$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33d00f85-2dad-40e9-ad84-05aa8de0f228.roa File: 33d00f85-2dad-40e9-ad84-05aa8de0f228.roa (raw, json) Hash identifier: bIjoEMR5ssmLy3PD9zCTHIUYvQXIf7sYNM648Z6mF0w= Subject key identifier: 78:78:87:CD:7A:AE:3F:D5:E4:CC:27:4C:9E:7D:31:C9:C7:B9:34:6D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0132FD04E13997764C1442C3DB6FA9E5EB613C95 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33d00f85-2dad-40e9-ad84-05aa8de0f228.roa Signing time: Fri 01 May 2026 01:00:09 +0000 ROA not before: Fri 01 May 2026 01:00:09 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1b:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:32:fd:04:e1:39:97:76:4c:14:42:c3:db:6f:a9:e5:eb:61:3c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 1 01:00:09 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=dc75b596869f4c20dde455c1271514efae87bc5fb2c2f3635caddc03b1b3c707, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:d7:ff:48:34:fa:59:90:69:a8:82:29:2e: 79:82:10:da:fa:ac:be:03:eb:e8:6c:34:de:f5:96: 36:ef:87:bc:4c:7a:3c:c6:a4:04:c4:4f:36:40:b3: 30:d8:6a:ee:8e:67:25:16:c8:2a:e0:5c:ae:ad:d4: ea:53:ad:3c:94:25:20:ef:45:6b:ca:dd:80:97:68: 14:c8:a5:19:74:f3:57:f0:51:9e:98:fc:63:2c:fa: 28:20:65:14:52:d6:ff:cd:bd:d4:8d:80:a9:58:b5: c7:f9:69:33:e7:b6:e1:dd:87:66:1b:13:c3:8f:5d: 51:65:96:f4:59:58:40:0e:90:d6:16:41:e6:9f:fd: d5:22:cb:1c:75:86:ba:cb:fb:fe:d9:4b:89:1e:f1: f1:1e:a0:ba:b1:96:aa:80:ea:49:e3:20:05:d3:2d: 19:85:9e:31:0e:ee:9b:0f:1e:ed:28:65:15:f9:e8: 23:a7:2d:fe:6b:3b:14:1e:76:8f:69:20:27:c4:9e: 61:34:c8:c9:94:01:c3:46:01:75:5b:6d:a2:cb:c4: 58:08:aa:ad:0e:ca:20:4b:7b:4e:d8:eb:d4:5e:03: 96:25:d5:0b:c2:b3:cf:82:0a:df:29:67:95:fb:64: 24:30:75:1b:62:8e:ba:bf:33:35:8b:3b:06:6f:e2: 47:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:78:87:CD:7A:AE:3F:D5:E4:CC:27:4C:9E:7D:31:C9:C7:B9:34:6D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33d00f85-2dad-40e9-ad84-05aa8de0f228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1b:8000::/36 Signature Algorithm: sha256WithRSAEncryption 3a:6e:c4:09:8a:43:a0:79:4a:3b:e7:1c:b6:99:b0:29:90:2d: 75:12:90:8e:77:6c:e8:f0:d6:be:0e:9c:0b:b4:15:8d:92:a0: 26:c7:61:fd:39:15:f6:65:54:ae:f1:fc:8f:46:1d:3f:2e:64: c2:05:0d:52:e3:a9:28:b9:7f:17:2e:7d:dd:0b:a0:73:14:ef: 68:9c:cd:6d:e1:00:a8:fb:bc:d2:58:3e:d4:87:1e:c6:b5:8c: 77:55:45:52:13:d9:a0:78:96:fd:38:53:5c:01:45:a4:2b:89: dc:60:8d:68:3b:67:47:66:52:98:1b:a6:d3:34:76:5c:80:1e: fe:25:54:2f:8f:aa:8f:87:59:11:bc:77:7a:0c:4f:da:ff:37: da:10:16:dc:7c:f9:a6:6b:01:b2:8c:a4:95:eb:29:41:90:1f: 2e:f3:03:08:6d:f4:52:b8:23:9d:29:1d:7a:81:87:dd:37:62: cb:4f:87:03:dc:6c:c0:c7:d1:d0:37:3d:5a:d0:7b:65:0c:73: b2:70:a8:7e:5c:9d:55:80:38:bc:d5:7c:92:50:25:d7:97:c3: 6f:f0:db:15:b3:a0:fd:1d:47:c3:4b:68:b5:b5:1a:72:18:98: a0:ee:3c:92:e1:e8:00:26:f9:32:65:92:44:59:b6:03:e8:c3: c4:a6:9d:5b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUATL9BOE5l3ZMFELD22+p5ethPJUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDEwMDA5WhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYzc1YjU5Njg2OWY0YzIwZGRlNDU1YzEyNzE1MTRlZmFl ODdiYzVmYjJjMmYzNjM1Y2FkZGMwM2IxYjNjNzA3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7Ytf/SDT6WZBpqIIpLnmCENr6rL4D6+hsNN71ljbvh7xM ejzGpATETzZAszDYau6OZyUWyCrgXK6t1OpTrTyUJSDvRWvK3YCXaBTIpRl081fw UZ6Y/GMs+iggZRRS1v/NvdSNgKlYtcf5aTPntuHdh2YbE8OPXVFllvRZWEAOkNYW Qeaf/dUiyxx1hrrL+/7ZS4ke8fEeoLqxlqqA6knjIAXTLRmFnjEO7psPHu0oZRX5 6COnLf5rOxQedo9pICfEnmE0yMmUAcNGAXVbbaLLxFgIqq0OyiBLe07Y69ReA5Yl 1QvCs8+CCt8pZ5X7ZCQwdRtijrq/MzWLOwZv4kdbAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUeHiHzXquP9XkzCdMnn0xyce5NG0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMzZDAwZjg1LTJkYWQtNDBlOS1hZDg0LTA1YWE4ZGUwZjIyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8bgDANBgkqhkiG9w0BAQsFAAOCAQEAOm7ECYpDoHlKO+cctpmwKZAt dRKQjnds6PDWvg6cC7QVjZKgJsdh/TkV9mVUrvH8j0YdPy5kwgUNUuOpKLl/Fy59 3QugcxTvaJzNbeEAqPu80lg+1IcexrWMd1VFUhPZoHiW/ThTXAFFpCuJ3GCNaDtn R2ZSmBum0zR2XIAe/iVUL4+qj4dZEbx3egxP2v832hAW3Hz5pmsBsoyklespQZAf LvMDCG30UrgjnSkdeoGH3Tdiy0+HA9xswMfR0Dc9WtB7ZQxzsnCoflydVYA4vNV8 klAl15fDb/DbFbOg/R1Hw0totbUachiYoO48kuHoACb5MmWSRFm2A+jDxKadWw== -----END CERTIFICATE-----Generated at Tue May 12 21:59:08 2026 by rpki-client