$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5838a01-e498-4db5-99d7-b8519767f3f3.roa File: b5838a01-e498-4db5-99d7-b8519767f3f3.roa (raw, json) Hash identifier: 6WA7lRwkN752x5tWlZ/0WkA/sD+r+7sUjTdh2PYWP6g= Subject key identifier: 10:A9:66:9A:D6:10:72:A1:81:3E:27:EA:4F:EE:0F:2F:7B:92:0C:2A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0786AB5C3EEEF76239FA43239DC537D7BB7DAB60 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5838a01-e498-4db5-99d7-b8519767f3f3.roa Signing time: Tue 12 May 2026 00:50:10 +0000 ROA not before: Tue 12 May 2026 00:50:10 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:86:ab:5c:3e:ee:f7:62:39:fa:43:23:9d:c5:37:d7:bb:7d:ab:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 00:50:10 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=e2469de732c09319d725e48bea22eaae2e77cc5ab61ae01602ba03b6da7b86b3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:04:27:af:a4:fd:cf:03:61:d3:09:be:ba: 9e:c3:51:04:06:b1:0d:ed:c5:39:a9:75:cf:f5:5a: b5:d9:32:65:a7:00:ef:c0:6d:c9:3b:79:ac:17:13: 65:b1:7d:57:47:fa:d2:81:d1:82:e3:8c:5b:3b:c0: 2a:b9:aa:9d:fb:75:47:92:6d:1e:1b:f6:1a:05:85: 3e:ae:b7:56:45:fc:89:3c:00:45:f7:90:10:82:77: 26:7c:46:d4:0b:33:c2:fb:31:7b:83:f4:21:fa:9d: 76:86:ec:06:32:dc:a9:a0:dd:cf:b8:b2:3f:22:be: 7b:1d:87:f3:e2:5d:6a:10:1c:f9:3f:61:48:69:7d: b0:d7:93:99:db:d8:72:33:dd:f0:da:03:ab:7a:79: ef:12:52:33:94:32:bf:03:50:00:96:67:27:a1:e6: 79:af:15:ff:98:9c:c3:48:ac:4b:89:43:96:9e:bd: 58:ac:6e:0b:b4:c4:de:96:98:b0:b9:6e:c1:46:e6: 2b:8a:54:bd:63:a2:31:a1:22:e0:28:13:eb:02:08: a1:f3:03:de:17:5c:d4:3e:6f:a5:62:f1:b5:fa:9a: f2:d9:21:79:ab:9b:50:e9:81:5f:f7:c5:6d:14:20: 52:e8:70:84:3f:31:f7:6e:c4:da:52:6a:18:46:af: 54:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A9:66:9A:D6:10:72:A1:81:3E:27:EA:4F:EE:0F:2F:7B:92:0C:2A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5838a01-e498-4db5-99d7-b8519767f3f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:4000::/48 Signature Algorithm: sha256WithRSAEncryption c2:84:c1:5b:94:95:33:b1:c2:ec:f3:34:7f:43:01:82:12:7f: 0c:f1:dc:94:13:d6:e3:c2:3a:69:a4:2b:c2:9b:78:8f:41:99: d3:5c:93:16:c6:6c:41:ab:48:68:a2:c7:17:83:d9:f1:a4:02: 32:5f:f9:98:97:c8:73:d3:33:b8:5b:bd:bf:04:2b:53:5f:38: 30:6d:4b:71:89:44:59:93:e8:19:47:a7:51:f7:f5:da:c7:68: 13:90:75:96:f5:7e:ff:e9:8a:a6:f2:46:07:3b:73:cc:e5:87: 81:d8:0f:14:f2:da:3e:d8:77:6a:0e:85:54:98:19:40:1a:08: 07:36:4f:4b:ac:cb:ee:1e:d4:85:6b:96:1a:60:5e:69:29:95: 34:8e:82:d8:32:ce:38:ed:06:ea:15:c5:3a:3b:c2:3d:8e:83: d3:03:9a:ec:c2:b6:cf:9b:42:6a:9e:63:e1:71:c7:2e:4c:a7: 84:0f:56:f9:b8:f8:2c:ca:f1:13:d8:54:ab:dc:8a:d9:1d:6b: 75:7f:30:d6:42:d9:ad:8e:97:e8:59:8d:7e:3b:f5:4c:f5:f7: ef:4a:6f:d8:96:f3:7b:69:61:05:d5:40:11:0b:7f:1f:55:e4: 7d:39:9e:55:56:22:f5:80:9e:7f:b0:5c:a9:63:b4:80:7f:4f: 7e:0e:b2:97 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUB4arXD7u92I5+kMjncU317t9q2AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDA1MDEwWhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMjQ2OWRlNzMyYzA5MzE5ZDcyNWU0OGJlYTIyZWFhZTJl NzdjYzVhYjYxYWUwMTYwMmJhMDNiNmRhN2I4NmIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzTAQnr6T9zwNh0wm+up7DUQQGsQ3txTmpdc/1WrXZMmWn AO/Abck7eawXE2WxfVdH+tKB0YLjjFs7wCq5qp37dUeSbR4b9hoFhT6ut1ZF/Ik8 AEX3kBCCdyZ8RtQLM8L7MXuD9CH6nXaG7AYy3Kmg3c+4sj8ivnsdh/PiXWoQHPk/ YUhpfbDXk5nb2HIz3fDaA6t6ee8SUjOUMr8DUACWZyeh5nmvFf+YnMNIrEuJQ5ae vVisbgu0xN6WmLC5bsFG5iuKVL1jojGhIuAoE+sCCKHzA94XXNQ+b6Vi8bX6mvLZ IXmrm1DpgV/3xW0UIFLocIQ/MfduxNpSahhGr1QLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEKlmmtYQcqGBPifqT+4PL3uSDCowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I1ODM4YTAxLWU0OTgtNGRiNS05OWQ3LWI4NTE5NzY3ZjNmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sQAAwDQYJKoZIhvcNAQELBQADggEBAMKEwVuUlTOxwuzzNH9DAYIS fwzx3JQT1uPCOmmkK8KbeI9BmdNckxbGbEGrSGiixxeD2fGkAjJf+ZiXyHPTM7hb vb8EK1NfODBtS3GJRFmT6BlHp1H39drHaBOQdZb1fv/piqbyRgc7c8zlh4HYDxTy 2j7Yd2oOhVSYGUAaCAc2T0usy+4e1IVrlhpgXmkplTSOgtgyzjjtBuoVxTo7wj2O g9MDmuzCts+bQmqeY+Fxxy5Mp4QPVvm4+CzK8RPYVKvcitkda3V/MNZC2a2Ol+hZ jX479Uz19+9Kb9iW83tpYQXVQBELfx9V5H05nlVWIvWAnn+wXKljtIB/T34Ospc= -----END CERTIFICATE-----Generated at Wed May 13 00:12:58 2026 by rpki-client