$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a54e08ef-1fcd-4574-a6f8-c93267fadce1.roa File: a54e08ef-1fcd-4574-a6f8-c93267fadce1.roa (raw, json) Hash identifier: R4TAKknfN9+3+ai+cV5llkg7cYIfbKqXNsQnSRLSs6k= Subject key identifier: 03:C3:44:D9:4C:17:7D:8C:54:0A:3D:77:0E:ED:79:0F:23:AF:E5:D4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E0DBE7D4EBE98ABB5E5E31C94E1471127F4D853 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a54e08ef-1fcd-4574-a6f8-c93267fadce1.roa Signing time: Fri 03 Apr 2026 00:20:03 +0000 ROA not before: Fri 03 Apr 2026 00:20:03 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1feb:7440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:0d:be:7d:4e:be:98:ab:b5:e5:e3:1c:94:e1:47:11:27:f4:d8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 3 00:20:03 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=84b3eb3e1abf08b8e27e2c2dd046f9664a5708bda90ec5a21dc56d81796fa9c2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f1:1f:1e:34:0e:5c:df:a7:83:d6:3a:76:2c: 82:77:f6:00:46:66:81:d0:14:96:5b:01:29:4e:42: a8:a2:da:fc:25:88:ea:f8:4a:7d:e5:c8:ac:12:a0: b7:fb:79:31:40:e4:65:27:71:ad:a2:7e:37:a3:52: 2f:79:1c:37:79:b6:12:12:2e:e3:3f:8b:3d:51:de: 16:4d:f8:4e:dd:03:ac:2e:d7:84:29:b7:91:1e:7e: 1c:99:04:c7:d6:de:ea:65:de:55:0b:99:a4:72:77: f6:42:48:64:26:1e:95:81:5f:77:19:ce:b8:52:45: 95:41:fe:54:e0:21:0e:74:f9:0c:77:6d:fd:1a:dc: 25:bf:1e:2b:16:5d:aa:7b:c4:4f:e8:00:ad:1f:9a: 00:b0:04:ba:ac:43:b9:39:e1:03:98:f9:05:19:e3: 44:b6:04:74:81:7d:48:99:6b:99:fd:27:99:e2:35: 3c:47:a9:ae:c4:52:3b:a2:9d:c5:cc:1f:43:09:d7: 45:eb:d0:51:82:4d:c8:e0:4d:7a:59:ee:38:b6:66: 46:04:b5:79:9d:27:48:82:75:90:9d:c7:87:d8:8a: d4:2c:6e:a8:6a:fc:cd:f8:26:6f:06:a9:f2:f4:ef: a2:88:b4:7f:68:ca:de:93:56:af:bc:db:cb:53:c7: b8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C3:44:D9:4C:17:7D:8C:54:0A:3D:77:0E:ED:79:0F:23:AF:E5:D4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a54e08ef-1fcd-4574-a6f8-c93267fadce1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1feb:7440::/48 Signature Algorithm: sha256WithRSAEncryption 0f:25:76:f3:8e:05:37:f2:41:be:7f:31:a3:cb:d2:12:be:7b: cf:e0:77:f0:2d:a9:28:6e:fe:2c:a4:70:43:21:a8:a2:2e:fa: df:c4:84:bb:02:a0:3d:85:5a:a4:bb:f2:0e:9d:6b:74:78:7c: d1:7e:29:41:1e:6d:68:38:9b:3f:bc:b6:1f:ca:7f:5b:3f:bd: 3a:5a:38:06:ba:02:ac:26:64:f7:e4:da:78:f7:32:a6:29:c3: dd:73:88:06:58:ee:11:5e:38:7d:6b:a9:7d:c8:1e:7f:dd:72: 2a:ce:42:42:50:63:59:9a:34:f9:70:d0:4c:69:08:79:6c:45: c2:9b:0f:02:a5:48:fd:8c:5c:38:de:a6:31:79:ad:0f:b3:53: 44:31:3d:97:38:49:73:eb:67:60:c0:a2:5e:99:78:02:8c:7a: cc:a1:53:6b:82:0d:3b:a0:41:73:9a:6c:e9:62:a0:4b:1f:f2: 08:92:8a:13:aa:12:0c:ad:7c:21:8c:60:4e:cc:b5:46:6a:17: 16:f6:57:0f:76:5d:ca:01:98:c5:4c:81:9d:ba:86:6e:e5:9f: 31:4a:6b:17:42:1d:8f:b3:da:74:6d:6c:89:38:42:b0:19:4f: 31:6b:ab:ef:61:74:d6:f7:f1:ea:af:f6:f0:8b:c1:2f:05:a4: 51:57:9f:0c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTg2+fU6+mKu15eMclOFHESf02FMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDAzMDAyMDAzWhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NGIzZWIzZTFhYmYwOGI4ZTI3ZTJjMmRkMDQ2Zjk2NjRh NTcwOGJkYTkwZWM1YTIxZGM1NmQ4MTc5NmZhOWMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDO8R8eNA5c36eD1jp2LIJ39gBGZoHQFJZbASlOQqii2vwl iOr4Sn3lyKwSoLf7eTFA5GUnca2ifjejUi95HDd5thISLuM/iz1R3hZN+E7dA6wu 14Qpt5EefhyZBMfW3upl3lULmaRyd/ZCSGQmHpWBX3cZzrhSRZVB/lTgIQ50+Qx3 bf0a3CW/HisWXap7xE/oAK0fmgCwBLqsQ7k54QOY+QUZ40S2BHSBfUiZa5n9J5ni NTxHqa7EUjuincXMH0MJ10Xr0FGCTcjgTXpZ7ji2ZkYEtXmdJ0iCdZCdx4fYitQs bqhq/M34Jm8GqfL076KItH9oyt6TVq+828tTx7hvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUA8NE2UwXfYxUCj13Du15DyOv5dQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E1NGUwOGVmLTFmY2QtNDU3NC1hNmY4LWM5MzI2N2ZhZGNlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/rdEAwDQYJKoZIhvcNAQELBQADggEBAA8ldvOOBTfyQb5/MaPL0hK+ e8/gd/AtqShu/iykcEMhqKIu+t/EhLsCoD2FWqS78g6da3R4fNF+KUEebWg4mz+8 th/Kf1s/vTpaOAa6AqwmZPfk2nj3MqYpw91ziAZY7hFeOH1rqX3IHn/dcirOQkJQ Y1maNPlw0ExpCHlsRcKbDwKlSP2MXDjepjF5rQ+zU0QxPZc4SXPrZ2DAol6ZeAKM esyhU2uCDTugQXOabOlioEsf8giSihOqEgytfCGMYE7MtUZqFxb2Vw92XcoBmMVM gZ26hm7lnzFKaxdCHY+z2nRtbIk4QrAZTzFrq+9hdNb38eqv9vCLwS8FpFFXnww= -----END CERTIFICATE-----Generated at Fri Apr 17 06:35:30 2026 by rpki-client