$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e38c9d2-1a67-4093-a53b-ef1b5ba7c156.roa File: 0e38c9d2-1a67-4093-a53b-ef1b5ba7c156.roa (raw, json) Hash identifier: 38NW/g8DnqIUt3wTDFWiufTPXcKaUEWzWODeFaieaKY= Subject key identifier: 5D:02:96:15:B8:95:8E:BB:8F:16:57:77:AF:47:9F:24:56:8F:2B:05 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70B543EE511778FBA6A44287496E40D5A70CCE89 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e38c9d2-1a67-4093-a53b-ef1b5ba7c156.roa Signing time: Fri 08 May 2026 00:20:08 +0000 ROA not before: Fri 08 May 2026 00:20:08 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff4:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b5:43:ee:51:17:78:fb:a6:a4:42:87:49:6e:40:d5:a7:0c:ce:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 00:20:08 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=c9bd8deab3a415fa363579e5a3ba0cd92f24c78cf5e0801f7454d2b0b5a97ca5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:92:9a:62:31:70:c2:a4:ff:75:99:98:8d:26: dc:33:50:d7:1b:30:d5:be:58:b9:b4:db:0a:fa:fd: 3f:3d:ca:53:7f:8e:36:fd:62:42:40:c2:33:3c:3a: 2f:44:3e:8c:d2:b9:57:36:73:f8:65:6a:85:d7:84: 0e:12:c0:11:41:b8:46:52:47:83:1e:1b:02:ad:f7: b2:ea:2d:bc:12:25:00:80:2e:84:c7:27:18:e9:15: b0:8f:4e:2e:dd:1b:08:c2:58:bf:3c:f6:f4:19:b0: 99:e7:91:58:9b:0b:b0:ef:88:6e:76:fe:93:a5:f4: 18:57:fe:7b:48:4d:60:01:a1:62:8f:7d:66:e4:e7: 51:2e:43:c6:e8:44:d7:77:60:9a:dd:f7:c2:98:8b: c0:60:ad:af:cd:8b:f3:0a:de:bd:9d:0c:8b:38:e3: 57:5d:b7:68:7f:13:8d:0d:89:c3:2c:7d:3f:31:26: e0:48:3f:b6:07:ff:78:ab:de:3c:62:fc:8f:d5:43: 5d:6e:f6:5e:1f:e3:c8:1b:3f:e6:f3:56:db:22:5c: 65:9a:dd:ff:d2:47:97:3f:32:d9:99:eb:e1:78:76: 8f:37:27:0b:4b:8f:f5:6f:34:c3:d7:0b:55:60:48: ca:b4:84:46:1f:3b:3e:d8:8c:68:40:4c:29:68:a2: 72:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:02:96:15:B8:95:8E:BB:8F:16:57:77:AF:47:9F:24:56:8F:2B:05 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e38c9d2-1a67-4093-a53b-ef1b5ba7c156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:8000::/39 Signature Algorithm: sha256WithRSAEncryption 54:6a:49:6d:97:25:e1:76:49:c0:d9:84:12:16:4d:68:71:ad: 24:7c:fa:e8:97:ba:35:e5:ab:61:1c:b2:c9:0d:2e:cb:e6:f4: 64:a6:5a:e3:be:83:4d:67:50:b0:b1:3a:fd:2e:84:76:9a:ad: 28:b4:69:67:56:8c:2c:9a:ed:bd:80:1f:f9:c3:a2:ad:6a:af: 71:ff:c4:00:cd:cc:33:06:eb:4b:15:0b:ac:50:a9:8f:97:1d: e0:d0:1f:a8:f3:80:d1:7c:51:ba:ad:ad:e6:47:b2:fa:0b:36: af:90:2f:47:ef:7b:83:9a:13:d7:cf:7f:95:0b:fa:c9:5c:21: dc:8d:c5:cf:fa:c9:1e:55:d2:67:0a:3c:7d:72:f4:63:cc:fb: 8e:4e:41:66:2f:82:ae:c6:45:4e:b6:37:51:76:16:67:fc:cc: 01:18:22:a4:6e:62:e5:84:4e:a4:08:be:0d:3d:7f:68:31:d7: 50:4d:c4:24:a4:a3:87:6d:7d:df:42:ce:44:e2:ef:06:f1:c7: ef:3a:b6:50:f5:2c:3c:9f:50:8b:ee:b6:03:c5:4a:e6:03:cd: 85:3d:e8:28:d2:43:61:fd:97:e7:58:3e:e5:96:77:41:1f:39: 47:f9:a8:11:b5:c0:76:91:0e:6c:ce:c2:8f:11:86:14:2b:bc: 92:86:00:d1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUcLVD7lEXePumpEKHSW5A1acMzokwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA4MDAyMDA4WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjOWJkOGRlYWIzYTQxNWZhMzYzNTc5ZTVhM2JhMGNkOTJm MjRjNzhjZjVlMDgwMWY3NDU0ZDJiMGI1YTk3Y2E1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCykppiMXDCpP91mZiNJtwzUNcbMNW+WLm02wr6/T89ylN/ jjb9YkJAwjM8Oi9EPozSuVc2c/hlaoXXhA4SwBFBuEZSR4MeGwKt97LqLbwSJQCA LoTHJxjpFbCPTi7dGwjCWL889vQZsJnnkVibC7DviG52/pOl9BhX/ntITWABoWKP fWbk51EuQ8boRNd3YJrd98KYi8Bgra/Ni/MK3r2dDIs441ddt2h/E40NicMsfT8x JuBIP7YH/3ir3jxi/I/VQ11u9l4f48gbP+bzVtsiXGWa3f/SR5c/MtmZ6+F4do83 JwtLj/VvNMPXC1VgSMq0hEYfOz7YjGhATCloonK1AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUXQKWFbiVjruPFld3r0efJFaPKwUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBlMzhjOWQyLTFhNjctNDA5My1hNTNiLWVmMWI1YmE3YzE1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/0gDANBgkqhkiG9w0BAQsFAAOCAQEAVGpJbZcl4XZJwNmEEhZNaHGt JHz66Je6NeWrYRyyyQ0uy+b0ZKZa476DTWdQsLE6/S6EdpqtKLRpZ1aMLJrtvYAf +cOirWqvcf/EAM3MMwbrSxULrFCpj5cd4NAfqPOA0XxRuq2t5key+gs2r5AvR+97 g5oT189/lQv6yVwh3I3Fz/rJHlXSZwo8fXL0Y8z7jk5BZi+CrsZFTrY3UXYWZ/zM ARgipG5i5YROpAi+DT1/aDHXUE3EJKSjh21930LOROLvBvHH7zq2UPUsPJ9Qi+62 A8VK5gPNhT3oKNJDYf2X51g+5ZZ3QR85R/moEbXAdpEObM7CjxGGFCu8koYA0Q== -----END CERTIFICATE-----Generated at Tue May 12 21:51:57 2026 by rpki-client