$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2417821-956d-4dbb-b3ce-132bcbf8a879.roa File: a2417821-956d-4dbb-b3ce-132bcbf8a879.roa (raw, json) Hash identifier: ChKXep39FWpQzJN2cUI9sIxDUpEKB3eV2TGmM0QAt6E= Subject key identifier: BA:8A:8E:83:30:42:FF:35:DE:6B:4E:98:18:BA:A3:64:AB:FA:F1:D8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54AEFF1CC814625E2A5172243A3A16FA0529681A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2417821-956d-4dbb-b3ce-132bcbf8a879.roa Signing time: Sat 02 May 2026 00:41:19 +0000 ROA not before: Sat 02 May 2026 00:41:19 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fea:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ae:ff:1c:c8:14:62:5e:2a:51:72:24:3a:3a:16:fa:05:29:68:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 00:41:19 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=29e4a5061201675d9dbc32982740a3e937d8024e76db82772f35c5f2fcb9447b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:85:21:c5:ab:b0:63:cb:36:67:7f:3c:0a:9f: 9e:62:f6:60:86:c1:c2:3e:c1:1d:12:2a:3a:fb:77: ad:0d:4c:82:fa:79:b2:db:66:5d:9d:e1:9d:87:00: 95:16:e4:f7:06:39:df:f0:8b:ad:41:bc:ac:68:d9: 89:f5:28:03:1b:71:e6:04:08:b0:be:55:32:70:c7: 12:82:03:ef:92:93:4b:de:fe:5a:a9:97:e0:a8:76: 52:3b:ee:d4:05:83:8f:33:aa:1f:6f:13:ae:62:d2: 98:b4:02:6c:5e:28:6c:db:1f:1e:d3:da:ae:60:18: c7:1a:b1:23:a3:14:c6:bb:59:86:c0:b0:d2:16:d6: c8:d2:c9:3a:15:00:d2:01:26:31:c8:fb:de:cf:c0: 78:2f:37:5d:a1:c4:7b:3d:5f:97:9c:de:84:a6:60: f7:17:fb:14:b2:a3:38:2f:b7:68:52:f4:5c:49:8e: 23:e4:79:2e:f6:ee:bc:5f:3a:4e:5a:28:4f:36:7e: 39:62:ed:85:e0:fe:4c:bd:42:36:b9:f4:ab:a8:aa: 4a:66:f1:06:2c:4b:22:f5:32:d4:13:6b:ea:43:7f: b1:b1:a6:1e:81:d8:81:41:f1:58:af:53:a4:15:88: 76:3f:0f:32:1b:3f:d0:40:3c:04:2e:43:2b:ca:7f: 0a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8A:8E:83:30:42:FF:35:DE:6B:4E:98:18:BA:A3:64:AB:FA:F1:D8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2417821-956d-4dbb-b3ce-132bcbf8a879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea:2000::/40 Signature Algorithm: sha256WithRSAEncryption ce:90:7c:20:62:30:28:dd:f3:60:53:81:65:dc:dc:c4:f2:f6: b8:7a:1d:a7:e2:ee:ca:4d:75:e6:87:2b:05:fd:ba:9c:aa:de: 66:4f:06:54:12:ef:f0:ce:c7:b3:a8:62:8a:63:35:7f:ec:42: ca:07:cf:ce:bd:0f:81:8b:2d:6e:f3:45:9f:7a:c5:fe:8c:65: f5:75:e4:8b:95:29:5d:97:e5:93:fe:e1:2a:a2:a3:b3:93:cb: f0:38:8b:4e:6a:a1:d4:23:47:ed:11:1c:65:14:9f:15:08:9f: 18:da:22:66:4d:9b:04:0e:25:1a:46:99:0d:60:c0:1a:99:cf: f8:fe:b5:42:11:03:33:f9:14:ba:7d:6f:1b:02:e8:b5:31:dc: 4b:c9:c1:b1:59:55:90:01:36:db:42:5f:12:2e:57:cc:a9:b5: f5:96:05:a1:e9:f1:57:f2:ff:59:e9:e3:97:31:94:07:3a:94: 7e:76:0f:c4:e3:7b:72:c0:62:5d:7a:bd:ee:e6:24:13:a4:10: b1:ef:41:8a:8a:53:db:83:e6:34:c9:71:a7:fc:20:5c:9f:a4: c7:74:4f:1f:e2:fb:4f:ca:ba:fd:6d:ae:1c:02:af:f6:18:f7: 33:58:1f:36:ad:aa:10:f1:70:89:06:64:d3:05:47:5a:74:2a: c7:96:ff:f8 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVK7/HMgUYl4qUXIkOjoW+gUpaBowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAyMDA0MTE5WhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOWU0YTUwNjEyMDE2NzVkOWRiYzMyOTgyNzQwYTNlOTM3 ZDgwMjRlNzZkYjgyNzcyZjM1YzVmMmZjYjk0NDdiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjhSHFq7BjyzZnfzwKn55i9mCGwcI+wR0SKjr7d60NTIL6 ebLbZl2d4Z2HAJUW5PcGOd/wi61BvKxo2Yn1KAMbceYECLC+VTJwxxKCA++Sk0ve /lqpl+CodlI77tQFg48zqh9vE65i0pi0AmxeKGzbHx7T2q5gGMcasSOjFMa7WYbA sNIW1sjSyToVANIBJjHI+97PwHgvN12hxHs9X5ec3oSmYPcX+xSyozgvt2hS9FxJ jiPkeS727rxfOk5aKE82fjli7YXg/ky9Qja59Kuoqkpm8QYsSyL1MtQTa+pDf7Gx ph6B2IFB8VivU6QViHY/DzIbP9BAPAQuQyvKfwonAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUuoqOgzBC/zXea06YGLqjZKv68dgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyNDE3ODIxLTk1NmQtNGRiYi1iM2NlLTEzMmJjYmY4YTg3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/qIDANBgkqhkiG9w0BAQsFAAOCAQEAzpB8IGIwKN3zYFOBZdzcxPL2 uHodp+Luyk115ocrBf26nKreZk8GVBLv8M7Hs6hiimM1f+xCygfPzr0PgYstbvNF n3rF/oxl9XXki5UpXZflk/7hKqKjs5PL8DiLTmqh1CNH7REcZRSfFQifGNoiZk2b BA4lGkaZDWDAGpnP+P61QhEDM/kUun1vGwLotTHcS8nBsVlVkAE220JfEi5XzKm1 9ZYFoenxV/L/WenjlzGUBzqUfnYPxON7csBiXXq97uYkE6QQse9BiopT24PmNMlx p/wgXJ+kx3RPH+L7T8q6/W2uHAKv9hj3M1gfNq2qEPFwiQZk0wVHWnQqx5b/+A== -----END CERTIFICATE-----Generated at Wed May 13 00:40:05 2026 by rpki-client