$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58bcb5d7-edb2-4457-b521-154f5aa76dc2.roa File: 58bcb5d7-edb2-4457-b521-154f5aa76dc2.roa (raw, json) Hash identifier: Oz1WftIZP8SnZXAgna9/PObdInfE3DK701b2qlPfpME= Subject key identifier: 5B:92:2C:B0:95:DF:A6:A0:A3:25:DD:1F:CD:91:03:EF:63:43:B7:2C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 06469225764B95470DFCD8E6E5B6C244175FD4F8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58bcb5d7-edb2-4457-b521-154f5aa76dc2.roa Signing time: Tue 12 May 2026 00:21:23 +0000 ROA not before: Tue 12 May 2026 00:21:23 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:2c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:46:92:25:76:4b:95:47:0d:fc:d8:e6:e5:b6:c2:44:17:5f:d4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 00:21:23 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=ec04b4ff192ef097109be991466dbff9a2ed564386b0561a0c4e27e5f79013b8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:cd:32:02:01:a9:4f:81:24:d7:e1:9f:5d: 90:da:67:6c:52:35:bc:05:6e:0e:3a:c9:ff:ff:9b: 40:3f:67:ad:06:a9:9b:19:d4:09:04:cf:78:c9:9e: cd:25:24:df:58:6a:53:85:33:0f:7b:90:ef:90:5d: 20:fd:32:70:76:bf:2c:ae:c2:c5:c8:ea:47:7f:d4: 61:4c:e2:b3:81:65:a2:a2:ba:8c:59:6e:ca:a0:5e: ee:34:74:a2:c5:c3:82:41:ee:29:f5:00:1c:16:0d: 1c:5f:e8:fb:68:65:5b:65:87:f7:7f:00:57:29:8b: 62:df:27:8f:8b:4d:49:2a:55:a1:45:81:24:58:db: a2:c6:3f:1d:e1:88:88:f7:75:0b:96:2d:a1:0d:d0: 8b:2a:94:2b:0d:74:6a:40:ed:99:d9:50:bf:48:bd: e2:dd:46:c1:39:3f:89:51:70:9f:8b:29:af:c2:ff: b9:ce:6e:db:f6:26:a1:57:a1:1a:9c:2d:eb:fd:05: 98:8b:86:c6:5e:d1:89:af:46:b2:19:e6:03:89:a8: 46:e2:e2:77:81:9c:f1:59:ab:8c:2a:f6:8c:4c:6c: 39:8c:4c:ae:7c:8d:fa:ef:03:f5:7b:a0:65:7b:f6: 04:25:31:c9:1b:49:9c:a5:2a:ec:87:b4:dd:2a:16: 48:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:92:2C:B0:95:DF:A6:A0:A3:25:DD:1F:CD:91:03:EF:63:43:B7:2C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58bcb5d7-edb2-4457-b521-154f5aa76dc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:2c00::/48 Signature Algorithm: sha256WithRSAEncryption 81:de:ff:c2:9f:e4:9a:6b:0a:6a:ae:11:c0:8a:9b:a9:68:21: 6c:bb:83:2a:9b:64:d1:7b:26:ea:de:28:3a:57:76:d0:0f:26: 36:55:16:cc:66:38:3b:6e:c6:83:3a:51:31:8c:51:71:e7:87: 87:f8:6c:41:72:35:db:15:78:1f:6d:2e:b8:f9:3d:f9:01:e7: 0d:63:b7:34:f4:2a:39:35:e2:db:02:6b:b3:ef:24:22:2e:54: 52:d8:55:d5:e9:26:c1:40:6a:7b:0f:10:ab:5c:b3:c8:dd:99: e9:fe:9e:d3:7d:66:1d:8f:64:8c:28:41:4b:b5:c6:40:9b:78: db:41:85:c7:55:8c:93:ff:95:92:18:e4:e5:93:96:f4:95:d2: 31:9a:ea:1c:8b:d5:37:ab:90:0e:fe:7d:19:d4:60:94:c4:92: 0b:2f:d1:a6:57:3c:c8:71:cc:04:45:cc:03:66:f1:bf:a8:ad: 7c:31:51:f7:58:2b:bc:99:d1:26:19:d0:9a:df:a0:cd:78:79: 40:2d:fc:da:97:1b:80:80:d9:29:72:0b:ca:89:59:7f:62:30: fe:33:b8:3e:f7:7d:20:f7:38:85:bf:7f:73:cd:70:8b:f9:57: 67:c0:31:91:85:b2:13:b3:77:c5:29:40:db:3d:85:75:b7:fd: 40:67:ab:89 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBkaSJXZLlUcN/Njm5bbCRBdf1PgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDAyMTIzWhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzA0YjRmZjE5MmVmMDk3MTA5YmU5OTE0NjZkYmZmOWEy ZWQ1NjQzODZiMDU2MWEwYzRlMjdlNWY3OTAxM2I4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzI80yAgGpT4Ek1+GfXZDaZ2xSNbwFbg46yf//m0A/Z60G qZsZ1AkEz3jJns0lJN9YalOFMw97kO+QXSD9MnB2vyyuwsXI6kd/1GFM4rOBZaKi uoxZbsqgXu40dKLFw4JB7in1ABwWDRxf6PtoZVtlh/d/AFcpi2LfJ4+LTUkqVaFF gSRY26LGPx3hiIj3dQuWLaEN0IsqlCsNdGpA7ZnZUL9IveLdRsE5P4lRcJ+LKa/C /7nObtv2JqFXoRqcLev9BZiLhsZe0YmvRrIZ5gOJqEbi4neBnPFZq4wq9oxMbDmM TK58jfrvA/V7oGV79gQlMckbSZylKuyHtN0qFkhHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUW5IssJXfpqCjJd0fzZED72NDtywwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU4YmNiNWQ3LWVkYjItNDQ1Ny1iNTIxLTE1NGY1YWE3NmRjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sLAAwDQYJKoZIhvcNAQELBQADggEBAIHe/8Kf5JprCmquEcCKm6lo IWy7gyqbZNF7JureKDpXdtAPJjZVFsxmODtuxoM6UTGMUXHnh4f4bEFyNdsVeB9t Lrj5PfkB5w1jtzT0Kjk14tsCa7PvJCIuVFLYVdXpJsFAansPEKtcs8jdmen+ntN9 Zh2PZIwoQUu1xkCbeNtBhcdVjJP/lZIY5OWTlvSV0jGa6hyL1TerkA7+fRnUYJTE kgsv0aZXPMhxzARFzANm8b+orXwxUfdYK7yZ0SYZ0JrfoM14eUAt/NqXG4CA2Sly C8qJWX9iMP4zuD73fSD3OIW/f3PNcIv5V2fAMZGFshOzd8UpQNs9hXW3/UBnq4k= -----END CERTIFICATE-----Generated at Wed May 13 00:40:02 2026 by rpki-client