:ac:dd:72:35:26:64:45: 75:e5:be:db:69:f4:bb:de:20:10:94:21:6c:b4:74: 80:3d:c3:d6:ec:0b:e9:cd:67:f7:76:b5:e3:92:9c: e3:2f:8f:54:ca:ef:65:e9:44:ee:cf:80:6a:70:50: 96:cc:21:45:85:9d:64:44:cf:c8:e1:3e:54:14:e4: 0b:8c:f2:d9:50:97:ce:06:60:d7:d7:12:ff:de:38: b7:55:66:38:d5:c2:21:6e:c2:0e:1a:3d:b1:5c:c7: f6:9c:ea:c3:ea:4a:af:d5:66:94:82:0a:2f:f2:23: ce:08:d6:2b:18:71:8b:50:58:af:ce:52:7a:d2:86: 89:b9:25:6a:83:d4:35:8c:5b:0d:4d:16:ba:3c:b7: d3:0f:84:ca:95:06:ae:04:e7:83:9e:6c:c1:b4:a6: 4d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A6:71:5C:CA:77:57:9D:A5:32:5A:9D:48:46:B5:20:26:F9:CD:A7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e36a6494-8d6f-444b-be50-cb1d5787daa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:8050::/48 Signature Algorithm: sha256WithRSAEncryption 04:c6:67:b4:b9:f6:c7:93:c3:67:40:9c:ec:bb:53:8d:f9:9b: 99:4a:c7:dc:41:ed:26:31:aa:db:2a:35:d1:7c:10:fb:09:b0: a3:d4:55:54:9d:39:dd:d6:91:f7:6e:7b:d9:dc:84:4a:21:73: 03:a7:20:ab:01:26:0e:32:d0:e5:f8:19:db:a7:ee:37:2f:3b: 71:0f:ae:b8:0c:97:2c:eb:39:41:19:7f:48:22:f5:a2:f9:d2: 0f:1c:43:4c:85:d7:da:aa:6c:5e:3c:37:f3:be:a9:32:b1:4e: 55:2c:ff:a0:a5:78:02:e7:73:f6:ff:c5:59:1a:7b:eb:a0:6b: 2e:44:a8:fe:ad:47:30:d8:44:42:fb:ec:5b:2a:2b:6a:79:6d: 16:12:57:c6:9c:5c:88:dd:eb:11:42:00:82:c2:5c:40:b0:63: 5e:94:ad:33:71:07:1e:83:98:07:dc:cf:e2:bb:37:a1:1f:b3: 74:ce:ca:d5:c9:d3:14:30:af:47:43:50:d2:a0:e8:00:94:6f: 38:62:f3:80:70:28:18:fd:a5:ad:af:02:04:ed:4b:c1:b9:c1: 3d:b6:d3:4b:b6:a8:f3:43:0f:05:e9:36:82:12:05:dc:4e:bb: 02:8f:a6:05:a6:49:40:27:42:0a:7b:4a:74:df:55:ba:95:5b: 69:53:fb:2f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUR6T4kP6NuSoPWroNHMiEpvG4jvgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAyMDA1MDEwWhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwODBlZWY2NDk5MzI4OTRmNTRhNTdlZTI3ZjFjMzRhMWI5 NTg0YjM3MmI5OGEzNzVlNDkzMTM2ODZlNjQ3ZDkzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYqTe+/KkE5B/6w/gvNAfUhUW0+nKBitUgCXSQjnSjpqHQ 04Ttyn1pmlf+nbABLlHgGjOVaNY2pJB1fEYzq8A9e5hhh6cwnlwel7BZcYOWO9qW NBe41aIWnJPW7OPo2mAwrN1yNSZkRXXlvttp9LveIBCUIWy0dIA9w9bsC+nNZ/d2 teOSnOMvj1TK72XpRO7PgGpwUJbMIUWFnWREz8jhPlQU5AuM8tlQl84GYNfXEv/e OLdVZjjVwiFuwg4aPbFcx/ac6sPqSq/VZpSCCi/yI84I1isYcYtQWK/OUnrShom5 JWqD1DWMWw1NFro8t9MPhMqVBq4E54OebMG0pk0JAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKKZxXMp3V52lMlqdSEa1ICb5zacwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UzNmE2NDk0LThkNmYtNDQ0Yi1iZTUwLWNiMWQ1Nzg3ZGFhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84gFAwDQYJKoZIhvcNAQELBQADggEBAATGZ7S59seTw2dAnOy7U435 m5lKx9xB7SYxqtsqNdF8EPsJsKPUVVSdOd3Wkfdue9nchEohcwOnIKsBJg4y0OX4 Gdun7jcvO3EPrrgMlyzrOUEZf0gi9aL50g8cQ0yF19qqbF48N/O+qTKxTlUs/6Cl eALnc/b/xVkae+ugay5EqP6tRzDYREL77FsqK2p5bRYSV8acXIjd6xFCAILCXECw Y16UrTNxBx6DmAfcz+K7N6Efs3TOytXJ0xQwr0dDUNKg6ACUbzhi84BwKBj9pa2v AgTtS8G5wT2200u2qPNDDwXpNoISBdxOuwKPpgWmSUAnQgp7SnTfVbqVW2lT+y8= -----END CERTIFICATE-----Generated at Mon May 4 21:37:54 2026 by rpki-client