$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21e60934-8432-40eb-b5c4-edf3b30672b2.roa File: 21e60934-8432-40eb-b5c4-edf3b30672b2.roa (raw, json) Hash identifier: Z3VtpSwlyO+HELEDPoX04Myz6VgG73zAP1SJzTcSPc0= Subject key identifier: 25:E8:44:83:28:EB:AB:BB:73:3E:75:85:82:3B:6C:16:34:5C:2F:61 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6964AD6C1ED466ACD2D084798B3BE4E38EF7A2A5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21e60934-8432-40eb-b5c4-edf3b30672b2.roa Signing time: Fri 03 Apr 2026 00:10:38 +0000 ROA not before: Fri 03 Apr 2026 00:10:38 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1feb:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:64:ad:6c:1e:d4:66:ac:d2:d0:84:79:8b:3b:e4:e3:8e:f7:a2:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 3 00:10:38 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=0e3b148772120580b6b6e2905213694dfdbd256f9d532364565a983a137ba4af, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:b0:94:bf:0f:e3:18:04:ac:dd:4e:dd:6b: b5:a2:1f:d4:fb:24:08:5e:28:63:12:2c:ec:71:28: 8d:bc:88:5b:08:a1:22:60:84:62:df:64:48:f6:6b: 76:2c:d6:78:92:7e:73:78:a6:71:08:fc:22:15:ee: 83:8a:b7:09:80:5a:c9:d9:a4:a1:67:51:cb:62:9b: e0:13:37:cc:3d:c5:0b:d3:bf:eb:fc:cb:95:54:e0: c5:e7:ea:52:13:f5:0d:e8:11:be:49:da:f0:0d:d7: 03:0e:31:50:81:fd:89:38:22:a5:f3:b0:13:6c:9a: 34:66:6a:c0:c0:f6:d4:9d:5a:35:3d:f0:a5:0b:08: db:11:99:ba:68:b9:6f:0b:7b:63:b0:02:0f:e2:ff: c0:c2:31:c4:1e:72:5e:fd:ce:be:01:87:a8:e0:d8: 21:6a:f9:8d:95:b8:f0:fe:cf:81:b2:85:b1:0f:97: d1:3a:a3:e6:c7:77:8e:b0:82:af:44:d5:f2:87:e5: 7e:ba:93:79:af:4b:3b:7d:0c:b8:16:6e:fc:f5:f8: 7f:8d:d2:c6:88:ca:a2:fc:11:0b:e0:38:20:9f:38: 8a:c4:68:72:32:57:c6:f4:e0:c4:ef:8e:84:2e:20: 84:c4:ec:a9:f2:87:03:4c:e3:1e:a6:a4:c4:9e:d6: 94:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E8:44:83:28:EB:AB:BB:73:3E:75:85:82:3B:6C:16:34:5C:2F:61 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21e60934-8432-40eb-b5c4-edf3b30672b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1feb:6040::/48 Signature Algorithm: sha256WithRSAEncryption 5b:6a:9e:c8:f3:e9:e0:c3:10:5d:25:7c:bf:ae:54:5d:56:00: c1:09:df:16:6f:5a:e2:ed:89:b6:2d:95:ee:fb:0e:5a:57:bd: 34:e9:9d:b8:76:25:98:fc:fa:1c:94:57:d7:ed:08:d7:d0:71: ca:da:a9:b7:0e:d8:65:4c:bc:d8:21:e8:ee:ef:d2:08:df:c8: 1b:61:10:c1:72:02:75:3b:c1:df:ee:f4:23:2a:77:4a:18:83: 44:c7:fe:45:70:19:23:56:a6:9b:61:c7:af:8e:b6:4a:c8:da: ea:a4:99:66:4d:ec:bf:06:ad:72:fc:99:67:1f:c6:d7:04:30: 50:0a:54:f3:50:c8:8d:2e:d9:39:28:8a:ce:17:84:9e:de:3e: ce:29:6d:18:50:f1:2e:49:e7:3e:71:38:bc:40:cb:7d:76:f9: fd:4c:dd:5b:92:f9:98:8b:9c:f2:b0:2c:f3:d8:88:ad:2d:70: db:47:5c:93:fb:04:6d:c3:01:3a:eb:55:e1:b5:cc:33:d3:d9: 08:58:47:77:62:b2:bc:01:22:a3:6b:e5:8b:85:87:d5:13:76: e5:f4:5f:97:a8:44:91:f5:ec:d2:2b:1f:7f:59:c6:03:e4:c8: a5:93:3b:65:a0:7d:06:f8:89:3a:0d:a9:9e:7b:09:e6:b4:6c: ff:47:81:ed -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaWStbB7UZqzS0IR5izvk4473oqUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDAzMDAxMDM4WhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTNiMTQ4NzcyMTIwNTgwYjZiNmUyOTA1MjEzNjk0ZGZk YmQyNTZmOWQ1MzIzNjQ1NjVhOTgzYTEzN2JhNGFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1+bCUvw/jGASs3U7da7WiH9T7JAheKGMSLOxxKI28iFsI oSJghGLfZEj2a3Ys1niSfnN4pnEI/CIV7oOKtwmAWsnZpKFnUctim+ATN8w9xQvT v+v8y5VU4MXn6lIT9Q3oEb5J2vAN1wMOMVCB/Yk4IqXzsBNsmjRmasDA9tSdWjU9 8KULCNsRmbpouW8Le2OwAg/i/8DCMcQecl79zr4Bh6jg2CFq+Y2VuPD+z4GyhbEP l9E6o+bHd46wgq9E1fKH5X66k3mvSzt9DLgWbvz1+H+N0saIyqL8EQvgOCCfOIrE aHIyV8b04MTvjoQuIITE7KnyhwNM4x6mpMSe1pRZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJehEgyjrq7tzPnWFgjtsFjRcL2EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIxZTYwOTM0LTg0MzItNDBlYi1iNWM0LWVkZjNiMzA2NzJiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/rYEAwDQYJKoZIhvcNAQELBQADggEBAFtqnsjz6eDDEF0lfL+uVF1W AMEJ3xZvWuLtibYtle77DlpXvTTpnbh2JZj8+hyUV9ftCNfQccraqbcO2GVMvNgh 6O7v0gjfyBthEMFyAnU7wd/u9CMqd0oYg0TH/kVwGSNWppthx6+OtkrI2uqkmWZN 7L8GrXL8mWcfxtcEMFAKVPNQyI0u2Tkois4XhJ7ePs4pbRhQ8S5J5z5xOLxAy312 +f1M3VuS+ZiLnPKwLPPYiK0tcNtHXJP7BG3DATrrVeG1zDPT2QhYR3disrwBIqNr 5YuFh9UTduX0X5eoRJH17NIrH39ZxgPkyKWTO2WgfQb4iToNqZ57Cea0bP9Hge0= -----END CERTIFICATE-----Generated at Fri Apr 17 06:36:07 2026 by rpki-client