$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6274a045-65c1-4ed4-89c1-423dcdec149e.roa File: 6274a045-65c1-4ed4-89c1-423dcdec149e.roa (raw, json) Hash identifier: a5U/OHqWDjEqbZVnPbjaNBOjU6AMP6xgw6G9zHcXiyI= Subject key identifier: CC:3E:64:4C:78:06:36:CD:AC:F0:70:54:2D:7E:A2:72:5B:DA:16:32 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65A431ED3E171E61CF68C838C0F28B70AA212510 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6274a045-65c1-4ed4-89c1-423dcdec149e.roa Signing time: Fri 03 Apr 2026 00:10:05 +0000 ROA not before: Fri 03 Apr 2026 00:10:05 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f13:c000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a4:31:ed:3e:17:1e:61:cf:68:c8:38:c0:f2:8b:70:aa:21:25:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 3 00:10:05 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=15e8718e4c571748b711aa4a7817aac46ee94358e4b4795bf090deb82986f5b0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:74:80:d9:1d:43:20:91:fe:eb:61:da:bc:ee: a4:52:a3:f6:f8:bd:5e:ae:81:4d:a1:08:ee:a1:8a: 3a:6d:5f:f0:35:e9:5c:f4:5a:f7:1a:87:d1:c0:a2: 5f:af:8d:ef:9a:a1:4c:5f:2a:ad:b6:9a:15:4b:97: 68:cb:57:68:70:96:d2:6a:23:b7:fa:3f:8b:7b:7c: 77:33:06:e7:60:75:90:35:56:d5:61:9c:50:78:43: 30:54:43:a5:c4:12:ef:63:e2:29:b3:ac:44:5c:8c: 11:8f:9f:9f:f7:4f:0b:48:02:05:65:8e:34:25:b5: f1:ec:b8:c1:9c:0f:f5:5e:07:ff:ba:d7:91:6d:59: 4f:78:c1:48:84:1d:20:bd:7c:e6:1f:13:8b:e2:fc: a8:83:83:f7:9f:db:de:51:37:c5:84:a0:2f:3e:d9: 28:fd:c0:b6:65:a1:ba:ba:b7:b5:66:3c:15:e3:c8: ff:c6:d2:e0:7f:89:9a:57:cf:b1:2e:82:9d:e6:ed: 84:58:8f:cb:11:85:59:d0:fc:db:24:19:38:34:69: cd:4c:e6:a6:92:9b:e0:46:06:88:95:71:c5:2f:38: 4a:33:ab:3b:ff:19:f5:26:ed:51:1f:45:f3:3f:28: 05:4d:51:1e:e5:32:34:b6:94:24:8c:b1:a4:39:83: 87:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3E:64:4C:78:06:36:CD:AC:F0:70:54:2D:7E:A2:72:5B:DA:16:32 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6274a045-65c1-4ed4-89c1-423dcdec149e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f13:c000::/36 Signature Algorithm: sha256WithRSAEncryption 70:5f:19:ca:55:d3:46:82:2d:ae:c8:cb:91:fd:bf:b7:a1:37: 5f:0d:c3:41:1e:25:1c:26:85:e2:07:7e:56:b3:5b:59:1b:37: c4:d0:40:c7:d9:ed:7c:cf:49:f1:b4:d7:7d:89:0a:7f:41:fd: 43:57:7f:d8:49:93:1b:18:80:7a:58:ef:cf:9b:45:01:2f:8c: ba:d9:e2:35:52:fd:a0:d5:30:33:4d:86:3c:9f:bb:11:32:0e: e4:1c:d9:b3:16:45:06:5e:18:0f:6a:91:92:75:33:91:d6:9c: 81:37:09:70:77:1b:16:aa:26:ac:54:65:50:a7:98:71:8d:54: 41:5a:7d:1a:24:02:38:98:95:9b:51:a0:b1:17:b8:1a:9e:c5: 57:c4:72:18:8f:cf:07:b6:4d:d9:6f:96:2c:89:80:3b:10:4e: 71:47:da:44:dc:43:69:0b:83:97:b4:09:8f:89:61:37:26:bf: 8b:b1:1a:ce:20:a4:9e:bd:28:7b:19:8e:19:62:57:e0:37:54: de:4f:0a:86:15:10:2a:21:ef:99:ae:c1:4f:d6:b0:21:c7:37: 57:77:cf:92:f3:4c:aa:d9:b0:52:5f:fd:18:ac:0a:b6:10:50: 13:26:f0:b8:e8:31:9b:14:84:1f:22:4b:64:34:59:a0:5f:5a: 5b:5c:94:83 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUZaQx7T4XHmHPaMg4wPKLcKohJRAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDAzMDAxMDA1WhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNWU4NzE4ZTRjNTcxNzQ4YjcxMWFhNGE3ODE3YWFjNDZl ZTk0MzU4ZTRiNDc5NWJmMDkwZGViODI5ODZmNWIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmdIDZHUMgkf7rYdq87qRSo/b4vV6ugU2hCO6hijptX/A1 6Vz0Wvcah9HAol+vje+aoUxfKq22mhVLl2jLV2hwltJqI7f6P4t7fHczBudgdZA1 VtVhnFB4QzBUQ6XEEu9j4imzrERcjBGPn5/3TwtIAgVljjQltfHsuMGcD/VeB/+6 15FtWU94wUiEHSC9fOYfE4vi/KiDg/ef295RN8WEoC8+2Sj9wLZlobq6t7VmPBXj yP/G0uB/iZpXz7Eugp3m7YRYj8sRhVnQ/NskGTg0ac1M5qaSm+BGBoiVccUvOEoz qzv/GfUm7VEfRfM/KAVNUR7lMjS2lCSMsaQ5g4evAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUzD5kTHgGNs2s8HBULX6iclvaFjIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYyNzRhMDQ1LTY1YzEtNGVkNC04OWMxLTQyM2RjZGVjMTQ5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8TwDANBgkqhkiG9w0BAQsFAAOCAQEAcF8ZylXTRoItrsjLkf2/t6E3 Xw3DQR4lHCaF4gd+VrNbWRs3xNBAx9ntfM9J8bTXfYkKf0H9Q1d/2EmTGxiAeljv z5tFAS+MutniNVL9oNUwM02GPJ+7ETIO5BzZsxZFBl4YD2qRknUzkdacgTcJcHcb FqomrFRlUKeYcY1UQVp9GiQCOJiVm1GgsRe4Gp7FV8RyGI/PB7ZN2W+WLImAOxBO cUfaRNxDaQuDl7QJj4lhNya/i7EaziCknr0oexmOGWJX4DdU3k8KhhUQKiHvma7B T9awIcc3V3fPkvNMqtmwUl/9GKwKthBQEybwuOgxmxSEHyJLZDRZoF9aW1yUgw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:52:13 2026 by rpki-client