$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd2490be-36b4-4ace-9cba-a26053204659.roa File: dd2490be-36b4-4ace-9cba-a26053204659.roa (raw, json) Hash identifier: anduDV92cCMyiLk2+vyZo0MyvlWU7YaQhKG3jHo5CS8= Subject key identifier: 67:0F:A6:C6:D6:61:63:80:EA:C2:BF:7E:F3:CB:9C:DD:F1:28:0D:1E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F0257B2C97E3FCDB0B53774B8F60E0911CE6A8F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd2490be-36b4-4ace-9cba-a26053204659.roa Signing time: Wed 29 Apr 2026 00:01:22 +0000 ROA not before: Wed 29 Apr 2026 00:01:22 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f68:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:02:57:b2:c9:7e:3f:cd:b0:b5:37:74:b8:f6:0e:09:11:ce:6a:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:01:22 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=9e72bbac9474894ed4302d10383867984a21e05b19ab2f4aefe006033b1242e3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c5:ad:c7:31:65:84:86:04:f7:a1:08:e1:a7: e4:ea:57:5b:bf:c3:ee:29:11:4d:7c:b1:87:67:1f: 01:14:60:30:48:1e:29:49:00:64:ad:26:f4:5d:a2: f1:15:b1:92:2c:89:52:ed:6f:07:6a:a9:1a:ee:9c: 7e:f8:c5:70:ac:3f:60:ee:e7:89:4e:a4:d7:44:b7: b4:e0:62:26:61:da:c9:56:a3:83:28:02:b7:24:9a: 9a:2c:f8:cd:a2:83:22:cb:1f:0a:a2:4f:00:41:fb: d6:1f:7d:8f:bc:02:64:6d:94:39:bb:b7:8a:6b:f3: 84:33:01:a8:62:8b:58:db:8d:ea:bb:a3:91:c6:04: 24:74:df:08:f2:63:ba:0a:d8:82:40:19:f3:00:87: bd:13:9c:6a:12:03:71:0f:c3:8e:1d:c4:ff:1a:bc: b9:7b:7c:db:20:29:9e:c4:01:d8:1f:0a:67:0b:97: de:b7:07:94:38:3c:7c:4d:c9:5d:fa:3a:ea:73:78: 48:22:c0:32:9a:3f:28:c9:55:19:55:57:15:57:0e: 66:7c:de:06:ef:cd:bc:c9:f8:8a:62:4b:b6:24:22: 7f:76:91:d0:31:70:d1:dc:c1:af:04:10:0f:f4:33: cf:3e:e1:9d:ed:3e:0a:ce:46:d9:d8:dd:f9:99:49: 17:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0F:A6:C6:D6:61:63:80:EA:C2:BF:7E:F3:CB:9C:DD:F1:28:0D:1E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd2490be-36b4-4ace-9cba-a26053204659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f68:5000::/40 Signature Algorithm: sha256WithRSAEncryption 8c:99:a9:b4:bb:49:dd:9a:31:b5:4f:3a:cd:f5:1b:b9:cb:0a: 6d:8b:e1:6c:e9:77:55:0f:ea:83:34:06:b1:b6:ca:26:8a:b8: 77:1e:cd:48:01:4e:53:82:cb:6c:9e:a3:93:4e:c6:14:c4:47: 88:3b:0e:27:3c:2f:56:7b:1e:e5:bb:fd:91:f9:34:15:63:c6: cf:b8:24:4d:81:a5:7f:47:27:c5:bc:fd:72:b0:8b:f4:75:3c: b3:db:ce:59:7d:c3:de:22:92:d2:44:0f:fb:d3:da:4b:45:7a: 45:ee:c6:39:b7:a9:52:75:4a:2d:e1:c7:e6:24:91:af:80:17: 5c:5c:91:1a:4d:d8:b7:d0:4d:79:89:f2:88:ad:f6:73:f5:32: d6:06:2d:99:5f:b8:2a:41:13:00:ea:cc:29:b5:20:b6:aa:61: 9e:37:b2:1b:6c:62:75:c1:99:78:f5:88:b2:0b:f0:6c:8f:79: 84:63:7d:ea:08:27:2c:1c:d1:18:e9:f0:8f:23:e9:57:c4:32: ca:b7:dd:b5:38:f4:2c:52:eb:09:e2:cd:7a:d0:54:4a:ef:8b: d5:d3:39:59:d1:a5:06:cf:c6:32:96:d0:cd:7b:d2:c6:83:04: ae:8a:b9:77:d6:ac:39:e9:7b:17:4d:7b:12:8a:de:88:36:66: fb:ad:ed:f7 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUHwJXssl+P82wtTd0uPYOCRHOao8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDAwMTIyWhcNMjYwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTcyYmJhYzk0NzQ4OTRlZDQzMDJkMTAzODM4Njc5ODRh MjFlMDViMTlhYjJmNGFlZmUwMDYwMzNiMTI0MmUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfxa3HMWWEhgT3oQjhp+TqV1u/w+4pEU18sYdnHwEUYDBI HilJAGStJvRdovEVsZIsiVLtbwdqqRrunH74xXCsP2Du54lOpNdEt7TgYiZh2slW o4MoArckmpos+M2igyLLHwqiTwBB+9YffY+8AmRtlDm7t4pr84QzAahii1jbjeq7 o5HGBCR03wjyY7oK2IJAGfMAh70TnGoSA3EPw44dxP8avLl7fNsgKZ7EAdgfCmcL l963B5Q4PHxNyV36OupzeEgiwDKaPyjJVRlVVxVXDmZ83gbvzbzJ+IpiS7YkIn92 kdAxcNHcwa8EEA/0M88+4Z3tPgrORtnY3fmZSRcbAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUZw+mxtZhY4Dqwr9+88uc3fEoDR4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RkMjQ5MGJlLTM2YjQtNGFjZS05Y2JhLWEyNjA1MzIwNDY1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9oUDANBgkqhkiG9w0BAQsFAAOCAQEAjJmptLtJ3ZoxtU86zfUbucsK bYvhbOl3VQ/qgzQGsbbKJoq4dx7NSAFOU4LLbJ6jk07GFMRHiDsOJzwvVnse5bv9 kfk0FWPGz7gkTYGlf0cnxbz9crCL9HU8s9vOWX3D3iKS0kQP+9PaS0V6Re7GObep UnVKLeHH5iSRr4AXXFyRGk3Yt9BNeYnyiK32c/Uy1gYtmV+4KkETAOrMKbUgtqph njeyG2xidcGZePWIsgvwbI95hGN96ggnLBzRGOnwjyPpV8QyyrfdtTj0LFLrCeLN etBUSu+L1dM5WdGlBs/GMpbQzXvSxoMEroq5d9asOel7F017EoreiDZm+63t9w== -----END CERTIFICATE-----Generated at Wed May 13 01:44:24 2026 by rpki-client