$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85b59dcc-993d-4bb9-8658-41d0e953ce90.roa File: 85b59dcc-993d-4bb9-8658-41d0e953ce90.roa (raw, json) Hash identifier: CXuezSQ+7/A+NBkqi8mVVIUmjmnWBwm4RKqiTHm0aX4= Subject key identifier: FC:71:8E:05:0B:88:86:FE:F2:32:4C:74:92:9C:A3:94:19:81:39:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E430311AA8073A5A36D785C65477585F0E4D3E4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85b59dcc-993d-4bb9-8658-41d0e953ce90.roa Signing time: Tue 05 May 2026 00:41:11 +0000 ROA not before: Tue 05 May 2026 00:41:11 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff4:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:43:03:11:aa:80:73:a5:a3:6d:78:5c:65:47:75:85:f0:e4:d3:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 00:41:11 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=8a5517a77aafa501d4acea0681934924bf6af3cb2f9fd7c4ad5bec0029293897, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bf:a3:a1:a0:61:fb:2e:d7:76:e5:78:3b:1f: 36:16:85:31:f9:0a:13:65:07:1a:e5:e1:03:5c:fc: ee:cf:87:16:d9:49:1f:62:d3:9b:8f:ed:cc:47:8b: 98:ad:34:33:c1:4a:62:cc:31:9f:53:f8:1c:d2:19: c8:88:6b:db:8d:27:85:52:52:44:f9:f3:87:42:9d: e1:5d:d6:1f:a0:1b:4d:36:8d:6b:ce:55:6c:02:29: b5:1f:66:5f:50:76:51:8b:e1:13:29:5f:c6:e7:4f: cf:26:d3:25:92:5a:df:78:7d:68:44:87:06:8c:da: af:6f:79:78:4c:42:c1:53:05:7f:74:ff:4e:57:56: 28:ed:e9:76:d2:0d:1c:27:e5:a0:9c:f1:0b:4e:2d: 5d:5f:7a:f0:dc:2e:e0:e0:34:3b:b5:ea:0e:7e:95: 92:de:b9:96:bd:3a:60:63:fb:c4:d3:a5:1e:92:2a: 83:ff:b4:07:df:aa:e6:5c:5e:13:c0:e6:1d:3b:4a: 0c:e5:e9:8c:d9:1f:27:28:d8:3a:81:2a:14:db:b5: 91:94:e8:ff:5a:56:84:ce:40:e9:7c:31:9d:ce:35: 1c:b1:b7:c8:e2:9e:d6:24:67:81:42:d5:5c:86:b4: d4:7d:85:ec:9f:6b:8d:c0:28:64:65:be:9e:10:82: 01:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:71:8E:05:0B:88:86:FE:F2:32:4C:74:92:9C:A3:94:19:81:39:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85b59dcc-993d-4bb9-8658-41d0e953ce90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:e000::/40 Signature Algorithm: sha256WithRSAEncryption 82:d6:ad:70:62:14:9a:6f:a5:fb:83:81:ad:42:a0:f7:94:55: fb:ad:f7:5d:fd:be:1b:46:25:f7:c2:7b:78:1d:7f:b1:ce:d9: 18:79:01:cc:2b:f0:31:05:39:61:e8:c8:93:20:ae:a7:6c:98: 55:c4:76:d2:b8:6b:97:c0:a7:fc:fc:62:98:37:67:67:13:74: ff:6d:4d:f6:23:75:a8:f4:30:38:e3:5f:a7:0c:5a:78:52:52: af:18:85:3f:af:f4:dd:43:d9:8e:0b:81:ad:7f:b4:e7:0e:44: 04:6b:62:be:b2:e1:b8:ee:59:f4:45:ae:4a:9b:09:1a:1c:16: 16:33:2a:e4:14:63:af:e4:fb:23:77:77:5b:0f:0e:ba:20:7c: 69:51:c5:77:93:8f:ba:fe:b9:c8:88:f3:1a:46:a1:1e:98:37: 63:47:35:59:ee:df:36:77:bc:4c:62:30:51:89:92:ff:2f:14: c8:c5:75:21:74:00:7d:c5:16:51:0c:ec:07:44:d2:e4:84:00: 7b:0f:6c:2b:8f:27:fa:93:d6:b5:a6:ea:c8:d6:ca:23:50:f9: 90:ba:29:f2:4c:46:40:8d:0a:ef:2f:9f:63:04:53:da:6b:b9: 48:58:20:b6:3c:b1:84:75:c5:1d:fb:6b:de:40:b1:57:e4:d4: 62:8c:f1:f4 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUDkMDEaqAc6WjbXhcZUd1hfDk0+QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA1MDA0MTExWhcNMjYwODAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YTU1MTdhNzdhYWZhNTAxZDRhY2VhMDY4MTkzNDkyNGJm NmFmM2NiMmY5ZmQ3YzRhZDViZWMwMDI5MjkzODk3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjv6OhoGH7Ltd25Xg7HzYWhTH5ChNlBxrl4QNc/O7PhxbZ SR9i05uP7cxHi5itNDPBSmLMMZ9T+BzSGciIa9uNJ4VSUkT584dCneFd1h+gG002 jWvOVWwCKbUfZl9QdlGL4RMpX8bnT88m0yWSWt94fWhEhwaM2q9veXhMQsFTBX90 /05XVijt6XbSDRwn5aCc8QtOLV1fevDcLuDgNDu16g5+lZLeuZa9OmBj+8TTpR6S KoP/tAffquZcXhPA5h07Sgzl6YzZHyco2DqBKhTbtZGU6P9aVoTOQOl8MZ3ONRyx t8jintYkZ4FC1VyGtNR9heyfa43AKGRlvp4QggFzAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU/HGOBQuIhv7yMkx0kpyjlBmBOQ4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg1YjU5ZGNjLTk5M2QtNGJiOS04NjU4LTQxZDBlOTUzY2U5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/04DANBgkqhkiG9w0BAQsFAAOCAQEAgtatcGIUmm+l+4OBrUKg95RV +633Xf2+G0Yl98J7eB1/sc7ZGHkBzCvwMQU5YejIkyCup2yYVcR20rhrl8Cn/Pxi mDdnZxN0/21N9iN1qPQwOONfpwxaeFJSrxiFP6/03UPZjguBrX+05w5EBGtivrLh uO5Z9EWuSpsJGhwWFjMq5BRjr+T7I3d3Ww8OuiB8aVHFd5OPuv65yIjzGkahHpg3 Y0c1We7fNne8TGIwUYmS/y8UyMV1IXQAfcUWUQzsB0TS5IQAew9sK48n+pPWtabq yNbKI1D5kLop8kxGQI0K7y+fYwRT2mu5SFggtjyxhHXFHftr3kCxV+TUYozx9A== -----END CERTIFICATE-----Generated at Wed May 13 00:53:46 2026 by rpki-client