$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ef171f4-d219-49eb-ac07-144c5d17e7db.roa File: 0ef171f4-d219-49eb-ac07-144c5d17e7db.roa (raw, json) Hash identifier: NkBD9eVmCx13AkHCrteB4BFcquKuI/hz7/r1nvLraKY= Subject key identifier: 20:FD:2F:9B:E1:84:38:A7:25:67:8E:BD:72:0A:9B:E9:91:71:06:4A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7575AED0B87141DE1CE4A37B7B3885A9A341FE69 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ef171f4-d219-49eb-ac07-144c5d17e7db.roa Signing time: Mon 04 May 2026 00:10:52 +0000 ROA not before: Mon 04 May 2026 00:10:52 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:ec00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:75:ae:d0:b8:71:41:de:1c:e4:a3:7b:7b:38:85:a9:a3:41:fe:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 00:10:52 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=0008bb06621251eb599054f06a4b73cd965582d5575fb479b5751c398127635c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:10:e9:9f:6d:1c:db:18:cd:a3:fb:8a:a2:ea: 49:41:29:9e:f8:36:5b:e1:2f:63:2b:34:97:4a:60: df:1d:a9:0b:38:a3:8e:57:8b:e2:46:33:19:e8:80: 0b:c4:0e:96:78:09:a1:be:22:5e:b8:e0:46:d7:f1: e2:ef:97:c8:b8:9b:6c:16:31:c7:1f:4b:94:c4:6f: e7:1c:ca:e5:33:63:11:86:d5:32:20:92:8f:9a:4a: 2d:60:64:e7:35:41:53:ed:eb:c3:06:cb:3a:03:e7: da:a9:42:bf:83:97:31:0a:84:bf:1a:db:c3:2f:55: da:15:0c:24:27:e8:49:9a:d9:cc:7a:44:53:c5:13: 01:b9:57:e7:a7:2b:d8:71:db:bb:26:42:36:ec:e8: 7d:15:13:82:21:a2:9f:6f:a8:92:ba:ab:41:7a:3d: 8a:d7:8a:d2:16:ac:ca:60:0d:ec:dc:cd:69:6f:c1: 7c:0b:cb:38:79:f5:24:27:f6:49:2f:89:ac:ca:b4: 77:19:c9:c4:1c:c9:8b:17:11:28:af:f8:ee:ce:53: 14:13:87:e7:96:6c:85:92:1e:7b:6a:45:3c:75:89: 92:ca:7e:b0:29:db:1b:c6:03:c6:79:ee:4f:1c:0d: 00:19:91:32:7d:08:1b:35:ad:03:ea:26:84:c3:25: 95:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FD:2F:9B:E1:84:38:A7:25:67:8E:BD:72:0A:9B:E9:91:71:06:4A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ef171f4-d219-49eb-ac07-144c5d17e7db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:ec00::/40 Signature Algorithm: sha256WithRSAEncryption 29:99:01:dc:4b:80:0a:9b:c7:d7:37:9f:ab:28:d8:0a:44:a8: 75:77:83:f9:e3:e9:96:8a:7c:b1:e6:40:8d:ac:2a:9f:b4:98: 35:ad:a7:99:c1:f6:f1:15:cb:98:c5:54:16:0c:35:c0:ae:55: 5f:3b:b5:b3:5c:a8:fc:08:b7:cf:c4:62:99:1e:63:a8:55:c3: 79:33:5e:8c:cc:51:b8:6c:94:3b:3d:cd:c8:dd:31:45:9b:07: 92:25:c9:9f:18:68:f4:2c:c6:9d:a2:6b:97:db:09:d8:12:6c: c2:be:72:41:3b:dd:b2:f2:a0:1e:c9:59:75:50:20:01:10:f2: 33:76:f0:17:d4:b6:25:29:84:28:cb:42:db:c1:5e:84:0b:da: e2:40:ab:ea:bc:70:3b:31:93:14:a3:ec:e0:fe:b2:30:29:38: 78:38:30:da:d2:65:6f:31:c6:5d:e7:73:08:db:d8:0a:9e:99: 62:2b:38:95:e7:45:9f:4e:6e:4c:1d:08:0a:d4:c8:fb:22:12: 75:42:3c:43:50:93:6f:48:50:f3:29:2f:09:91:18:ab:1e:3d: ec:b4:da:b9:7d:30:71:bd:4e:ed:c9:b2:9f:c9:ab:80:b8:b0: 44:43:ef:07:ea:18:36:20:a1:ed:1e:2f:24:46:f6:35:3a:25: ae:3a:a7:56 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUdXWu0LhxQd4c5KN7eziFqaNB/mkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDAxMDUyWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDA4YmIwNjYyMTI1MWViNTk5MDU0ZjA2YTRiNzNjZDk2 NTU4MmQ1NTc1ZmI0NzliNTc1MWMzOTgxMjc2MzVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqEOmfbRzbGM2j+4qi6klBKZ74NlvhL2MrNJdKYN8dqQs4 o45Xi+JGMxnogAvEDpZ4CaG+Il644EbX8eLvl8i4m2wWMccfS5TEb+ccyuUzYxGG 1TIgko+aSi1gZOc1QVPt68MGyzoD59qpQr+DlzEKhL8a28MvVdoVDCQn6Ema2cx6 RFPFEwG5V+enK9hx27smQjbs6H0VE4Ihop9vqJK6q0F6PYrXitIWrMpgDezczWlv wXwLyzh59SQn9kkviazKtHcZycQcyYsXESiv+O7OUxQTh+eWbIWSHntqRTx1iZLK frAp2xvGA8Z57k8cDQAZkTJ9CBs1rQPqJoTDJZU1AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUIP0vm+GEOKclZ469cgqb6ZFxBkowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBlZjE3MWY0LWQyMTktNDllYi1hYzA3LTE0NGM1ZDE3ZTdkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9h7DANBgkqhkiG9w0BAQsFAAOCAQEAKZkB3EuACpvH1zefqyjYCkSo dXeD+ePplop8seZAjawqn7SYNa2nmcH28RXLmMVUFgw1wK5VXzu1s1yo/Ai3z8Ri mR5jqFXDeTNejMxRuGyUOz3NyN0xRZsHkiXJnxho9CzGnaJrl9sJ2BJswr5yQTvd svKgHslZdVAgARDyM3bwF9S2JSmEKMtC28FehAva4kCr6rxwOzGTFKPs4P6yMCk4 eDgw2tJlbzHGXedzCNvYCp6ZYis4ledFn05uTB0ICtTI+yISdUI8Q1CTb0hQ8ykv CZEYqx497LTauX0wcb1O7cmyn8mrgLiwREPvB+oYNiCh7R4vJEb2NTolrjqnVg== -----END CERTIFICATE-----Generated at Tue May 12 21:52:00 2026 by rpki-client