$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/426b11f1-f4a7-4042-935d-e26b87cd84a0.roa File: 426b11f1-f4a7-4042-935d-e26b87cd84a0.roa (raw, json) Hash identifier: z+x6QhSJ+DRCPaHBKOl+KYiMLtD9BVk2fu7zalmh8LA= Subject key identifier: BE:9D:CE:97:BD:BD:E5:BE:D5:40:82:70:9F:D5:BB:B6:61:CE:9B:23 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7336BE2054B67F83F631FA073C5CBF1A47D05418 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/426b11f1-f4a7-4042-935d-e26b87cd84a0.roa Signing time: Fri 03 Apr 2026 00:10:11 +0000 ROA not before: Fri 03 Apr 2026 00:10:11 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1feb:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:36:be:20:54:b6:7f:83:f6:31:fa:07:3c:5c:bf:1a:47:d0:54:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 3 00:10:11 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=ee87e1146ec28cfde492d9ed649d0eee8697e230daeabc8c4781f4c148f2fa86, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6c:21:8d:92:31:c4:43:43:1a:d0:09:ef:04: d6:92:02:20:3a:6c:b9:35:d8:73:ff:44:78:de:88: 6a:74:98:91:a4:80:73:7a:ae:b4:01:e5:15:0a:42: 97:50:e9:9c:56:a8:8a:e7:36:b3:ed:05:22:ec:76: f2:c1:6a:21:57:e7:82:32:25:ec:5b:2e:28:f0:e4: 76:54:35:09:01:c4:4b:4d:a9:1a:a8:a5:8e:d7:84: 22:a2:93:e9:a5:16:e2:8f:4b:40:a6:86:67:d5:df: 77:3c:1a:fe:f5:28:40:c4:1f:50:05:8c:2c:be:65: 4e:b9:49:0b:23:1a:d7:6d:25:30:a1:3c:0e:48:84: ad:df:27:69:76:bb:e2:06:9b:19:ab:45:8a:c7:62: e5:84:1d:71:64:4a:a4:5d:0a:34:65:e8:80:c8:5c: 1d:12:2f:c6:bf:69:0b:a9:47:55:73:64:c7:ca:22: f0:d2:ce:e6:67:fa:cc:15:6c:c9:55:17:05:ad:f4: 4f:17:aa:eb:e1:0e:49:e0:45:c2:19:e4:56:a7:98: 21:9b:fc:0c:1a:a3:67:dc:9a:68:78:82:77:3d:df: aa:98:ff:b7:81:97:1c:77:33:81:a4:24:dc:51:f8: 42:e8:3f:38:8d:f7:4f:f7:ba:07:d4:c3:9c:d4:f3: c1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9D:CE:97:BD:BD:E5:BE:D5:40:82:70:9F:D5:BB:B6:61:CE:9B:23 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/426b11f1-f4a7-4042-935d-e26b87cd84a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1feb:1000::/40 Signature Algorithm: sha256WithRSAEncryption 4f:c5:ec:2f:fe:91:9d:82:a7:07:ce:eb:fa:24:e8:de:92:f3: a6:56:f7:6b:8f:75:2e:41:97:e0:db:5d:4c:de:a2:68:b6:8a: f2:a1:c3:d0:19:d3:5f:ca:f1:59:71:b9:12:87:3a:31:19:f5: 9a:eb:fe:1c:eb:78:e4:3f:12:ff:73:93:fe:4e:f3:0f:3b:72: a6:95:62:75:f6:4a:ad:6c:89:51:c7:1a:c9:06:4c:d0:76:a5: 0c:d2:35:37:33:2a:5c:7d:76:33:a0:0f:6f:25:8a:49:03:04: c1:cb:42:74:66:a5:e0:d9:6d:56:c6:23:33:be:f1:28:cb:71: 62:c2:46:07:cf:f4:a1:47:66:3b:9d:2a:8d:05:48:9c:92:0e: e3:5a:17:48:2b:b5:86:8b:69:a1:e1:c2:e9:7d:62:38:7a:29: 8a:f1:b4:dc:2d:b0:c3:c6:94:4f:ed:45:d7:76:13:04:e4:5e: 40:41:10:ca:f4:10:4f:3b:46:bd:5e:f6:a5:74:62:3e:6c:10: 5b:c4:d0:5d:e4:03:be:df:e1:21:ee:30:3d:c1:91:14:25:01: f4:96:d7:d1:70:a4:a1:c1:90:3f:28:44:50:e2:b9:c3:e8:5f: 4e:8e:06:5e:7b:7e:c4:d4:3a:6c:15:0d:f7:a3:f0:6f:72:08: 4d:1d:46:8c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUcza+IFS2f4P2MfoHPFy/GkfQVBgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDAzMDAxMDExWhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTg3ZTExNDZlYzI4Y2ZkZTQ5MmQ5ZWQ2NDlkMGVlZTg2 OTdlMjMwZGFlYWJjOGM0NzgxZjRjMTQ4ZjJmYTg2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6bCGNkjHEQ0Ma0AnvBNaSAiA6bLk12HP/RHjeiGp0mJGk gHN6rrQB5RUKQpdQ6ZxWqIrnNrPtBSLsdvLBaiFX54IyJexbLijw5HZUNQkBxEtN qRqopY7XhCKik+mlFuKPS0CmhmfV33c8Gv71KEDEH1AFjCy+ZU65SQsjGtdtJTCh PA5IhK3fJ2l2u+IGmxmrRYrHYuWEHXFkSqRdCjRl6IDIXB0SL8a/aQupR1VzZMfK IvDSzuZn+swVbMlVFwWt9E8XquvhDkngRcIZ5FanmCGb/Awao2fcmmh4gnc936qY /7eBlxx3M4GkJNxR+ELoPziN90/3ugfUw5zU88HNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUvp3Ol7295b7VQIJwn9W7tmHOmyMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQyNmIxMWYxLWY0YTctNDA0Mi05MzVkLWUyNmI4N2NkODRhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/rEDANBgkqhkiG9w0BAQsFAAOCAQEAT8XsL/6RnYKnB87r+iTo3pLz plb3a491LkGX4NtdTN6iaLaK8qHD0BnTX8rxWXG5Eoc6MRn1muv+HOt45D8S/3OT /k7zDztyppVidfZKrWyJUccayQZM0HalDNI1NzMqXH12M6APbyWKSQMEwctCdGal 4NltVsYjM77xKMtxYsJGB8/0oUdmO50qjQVInJIO41oXSCu1hotpoeHC6X1iOHop ivG03C2ww8aUT+1F13YTBOReQEEQyvQQTztGvV72pXRiPmwQW8TQXeQDvt/hIe4w PcGRFCUB9JbX0XCkocGQPyhEUOK5w+hfTo4GXnt+xNQ6bBUN96Pwb3IITR1GjA== -----END CERTIFICATE-----Generated at Fri Apr 17 08:01:46 2026 by rpki-client