$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34b35839-e995-446c-9ecf-36b3c098ff36.roa File: 34b35839-e995-446c-9ecf-36b3c098ff36.roa (raw, json) Hash identifier: //zZ7cvLeia6IE6nhi+PKkHey/xjqve6t+6ppvuwNU0= Subject key identifier: 15:F0:41:09:E3:8B:A0:3F:52:A1:F9:8D:BF:F3:40:EE:55:70:F0:CE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 164218E727BA6DCA174C1A6C1C6358000E88809B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34b35839-e995-446c-9ecf-36b3c098ff36.roa Signing time: Tue 12 May 2026 00:20:46 +0000 ROA not before: Tue 12 May 2026 00:20:46 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:a800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:42:18:e7:27:ba:6d:ca:17:4c:1a:6c:1c:63:58:00:0e:88:80:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 00:20:46 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=3266a8074724a0f2d2572fc03bec82471d6a886ea723f3f0d33cd1e81fb7c80c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:5e:67:2f:06:6d:50:d6:66:e4:2e:28:36:cb: 99:f2:eb:9d:82:0d:34:06:4b:46:cd:c8:9f:79:fb: 2f:da:1c:9c:77:aa:ae:9d:53:63:d3:6e:23:cd:e3: a6:b2:45:63:18:56:13:ca:92:37:a2:7b:91:06:e6: f0:cc:f5:1a:6a:bb:e1:c5:54:6d:a0:97:f4:78:ff: 5e:a7:cf:07:e2:ae:70:24:66:75:9f:41:56:a5:28: 27:39:ed:5f:cc:69:ff:64:b4:18:f1:96:7f:2c:64: 08:66:91:bf:7f:e3:80:16:3e:d0:73:4f:e4:5a:29: 38:d9:89:65:ff:61:93:54:77:72:11:8c:ef:16:d3: 23:33:01:50:6c:eb:81:d4:4f:a1:44:4f:a0:aa:45: c5:c9:d2:c0:b0:91:e4:ee:a2:8a:dc:45:10:86:07: 17:96:26:72:e9:52:c6:c3:68:90:38:74:ee:ea:22: 1f:45:44:56:d7:c8:cb:15:5c:80:09:cf:8f:77:73: 77:cd:cd:92:fe:a7:31:04:b2:d7:9b:f1:74:25:09: 83:3b:76:6a:f5:ca:c5:6c:a2:a8:c9:52:3a:a8:24: 25:06:6b:7e:8f:03:27:19:18:b4:e8:7f:ac:51:47: 65:09:c6:82:ab:5e:e8:86:dc:27:c1:6c:08:73:65: 79:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F0:41:09:E3:8B:A0:3F:52:A1:F9:8D:BF:F3:40:EE:55:70:F0:CE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34b35839-e995-446c-9ecf-36b3c098ff36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:a800::/48 Signature Algorithm: sha256WithRSAEncryption 06:3b:f4:50:04:1c:6e:1b:2e:b8:9d:b2:97:de:5e:c3:06:48: 3e:c6:42:5e:1d:8c:fd:3b:60:a9:fc:2d:12:62:84:aa:95:6f: 18:6f:b6:b0:86:58:64:97:c3:cf:05:69:d5:ff:55:a4:58:2c: 4a:7c:5c:ad:16:67:93:0a:e3:bf:3d:56:01:7a:97:3d:b1:ff: e5:60:3d:3d:7f:2b:f3:5e:87:20:b8:72:c0:30:c7:0b:24:68: 36:1d:da:55:42:49:14:7e:4b:b7:b9:cf:29:96:9a:a4:8b:6c: fe:c5:a1:95:81:4f:47:89:8a:a2:02:96:b9:b1:1f:86:97:37: c6:e1:87:73:53:a7:39:84:80:0f:fc:91:2b:cb:68:97:2c:3b: 45:4e:f1:f5:e0:55:0f:31:86:e9:25:83:99:1d:46:b3:b0:2e: ac:69:b7:f3:c0:01:e3:75:21:38:a7:0e:bd:5c:f9:98:46:3b: c2:b0:01:9e:c2:50:3d:cd:46:bd:5f:b3:5e:68:a3:bf:3e:eb: e9:fd:ba:e5:7a:b2:93:b2:94:31:2b:15:b2:17:fd:82:c9:3b: 20:b5:46:e6:08:23:3d:89:fc:50:87:a1:8a:0c:46:0e:94:07: ce:ce:c4:d9:30:bc:84:b8:59:08:8f:1e:94:e2:30:a8:31:05: f6:6c:5a:60 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFkIY5ye6bcoXTBpsHGNYAA6IgJswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDAyMDQ2WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjY2YTgwNzQ3MjRhMGYyZDI1NzJmYzAzYmVjODI0NzFk NmE4ODZlYTcyM2YzZjBkMzNjZDFlODFmYjdjODBjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD6XmcvBm1Q1mbkLig2y5ny652CDTQGS0bNyJ95+y/aHJx3 qq6dU2PTbiPN46ayRWMYVhPKkjeie5EG5vDM9Rpqu+HFVG2gl/R4/16nzwfirnAk ZnWfQValKCc57V/Maf9ktBjxln8sZAhmkb9/44AWPtBzT+RaKTjZiWX/YZNUd3IR jO8W0yMzAVBs64HUT6FET6CqRcXJ0sCwkeTuoorcRRCGBxeWJnLpUsbDaJA4dO7q Ih9FRFbXyMsVXIAJz493c3fNzZL+pzEEsteb8XQlCYM7dmr1ysVsoqjJUjqoJCUG a36PAycZGLTof6xRR2UJxoKrXuiG3CfBbAhzZXkrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFfBBCeOLoD9SofmNv/NA7lVw8M4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM0YjM1ODM5LWU5OTUtNDQ2Yy05ZWNmLTM2YjNjMDk4ZmYzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sqAAwDQYJKoZIhvcNAQELBQADggEBAAY79FAEHG4bLridspfeXsMG SD7GQl4djP07YKn8LRJihKqVbxhvtrCGWGSXw88FadX/VaRYLEp8XK0WZ5MK4789 VgF6lz2x/+VgPT1/K/NehyC4csAwxwskaDYd2lVCSRR+S7e5zymWmqSLbP7FoZWB T0eJiqIClrmxH4aXN8bhh3NTpzmEgA/8kSvLaJcsO0VO8fXgVQ8xhuklg5kdRrOw Lqxpt/PAAeN1ITinDr1c+ZhGO8KwAZ7CUD3NRr1fs15oo78+6+n9uuV6spOylDEr FbIX/YLJOyC1RuYIIz2J/FCHoYoMRg6UB87OxNkwvIS4WQiPHpTiMKgxBfZsWmA= -----END CERTIFICATE-----Generated at Tue May 12 22:14:10 2026 by rpki-client