$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a49e7430-fd14-41b4-bb97-da60e900926a.roa File: a49e7430-fd14-41b4-bb97-da60e900926a.roa (raw, json) Hash identifier: KvSn8/2SoOGaTp/jdoela/A6X+o05WGDKcec4ypGxms= Subject key identifier: D8:C5:36:B8:73:43:23:50:C6:F2:08:B3:44:B8:C1:0B:F2:05:D3:25 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1E074EA7CA8D0470028636C331C33FAF894F0D6E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a49e7430-fd14-41b4-bb97-da60e900926a.roa Signing time: Mon 23 Mar 2026 21:06:51 +0000 ROA not before: Mon 23 Mar 2026 21:06:51 +0000 ROA not after: Sun 21 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff5:8000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:07:4e:a7:ca:8d:04:70:02:86:36:c3:31:c3:3f:af:89:4f:0d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 23 21:06:51 2026 GMT Not After : Jun 21 23:59:59 2026 GMT Subject: serialNumber=4b224749794fc051a694fa70dd80e002b4835d8345019efaaea2feadac98d387, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e9:4d:dd:d8:ed:68:ba:40:c1:50:b8:9a:da: 95:6f:59:b5:ea:53:89:1e:96:14:ac:fe:6d:8c:63: d9:b3:af:9f:72:69:f2:c1:43:79:d5:8b:ea:ed:28: 6e:3d:b3:3f:ee:12:79:8c:2d:27:b0:d5:50:12:dd: f6:c5:39:b1:68:e7:69:cd:37:c4:34:10:78:6c:81: 59:fd:74:bf:62:74:ff:6b:18:9a:22:5d:93:76:73: d1:02:80:80:76:36:17:0e:9b:25:4f:24:16:8d:12: a5:7d:a4:6d:d9:cb:69:91:eb:47:a0:6e:d5:a2:ba: d3:49:41:a4:2d:da:da:01:e3:d7:49:01:3b:ed:ce: 6d:42:e0:b8:f9:12:8f:04:aa:b3:c6:09:cb:89:f2: ba:42:38:86:4c:47:a9:7e:e1:20:13:f4:6c:e0:f5: 47:33:77:a3:43:b1:25:9e:14:17:76:9e:47:9d:9d: b6:d0:fa:6d:3c:61:7f:b1:4d:7b:aa:4c:78:78:8b: 35:67:b9:d2:24:95:37:b5:bd:84:8c:64:3c:ab:55: bc:1b:b8:ca:6e:cd:90:35:73:7a:e4:2a:be:4f:34: 73:8a:8f:0a:aa:fb:45:c0:98:52:b4:cb:d4:1d:7e: 2d:c7:7c:30:a3:6a:2c:df:06:f1:9f:c2:3d:f9:da: c4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C5:36:B8:73:43:23:50:C6:F2:08:B3:44:B8:C1:0B:F2:05:D3:25 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a49e7430-fd14-41b4-bb97-da60e900926a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff5:8000::/38 Signature Algorithm: sha256WithRSAEncryption 4b:7d:88:49:09:c1:2e:fc:b0:03:78:aa:56:1d:67:a5:88:b9: ce:2d:de:45:81:65:51:a3:95:80:a6:0b:0e:66:0c:5c:cc:10: 02:c1:e6:57:6a:8e:7c:95:37:b6:08:31:79:45:10:7b:71:29: a6:86:64:58:03:c4:3c:f9:2d:66:ca:e0:38:9d:d4:66:25:96: db:91:cf:2c:81:2d:81:ca:94:7d:45:d1:a0:0b:13:85:e2:79: c0:7e:c7:53:a5:8b:d1:3f:b6:b3:e5:39:43:77:b8:69:d5:0e: 85:97:2e:86:98:78:b7:ed:1e:93:3e:57:b2:c6:59:a8:87:20: 2d:b7:28:15:1e:c6:ff:e8:f1:9f:be:72:d7:d4:f3:5b:f5:1f: fb:69:b7:ec:e8:ef:6e:63:e2:6b:c5:54:7c:0c:e2:3a:0d:34: 5b:c7:ca:8a:9d:4b:4b:54:f6:53:32:1a:0a:c6:04:bd:df:7b: 7b:fa:78:a6:e5:47:11:f4:91:da:f1:0f:34:bd:42:32:14:2a: 5f:00:27:a2:14:bb:30:a0:d3:52:a0:7e:26:92:f1:74:31:75: 7c:67:c5:f9:7c:aa:aa:98:b1:c3:02:5c:af:5d:8d:67:1c:ac: b5:5d:6f:fb:e5:40:31:6f:33:f2:5f:a8:c3:e6:fe:8f:4c:1f: 71:22:d3:29 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUHgdOp8qNBHAChjbDMcM/r4lPDW4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzIzMjEwNjUxWhcNMjYwNjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjIyNDc0OTc5NGZjMDUxYTY5NGZhNzBkZDgwZTAwMmI0 ODM1ZDgzNDUwMTllZmFhZWEyZmVhZGFjOThkMzg3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCW6U3d2O1oukDBULia2pVvWbXqU4kelhSs/m2MY9mzr59y afLBQ3nVi+rtKG49sz/uEnmMLSew1VAS3fbFObFo52nNN8Q0EHhsgVn9dL9idP9r GJoiXZN2c9ECgIB2NhcOmyVPJBaNEqV9pG3Zy2mR60egbtWiutNJQaQt2toB49dJ ATvtzm1C4Lj5Eo8EqrPGCcuJ8rpCOIZMR6l+4SAT9Gzg9Uczd6NDsSWeFBd2nked nbbQ+m08YX+xTXuqTHh4izVnudIklTe1vYSMZDyrVbwbuMpuzZA1c3rkKr5PNHOK jwqq+0XAmFK0y9Qdfi3HfDCjaizfBvGfwj352sS5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU2MU2uHNDI1DG8gizRLjBC/IF0yUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E0OWU3NDMwLWZkMTQtNDFiNC1iYjk3LWRhNjBlOTAwOTI2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB/1gDANBgkqhkiG9w0BAQsFAAOCAQEAS32ISQnBLvywA3iqVh1npYi5 zi3eRYFlUaOVgKYLDmYMXMwQAsHmV2qOfJU3tggxeUUQe3EppoZkWAPEPPktZsrg OJ3UZiWW25HPLIEtgcqUfUXRoAsTheJ5wH7HU6WL0T+2s+U5Q3e4adUOhZcuhph4 t+0ekz5XssZZqIcgLbcoFR7G/+jxn75y19TzW/Uf+2m37OjvbmPia8VUfAziOg00 W8fKip1LS1T2UzIaCsYEvd97e/p4puVHEfSR2vEPNL1CMhQqXwAnohS7MKDTUqB+ JpLxdDF1fGfF+XyqqpixwwJcr12NZxystV1v++VAMW8z8l+ow+b+j0wfcSLTKQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:30:29 2026 by rpki-client