$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f563c031-845f-4357-b002-8b1b33718b1a.roa File: f563c031-845f-4357-b002-8b1b33718b1a.roa (raw, json) Hash identifier: 0ZIAml+jlM0RJb6E6Kpp27Z0mR0dfxJPsjRQK0+GkWg= Subject key identifier: 87:BB:A4:DF:11:6B:2E:56:73:F6:42:22:4E:95:04:A6:EA:9E:50:F8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4D4EA952A930D72310D3CF456212FCDA0BD0CA3B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f563c031-845f-4357-b002-8b1b33718b1a.roa Signing time: Tue 05 May 2026 00:40:34 +0000 ROA not before: Tue 05 May 2026 00:40:34 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fee:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:4e:a9:52:a9:30:d7:23:10:d3:cf:45:62:12:fc:da:0b:d0:ca:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 00:40:34 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=44ed90541d1d65d4256d403e2764cb26b32d40279a109a05a798096bc1326ec7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:db:83:cb:07:21:e5:3f:b7:70:f5:66:73:d3: 36:1e:c5:1c:20:27:c7:d2:56:83:2f:0e:e9:46:b3: ab:af:01:c9:83:43:98:36:3e:eb:a0:c9:77:22:cc: 05:e2:42:e1:0b:67:3d:36:f7:aa:84:3e:d3:b9:a5: 45:50:4e:64:67:04:ea:4e:35:ea:5f:8f:55:ac:d4: 68:d5:6f:93:e0:28:a1:dd:36:43:2d:22:ef:21:5b: 63:f6:5d:b8:dd:14:06:79:46:fe:e7:0f:b5:92:df: bb:45:a7:01:72:42:a7:11:8d:65:ac:84:e0:be:a6: 48:89:cb:af:47:a0:f8:7d:6a:f4:b7:45:07:28:7d: 58:e1:02:d7:d1:0c:51:16:df:f7:d3:75:89:88:e9: 64:1b:56:af:15:0e:e7:a1:5d:cc:c0:96:5d:9f:07: f2:f6:4e:21:7c:05:21:9a:53:96:86:93:9a:da:e4: b2:76:a6:04:16:2e:8d:84:0d:16:f6:36:76:a8:a8: 5d:cf:b9:83:00:ac:0b:ee:51:53:a4:8c:d6:e5:5e: 6c:63:15:e2:8a:85:2f:43:7c:d6:f1:31:aa:18:46: 69:9b:4a:82:53:b1:27:ec:00:03:d2:10:61:a9:99: fa:69:07:d5:67:02:0c:e2:06:e6:e0:c0:4b:53:11: 71:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BB:A4:DF:11:6B:2E:56:73:F6:42:22:4E:95:04:A6:EA:9E:50:F8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f563c031-845f-4357-b002-8b1b33718b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fee:2000::/40 Signature Algorithm: sha256WithRSAEncryption 52:90:5a:03:98:99:48:fa:0e:ab:2d:ed:33:55:e8:ba:27:7b: d0:b8:5e:04:0d:15:30:b1:9d:38:6d:2d:89:47:f7:a6:b7:e1: ab:80:b4:07:d1:64:4f:cb:39:ce:15:28:23:d1:c5:c4:76:db: f3:68:2a:a6:75:ee:76:d6:be:a5:df:83:59:04:8e:ab:8f:60: 9e:50:a6:1f:47:86:2f:c5:ff:39:ee:d3:b6:f2:ae:0e:08:e4: 4f:be:a1:c5:bb:80:d7:e4:2b:8f:b5:44:2b:df:87:97:39:56: 31:e4:c5:37:8b:0f:36:77:6d:11:52:9e:5a:ad:9c:7c:b4:3f: 63:c5:89:a8:15:a4:de:6e:e7:98:7a:11:e7:ed:88:50:f3:ec: f1:01:0e:c8:c1:54:46:21:86:e2:24:36:04:32:81:35:ed:72: ee:78:37:03:c9:bb:06:4e:f1:f0:e8:8d:c9:6c:4e:b9:e5:ea: 5f:64:a0:dc:e6:09:21:82:db:55:21:7c:5b:d9:96:ba:02:3a: 11:eb:5e:fc:83:6d:89:80:95:b4:8d:4d:39:1e:28:dd:b3:22: b9:5c:f2:7e:3d:9f:3d:7a:f0:bc:de:e0:aa:95:0e:35:00:8e: 5a:ca:46:36:04:85:28:b7:db:a7:e1:cc:bc:64:e9:6d:76:24: 2b:50:4d:0e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUTU6pUqkw1yMQ089FYhL82gvQyjswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA1MDA0MDM0WhcNMjYwODAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NGVkOTA1NDFkMWQ2NWQ0MjU2ZDQwM2UyNzY0Y2IyNmIz MmQ0MDI3OWExMDlhMDVhNzk4MDk2YmMxMzI2ZWM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl24PLByHlP7dw9WZz0zYexRwgJ8fSVoMvDulGs6uvAcmD Q5g2PuugyXcizAXiQuELZz0296qEPtO5pUVQTmRnBOpONepfj1Ws1GjVb5PgKKHd NkMtIu8hW2P2XbjdFAZ5Rv7nD7WS37tFpwFyQqcRjWWshOC+pkiJy69HoPh9avS3 RQcofVjhAtfRDFEW3/fTdYmI6WQbVq8VDuehXczAll2fB/L2TiF8BSGaU5aGk5ra 5LJ2pgQWLo2EDRb2NnaoqF3PuYMArAvuUVOkjNblXmxjFeKKhS9DfNbxMaoYRmmb SoJTsSfsAAPSEGGpmfppB9VnAgziBubgwEtTEXE3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUh7uk3xFrLlZz9kIiTpUEpuqeUPgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y1NjNjMDMxLTg0NWYtNDM1Ny1iMDAyLThiMWIzMzcxOGIxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/uIDANBgkqhkiG9w0BAQsFAAOCAQEAUpBaA5iZSPoOqy3tM1Xouid7 0LheBA0VMLGdOG0tiUf3prfhq4C0B9FkT8s5zhUoI9HFxHbb82gqpnXudta+pd+D WQSOq49gnlCmH0eGL8X/Oe7TtvKuDgjkT76hxbuA1+Qrj7VEK9+HlzlWMeTFN4sP NndtEVKeWq2cfLQ/Y8WJqBWk3m7nmHoR5+2IUPPs8QEOyMFURiGG4iQ2BDKBNe1y 7ng3A8m7Bk7x8OiNyWxOueXqX2Sg3OYJIYLbVSF8W9mWugI6Eete/INtiYCVtI1N OR4o3bMiuVzyfj2fPXrwvN7gqpUONQCOWspGNgSFKLfbp+HMvGTpbXYkK1BNDg== -----END CERTIFICATE-----Generated at Wed May 13 03:40:12 2026 by rpki-client