$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd5d39ce-9ed8-4564-a1f8-c329aaebb997.roa File: bd5d39ce-9ed8-4564-a1f8-c329aaebb997.roa (raw, json) Hash identifier: UIvQ5eKroSiAGiVYDD1BgT+72/SM1Ks+JmGZodVr+go= Subject key identifier: 42:A6:8C:28:28:B6:1F:A5:DC:E2:11:EA:D6:97:28:53:E9:17:18:0A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4FC618CC4574C94F93543B7E069B2CA0FAF03FFB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd5d39ce-9ed8-4564-a1f8-c329aaebb997.roa Signing time: Wed 29 Apr 2026 00:11:32 +0000 ROA not before: Wed 29 Apr 2026 00:11:32 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:8190::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c6:18:cc:45:74:c9:4f:93:54:3b:7e:06:9b:2c:a0:fa:f0:3f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:11:32 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=7722ff65a021778e1841be124c3d706ca77702bb378b6f11fa39bc9d41fdb13d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:00:66:28:33:f3:66:64:10:1c:f4:24:6d:ce: 7c:71:4d:9d:11:e1:46:5e:53:69:df:dd:46:46:fe: f1:99:25:c3:aa:a3:ce:38:e0:3f:dc:05:c9:fe:57: de:7f:30:b5:5a:8f:6c:e9:1a:3b:04:88:6a:10:7c: 7c:69:9e:b8:87:1a:a0:c2:b7:24:cd:24:fa:10:66: bb:85:77:13:b9:6b:c8:e8:8e:c6:8d:81:d3:ab:d8: 50:f3:4e:4c:8a:24:08:40:68:9b:dd:c1:9f:df:27: 3b:6c:10:62:35:94:e4:14:0a:75:23:3b:04:12:e6: 81:0f:c4:81:5e:9c:82:37:ed:58:52:6c:f1:6f:1a: fc:90:de:90:9e:30:26:dd:83:d0:19:06:af:48:ee: 8d:5f:dc:ea:9a:21:fb:64:12:46:ad:51:b3:98:f1: 22:de:69:c6:96:29:5e:e3:c4:0a:65:b7:4e:94:96: be:eb:b8:5e:bc:1c:c8:b3:b0:2b:76:d7:6e:02:13: a0:ed:71:e9:ec:b5:36:24:78:2f:4b:2a:01:6c:d3: fe:0e:af:16:66:b2:47:5c:8c:e3:13:5f:8a:d0:81: 68:fb:6f:c7:66:34:5e:23:c7:92:a7:bb:1e:69:20: 3c:76:8b:da:ae:0d:5b:da:bc:25:9a:ae:61:55:86: 5b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A6:8C:28:28:B6:1F:A5:DC:E2:11:EA:D6:97:28:53:E9:17:18:0A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd5d39ce-9ed8-4564-a1f8-c329aaebb997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:8190::/48 Signature Algorithm: sha256WithRSAEncryption 80:bc:1c:a8:6e:7d:71:59:da:8e:6f:74:18:b2:cc:c6:d4:d6: 2e:b6:6b:f9:7f:08:2c:e9:31:8b:93:df:76:f9:80:98:87:66: ba:c8:b0:f3:f2:f5:ea:8d:f1:51:f9:15:46:3a:31:4a:2c:8c: cc:41:99:e6:f0:e5:27:2c:b2:cc:09:70:51:65:84:22:fd:7a: 89:39:41:45:cd:02:31:6f:e6:0b:6a:a4:db:ec:41:80:4f:e5: 78:cc:e2:c0:ca:d9:75:35:4d:84:76:78:45:02:64:65:8e:39: 78:c8:b3:9b:36:93:ac:92:e7:c6:c4:b7:27:61:96:89:da:50: c9:f0:45:35:26:c6:9c:c4:11:88:d1:94:2c:d0:dd:b2:f6:e6: 72:65:40:5a:40:11:e6:65:1b:a4:70:17:a2:00:27:f2:2b:27: 3f:35:6c:e0:cc:11:61:c5:9e:b0:ed:fa:ac:3d:ae:52:82:3d: f6:f8:38:3b:1a:29:52:bf:fd:02:fa:27:b2:82:af:53:2a:b8: 27:79:54:c4:a9:d9:5b:f0:1e:37:dd:04:e1:7f:4f:6f:2d:3e: da:88:5e:bb:e2:b4:cc:ed:a8:a0:41:71:aa:74:54:74:27:59: 7b:30:89:09:9f:0a:d7:30:de:e4:8b:86:a0:06:cf:2f:58:c5: cf:be:69:e8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUT8YYzEV0yU+TVDt+BpssoPrwP/swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDAxMTMyWhcNMjYwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NzIyZmY2NWEwMjE3NzhlMTg0MWJlMTI0YzNkNzA2Y2E3 NzcwMmJiMzc4YjZmMTFmYTM5YmM5ZDQxZmRiMTNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMAGYoM/NmZBAc9CRtznxxTZ0R4UZeU2nf3UZG/vGZJcOq o8444D/cBcn+V95/MLVaj2zpGjsEiGoQfHxpnriHGqDCtyTNJPoQZruFdxO5a8jo jsaNgdOr2FDzTkyKJAhAaJvdwZ/fJztsEGI1lOQUCnUjOwQS5oEPxIFenII37VhS bPFvGvyQ3pCeMCbdg9AZBq9I7o1f3OqaIftkEkatUbOY8SLeacaWKV7jxAplt06U lr7ruF68HMizsCt2124CE6DtcenstTYkeC9LKgFs0/4OrxZmskdcjOMTX4rQgWj7 b8dmNF4jx5Knux5pIDx2i9quDVvavCWarmFVhlsZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQqaMKCi2H6Xc4hHq1pcoU+kXGAowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkNWQzOWNlLTllZDgtNDU2NC1hMWY4LWMzMjlhYWViYjk5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9gZAwDQYJKoZIhvcNAQELBQADggEBAIC8HKhufXFZ2o5vdBiyzMbU 1i62a/l/CCzpMYuT33b5gJiHZrrIsPPy9eqN8VH5FUY6MUosjMxBmebw5ScssswJ cFFlhCL9eok5QUXNAjFv5gtqpNvsQYBP5XjM4sDK2XU1TYR2eEUCZGWOOXjIs5s2 k6yS58bEtydhlonaUMnwRTUmxpzEEYjRlCzQ3bL25nJlQFpAEeZlG6RwF6IAJ/Ir Jz81bODMEWHFnrDt+qw9rlKCPfb4ODsaKVK//QL6J7KCr1MquCd5VMSp2VvwHjfd BOF/T28tPtqIXrvitMztqKBBcap0VHQnWXswiQmfCtcw3uSLhqAGzy9Yxc++aeg= -----END CERTIFICATE-----Generated at Tue May 12 21:50:49 2026 by rpki-client