$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9042db9e-5d32-4ee2-947c-ababef047f42.roa File: 9042db9e-5d32-4ee2-947c-ababef047f42.roa (raw, json) Hash identifier: rIdkKQaJkY/EeXedpa4bFJVQ0boiXKtCJLY9ZNNqtRk= Subject key identifier: D5:3E:F1:EA:69:BD:A4:86:63:E5:BE:9F:3A:DD:F1:CB:04:0A:69:7D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C452176D6102740DAC2ADE3C554A1B66D27FADF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9042db9e-5d32-4ee2-947c-ababef047f42.roa Signing time: Tue 19 May 2026 00:11:22 +0000 ROA not before: Tue 19 May 2026 00:11:22 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f60:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:45:21:76:d6:10:27:40:da:c2:ad:e3:c5:54:a1:b6:6d:27:fa:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 00:11:22 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=66cbdf92b728547cc7950a65cdf0169efd26310bdfd140d0250f4442ee44d51d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d7:61:21:75:3b:8f:96:ce:60:26:ec:c0:98: a0:97:f9:cf:46:98:64:6f:4c:e8:0d:16:05:0b:0f: af:d0:20:43:e5:38:73:22:33:7c:3c:ea:4e:f7:d4: e1:87:8e:5c:87:d5:00:56:1f:1c:ba:1f:b8:d3:d8: 39:dc:06:1f:e0:74:c4:27:43:a7:d7:bb:1e:5e:f5: 57:5b:fd:7b:c0:5c:bb:3b:82:d1:9a:de:90:8a:91: be:01:85:b0:00:2a:a0:66:77:d1:03:72:08:62:a0: 09:b2:95:dd:30:ba:61:c5:83:8a:6f:fc:72:5c:dd: 4d:2a:2d:4e:af:ac:e2:5e:d1:57:04:23:f9:92:b2: 4a:9c:d4:09:13:9f:d8:56:12:92:28:8f:05:4c:66: 27:72:ff:f0:2c:bf:9a:aa:9c:d4:7c:33:d4:2c:8e: a9:c9:a5:b9:6b:6f:92:02:a3:12:f2:72:3e:4a:10: af:01:94:bb:00:5c:e8:44:0f:4c:50:58:fd:9f:95: 14:82:44:cd:2e:10:0c:64:a2:45:b8:98:d0:d0:fd: 24:3d:27:c1:14:c2:08:22:7e:75:88:ee:fa:8b:21: f5:33:20:7c:f2:57:d4:72:d8:47:b4:64:58:d8:ba: 48:b7:72:b6:e3:9b:fe:68:99:48:ca:6f:9b:af:9c: f3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3E:F1:EA:69:BD:A4:86:63:E5:BE:9F:3A:DD:F1:CB:04:0A:69:7D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9042db9e-5d32-4ee2-947c-ababef047f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f60:5000::/40 Signature Algorithm: sha256WithRSAEncryption bb:39:e6:72:2b:b2:62:cf:b2:60:d9:d0:a9:e8:48:6f:f8:a1: d1:d3:4b:83:48:9f:fc:94:97:93:d7:0e:a1:6c:7c:1c:2b:75: b5:54:b5:b3:f6:fb:93:71:dc:e6:68:e1:cd:ba:1f:32:01:1f: 94:a2:61:59:8f:5b:97:5b:92:86:77:83:15:1d:1b:ce:b7:87: 75:7a:32:28:b3:b2:23:c4:07:a1:58:d8:c5:fe:0b:e9:91:56: 3c:42:7b:1e:b9:f4:6e:9a:eb:10:90:38:63:04:c8:e3:c1:8a: 87:46:82:c0:c5:d1:0d:a4:f9:63:94:2b:1a:1a:2e:de:df:41: 51:d4:ba:cb:1a:de:b0:0c:f5:4c:94:e5:ce:7d:2a:a2:70:7b: 89:7e:28:ab:e5:91:89:6c:30:0b:9d:b8:0f:a2:b0:3d:96:33: c5:54:62:3b:e4:85:be:a6:5d:31:25:88:60:e6:0b:bd:81:13: c3:3a:39:53:eb:3c:47:e4:27:78:ea:90:15:44:f5:30:7f:dc: 1a:4d:c8:6a:21:d9:8c:ac:47:d3:da:59:56:05:95:6d:d2:57: 4e:73:03:3a:40:21:90:37:e2:1a:f3:b2:44:0e:2e:22:b2:e6: 52:2b:65:09:81:b5:e1:e5:7a:e7:79:5f:ae:a6:dd:a8:99:04: d8:cd:94:bc -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPEUhdtYQJ0Dawq3jxVShtm0n+t8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE5MDAxMTIyWhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NmNiZGY5MmI3Mjg1NDdjYzc5NTBhNjVjZGYwMTY5ZWZk MjYzMTBiZGZkMTQwZDAyNTBmNDQ0MmVlNDRkNTFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx12EhdTuPls5gJuzAmKCX+c9GmGRvTOgNFgULD6/QIEPl OHMiM3w86k731OGHjlyH1QBWHxy6H7jT2DncBh/gdMQnQ6fXux5e9Vdb/XvAXLs7 gtGa3pCKkb4BhbAAKqBmd9EDcghioAmyld0wumHFg4pv/HJc3U0qLU6vrOJe0VcE I/mSskqc1AkTn9hWEpIojwVMZidy//Asv5qqnNR8M9QsjqnJpblrb5ICoxLycj5K EK8BlLsAXOhED0xQWP2flRSCRM0uEAxkokW4mNDQ/SQ9J8EUwggifnWI7vqLIfUz IHzyV9Ry2Ee0ZFjYuki3crbjm/5omUjKb5uvnPMnAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU1T7x6mm9pIZj5b6fOt3xywQKaX0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkwNDJkYjllLTVkMzItNGVlMi05NDdjLWFiYWJlZjA0N2Y0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9gUDANBgkqhkiG9w0BAQsFAAOCAQEAuznmciuyYs+yYNnQqehIb/ih 0dNLg0if/JSXk9cOoWx8HCt1tVS1s/b7k3Hc5mjhzbofMgEflKJhWY9bl1uShneD FR0bzreHdXoyKLOyI8QHoVjYxf4L6ZFWPEJ7Hrn0bprrEJA4YwTI48GKh0aCwMXR DaT5Y5QrGhou3t9BUdS6yxresAz1TJTlzn0qonB7iX4oq+WRiWwwC524D6KwPZYz xVRiO+SFvqZdMSWIYOYLvYETwzo5U+s8R+QneOqQFUT1MH/cGk3IaiHZjKxH09pZ VgWVbdJXTnMDOkAhkDfiGvOyRA4uIrLmUitlCYG14eV653lfrqbdqJkE2M2UvA== -----END CERTIFICATE-----Generated at Sat Jun 13 08:15:41 2026 by rpki-client