$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba859a31-783a-420b-ab08-5a719cbe4d70.roa File: ba859a31-783a-420b-ab08-5a719cbe4d70.roa (raw, json) Hash identifier: o8QXY2WT8Vmj8oqlOGve93Wv1Q8Kujfj/gLI2OwODDU= Subject key identifier: 18:72:D7:F7:08:42:2B:E6:5A:B7:8A:65:94:7A:1C:27:DC:FE:EB:E4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4EE0B4311430CF7FEA956DF55EA84C245C6EA664 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba859a31-783a-420b-ab08-5a719cbe4d70.roa Signing time: Tue 12 May 2026 00:50:13 +0000 ROA not before: Tue 12 May 2026 00:50:13 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fec:5800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e0:b4:31:14:30:cf:7f:ea:95:6d:f5:5e:a8:4c:24:5c:6e:a6:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 00:50:13 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=d57f7d418921f2579fd80895aebe8ad4850ac6346af89fe0c40af41bc62a4eb1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:78:bf:46:c8:59:6a:e0:b6:49:ba:94:72:fb: 6f:bb:98:1c:22:d8:84:14:18:6b:b0:ab:bc:3d:53: a5:31:74:29:7c:5b:25:26:1a:ff:fe:22:ef:cc:8c: 3c:f4:00:13:1d:6d:e8:f6:87:c1:87:02:9b:3e:d9: e2:42:2a:ab:7a:3c:55:f6:ef:99:0e:b2:66:94:d0: 0c:1a:6c:8a:a6:e1:9f:85:e5:69:14:e4:11:74:f6: 78:8b:00:94:dd:03:31:8b:58:a5:2c:d8:4e:f7:0f: 81:18:7a:1f:a2:8c:dd:b4:51:1d:2a:15:cd:fc:06: 10:a8:37:e7:d3:62:9a:ed:be:46:33:3c:f1:b1:93: f4:59:50:55:db:b1:57:b6:fe:ee:a5:8d:a4:49:88: a1:e9:ab:b8:14:03:35:3e:aa:15:e5:6b:b7:05:80: 0f:48:ad:96:ee:71:66:b8:2e:a8:8c:62:84:71:dd: 80:f5:73:0c:0c:54:88:06:25:db:7c:5b:e3:96:81: 2c:50:88:c9:5d:bd:37:cc:79:91:19:5e:05:75:f8: e9:c5:17:78:b8:dd:7f:16:ea:71:01:91:66:87:1a: 48:3a:e7:67:1b:4c:ce:25:39:c2:04:7b:79:3a:e9: d9:d3:43:29:15:2b:e8:72:12:0b:20:d7:f9:c6:df: 97:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:72:D7:F7:08:42:2B:E6:5A:B7:8A:65:94:7A:1C:27:DC:FE:EB:E4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba859a31-783a-420b-ab08-5a719cbe4d70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:5800::/48 Signature Algorithm: sha256WithRSAEncryption 52:61:cd:eb:d7:58:49:14:8d:eb:9c:9f:6c:fd:2c:e3:b9:4c: 57:62:0f:94:60:0f:fc:8c:25:6f:83:d0:4f:10:75:ab:41:ce: bb:14:51:40:6e:57:57:fd:fb:4c:9f:d7:29:fd:16:2f:97:d8: 7d:65:e3:c9:4a:cb:36:d5:c6:3d:b6:3d:31:54:85:b3:0b:1a: b4:8a:69:22:a0:ee:b6:2d:bf:21:66:80:40:cc:f9:fd:6f:1a: 2e:dd:8d:50:f1:6a:e4:3e:57:00:15:33:0c:dd:b8:7c:5e:ff: 9f:41:de:76:d3:e4:d5:56:eb:bb:5b:b2:ea:ca:b9:bb:54:fa: 95:d8:ac:46:5f:6b:71:13:c1:85:55:41:b3:63:62:14:ea:2a: 9f:c2:4b:e2:d3:f7:c5:7e:ca:01:f9:b8:0a:47:ea:03:1f:15: 10:8c:eb:67:eb:35:9a:8c:3e:2f:01:9c:3a:5a:6d:07:9b:69: 0b:de:97:4e:25:90:20:2c:46:16:1b:e7:04:51:53:83:39:c0: 3a:a8:5d:a1:99:d9:d2:0c:f7:af:1b:9c:d3:60:8b:d2:dc:dc: a5:6e:13:c8:37:90:24:82:d9:94:f6:06:fe:72:64:1f:95:11: 3b:72:d9:fb:97:f5:02:f9:e8:e8:8f:5c:b9:dc:76:22:ca:63: 0d:a4:c9:12 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTuC0MRQwz3/qlW31XqhMJFxupmQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDA1MDEzWhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTdmN2Q0MTg5MjFmMjU3OWZkODA4OTVhZWJlOGFkNDg1 MGFjNjM0NmFmODlmZTBjNDBhZjQxYmM2MmE0ZWIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyeL9GyFlq4LZJupRy+2+7mBwi2IQUGGuwq7w9U6UxdCl8 WyUmGv/+Iu/MjDz0ABMdbej2h8GHAps+2eJCKqt6PFX275kOsmaU0AwabIqm4Z+F 5WkU5BF09niLAJTdAzGLWKUs2E73D4EYeh+ijN20UR0qFc38BhCoN+fTYprtvkYz PPGxk/RZUFXbsVe2/u6ljaRJiKHpq7gUAzU+qhXla7cFgA9IrZbucWa4LqiMYoRx 3YD1cwwMVIgGJdt8W+OWgSxQiMldvTfMeZEZXgV1+OnFF3i43X8W6nEBkWaHGkg6 52cbTM4lOcIEe3k66dnTQykVK+hyEgsg1/nG35cfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGHLX9whCK+Zat4pllHocJ9z+6+QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhODU5YTMxLTc4M2EtNDIwYi1hYjA4LTVhNzE5Y2JlNGQ3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sWAAwDQYJKoZIhvcNAQELBQADggEBAFJhzevXWEkUjeucn2z9LOO5 TFdiD5RgD/yMJW+D0E8QdatBzrsUUUBuV1f9+0yf1yn9Fi+X2H1l48lKyzbVxj22 PTFUhbMLGrSKaSKg7rYtvyFmgEDM+f1vGi7djVDxauQ+VwAVMwzduHxe/59B3nbT 5NVW67tbsurKubtU+pXYrEZfa3ETwYVVQbNjYhTqKp/CS+LT98V+ygH5uApH6gMf FRCM62frNZqMPi8BnDpabQebaQvel04lkCAsRhYb5wRRU4M5wDqoXaGZ2dIM968b nNNgi9Lc3KVuE8g3kCSC2ZT2Bv5yZB+VETty2fuX9QL56OiPXLncdiLKYw2kyRI= -----END CERTIFICATE-----Generated at Wed May 13 01:43:27 2026 by rpki-client