$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6617ab69-c795-45fd-8e5a-6d3247c36652.roa File: 6617ab69-c795-45fd-8e5a-6d3247c36652.roa (raw, json) Hash identifier: 4unsrlVorxRt6UQ+T2utJIs7WMx2Mp9AAQOThRkKBe8= Subject key identifier: 91:09:23:0A:7C:F1:92:F3:77:BF:C8:02:54:19:D8:36:7C:C3:FA:FD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48D2E786A1F467F9BAC1EB493CC3A174A84A2CCE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6617ab69-c795-45fd-8e5a-6d3247c36652.roa Signing time: Tue 12 May 2026 00:31:25 +0000 ROA not before: Tue 12 May 2026 00:31:25 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fec:9400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d2:e7:86:a1:f4:67:f9:ba:c1:eb:49:3c:c3:a1:74:a8:4a:2c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 00:31:25 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=ce512efbcbc4cc38eabc1063a1258c8e2bf7fb024d46dc91ebfb45fe3a19286c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:46:ea:24:02:44:3d:f6:63:77:23:bf:44: c8:aa:a1:27:0c:aa:b9:08:74:d7:b5:fb:f8:52:d8: eb:63:c5:93:90:7f:c5:d2:b4:2a:fc:a5:2e:8d:14: b1:9d:d9:d7:d1:5e:b7:fb:d3:fb:8c:c4:f3:6b:7d: 96:05:a8:d5:c2:4d:53:99:50:77:8c:d0:83:91:74: db:23:7a:b1:aa:ea:c5:3b:b6:18:b8:c7:09:a9:8a: f0:e6:c5:6b:85:51:d6:77:45:23:5c:86:e0:a5:ef: bd:77:cc:de:f5:af:9a:5a:b9:8e:48:9d:1a:32:f9: c4:48:b0:eb:6c:9c:e3:0f:d5:98:d4:63:51:23:08: 83:8e:3e:60:40:4b:e0:bf:5c:a6:8f:eb:6a:b2:38: 91:ad:42:c1:a8:a9:4c:8b:93:ae:19:a7:b9:17:b0: e5:bd:76:10:ea:65:07:ff:81:da:f8:f5:94:38:61: 36:32:00:ac:77:78:fb:e2:39:cd:d2:9c:e3:94:a5: 7f:b2:0e:0b:30:48:dc:b1:5f:ca:89:94:f1:a9:02: d8:d7:98:9a:ae:36:a3:8c:61:83:21:43:3a:98:f1: d2:c1:3b:b8:ea:32:b4:51:61:c3:b0:e1:05:00:00: 57:d9:2a:36:30:10:87:fe:a0:bc:5f:84:6a:02:00: 96:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:09:23:0A:7C:F1:92:F3:77:BF:C8:02:54:19:D8:36:7C:C3:FA:FD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6617ab69-c795-45fd-8e5a-6d3247c36652.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:9400::/48 Signature Algorithm: sha256WithRSAEncryption 3e:93:f3:5f:3c:cc:6a:19:a8:c0:bc:c9:58:27:e3:af:15:63: 32:06:50:a5:42:5f:ef:20:7f:11:48:ff:24:ea:b0:99:84:15: 3f:b5:e3:79:7e:46:80:2e:71:a3:d8:85:2f:34:40:2d:e6:88: ee:5c:3d:45:6d:06:12:4d:bf:79:53:e1:a4:12:6d:00:cf:fc: 35:b3:70:a7:2b:f9:5f:08:ca:89:38:0d:68:db:83:ca:06:71: 99:e2:3a:bd:10:3a:17:8c:27:9f:6d:7b:fb:1b:de:3b:e0:c2: db:aa:0e:c3:a1:5f:4b:af:ca:79:71:4a:31:de:40:4f:23:3f: cd:d4:dc:42:69:bb:60:a1:f3:31:a3:4c:e8:18:17:50:04:a8: a1:97:b5:70:28:e0:62:aa:69:a2:7b:d8:46:83:e3:1b:4d:1e: b3:77:0a:c3:a8:e9:86:d1:04:ee:c3:6c:19:f8:de:9d:ac:3a: bb:2c:46:8c:a9:cc:7f:3c:ae:02:17:d3:09:f7:55:7d:af:62: 43:79:c2:35:24:e5:6c:b9:77:58:c3:60:2e:53:d2:3d:ea:73: ca:33:0e:3f:40:4c:67:7d:b1:d7:93:bd:6e:cb:53:b5:d9:5b: bd:1a:ba:bf:b1:bc:50:4f:9e:c0:d6:2b:b0:1a:85:dd:67:68: a0:75:e3:54 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSNLnhqH0Z/m6wetJPMOhdKhKLM4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDAzMTI1WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTUxMmVmYmNiYzRjYzM4ZWFiYzEwNjNhMTI1OGM4ZTJi ZjdmYjAyNGQ0NmRjOTFlYmZiNDVmZTNhMTkyODZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAoEbqJAJEPfZjdyO/RMiqoScMqrkIdNe1+/hS2OtjxZOQ f8XStCr8pS6NFLGd2dfRXrf70/uMxPNrfZYFqNXCTVOZUHeM0IORdNsjerGq6sU7 thi4xwmpivDmxWuFUdZ3RSNchuCl7713zN71r5pauY5InRoy+cRIsOtsnOMP1ZjU Y1EjCIOOPmBAS+C/XKaP62qyOJGtQsGoqUyLk64Zp7kXsOW9dhDqZQf/gdr49ZQ4 YTYyAKx3ePviOc3SnOOUpX+yDgswSNyxX8qJlPGpAtjXmJquNqOMYYMhQzqY8dLB O7jqMrRRYcOw4QUAAFfZKjYwEIf+oLxfhGoCAJZpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkQkjCnzxkvN3v8gCVBnYNnzD+v0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY2MTdhYjY5LWM3OTUtNDVmZC04ZTVhLTZkMzI0N2MzNjY1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/slAAwDQYJKoZIhvcNAQELBQADggEBAD6T8188zGoZqMC8yVgn468V YzIGUKVCX+8gfxFI/yTqsJmEFT+143l+RoAucaPYhS80QC3miO5cPUVtBhJNv3lT 4aQSbQDP/DWzcKcr+V8Iyok4DWjbg8oGcZniOr0QOheMJ59te/sb3jvgwtuqDsOh X0uvynlxSjHeQE8jP83U3EJpu2Ch8zGjTOgYF1AEqKGXtXAo4GKqaaJ72EaD4xtN HrN3CsOo6YbRBO7DbBn43p2sOrssRoypzH88rgIX0wn3VX2vYkN5wjUk5Wy5d1jD YC5T0j3qc8ozDj9ATGd9sdeTvW7LU7XZW70aur+xvFBPnsDWK7Aahd1naKB141Q= -----END CERTIFICATE-----Generated at Wed May 13 03:26:03 2026 by rpki-client