$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49de4e53-fb6d-4db1-ad24-635eda07644c.roa File: 49de4e53-fb6d-4db1-ad24-635eda07644c.roa (raw, json) Hash identifier: IkvH3iM0aMgRt9nz4+RV8SQFQ0+Xd8jPJMA9xTM0ot8= Subject key identifier: 49:32:B5:EE:56:12:86:58:C7:51:0C:97:DD:4E:69:69:06:63:05:52 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 12154A77FAA54E96AC01B5A4C645775692EE9011 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49de4e53-fb6d-4db1-ad24-635eda07644c.roa Signing time: Sat 16 May 2026 00:30:09 +0000 ROA not before: Sat 16 May 2026 00:30:09 +0000 ROA not after: Fri 14 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f16::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:15:4a:77:fa:a5:4e:96:ac:01:b5:a4:c6:45:77:56:92:ee:90:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 00:30:09 2026 GMT Not After : Aug 14 23:59:59 2026 GMT Subject: serialNumber=01335cb95dbf2700f5eaa4b5c41e80049025d63f84ac9cb87da50908c9818891, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e6:e2:ed:bc:dd:e5:01:2a:2f:93:67:1a:cb: 15:2b:4c:16:59:52:6d:a8:fa:a0:cb:18:79:df:7d: 06:cc:5b:4d:97:c1:f5:78:50:9a:a6:76:57:88:6f: e4:13:96:17:f7:0e:2c:0b:06:70:63:a2:cf:d8:b5: d1:17:bd:5a:1e:28:87:2e:08:1d:43:7c:86:2b:b6: 69:8b:1b:1f:75:05:29:86:32:7a:2d:d2:7a:d1:0e: 23:77:bd:d0:91:fc:29:30:5f:59:04:97:30:68:6b: 76:45:b2:84:26:0f:20:5e:0f:56:53:cf:5f:e7:c3: e9:ec:4b:b5:f2:5c:69:61:5c:5b:e7:1f:b8:bb:86: d0:6e:b2:4c:55:ac:ae:90:d6:ac:70:f6:08:79:c2: 87:9c:39:12:59:17:6c:1b:6f:5b:63:74:89:09:5f: 6a:fe:32:94:ae:12:1d:a6:16:54:e2:49:b8:bb:99: 0c:7c:53:13:f0:11:ac:e7:10:5c:a2:4a:b4:c7:89: 25:0a:28:c8:28:c8:7e:dd:af:6b:35:f1:ab:09:ed: e5:64:86:4d:1d:1d:12:36:96:aa:8b:cf:53:9b:46: 2f:ae:15:8c:dc:71:8f:21:9a:31:45:d0:f6:37:54: a7:39:43:b9:a5:8a:8c:0a:39:67:84:c1:ca:fe:b0: 36:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:32:B5:EE:56:12:86:58:C7:51:0C:97:DD:4E:69:69:06:63:05:52 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49de4e53-fb6d-4db1-ad24-635eda07644c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f16::/38 Signature Algorithm: sha256WithRSAEncryption b8:c5:68:81:d1:ef:7b:40:c7:c0:ab:c0:22:6e:59:e6:f7:da: 40:a2:76:06:57:86:99:9d:42:4a:3a:13:d2:37:b3:a1:20:ac: 2c:dd:08:68:e7:c1:62:5d:08:04:2a:50:26:b5:07:24:5b:53: eb:9d:f1:be:57:54:8e:d9:42:cf:11:4e:09:aa:68:58:3b:78: c9:63:15:22:89:1e:c4:d1:f1:cc:56:74:86:60:30:76:40:10: 7c:59:1d:71:8d:32:a1:85:d9:3e:f6:1a:05:80:94:52:15:f9: c5:ab:ae:11:34:97:2d:5a:90:dc:1e:20:26:a5:e0:46:b3:e2: b1:7c:49:56:10:e6:21:8b:c6:75:c4:0f:93:c8:16:19:87:f4: af:a0:4c:a0:aa:bc:07:fd:f9:13:7a:fe:27:57:bd:fd:a2:19: 6d:13:d3:f3:d2:91:81:7f:0b:4c:2c:5d:bd:b0:26:73:5c:fa: e7:64:93:db:a4:ef:cb:f9:15:14:97:41:31:c8:a7:3c:77:50: 19:b4:a4:c3:69:42:89:8f:8d:b9:9a:d9:26:77:bb:26:27:c8: 73:12:82:bd:a1:34:62:aa:3b:62:6e:39:4c:28:35:05:9f:a3: f0:f9:a2:e0:f7:dd:82:6d:77:9e:65:a0:9a:7e:19:57:db:ef: a2:b6:90:6b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUEhVKd/qlTpasAbWkxkV3VpLukBEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDAzMDA5WhcNMjYwODE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTMzNWNiOTVkYmYyNzAwZjVlYWE0YjVjNDFlODAwNDkw MjVkNjNmODRhYzljYjg3ZGE1MDkwOGM5ODE4ODkxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz5uLtvN3lASovk2cayxUrTBZZUm2o+qDLGHnffQbMW02X wfV4UJqmdleIb+QTlhf3DiwLBnBjos/YtdEXvVoeKIcuCB1DfIYrtmmLGx91BSmG Mnot0nrRDiN3vdCR/CkwX1kElzBoa3ZFsoQmDyBeD1ZTz1/nw+nsS7XyXGlhXFvn H7i7htBuskxVrK6Q1qxw9gh5woecORJZF2wbb1tjdIkJX2r+MpSuEh2mFlTiSbi7 mQx8UxPwEaznEFyiSrTHiSUKKMgoyH7dr2s18asJ7eVkhk0dHRI2lqqLz1ObRi+u FYzccY8hmjFF0PY3VKc5Q7mliowKOWeEwcr+sDZdAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUSTK17lYShljHUQyX3U5paQZjBVIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ5ZGU0ZTUzLWZiNmQtNGRiMS1hZDI0LTYzNWVkYTA3NjQ0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8WADANBgkqhkiG9w0BAQsFAAOCAQEAuMVogdHve0DHwKvAIm5Z5vfa QKJ2BleGmZ1CSjoT0jezoSCsLN0IaOfBYl0IBCpQJrUHJFtT653xvldUjtlCzxFO CapoWDt4yWMVIokexNHxzFZ0hmAwdkAQfFkdcY0yoYXZPvYaBYCUUhX5xauuETSX LVqQ3B4gJqXgRrPisXxJVhDmIYvGdcQPk8gWGYf0r6BMoKq8B/35E3r+J1e9/aIZ bRPT89KRgX8LTCxdvbAmc1z652ST26Tvy/kVFJdBMcinPHdQGbSkw2lCiY+NuZrZ Jne7JifIcxKCvaE0Yqo7Ym45TCg1BZ+j8Pmi4Pfdgm13nmWgmn4ZV9vvoraQaw== -----END CERTIFICATE-----Generated at Sat Jun 13 07:06:17 2026 by rpki-client