$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd987fdf-fceb-4729-86c7-c27b85de3cdb.roa File: bd987fdf-fceb-4729-86c7-c27b85de3cdb.roa (raw, json) Hash identifier: rcKXEIddSCiZYQe24ODxjfYWgcB2Q3cvwAEprer6yNg= Subject key identifier: 3B:AF:96:84:64:DC:98:47:55:12:D0:98:88:AE:9A:8F:4C:E2:E0:2A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3CA9A31DEDE813DE5A31C2DB64C225CF4ADDC1D4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd987fdf-fceb-4729-86c7-c27b85de3cdb.roa Signing time: Fri 08 May 2026 00:32:06 +0000 ROA not before: Fri 08 May 2026 00:32:06 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f29:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a9:a3:1d:ed:e8:13:de:5a:31:c2:db:64:c2:25:cf:4a:dd:c1:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 00:32:06 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=114910d7e693f01998cbeebe6b359845649590c49380e0a70998aeac714ea0b2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c8:59:a7:cb:1a:98:aa:ea:51:11:29:af:3e: cd:c9:ed:9b:b2:05:1c:85:c9:1c:e7:6c:33:f8:6f: b3:d8:a9:ce:bd:6a:09:62:1b:86:76:73:53:e0:57: 85:2d:bb:2e:fa:8f:fe:3f:e8:9e:55:b0:06:24:56: a0:94:d6:56:dd:78:3f:e2:96:9f:80:99:96:49:c8: f8:2b:a1:0c:dc:2b:28:bd:53:89:c8:5a:12:eb:f5: e8:7b:1e:36:9b:4d:06:df:ea:1d:c4:5e:8e:10:a9: cc:a6:44:8c:78:bb:c3:e7:fe:31:02:13:a0:d4:0f: 57:b9:5c:fb:cc:8f:c8:85:c4:76:8c:36:82:52:f5: 13:c3:af:e7:28:bc:f5:f2:e2:94:cb:6e:de:77:11: f2:29:59:19:45:da:0d:b0:bd:79:f8:6a:bd:45:05: 36:99:28:08:62:8c:00:bd:7a:19:51:ec:99:5e:de: 35:64:d0:25:54:1e:57:77:ab:ac:31:a7:eb:6f:5c: b4:1b:da:71:67:41:8b:cd:67:b6:84:c3:77:fe:9f: 8b:67:e2:07:c7:fd:51:3d:3c:31:dc:79:a3:2e:4f: c9:60:78:77:36:dc:aa:69:db:36:d2:ad:d9:fc:4f: 25:4c:54:eb:6b:0b:c9:d5:a4:57:0d:13:f7:69:64: a1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AF:96:84:64:DC:98:47:55:12:D0:98:88:AE:9A:8F:4C:E2:E0:2A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd987fdf-fceb-4729-86c7-c27b85de3cdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f29:c000::/36 Signature Algorithm: sha256WithRSAEncryption 58:30:aa:77:1f:2b:89:6e:f2:d4:a0:c6:b1:f0:cc:1e:34:51: 17:0f:39:15:0f:fc:3b:27:ec:15:ac:01:bf:48:7b:06:88:5f: 21:d5:6a:72:6c:70:77:f2:00:55:1e:79:d9:29:49:00:31:9c: 0e:81:83:6d:bd:1b:2f:2a:42:8b:5e:5f:ad:7c:a5:2d:78:ab: 68:00:26:68:ac:5a:60:0f:a8:7d:63:b9:7f:d0:98:b8:1a:59: 3d:41:1f:90:75:7b:81:2f:b8:3c:cb:f0:93:db:db:c3:87:77: f2:35:6d:27:fb:41:23:d7:e8:11:ab:10:d9:6d:2d:28:42:4e: eb:fe:90:2d:cf:c9:38:57:e7:0e:7b:fc:69:87:a5:3b:0d:c2: 12:32:99:80:e3:98:88:38:45:96:1a:62:6d:4d:25:de:20:8f: 18:12:87:d3:47:65:c9:08:64:f4:13:3d:69:c2:bd:33:d4:32: b8:f6:75:0b:e0:e3:cc:3c:d1:50:63:3d:77:86:85:f8:d0:9d: 0f:3a:c6:b6:23:88:35:10:ff:26:13:d2:b4:55:63:ae:89:10: 37:84:fc:3d:d2:bc:d2:72:fc:70:a8:ca:0a:5b:33:85:4d:62: 84:8d:42:fb:b0:f3:1f:92:35:f0:78:66:ca:84:5b:12:47:68: 74:6b:6d:ba -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPKmjHe3oE95aMcLbZMIlz0rdwdQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA4MDAzMjA2WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTQ5MTBkN2U2OTNmMDE5OThjYmVlYmU2YjM1OTg0NTY0 OTU5MGM0OTM4MGUwYTcwOTk4YWVhYzcxNGVhMGIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5yFmnyxqYqupRESmvPs3J7ZuyBRyFyRznbDP4b7PYqc69 agliG4Z2c1PgV4Utuy76j/4/6J5VsAYkVqCU1lbdeD/ilp+AmZZJyPgroQzcKyi9 U4nIWhLr9eh7HjabTQbf6h3EXo4QqcymRIx4u8Pn/jECE6DUD1e5XPvMj8iFxHaM NoJS9RPDr+covPXy4pTLbt53EfIpWRlF2g2wvXn4ar1FBTaZKAhijAC9ehlR7Jle 3jVk0CVUHld3q6wxp+tvXLQb2nFnQYvNZ7aEw3f+n4tn4gfH/VE9PDHceaMuT8lg eHc23Kpp2zbSrdn8TyVMVOtrC8nVpFcNE/dpZKGxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUO6+WhGTcmEdVEtCYiK6aj0zi4CowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkOTg3ZmRmLWZjZWItNDcyOS04NmM3LWMyN2I4NWRlM2NkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8pwDANBgkqhkiG9w0BAQsFAAOCAQEAWDCqdx8riW7y1KDGsfDMHjRR Fw85FQ/8OyfsFawBv0h7BohfIdVqcmxwd/IAVR552SlJADGcDoGDbb0bLypCi15f rXylLXiraAAmaKxaYA+ofWO5f9CYuBpZPUEfkHV7gS+4PMvwk9vbw4d38jVtJ/tB I9foEasQ2W0tKEJO6/6QLc/JOFfnDnv8aYelOw3CEjKZgOOYiDhFlhpibU0l3iCP GBKH00dlyQhk9BM9acK9M9QyuPZ1C+DjzDzRUGM9d4aF+NCdDzrGtiOINRD/JhPS tFVjrokQN4T8PdK80nL8cKjKClszhU1ihI1C+7DzH5I18HhmyoRbEkdodGttug== -----END CERTIFICATE-----Generated at Wed May 13 01:26:34 2026 by rpki-client