$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b13bdd48-e929-4660-becd-8d6690681ba7.roa File: b13bdd48-e929-4660-becd-8d6690681ba7.roa (raw, json) Hash identifier: bWnBm8dDMtXVkmxzHLoTMun0bFzOcJizfNdoFmCO8KM= Subject key identifier: ED:60:7A:4F:A3:F9:1E:88:FB:35:38:77:9C:8A:99:37:FC:6A:91:54 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 19CD552EB55A72B6158CD243AD4EC9BEE3EDE3CC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b13bdd48-e929-4660-becd-8d6690681ba7.roa Signing time: Tue 12 May 2026 00:31:24 +0000 ROA not before: Tue 12 May 2026 00:31:24 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:9400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:cd:55:2e:b5:5a:72:b6:15:8c:d2:43:ad:4e:c9:be:e3:ed:e3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 00:31:24 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=b46320b88ff5f2bc760538970e7c0ef9b3ce5ae120f572f93b8ee88f46ae6f61, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:8c:c4:c0:3f:5e:eb:5f:16:34:58:e8:da: 54:9f:66:3c:18:21:e8:c0:21:d7:c0:fe:a3:ba:06: 6a:7a:de:4c:07:32:9b:94:dd:58:b4:0c:c2:73:1c: 04:f2:f9:78:6f:a0:3c:75:b6:e0:9a:75:c1:93:ec: 47:0c:2a:fd:17:ef:f1:a2:95:40:45:66:0a:25:83: a9:e2:82:96:31:dc:8a:cc:41:7e:2f:8e:ba:a5:d9: b4:52:5a:79:d2:f4:32:0e:0f:fc:3a:e3:c3:3a:4f: 8e:ad:9f:83:83:08:ff:e0:29:30:0b:3f:1e:09:2f: 18:f4:9e:0f:ad:94:d0:ae:1b:18:b0:b0:04:83:0c: 19:ef:76:a1:30:84:e0:b6:6f:47:4a:a7:02:8b:bb: 63:09:a8:e6:bb:7e:60:86:fd:ab:e8:38:8e:c3:61: 79:59:09:a3:74:70:f6:f0:99:34:fe:be:19:94:a9: 78:45:e2:67:4f:b9:ba:b9:34:bc:98:a6:a2:b7:83: b6:13:52:cc:49:23:04:f6:7a:b6:98:ac:8c:81:11: 77:69:b8:a2:5f:db:38:09:17:c3:e1:72:bb:f2:19: ba:b2:4f:56:5a:7d:69:72:e1:0e:ae:6e:ef:54:c5: f4:3b:72:b2:91:cc:ff:90:a6:42:f7:25:ff:18:3e: fe:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:60:7A:4F:A3:F9:1E:88:FB:35:38:77:9C:8A:99:37:FC:6A:91:54 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b13bdd48-e929-4660-becd-8d6690681ba7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:9400::/48 Signature Algorithm: sha256WithRSAEncryption 60:7b:2c:63:36:2f:51:d0:80:75:9c:84:19:85:f2:a9:83:a4: 55:90:66:d6:7f:a7:6b:fe:80:22:c5:d4:8d:aa:e8:2e:7b:cd: fa:3d:2e:d1:55:b2:db:19:f0:87:5d:98:bb:cd:e2:98:d2:bf: 6a:3e:90:61:c6:82:2b:ec:61:f5:fb:a6:7a:ba:69:57:de:28: 27:a1:9f:3d:7e:9a:b4:34:e4:9b:5c:2b:ed:54:8a:33:cf:8a: 92:c5:64:1e:76:2e:08:c1:eb:7a:14:fc:ed:d8:c2:27:6f:2c: 99:82:28:6e:fb:b9:4c:5c:1b:84:82:38:10:97:b6:d0:7d:f5: 29:bb:69:dd:34:c2:61:4e:10:b6:f6:e2:0e:e2:25:6d:47:d9: 16:f5:56:c9:c2:7e:f2:7e:bf:a0:f2:52:06:7d:ae:b2:af:50: ce:89:d1:4e:79:e7:f0:03:5a:f1:7e:e7:05:99:b5:f0:87:94: 83:55:c5:86:de:6a:0b:c9:9d:42:a4:c4:1c:f1:1a:66:45:70: 36:a3:95:2d:ae:7d:56:eb:9d:02:6b:4a:36:74:9d:e3:1b:47: 50:1b:9c:bc:ce:4b:ee:ad:d1:19:13:e6:fc:e8:ae:09:82:58: 57:bf:2f:56:19:48:a7:8b:be:3c:8b:20:5c:f9:f3:89:70:18: 50:8c:d8:a9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGc1VLrVacrYVjNJDrU7JvuPt48wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDAzMTI0WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDYzMjBiODhmZjVmMmJjNzYwNTM4OTcwZTdjMGVmOWIz Y2U1YWUxMjBmNTcyZjkzYjhlZTg4ZjQ2YWU2ZjYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkVozEwD9e618WNFjo2lSfZjwYIejAIdfA/qO6Bmp63kwH MpuU3Vi0DMJzHATy+XhvoDx1tuCadcGT7EcMKv0X7/GilUBFZgolg6nigpYx3IrM QX4vjrql2bRSWnnS9DIOD/w648M6T46tn4ODCP/gKTALPx4JLxj0ng+tlNCuGxiw sASDDBnvdqEwhOC2b0dKpwKLu2MJqOa7fmCG/avoOI7DYXlZCaN0cPbwmTT+vhmU qXhF4mdPubq5NLyYpqK3g7YTUsxJIwT2eraYrIyBEXdpuKJf2zgJF8PhcrvyGbqy T1ZafWly4Q6ubu9UxfQ7crKRzP+QpkL3Jf8YPv5HAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7WB6T6P5Hoj7NTh3nIqZN/xqkVQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IxM2JkZDQ4LWU5MjktNDY2MC1iZWNkLThkNjY5MDY4MWJhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/slAAwDQYJKoZIhvcNAQELBQADggEBAGB7LGM2L1HQgHWchBmF8qmD pFWQZtZ/p2v+gCLF1I2q6C57zfo9LtFVstsZ8IddmLvN4pjSv2o+kGHGgivsYfX7 pnq6aVfeKCehnz1+mrQ05JtcK+1UijPPipLFZB52LgjB63oU/O3YwidvLJmCKG77 uUxcG4SCOBCXttB99Sm7ad00wmFOELb24g7iJW1H2Rb1VsnCfvJ+v6DyUgZ9rrKv UM6J0U555/ADWvF+5wWZtfCHlINVxYbeagvJnUKkxBzxGmZFcDajlS2ufVbrnQJr SjZ0neMbR1AbnLzOS+6t0RkT5vzorgmCWFe/L1YZSKeLvjyLIFz584lwGFCM2Kk= -----END CERTIFICATE-----Generated at Tue May 12 22:14:27 2026 by rpki-client