$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c289aaa9-3ca4-493a-b061-043991b45857.roa File: c289aaa9-3ca4-493a-b061-043991b45857.roa (raw, json) Hash identifier: Bx148TmZ0WTYx+Lmll9awO37FcLxpcwCGSGb3usMx58= Subject key identifier: E0:79:9F:4E:36:48:A0:75:17:3A:E5:8B:E4:47:5E:D9:59:A0:57:01 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2C248BD503066B3008DD6E2DE01CA23899C44F2B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c289aaa9-3ca4-493a-b061-043991b45857.roa Signing time: Tue 12 May 2026 01:21:23 +0000 ROA not before: Tue 12 May 2026 01:21:23 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:4c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:24:8b:d5:03:06:6b:30:08:dd:6e:2d:e0:1c:a2:38:99:c4:4f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:21:23 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=6fd5e72611d774c509dc5f81dec8416f49e3e3f781851ce00d2a75e19c8e9167, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1b:2c:df:d8:68:1c:1c:9d:cc:3b:dc:d5:d3: 6b:86:c4:b5:2e:c2:8b:8e:c2:3d:80:e3:f7:42:12: 00:49:22:b7:4e:46:1b:c2:48:d7:2f:c1:89:1f:fe: 29:b8:d6:78:b6:fd:f5:91:6b:f3:dd:73:aa:f0:c3: 72:6a:d8:cc:35:67:59:f4:e1:46:7e:c3:87:84:8d: ee:f7:84:a5:f7:32:aa:f4:ab:1d:f3:7d:6a:a3:48: 62:21:22:e8:cd:fc:9f:39:f5:cc:7c:c6:48:ac:2f: 11:65:cb:30:84:19:17:4a:73:89:87:58:fa:6c:2f: 9d:41:45:b3:a4:fb:15:8d:e6:f4:97:87:c5:28:f2: f2:56:65:f9:4f:5c:16:35:ea:6c:85:45:8e:18:fd: 70:85:c0:e8:8c:c1:ed:ea:cd:ba:5c:68:d3:4e:86: b0:6c:12:7c:25:e7:3a:34:8f:55:cf:d0:f5:7b:fb: 37:7f:e5:e5:13:a5:99:d2:ce:05:c0:6b:34:c3:2e: b5:77:86:90:7d:f2:85:26:c8:74:91:ae:99:e1:b4: 8a:5e:9b:55:fd:bf:2a:13:c4:c9:91:d1:02:a4:36: d3:dd:06:9c:c7:4e:a3:85:bf:1c:f5:9a:82:df:86: 0b:e1:0d:e0:96:37:ff:0d:62:ea:f9:36:7e:88:46: 73:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:79:9F:4E:36:48:A0:75:17:3A:E5:8B:E4:47:5E:D9:59:A0:57:01 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c289aaa9-3ca4-493a-b061-043991b45857.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:4c00::/48 Signature Algorithm: sha256WithRSAEncryption 41:b5:d2:3a:a8:f8:20:77:6d:1c:fb:63:f6:ef:2c:b7:66:ed: 8d:8b:a8:16:3c:d8:f7:1e:9d:e9:32:d1:b0:47:bb:1e:7c:ef: a1:8b:4c:22:d8:6b:61:eb:6b:ee:9f:99:5e:dc:78:7f:85:5f: 6e:ae:c9:68:93:4d:4f:b9:20:81:9f:27:f1:48:7d:a4:1d:9b: 40:69:24:f1:1d:0a:1e:c1:a3:3b:6f:1b:73:03:fd:7c:f8:a3: 8b:01:af:36:f4:44:f5:65:90:17:69:15:2c:ec:87:ad:fe:a1: 68:4b:57:14:6f:39:48:ff:42:b7:0a:9f:99:29:68:53:c5:4a: 2f:80:21:38:9a:81:5e:0b:cd:59:dc:91:b1:bf:59:ce:41:ed: a3:19:4f:87:f4:69:89:77:73:d3:03:f0:9c:9e:56:12:f4:33: 75:6b:2f:f3:33:c5:a0:1e:7b:c2:1c:cd:2f:74:a7:bb:a3:9f: 62:f0:90:ab:c2:9d:af:3b:65:0b:e0:27:e3:4b:98:18:59:c3: f4:78:ef:4c:ef:62:e4:98:84:1c:a2:07:57:b7:7f:a8:79:44: d1:61:13:2d:9a:8d:50:10:a2:9a:3f:d6:6a:41:c9:d7:44:16: 41:3e:0d:56:7f:b2:0f:ed:fc:69:ba:dd:26:0c:e6:f8:e9:21: 3d:b8:99:bb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULCSL1QMGazAI3W4t4ByiOJnETyswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDEyMTIzWhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZmQ1ZTcyNjExZDc3NGM1MDlkYzVmODFkZWM4NDE2ZjQ5 ZTNlM2Y3ODE4NTFjZTAwZDJhNzVlMTljOGU5MTY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDzGyzf2GgcHJ3MO9zV02uGxLUuwouOwj2A4/dCEgBJIrdO RhvCSNcvwYkf/im41ni2/fWRa/Pdc6rww3Jq2Mw1Z1n04UZ+w4eEje73hKX3Mqr0 qx3zfWqjSGIhIujN/J859cx8xkisLxFlyzCEGRdKc4mHWPpsL51BRbOk+xWN5vSX h8Uo8vJWZflPXBY16myFRY4Y/XCFwOiMwe3qzbpcaNNOhrBsEnwl5zo0j1XP0PV7 +zd/5eUTpZnSzgXAazTDLrV3hpB98oUmyHSRrpnhtIpem1X9vyoTxMmR0QKkNtPd BpzHTqOFvxz1moLfhgvhDeCWN/8NYur5Nn6IRnNPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4HmfTjZIoHUXOuWL5Ede2VmgVwEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MyODlhYWE5LTNjYTQtNDkzYS1iMDYxLTA0Mzk5MWI0NTg1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sTAAwDQYJKoZIhvcNAQELBQADggEBAEG10jqo+CB3bRz7Y/bvLLdm 7Y2LqBY82Pceneky0bBHux5876GLTCLYa2Hra+6fmV7ceH+FX26uyWiTTU+5IIGf J/FIfaQdm0BpJPEdCh7BoztvG3MD/Xz4o4sBrzb0RPVlkBdpFSzsh63+oWhLVxRv OUj/QrcKn5kpaFPFSi+AITiagV4LzVnckbG/Wc5B7aMZT4f0aYl3c9MD8JyeVhL0 M3VrL/MzxaAee8IczS90p7ujn2LwkKvCna87ZQvgJ+NLmBhZw/R470zvYuSYhByi B1e3f6h5RNFhEy2ajVAQopo/1mpByddEFkE+DVZ/sg/t/Gm63SYM5vjpIT24mbs= -----END CERTIFICATE-----Generated at Wed May 13 03:45:46 2026 by rpki-client