$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79f8c443-fc41-4935-8539-a3e686ebd0b2.roa File: 79f8c443-fc41-4935-8539-a3e686ebd0b2.roa (raw, json) Hash identifier: QF+swFh7SYSGn0c/Iw5Xyj8zZz3v6iDnCHACYJMlEco= Subject key identifier: A8:D1:30:34:B2:37:DB:7E:02:30:1E:CF:F8:13:37:3F:69:A0:5E:31 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4C98C848D1666E5D2812B7C78A14C21C2270266E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79f8c443-fc41-4935-8539-a3e686ebd0b2.roa Signing time: Fri 03 Apr 2026 00:21:17 +0000 ROA not before: Fri 03 Apr 2026 00:21:17 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1feb:7400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:98:c8:48:d1:66:6e:5d:28:12:b7:c7:8a:14:c2:1c:22:70:26:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 3 00:21:17 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=f11bd80b6b9145c03c4048a4f2fd18c05e0fec75765a7aced4e9663a8cd8c0ed, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2f:50:16:c5:8b:55:ef:12:51:0a:5a:c9:b1: a8:08:1b:1d:9a:55:56:85:21:23:d1:d9:8f:83:d5: e9:2e:ab:c1:5d:d7:61:9b:d8:18:42:51:e0:bf:f3: aa:9a:59:86:27:4b:fa:c3:44:ed:f7:c1:d4:98:c9: 2a:b1:19:7a:fe:24:9f:88:35:c6:7c:85:30:d5:20: ea:43:47:fb:39:8d:4b:7a:f8:19:57:98:f3:45:59: c2:ca:8a:3c:c6:75:fb:ed:51:98:67:f0:35:17:44: 30:ab:35:65:2c:7d:01:c1:32:06:ef:8f:b0:79:0d: d6:71:ae:37:60:9a:d8:67:4a:9b:7b:c9:d4:28:0f: 10:75:42:4b:90:48:dc:a2:62:39:fb:98:ed:5b:24: 0c:c8:22:d4:79:83:c5:68:1b:13:13:28:cb:de:22: 09:a8:bd:ee:3c:c2:94:7f:43:21:8d:ed:02:5c:2c: 38:b3:ba:ee:05:54:96:ef:e6:98:ee:8c:f6:4d:6f: 59:4a:b9:53:9e:0a:57:e1:00:b8:18:a0:ef:cd:e4: 09:10:a9:5e:0e:9c:ec:7c:98:8c:61:3b:73:05:fd: fe:da:bd:d6:32:9f:58:fa:56:c3:15:e2:98:08:c6: 30:22:73:17:c5:fe:04:07:7d:47:da:8c:57:68:61: 0f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D1:30:34:B2:37:DB:7E:02:30:1E:CF:F8:13:37:3F:69:A0:5E:31 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79f8c443-fc41-4935-8539-a3e686ebd0b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1feb:7400::/40 Signature Algorithm: sha256WithRSAEncryption 8a:9a:50:2b:e7:2d:4f:c7:9d:2a:1c:5a:a0:6b:02:c3:1f:3b: 95:b0:d8:bd:75:e0:f2:24:7e:2d:ae:ea:0e:8b:78:0a:cf:45: ba:c0:78:45:36:79:5c:09:78:f4:52:ab:3d:9b:c9:43:91:73: c8:1c:90:e7:5a:87:57:84:8e:c0:1e:41:f5:8b:b6:72:40:83: 15:ed:99:aa:98:08:95:74:df:97:ed:23:94:a5:a1:e8:20:2c: de:a4:44:71:f9:7f:d7:ec:e3:d7:99:27:8c:57:d1:b0:44:98: 63:90:53:a4:87:c3:61:60:79:96:19:6f:30:5f:cf:a7:34:69: 81:1a:2d:dc:56:1d:6b:3a:91:54:36:fc:49:4f:95:0a:eb:cd: 9d:d1:90:5d:1e:10:27:b2:06:52:2d:0e:49:20:92:c0:b0:3d: c1:3a:50:6f:4a:41:74:0d:b2:4d:72:b1:3c:43:a5:bc:01:ba: e5:09:ac:ff:fb:08:bb:30:fd:75:eb:43:88:a7:19:7b:b1:4d: 76:93:d4:65:69:f0:53:4b:90:54:02:e5:a4:e3:2e:f7:2e:1b: 0a:af:bf:f2:7c:88:c6:6d:69:64:55:38:45:45:12:68:a3:e6: 10:1a:5a:c0:1c:90:e5:52:e3:f7:78:7a:b0:6f:f5:57:31:59: 12:10:06:e7 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUTJjISNFmbl0oErfHihTCHCJwJm4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDAzMDAyMTE3WhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTFiZDgwYjZiOTE0NWMwM2M0MDQ4YTRmMmZkMThjMDVl MGZlYzc1NzY1YTdhY2VkNGU5NjYzYThjZDhjMGVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqL1AWxYtV7xJRClrJsagIGx2aVVaFISPR2Y+D1ekuq8Fd 12Gb2BhCUeC/86qaWYYnS/rDRO33wdSYySqxGXr+JJ+INcZ8hTDVIOpDR/s5jUt6 +BlXmPNFWcLKijzGdfvtUZhn8DUXRDCrNWUsfQHBMgbvj7B5DdZxrjdgmthnSpt7 ydQoDxB1QkuQSNyiYjn7mO1bJAzIItR5g8VoGxMTKMveIgmove48wpR/QyGN7QJc LDizuu4FVJbv5pjujPZNb1lKuVOeClfhALgYoO/N5AkQqV4OnOx8mIxhO3MF/f7a vdYyn1j6VsMV4pgIxjAicxfF/gQHfUfajFdoYQ+nAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUqNEwNLI3234CMB7P+BM3P2mgXjEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc5ZjhjNDQzLWZjNDEtNDkzNS04NTM5LWEzZTY4NmViZDBiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/rdDANBgkqhkiG9w0BAQsFAAOCAQEAippQK+ctT8edKhxaoGsCwx87 lbDYvXXg8iR+La7qDot4Cs9FusB4RTZ5XAl49FKrPZvJQ5FzyByQ51qHV4SOwB5B 9Yu2ckCDFe2ZqpgIlXTfl+0jlKWh6CAs3qREcfl/1+zj15knjFfRsESYY5BTpIfD YWB5lhlvMF/PpzRpgRot3FYdazqRVDb8SU+VCuvNndGQXR4QJ7IGUi0OSSCSwLA9 wTpQb0pBdA2yTXKxPEOlvAG65Qms//sIuzD9detDiKcZe7FNdpPUZWnwU0uQVALl pOMu9y4bCq+/8nyIxm1pZFU4RUUSaKPmEBpawByQ5VLj93h6sG/1VzFZEhAG5w== -----END CERTIFICATE-----Generated at Sun Apr 19 08:16:22 2026 by rpki-client