$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e1adddc-4622-4699-97d5-c55279fbf04a.roa File: 5e1adddc-4622-4699-97d5-c55279fbf04a.roa (raw, json) Hash identifier: ZrEksNK+aOMWEEgCEo516ng1cTw3W7qRjPVaJZjK23I= Subject key identifier: C4:D6:22:58:45:FC:A6:FE:CA:67:8B:41:7C:7C:B7:C4:FF:B4:D7:EE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5C5F51C27E55F4059966815DFD59F8ACCA94FA37 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e1adddc-4622-4699-97d5-c55279fbf04a.roa Signing time: Tue 05 May 2026 00:30:48 +0000 ROA not before: Tue 05 May 2026 00:30:48 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:41a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5f:51:c2:7e:55:f4:05:99:66:81:5d:fd:59:f8:ac:ca:94:fa:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 00:30:48 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=139729767ce54929b7fe571aa61f79ae34da4b4cf369b72b9eec1960675c1068, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ae:f7:b6:08:a6:86:bf:2d:cc:ac:ea:79:af: 33:ce:cf:37:2a:2b:2f:54:44:16:f5:b0:0a:28:82: e2:5b:24:ac:ae:2c:82:96:fe:6d:25:31:94:0b:c1: a4:d2:d7:fe:8b:c0:bf:1f:b3:97:a6:15:7f:5d:f9: 92:59:f7:2b:e8:47:bb:bb:0e:b1:2d:1c:0a:3e:00: df:db:78:83:dd:1a:2f:fc:c8:bd:6a:d1:b2:84:bc: 36:a7:bc:2e:62:7e:5c:07:94:80:7c:90:53:22:e9: 7e:0f:b9:6d:fe:e2:f9:20:7a:e1:e9:98:b1:99:86: 59:5e:87:c2:af:c9:01:e8:08:83:e3:75:78:6a:6c: a8:60:0e:0a:f0:a5:7a:33:84:bd:7b:7f:f2:dd:89: 84:b1:9b:a7:24:9c:b2:29:9a:9b:40:37:bf:9c:af: 1b:ce:76:cb:ca:03:68:18:77:b8:43:ce:4c:cf:e1: 8a:ec:c2:6b:48:2e:a3:58:38:49:8b:7c:d3:e1:e1: 10:8e:77:c5:d0:13:12:30:99:c0:28:72:c2:59:80: 6b:b8:69:d3:ba:df:ed:ec:75:ff:53:f8:81:ef:6a: 8a:94:2b:b4:46:d1:b7:3b:f7:ad:ab:ea:2b:97:91: d7:b2:d0:b5:de:d5:e4:24:51:4c:0f:85:12:02:6b: 68:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D6:22:58:45:FC:A6:FE:CA:67:8B:41:7C:7C:B7:C4:FF:B4:D7:EE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e1adddc-4622-4699-97d5-c55279fbf04a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:41a0::/48 Signature Algorithm: sha256WithRSAEncryption 16:23:51:64:47:b1:6a:02:0b:05:b9:bf:6b:c8:2e:0b:f7:ed: c0:ea:33:3a:2c:b9:0f:26:d9:d8:76:df:38:5c:fa:44:fa:8b: 45:a5:5a:d5:f9:92:57:25:f8:a9:21:85:31:60:c3:3e:2c:5b: 40:9c:38:99:50:6d:a1:03:75:45:9c:be:2b:e3:a8:d5:02:23: 95:52:80:47:52:f6:34:2d:c2:3a:8c:bc:3c:5f:2a:0b:dd:36: 61:41:28:c8:05:83:70:d0:8b:07:d4:1f:d5:ad:2a:67:3d:0c: 22:a4:a0:64:e3:ac:d6:55:53:56:e2:55:f5:8e:24:7e:85:30: 31:b4:2c:ac:9a:d9:ba:bc:c5:32:93:23:b0:04:b9:e4:67:26: 25:10:a0:97:bc:3d:08:2f:08:47:1a:f5:61:d1:b1:9d:f9:db: 8a:00:f1:ec:86:66:ff:81:6a:ac:fd:93:e1:33:1f:12:08:51: 41:04:b3:b2:af:d7:73:29:04:64:46:56:50:34:b3:c1:7e:86: b3:5e:1a:7f:47:2b:fb:00:ed:f8:e0:cd:be:de:fb:87:26:59: 31:2e:77:9b:fb:33:d6:26:a3:1b:74:78:6d:e0:58:7f:dd:64: 80:98:25:4b:73:40:d4:e5:39:1b:4d:27:c2:36:82:db:bf:8e: d6:26:8c:1a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXF9Rwn5V9AWZZoFd/Vn4rMqU+jcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA1MDAzMDQ4WhcNMjYwODAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzk3Mjk3NjdjZTU0OTI5YjdmZTU3MWFhNjFmNzlhZTM0 ZGE0YjRjZjM2OWI3MmI5ZWVjMTk2MDY3NWMxMDY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSrve2CKaGvy3MrOp5rzPOzzcqKy9URBb1sAooguJbJKyu LIKW/m0lMZQLwaTS1/6LwL8fs5emFX9d+ZJZ9yvoR7u7DrEtHAo+AN/beIPdGi/8 yL1q0bKEvDanvC5iflwHlIB8kFMi6X4PuW3+4vkgeuHpmLGZhlleh8KvyQHoCIPj dXhqbKhgDgrwpXozhL17f/LdiYSxm6cknLIpmptAN7+crxvOdsvKA2gYd7hDzkzP 4YrswmtILqNYOEmLfNPh4RCOd8XQExIwmcAocsJZgGu4adO63+3sdf9T+IHvaoqU K7RG0bc7962r6iuXkdey0LXe1eQkUUwPhRICa2inAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxNYiWEX8pv7KZ4tBfHy3xP+01+4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlMWFkZGRjLTQ2MjItNDY5OS05N2Q1LWM1NTI3OWZiZjA0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AQaAwDQYJKoZIhvcNAQELBQADggEBABYjUWRHsWoCCwW5v2vILgv3 7cDqMzosuQ8m2dh23zhc+kT6i0WlWtX5klcl+KkhhTFgwz4sW0CcOJlQbaEDdUWc vivjqNUCI5VSgEdS9jQtwjqMvDxfKgvdNmFBKMgFg3DQiwfUH9WtKmc9DCKkoGTj rNZVU1biVfWOJH6FMDG0LKya2bq8xTKTI7AEueRnJiUQoJe8PQgvCEca9WHRsZ35 24oA8eyGZv+Baqz9k+EzHxIIUUEEs7Kv13MpBGRGVlA0s8F+hrNeGn9HK/sA7fjg zb7e+4cmWTEud5v7M9Ymoxt0eG3gWH/dZICYJUtzQNTlORtNJ8I2gtu/jtYmjBo= -----END CERTIFICATE-----Generated at Tue May 12 21:54:56 2026 by rpki-client