$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b519037c-7945-4289-a2a4-2873cdd84b35.roa File: b519037c-7945-4289-a2a4-2873cdd84b35.roa (raw, json) Hash identifier: 3c5BqpiwquD38fs0P2vgCc5PU+uS0kH7W4ZM6vnEw30= Subject key identifier: F6:81:60:87:B7:FC:5C:6F:49:57:D7:64:91:0F:04:DF:98:D9:83:DB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 53A53A0F2F27E4CC4CF5A9D6095CE463BFD0E6F9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b519037c-7945-4289-a2a4-2873cdd84b35.roa Signing time: Fri 01 May 2026 00:30:29 +0000 ROA not before: Fri 01 May 2026 00:30:29 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ffe:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a5:3a:0f:2f:27:e4:cc:4c:f5:a9:d6:09:5c:e4:63:bf:d0:e6:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 1 00:30:29 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=879e705e957a7c04f0d2a75248b3653699b1fcf63c624d2e9d1a28dcdf4e5c59, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:63:e3:5a:5d:e7:00:37:2b:7d:e3:19:47:88: fe:be:b0:7d:fd:68:a9:f4:dd:3e:ff:f3:9d:16:1c: f0:d1:ab:29:9c:7b:68:cd:bb:30:bf:bc:17:10:57: 4d:87:43:00:76:29:46:26:5c:3c:98:50:26:61:7f: 53:43:4d:9f:68:79:d3:9f:c9:60:22:99:de:aa:5e: 00:77:0f:5b:cd:97:74:6b:dc:5b:9b:c5:df:79:70: bd:6b:1b:1d:3f:ec:32:30:44:c1:41:b1:85:30:be: 75:70:83:7f:35:9b:d9:4d:5a:0a:35:8d:ce:97:8f: e6:47:37:0f:1f:1f:18:8a:fd:bd:59:d3:22:6f:29: 6c:f1:2a:1d:40:eb:0c:d9:12:f0:4c:89:51:91:57: a9:47:47:6c:03:c5:19:81:85:c1:1e:e3:a2:1f:81: c6:3e:1c:97:e4:1b:e7:0c:2d:60:ea:3d:4d:1e:0d: d7:8b:2f:c4:00:e6:1d:88:72:66:9f:73:01:9f:cd: 3e:90:57:b1:bc:e5:0e:b5:eb:3e:b4:4d:a6:1d:38: ec:0c:ad:f4:4b:02:0c:68:10:ac:20:3e:1c:7b:de: 5d:23:1d:af:6f:05:a5:1c:6d:87:d0:f5:fd:9a:94: 21:a0:c6:15:db:56:2b:8b:23:84:ed:82:50:a7:eb: cf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:81:60:87:B7:FC:5C:6F:49:57:D7:64:91:0F:04:DF:98:D9:83:DB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b519037c-7945-4289-a2a4-2873cdd84b35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffe:5000::/40 Signature Algorithm: sha256WithRSAEncryption 63:63:38:83:4b:44:2a:47:02:92:76:7c:7d:5b:6c:0e:ad:ad: 5f:6b:d2:a6:c2:43:dd:8a:5a:b8:e5:09:c7:7b:df:2f:d2:66: fe:9a:b8:63:41:a3:5c:b0:77:cf:f2:96:39:d1:b3:68:fb:b2: eb:09:e3:e1:46:b7:08:ce:5e:8e:c5:32:87:83:0a:17:aa:fb: d4:76:00:d5:a4:e8:ce:46:e3:ee:ab:2d:47:ff:3e:fe:f6:55: 1b:e4:70:c2:81:f4:33:a6:fe:ea:2d:2a:de:21:fc:e6:78:99: 19:0f:88:bd:f2:0a:35:bc:a9:67:ab:4b:84:86:ae:5d:35:0c: c3:42:1a:2e:a2:17:61:1b:4d:4d:41:03:88:0c:0c:b2:2e:05: f4:da:90:cd:48:ab:28:06:da:bd:2b:e4:b6:de:b2:39:09:d5: 98:57:a3:a2:4e:e2:74:f2:8b:e2:aa:44:eb:6c:52:30:74:e4: de:c1:c4:a7:91:aa:02:b0:e1:d6:50:53:2b:ef:6b:b8:e5:e2: 6d:0b:bb:94:35:14:17:6d:8d:38:9f:a8:9e:60:3e:e8:4a:cc: 3f:f7:ce:32:94:79:67:d3:4c:41:f9:27:d4:4d:3e:0a:f2:4f: 42:90:83:91:89:57:9e:ad:82:b7:8e:21:af:03:a7:28:aa:9d: 2b:c8:44:98 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUU6U6Dy8n5MxM9anWCVzkY7/Q5vkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDAzMDI5WhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NzllNzA1ZTk1N2E3YzA0ZjBkMmE3NTI0OGIzNjUzNjk5 YjFmY2Y2M2M2MjRkMmU5ZDFhMjhkY2RmNGU1YzU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6Y+NaXecANyt94xlHiP6+sH39aKn03T7/850WHPDRqymc e2jNuzC/vBcQV02HQwB2KUYmXDyYUCZhf1NDTZ9oedOfyWAimd6qXgB3D1vNl3Rr 3Fubxd95cL1rGx0/7DIwRMFBsYUwvnVwg381m9lNWgo1jc6Xj+ZHNw8fHxiK/b1Z 0yJvKWzxKh1A6wzZEvBMiVGRV6lHR2wDxRmBhcEe46IfgcY+HJfkG+cMLWDqPU0e DdeLL8QA5h2IcmafcwGfzT6QV7G85Q616z60TaYdOOwMrfRLAgxoEKwgPhx73l0j Ha9vBaUcbYfQ9f2alCGgxhXbViuLI4TtglCn68/7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU9oFgh7f8XG9JV9dkkQ8E35jZg9swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I1MTkwMzdjLTc5NDUtNDI4OS1hMmE0LTI4NzNjZGQ4NGIzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/+UDANBgkqhkiG9w0BAQsFAAOCAQEAY2M4g0tEKkcCknZ8fVtsDq2t X2vSpsJD3YpauOUJx3vfL9Jm/pq4Y0GjXLB3z/KWOdGzaPuy6wnj4Ua3CM5ejsUy h4MKF6r71HYA1aTozkbj7qstR/8+/vZVG+RwwoH0M6b+6i0q3iH85niZGQ+IvfIK NbypZ6tLhIauXTUMw0IaLqIXYRtNTUEDiAwMsi4F9NqQzUirKAbavSvktt6yOQnV mFejok7idPKL4qpE62xSMHTk3sHEp5GqArDh1lBTK+9ruOXibQu7lDUUF22NOJ+o nmA+6ErMP/fOMpR5Z9NMQfkn1E0+CvJPQpCDkYlXnq2Ct44hrwOnKKqdK8hEmA== -----END CERTIFICATE-----Generated at Wed May 13 01:40:27 2026 by rpki-client