$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/437013ed-3bde-44b7-8ead-f016dade3757.roa File: 437013ed-3bde-44b7-8ead-f016dade3757.roa (raw, json) Hash identifier: ahRFRBDn1WQvstwfBBGXWmh4gevT8Dl9+c+kA8Nc0Oc= Subject key identifier: 7B:88:28:2E:33:5D:16:A0:FC:32:A8:95:E8:6E:CB:42:D6:41:4A:3E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 12352392ECBD67B705313DCB5DFDEF9FE5A60B38 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/437013ed-3bde-44b7-8ead-f016dade3757.roa Signing time: Fri 22 May 2026 16:36:05 +0000 ROA not before: Fri 22 May 2026 16:36:05 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fe8:8060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:35:23:92:ec:bd:67:b7:05:31:3d:cb:5d:fd:ef:9f:e5:a6:0b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 22 16:36:05 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=dd47d5290179d1d65c679e38747ecbc4d7b88bd529aed61bb2abe1ff475936d1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:50:36:47:ab:3b:15:f1:6a:d1:50:34:c5: 8a:76:af:54:ec:2d:d6:48:db:b9:59:e0:72:91:b3: 65:89:f8:b1:e0:2a:3c:57:85:30:90:8e:19:ac:d4: ce:7e:52:10:51:2a:67:03:93:ec:cb:79:f1:17:53: 1a:13:5d:58:b3:f4:c2:0b:79:bf:dd:81:05:5b:62: 7c:fc:07:51:5c:44:27:26:79:46:40:c1:c1:07:a5: 5e:82:21:9a:d4:83:62:a5:eb:88:b2:90:77:7f:fe: 9a:78:2e:bc:f7:2b:a3:e0:f4:e9:3d:22:87:b7:20: 18:8f:f6:86:0d:ed:e6:df:f0:72:03:45:57:b1:ce: 85:07:b2:10:ad:ab:88:33:a9:80:78:5c:3b:a3:b8: 4a:bb:7b:3d:0f:4c:fa:40:f9:29:de:f6:6e:ec:2e: 7b:a4:c9:fd:e0:b6:14:44:e5:8b:84:20:95:b8:75: 38:ec:dd:1d:01:91:ec:88:85:ea:a7:8e:fd:64:9c: 63:23:f7:65:42:b8:91:a6:2b:32:21:3a:b5:eb:06: 64:0f:ff:95:67:bd:2a:c4:4c:c8:66:cc:4a:5f:ea: 9e:ec:c1:6d:61:b3:5b:dd:45:90:54:3b:c7:2e:7e: 6f:3e:2e:a8:f7:3e:3d:18:3b:b6:92:8a:c1:81:c6: c8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:88:28:2E:33:5D:16:A0:FC:32:A8:95:E8:6E:CB:42:D6:41:4A:3E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/437013ed-3bde-44b7-8ead-f016dade3757.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe8:8060::/48 Signature Algorithm: sha256WithRSAEncryption 2c:56:d3:b8:54:9f:71:44:d2:cd:3b:86:84:f2:15:11:43:26: c6:03:79:f2:43:f6:76:ca:3e:36:cf:a4:b5:7a:77:fb:e4:90: 76:d5:01:05:25:45:23:b3:80:fc:08:71:91:7f:72:19:b3:c2: 47:16:b3:99:a2:d5:6b:61:19:f9:29:8f:37:64:8c:6d:15:d6: 3d:54:dc:7a:a5:4d:16:d1:27:3e:d2:20:96:24:78:7b:a3:b1: 48:56:fa:68:d3:d3:f5:90:a1:c3:64:90:2e:43:fc:28:ea:e8: 6c:ac:5a:b5:12:97:88:d5:0f:2d:a5:42:44:0e:bb:a8:00:c3: e2:5d:fb:d4:90:06:a8:1f:57:be:dc:6f:15:05:c1:9f:3f:47: b8:5a:20:31:c9:58:2f:d6:79:43:ab:91:49:bd:6b:6f:d3:5f: 85:71:cb:a2:71:56:42:58:ca:77:c2:4c:67:f6:cc:76:93:85: 12:f4:2c:89:eb:5b:e5:0a:51:3d:e9:4c:26:67:36:f7:65:9d: c5:a9:e6:94:a9:90:b6:74:94:fe:ba:ea:f3:74:91:a0:89:a4: 69:8f:15:9f:b6:91:b1:8b:3c:dc:e9:a3:37:27:28:3c:76:b0: 04:5f:e8:a1:b5:9d:1e:87:f2:fb:a3:ce:5b:ea:ef:1d:75:64: 08:fd:eb:0e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEjUjkuy9Z7cFMT3LXf3vn+WmCzgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIyMTYzNjA1WhcNMjYwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDQ3ZDUyOTAxNzlkMWQ2NWM2NzllMzg3NDdlY2JjNGQ3 Yjg4YmQ1MjlhZWQ2MWJiMmFiZTFmZjQ3NTkzNmQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwylA2R6s7FfFq0VA0xYp2r1TsLdZI27lZ4HKRs2WJ+LHg KjxXhTCQjhms1M5+UhBRKmcDk+zLefEXUxoTXViz9MILeb/dgQVbYnz8B1FcRCcm eUZAwcEHpV6CIZrUg2Kl64iykHd//pp4Lrz3K6Pg9Ok9Ioe3IBiP9oYN7ebf8HID RVexzoUHshCtq4gzqYB4XDujuEq7ez0PTPpA+Sne9m7sLnukyf3gthRE5YuEIJW4 dTjs3R0BkeyIheqnjv1knGMj92VCuJGmKzIhOrXrBmQP/5VnvSrETMhmzEpf6p7s wW1hs1vdRZBUO8cufm8+Lqj3Pj0YO7aSisGBxsgLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUe4goLjNdFqD8MqiV6G7LQtZBSj4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQzNzAxM2VkLTNiZGUtNDRiNy04ZWFkLWYwMTZkYWRlMzc1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/ogGAwDQYJKoZIhvcNAQELBQADggEBACxW07hUn3FE0s07hoTyFRFD JsYDefJD9nbKPjbPpLV6d/vkkHbVAQUlRSOzgPwIcZF/chmzwkcWs5mi1WthGfkp jzdkjG0V1j1U3HqlTRbRJz7SIJYkeHujsUhW+mjT0/WQocNkkC5D/Cjq6GysWrUS l4jVDy2lQkQOu6gAw+Jd+9SQBqgfV77cbxUFwZ8/R7haIDHJWC/WeUOrkUm9a2/T X4Vxy6JxVkJYynfCTGf2zHaThRL0LInrW+UKUT3pTCZnNvdlncWp5pSpkLZ0lP66 6vN0kaCJpGmPFZ+2kbGLPNzpozcnKDx2sARf6KG1nR6H8vujzlvq7x11ZAj96w4= -----END CERTIFICATE-----Generated at Sat Jun 13 09:06:48 2026 by rpki-client