$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8a738d0-4bf3-4e24-a6bb-7073403e04db.roa File: a8a738d0-4bf3-4e24-a6bb-7073403e04db.roa (raw, json) Hash identifier: YlRIdSjZwuLoVmPs6CgSZhg+IGar6SlG14gJNAi0YKk= Subject key identifier: F5:93:A5:07:AD:C0:BE:F4:E8:ED:9C:7A:99:AA:57:D1:23:B2:D7:42 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3CFA042A7FB2E631909F0CFACCCD3F8A5D14C30A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8a738d0-4bf3-4e24-a6bb-7073403e04db.roa Signing time: Fri 10 Apr 2026 20:07:00 +0000 ROA not before: Fri 10 Apr 2026 20:07:00 +0000 ROA not after: Thu 09 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:fa:04:2a:7f:b2:e6:31:90:9f:0c:fa:cc:cd:3f:8a:5d:14:c3:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 10 20:07:00 2026 GMT Not After : Jul 9 23:59:59 2026 GMT Subject: serialNumber=b4893443a05a9a8d88642810dc403a33af6b5cd02a756a5d77e40f5379c478e7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:de:a3:7f:a9:fb:05:87:90:34:3e:00:de:bd: 24:25:cc:7a:d7:76:32:80:8f:b5:9d:08:2d:20:3d: d4:6c:ed:76:d8:e0:b9:72:a1:2e:2f:b5:e8:af:bf: 1b:6d:9b:36:72:f1:56:7d:e0:88:67:a4:e6:7b:e1: 14:ce:16:65:c9:98:3f:0e:55:01:ab:ab:1a:94:45: c9:88:31:09:d9:32:d2:1a:98:83:9c:7d:a4:69:68: 68:cc:cc:5b:79:96:1b:e9:7c:c1:db:50:77:60:12: 06:8d:5d:0f:77:a4:73:a9:5e:88:62:c1:71:2b:2b: cb:7d:c2:9e:d1:d3:39:be:8c:8b:ac:ec:d0:5f:da: 96:98:45:bb:24:98:3f:d0:13:c6:70:dc:85:dd:68: ee:ef:89:2f:05:dc:c7:80:f8:12:0b:b7:70:31:89: 2c:0a:45:dc:25:12:e7:f2:6c:e2:83:0a:f4:2a:a1: 8c:43:1b:6d:cf:c3:70:9e:33:47:13:44:2a:8e:d5: 81:21:b1:7a:ca:a0:be:65:11:24:d9:a0:2f:ba:c9: e5:f0:2d:00:38:23:aa:5d:d4:98:13:6f:30:e0:2e: 90:03:19:4a:34:40:cf:d7:84:cd:5a:e5:bd:3a:e9: 98:3a:c0:64:ed:9b:23:a5:8f:19:b3:9f:c5:a2:bb: db:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:93:A5:07:AD:C0:BE:F4:E8:ED:9C:7A:99:AA:57:D1:23:B2:D7:42 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8a738d0-4bf3-4e24-a6bb-7073403e04db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:6000::/40 Signature Algorithm: sha256WithRSAEncryption 8f:d8:e9:12:f8:2a:98:a8:f5:02:2a:ff:fb:8a:d6:85:0e:5c: 87:68:d4:d1:9a:15:75:50:8d:11:5a:00:85:50:a9:c2:b5:a1: 22:ad:0b:06:ef:ec:18:35:0b:cc:38:21:54:63:25:09:e3:a5: af:8d:8d:ed:ff:47:31:c9:12:8d:53:e9:0c:1b:b4:09:7f:dd: 6a:74:8f:79:77:b9:b1:8d:b2:d3:49:26:ce:d6:71:a6:eb:4c: 2d:38:c0:2b:22:85:a5:f3:83:90:93:ca:96:58:d5:8a:5d:68: 78:e8:e5:f8:be:53:cd:eb:f5:fa:6e:38:a6:0f:44:71:27:0f: 87:b0:72:0c:52:5a:e4:5b:46:19:52:b4:0d:a3:2c:b1:bb:cb: 53:64:fa:c0:28:bd:64:8a:cd:9b:29:fb:a4:06:78:40:b5:b3: 47:b6:c2:b4:cb:17:9f:32:89:a8:fc:5a:fa:f0:22:56:ac:e4: a7:56:30:07:12:d5:ca:36:e2:51:e0:7c:43:1a:4a:6d:6a:77: 0d:6d:4a:28:86:2a:df:c0:c7:b1:69:e8:87:fe:db:f9:24:e2: 70:a1:a7:c4:4e:e4:d8:fd:ea:2c:6e:16:ce:a9:38:ee:a3:0d: 3b:23:7c:d7:32:db:49:8a:53:04:d2:5e:75:e6:b5:af:3d:25: ce:3b:44:59 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPPoEKn+y5jGQnwz6zM0/il0UwwowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDEwMjAwNzAwWhcNMjYwNzA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDg5MzQ0M2EwNWE5YThkODg2NDI4MTBkYzQwM2EzM2Fm NmI1Y2QwMmE3NTZhNWQ3N2U0MGY1Mzc5YzQ3OGU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCW3qN/qfsFh5A0PgDevSQlzHrXdjKAj7WdCC0gPdRs7XbY 4LlyoS4vteivvxttmzZy8VZ94IhnpOZ74RTOFmXJmD8OVQGrqxqURcmIMQnZMtIa mIOcfaRpaGjMzFt5lhvpfMHbUHdgEgaNXQ93pHOpXohiwXErK8t9wp7R0zm+jIus 7NBf2paYRbskmD/QE8Zw3IXdaO7viS8F3MeA+BILt3AxiSwKRdwlEufybOKDCvQq oYxDG23Pw3CeM0cTRCqO1YEhsXrKoL5lESTZoC+6yeXwLQA4I6pd1JgTbzDgLpAD GUo0QM/XhM1a5b066Zg6wGTtmyOljxmzn8Wiu9sXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU9ZOlB63AvvTo7Zx6mapX0SOy10IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E4YTczOGQwLTRiZjMtNGUyNC1hNmJiLTcwNzM0MDNlMDRkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9hYDANBgkqhkiG9w0BAQsFAAOCAQEAj9jpEvgqmKj1Air/+4rWhQ5c h2jU0ZoVdVCNEVoAhVCpwrWhIq0LBu/sGDULzDghVGMlCeOlr42N7f9HMckSjVPp DBu0CX/danSPeXe5sY2y00kmztZxputMLTjAKyKFpfODkJPKlljVil1oeOjl+L5T zev1+m44pg9EcScPh7ByDFJa5FtGGVK0DaMssbvLU2T6wCi9ZIrNmyn7pAZ4QLWz R7bCtMsXnzKJqPxa+vAiVqzkp1YwBxLVyjbiUeB8QxpKbWp3DW1KKIYq38DHsWno h/7b+STicKGnxE7k2P3qLG4Wzqk47qMNOyN81zLbSYpTBNJedea1rz0lzjtEWQ== -----END CERTIFICATE-----Generated at Fri Apr 17 05:58:26 2026 by rpki-client