$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91236e9b-4daf-44d0-8f93-2100c31128c3.roa File: 91236e9b-4daf-44d0-8f93-2100c31128c3.roa (raw, json) Hash identifier: s+TQ4QyiJsk0cGWou0JHo7Co2He43rc4KoiiAJfV4qs= Subject key identifier: A9:D2:A6:47:3F:DF:03:B4:66:0A:26:87:F7:5F:0A:90:52:86:71:AC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E8B712213579551135BE9205A75F35208B938C7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91236e9b-4daf-44d0-8f93-2100c31128c3.roa Signing time: Mon 11 May 2026 15:17:12 +0000 ROA not before: Mon 11 May 2026 15:17:12 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f10:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:8b:71:22:13:57:95:51:13:5b:e9:20:5a:75:f3:52:08:b9:38:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 11 15:17:12 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=5e2000e72fbf3296d052ea779989205ed17085944bd93da8a294a829bae993f8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:de:ea:9c:1b:d2:88:c6:a9:83:07:b9:2a:45: 78:11:d2:dd:96:aa:c5:6a:4b:43:ed:a2:ee:ef:af: 45:49:46:0c:0a:be:41:ee:81:aa:1b:78:bd:55:53: 96:db:6a:70:44:46:96:aa:86:dc:c7:8b:67:e6:8b: 59:13:9e:f3:a7:b7:cc:4e:7f:d6:5e:a7:be:c6:5a: a5:ea:cc:18:67:ad:ad:0c:e7:d1:44:55:c3:0f:1d: 4c:64:50:59:62:03:f4:aa:16:e9:21:ed:04:c0:ad: 22:8f:4e:a3:b7:6c:59:1a:45:de:ef:d4:da:19:83: d1:39:c3:d4:bd:59:93:c3:fe:1f:94:14:0f:10:fc: b5:50:c1:b3:41:25:0f:0c:3e:a3:d0:e8:2d:cd:4c: 84:9f:b7:05:38:c0:b8:20:f8:f3:d3:05:4e:a1:e6: fe:47:47:f0:8d:db:73:66:83:e5:dc:4c:20:44:a2: 45:d0:18:98:71:ba:01:08:14:84:cc:42:5e:94:e5: f9:b3:08:74:d3:f9:b6:c4:c0:63:01:e9:aa:f9:2b: 71:2d:07:65:a5:7c:0f:c3:82:a0:93:f6:52:12:be: 28:06:71:a6:0e:81:a1:0d:4a:8f:6d:fb:35:a4:df: 84:f2:3c:76:de:08:fa:3c:5f:d0:7b:31:ce:c0:b7: ca:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D2:A6:47:3F:DF:03:B4:66:0A:26:87:F7:5F:0A:90:52:86:71:AC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91236e9b-4daf-44d0-8f93-2100c31128c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f10:8000::/36 Signature Algorithm: sha256WithRSAEncryption 8b:4a:97:cd:3a:ef:52:84:82:f4:9d:f6:57:ac:ae:98:50:48: ce:ce:b0:85:71:e1:1c:ed:0e:a7:9f:2c:29:5d:4f:c8:aa:c5: de:ce:ae:22:dc:c2:05:da:cc:0d:5b:f4:1e:04:19:47:08:3d: e7:24:50:d2:e0:d7:39:d7:5c:39:95:0a:3c:92:a3:67:04:95: b2:b0:ad:e0:ff:76:2c:17:45:a0:5b:f9:43:f8:24:91:59:53: 21:d7:d4:fb:dc:7b:9e:15:60:c8:24:87:ab:07:3f:1c:8d:d2: 4f:30:25:ec:3e:9f:6f:ab:fb:6c:a3:36:98:b7:b2:9d:5b:45: 57:d2:fe:88:e5:fb:56:c6:a1:c5:f8:53:78:64:db:2f:bd:a9: e0:78:c9:81:e6:82:9a:e2:21:fc:f7:75:3d:fa:1c:89:6d:17: d6:7e:3d:d0:a9:f0:54:d5:3c:b3:bb:6f:a1:33:1f:a3:7e:a9: 48:20:47:14:56:19:e7:0f:b9:18:70:c1:da:32:ea:74:c1:03: aa:24:49:1e:9f:5a:6c:48:da:f0:e4:1e:85:b7:cb:a4:b8:04: 91:85:2d:6d:9d:3d:ed:7d:b5:a9:b5:31:e9:76:30:14:f5:9e: 6e:af:0e:81:ca:f5:3c:ad:da:3c:10:f0:5a:35:c1:9e:16:24: c9:aa:43:f1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULotxIhNXlVETW+kgWnXzUgi5OMcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTExMTUxNzEyWhcNMjYwODA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZTIwMDBlNzJmYmYzMjk2ZDA1MmVhNzc5OTg5MjA1ZWQx NzA4NTk0NGJkOTNkYThhMjk0YTgyOWJhZTk5M2Y4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC03uqcG9KIxqmDB7kqRXgR0t2WqsVqS0Ptou7vr0VJRgwK vkHugaobeL1VU5bbanBERpaqhtzHi2fmi1kTnvOnt8xOf9Zep77GWqXqzBhnra0M 59FEVcMPHUxkUFliA/SqFukh7QTArSKPTqO3bFkaRd7v1NoZg9E5w9S9WZPD/h+U FA8Q/LVQwbNBJQ8MPqPQ6C3NTISftwU4wLgg+PPTBU6h5v5HR/CN23Nmg+XcTCBE okXQGJhxugEIFITMQl6U5fmzCHTT+bbEwGMB6ar5K3EtB2WlfA/DgqCT9lISvigG caYOgaENSo9t+zWk34TyPHbeCPo8X9B7Mc7At8p7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUqdKmRz/fA7RmCiaH918KkFKGcawwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkxMjM2ZTliLTRkYWYtNDRkMC04ZjkzLTIxMDBjMzExMjhjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8QgDANBgkqhkiG9w0BAQsFAAOCAQEAi0qXzTrvUoSC9J32V6yumFBI zs6whXHhHO0Op58sKV1PyKrF3s6uItzCBdrMDVv0HgQZRwg95yRQ0uDXOddcOZUK PJKjZwSVsrCt4P92LBdFoFv5Q/gkkVlTIdfU+9x7nhVgyCSHqwc/HI3STzAl7D6f b6v7bKM2mLeynVtFV9L+iOX7VsahxfhTeGTbL72p4HjJgeaCmuIh/Pd1PfociW0X 1n490KnwVNU8s7tvoTMfo36pSCBHFFYZ5w+5GHDB2jLqdMEDqiRJHp9abEja8OQe hbfLpLgEkYUtbZ097X21qbUx6XYwFPWebq8Ogcr1PK3aPBDwWjXBnhYkyapD8Q== -----END CERTIFICATE-----Generated at Wed May 13 06:38:21 2026 by rpki-client