$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0572851a-d139-4fbb-bf0e-936ac842ce41.roa File: 0572851a-d139-4fbb-bf0e-936ac842ce41.roa (raw, json) Hash identifier: umCFh4YD/vkLpzyklPoLhJl7zqFg+jQwAG4aFpUtFgM= Subject key identifier: 1C:63:17:14:35:38:5A:24:1F:41:4F:B4:2D:DF:4E:EF:63:BC:CB:05 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 264C6AC764D7D2CA3871185CA898A57591E2AF8A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0572851a-d139-4fbb-bf0e-936ac842ce41.roa Signing time: Fri 01 May 2026 00:20:09 +0000 ROA not before: Fri 01 May 2026 00:20:09 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fa0:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:4c:6a:c7:64:d7:d2:ca:38:71:18:5c:a8:98:a5:75:91:e2:af:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 1 00:20:09 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=cc521d195c5faa23822e08d73f5cfe40183aac02df8d7b9f4501c4126404a827, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f8:80:d5:e2:31:62:f2:2d:e2:71:5c:dc:b7: de:10:aa:df:cc:51:95:02:e1:75:49:77:f6:75:e7: 1a:50:e9:6f:9e:15:a0:15:fd:f9:53:04:3b:1d:df: d1:7f:dd:dc:bc:0c:73:21:59:b5:24:91:82:8e:0d: 01:1d:55:66:37:0b:13:57:58:6c:89:5f:f1:e7:84: d2:43:0b:fe:51:a2:1a:4e:95:c0:11:5d:3a:ff:f3: 9f:d0:dc:a7:6d:fd:de:a6:74:32:9c:86:3c:8b:f4: 1c:01:91:6e:d5:2c:e9:7c:70:32:ae:ba:c0:a2:a7: 6c:c9:eb:ac:3e:bd:51:88:99:f4:97:f7:5f:c7:7b: f0:5b:9a:bf:c6:cd:79:4b:14:64:87:d8:3b:ce:1e: f9:dc:c2:57:92:15:e4:e7:78:25:a2:ef:12:d7:5e: 6f:26:76:2d:05:d4:7d:63:08:35:14:6c:e1:49:86: 31:92:e3:c7:0f:c9:52:2f:67:6f:52:50:21:d2:3b: bd:b2:d7:48:39:ae:5a:9f:7c:77:43:da:40:2a:b2: 7b:28:58:e2:dc:e0:3a:78:ff:b7:67:03:c2:7c:95: ec:ca:31:95:fe:f4:92:6b:29:81:46:13:aa:b1:ee: fb:6a:2a:5e:8b:b9:79:52:25:c7:83:37:db:4f:fc: b4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:63:17:14:35:38:5A:24:1F:41:4F:B4:2D:DF:4E:EF:63:BC:CB:05 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0572851a-d139-4fbb-bf0e-936ac842ce41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:8000::/39 Signature Algorithm: sha256WithRSAEncryption 3c:79:3d:c2:5c:04:ab:37:cc:f6:9e:27:5d:d6:99:da:ab:c5: 8a:43:c8:be:fd:62:3b:b2:85:2b:b0:03:8b:b6:8a:f3:fc:03: 23:e1:ff:70:25:33:45:6f:a2:3c:65:5d:cc:dc:12:97:57:f7: 48:e6:8a:21:65:0d:f0:c2:73:a0:74:43:a4:7c:3b:f9:57:bf: 68:23:26:18:79:6e:00:49:32:2d:0c:02:ed:c3:ab:ef:56:27: 1e:89:c6:d9:c8:75:89:dc:b8:44:04:c6:c2:bd:46:59:93:4b: bf:95:1d:08:89:a4:ce:e2:17:e3:4f:52:95:8d:fb:a7:62:f9: 76:da:e5:e5:51:19:b3:23:6e:60:63:ba:39:d8:28:52:d1:e5: 51:53:b0:5d:b1:21:9a:85:85:3f:1e:4f:15:f8:3a:f3:8a:76: 16:bc:1c:67:53:45:f9:46:d6:52:94:94:ae:70:59:d0:47:d8: 88:fc:f3:cb:01:6a:94:a1:ec:6b:74:5d:33:5e:99:c7:7b:89: ce:b5:42:0a:cd:18:2e:2c:2a:82:96:95:5f:1c:e6:5a:dc:23: 1e:05:f0:66:f4:16:a0:a9:9d:fc:5c:d6:10:2c:09:31:14:28: 24:b8:53:c8:44:9f:7d:5d:40:93:fa:f2:7a:16:b4:7b:42:67: ba:6f:59:07 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJkxqx2TX0so4cRhcqJildZHir4owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDAyMDA5WhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzUyMWQxOTVjNWZhYTIzODIyZTA4ZDczZjVjZmU0MDE4 M2FhYzAyZGY4ZDdiOWY0NTAxYzQxMjY0MDRhODI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy+IDV4jFi8i3icVzct94Qqt/MUZUC4XVJd/Z15xpQ6W+e FaAV/flTBDsd39F/3dy8DHMhWbUkkYKODQEdVWY3CxNXWGyJX/HnhNJDC/5RohpO lcARXTr/85/Q3Kdt/d6mdDKchjyL9BwBkW7VLOl8cDKuusCip2zJ66w+vVGImfSX 91/He/Bbmr/GzXlLFGSH2DvOHvncwleSFeTneCWi7xLXXm8mdi0F1H1jCDUUbOFJ hjGS48cPyVIvZ29SUCHSO72y10g5rlqffHdD2kAqsnsoWOLc4Dp4/7dnA8J8lezK MZX+9JJrKYFGE6qx7vtqKl6LuXlSJceDN9tP/LT1AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUHGMXFDU4WiQfQU+0Ld9O72O8ywUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA1NzI4NTFhLWQxMzktNGZiYi1iZjBlLTkzNmFjODQyY2U0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB+ggDANBgkqhkiG9w0BAQsFAAOCAQEAPHk9wlwEqzfM9p4nXdaZ2qvF ikPIvv1iO7KFK7ADi7aK8/wDI+H/cCUzRW+iPGVdzNwSl1f3SOaKIWUN8MJzoHRD pHw7+Ve/aCMmGHluAEkyLQwC7cOr71YnHonG2ch1idy4RATGwr1GWZNLv5UdCImk zuIX409SlY37p2L5dtrl5VEZsyNuYGO6OdgoUtHlUVOwXbEhmoWFPx5PFfg684p2 FrwcZ1NF+UbWUpSUrnBZ0EfYiPzzywFqlKHsa3RdM16Zx3uJzrVCCs0YLiwqgpaV XxzmWtwjHgXwZvQWoKmd/FzWECwJMRQoJLhTyESffV1Ak/ryeha0e0Jnum9ZBw== -----END CERTIFICATE-----Generated at Wed May 13 01:21:23 2026 by rpki-client