$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a38998ad-414a-46f1-b26f-6f47ac7f2cd1.roa File: a38998ad-414a-46f1-b26f-6f47ac7f2cd1.roa (raw, json) Hash identifier: ETsfwDc3ESDBgJs2DTbInLBeo10XprFE3j/qnpTlslU= Subject key identifier: 55:7D:6D:87:4E:06:90:C3:C6:24:4F:C8:7E:22:89:4C:E3:96:6D:6D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 05C9C5270B14E29C6EF21B0F90512995A0364F90 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a38998ad-414a-46f1-b26f-6f47ac7f2cd1.roa Signing time: Fri 03 Apr 2026 00:10:05 +0000 ROA not before: Fri 03 Apr 2026 00:10:05 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1feb:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c9:c5:27:0b:14:e2:9c:6e:f2:1b:0f:90:51:29:95:a0:36:4f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 3 00:10:05 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=35263b55a9d025d790642d6df1b8b8f6a6dde6786e7691b33e8d759c63371773, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:95:cd:b7:9e:60:ee:0f:b8:7a:59:15:d1:1a: 71:66:62:07:f9:98:94:b8:1e:dc:fd:14:42:b7:4a: e6:e4:b9:a9:20:62:03:a9:43:d4:76:2b:bb:f8:ac: 26:8a:d2:05:c6:19:23:bc:06:33:81:ab:73:8b:35: c1:58:3d:95:21:d5:34:ee:17:8a:1a:49:af:60:76: 7a:76:ed:a6:46:37:29:96:ba:d1:0a:e0:9b:46:02: ce:75:62:6b:41:68:84:70:f3:d9:e0:4d:3a:81:7d: 11:f6:80:56:6c:a7:66:ac:ba:10:97:ff:4d:7e:2b: 41:d7:dd:88:3d:c3:ac:6b:26:fc:96:16:c3:24:fe: d8:13:2a:9b:4f:43:dd:21:e1:12:ce:85:87:f2:88: d5:8f:39:ff:2b:b7:52:31:b4:39:a6:a2:e9:97:33: 03:0b:93:f3:50:02:3c:9e:19:41:89:9e:ad:53:c5: 4a:c3:3b:14:c7:4b:39:e4:23:2b:77:0e:6b:65:77: 15:ab:60:b5:90:dc:02:fb:f8:ca:95:07:cb:33:58: 07:e6:03:4a:7d:e5:c3:e2:93:f2:26:53:49:94:d7: 09:16:92:f6:ff:28:f7:35:e1:d8:08:d3:59:41:9e: 11:1b:58:30:d1:54:1e:48:4c:27:76:60:ac:ea:8c: b0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7D:6D:87:4E:06:90:C3:C6:24:4F:C8:7E:22:89:4C:E3:96:6D:6D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a38998ad-414a-46f1-b26f-6f47ac7f2cd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1feb:4020::/48 Signature Algorithm: sha256WithRSAEncryption 78:db:c6:eb:3b:ef:4b:d8:44:53:d7:41:eb:34:18:d3:0b:ac: 3e:af:98:1e:1f:11:6f:61:08:7c:25:62:d5:f0:c3:b1:ed:ef: 22:ed:59:6f:81:f9:55:d7:2d:9f:01:cb:00:ef:00:5c:cd:38: 89:ea:6b:53:a4:f9:25:82:7e:fa:48:1f:f4:db:16:ce:b1:cb: f4:fb:e7:c8:1c:1a:b2:93:67:60:71:7d:b7:4e:ed:8d:01:49: 0a:fd:c3:d6:70:8a:a3:bd:6a:4f:06:5b:2b:7f:7e:c3:c3:df: 3f:81:45:0b:5e:76:6e:88:88:fb:2a:52:38:3d:79:e3:30:3f: e0:20:a6:b4:35:4e:a3:27:93:48:64:51:a1:6c:24:82:2f:a5: 7d:cc:0f:f3:0a:f3:b4:b3:c2:a8:9a:f6:ab:11:b2:6c:05:d9: 87:f8:b4:dd:cd:72:88:93:b0:2e:2b:86:59:19:cf:76:01:c9: b5:92:cb:c2:9f:4c:74:7a:9c:fb:c7:d3:48:4d:9d:4f:3f:3b: 2f:1d:80:7d:40:a4:ee:05:b8:ad:42:9f:7f:d9:72:0e:44:67: 5c:fa:86:c2:66:72:5e:2e:b5:ec:23:3e:de:37:72:90:42:fa: ab:4b:15:e2:78:b9:5b:bc:17:3b:dd:1e:8f:a6:53:d6:a2:53: ff:d7:e3:69 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBcnFJwsU4pxu8hsPkFEplaA2T5AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDAzMDAxMDA1WhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTI2M2I1NWE5ZDAyNWQ3OTA2NDJkNmRmMWI4YjhmNmE2 ZGRlNjc4NmU3NjkxYjMzZThkNzU5YzYzMzcxNzczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDClc23nmDuD7h6WRXRGnFmYgf5mJS4Htz9FEK3Subkuakg YgOpQ9R2K7v4rCaK0gXGGSO8BjOBq3OLNcFYPZUh1TTuF4oaSa9gdnp27aZGNymW utEK4JtGAs51YmtBaIRw89ngTTqBfRH2gFZsp2asuhCX/01+K0HX3Yg9w6xrJvyW FsMk/tgTKptPQ90h4RLOhYfyiNWPOf8rt1IxtDmmoumXMwMLk/NQAjyeGUGJnq1T xUrDOxTHSznkIyt3DmtldxWrYLWQ3AL7+MqVB8szWAfmA0p95cPik/ImU0mU1wkW kvb/KPc14dgI01lBnhEbWDDRVB5ITCd2YKzqjLC5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUVX1th04GkMPGJE/IfiKJTOOWbW0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EzODk5OGFkLTQxNGEtNDZmMS1iMjZmLTZmNDdhYzdmMmNkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/rQCAwDQYJKoZIhvcNAQELBQADggEBAHjbxus770vYRFPXQes0GNML rD6vmB4fEW9hCHwlYtXww7Ht7yLtWW+B+VXXLZ8BywDvAFzNOInqa1Ok+SWCfvpI H/TbFs6xy/T758gcGrKTZ2BxfbdO7Y0BSQr9w9ZwiqO9ak8GWyt/fsPD3z+BRQte dm6IiPsqUjg9eeMwP+AgprQ1TqMnk0hkUaFsJIIvpX3MD/MK87Szwqia9qsRsmwF 2Yf4tN3NcoiTsC4rhlkZz3YBybWSy8KfTHR6nPvH00hNnU8/Oy8dgH1ApO4FuK1C n3/Zcg5EZ1z6hsJmcl4utewjPt43cpBC+qtLFeJ4uVu8FzvdHo+mU9aiU//X42k= -----END CERTIFICATE-----Generated at Fri Apr 17 04:50:13 2026 by rpki-client