$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c68f718c-b794-4f1b-8ba5-23b85abca40d.roa File: c68f718c-b794-4f1b-8ba5-23b85abca40d.roa (raw, json) Hash identifier: UOd2RL2+JYLalCuMejf4jb3lSYA3tVN9QmVImTL4cuo= Subject key identifier: 6B:37:2A:7F:2E:3D:2A:BB:3A:7A:17:F7:BA:DD:0A:C2:10:C4:FA:5C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7301635FF717E3D3F361F057D7146078C6DD7F49 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c68f718c-b794-4f1b-8ba5-23b85abca40d.roa Signing time: Fri 03 Apr 2026 21:36:51 +0000 ROA not before: Fri 03 Apr 2026 21:36:51 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f14:2000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:01:63:5f:f7:17:e3:d3:f3:61:f0:57:d7:14:60:78:c6:dd:7f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 3 21:36:51 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=f51ed862cd44b70682b10537ecf08fb0838e5c8c2d1558e39aaa67d8fd688628, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c2:55:56:92:d8:0e:b7:45:80:67:52:88:70: 53:3d:f1:65:a9:93:ed:71:1a:2c:47:f5:51:ec:9b: ab:c5:de:c5:d3:a6:29:32:73:64:66:1c:e3:a0:f0: 5b:7c:9c:94:ed:ee:c7:ff:35:ff:15:89:05:7f:59: 54:b6:1e:1d:fd:96:e5:1c:31:5c:38:d2:43:4c:d9: af:b9:4c:20:12:29:87:5d:2c:62:2a:40:63:0a:66: 7e:e3:30:cb:1b:d5:ed:1a:88:29:46:49:99:67:d5: fc:75:5b:71:2e:a7:19:04:ad:34:2b:2b:46:bd:2f: 7a:95:0e:f8:d6:2c:ea:83:41:b4:2b:1e:a3:39:d8: d7:75:58:79:19:50:f0:7b:91:4a:78:f7:f7:e6:44: 8d:d8:5f:2e:52:1f:ff:3d:d8:bf:47:7a:97:95:4b: 9f:1d:83:91:7f:e2:f9:5b:3d:a8:3d:ba:4e:c4:da: e1:e5:5e:51:4c:11:4e:cb:41:c3:3d:5c:df:e2:4f: bd:43:ee:af:b0:dd:1e:66:46:a2:b9:9c:99:97:4b: f4:8a:93:2d:c7:8d:a4:3f:31:b1:5e:7b:6c:e9:57: 97:9e:3c:b0:96:4c:4e:b7:a1:fc:60:af:f6:44:13: 56:4e:f4:2c:81:f1:02:fc:5c:f0:06:d5:28:10:f3: ac:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:37:2A:7F:2E:3D:2A:BB:3A:7A:17:F7:BA:DD:0A:C2:10:C4:FA:5C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c68f718c-b794-4f1b-8ba5-23b85abca40d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f14:2000::/35 Signature Algorithm: sha256WithRSAEncryption 00:77:c7:8b:90:57:fd:57:88:19:84:90:f5:36:62:51:a1:04: df:79:85:48:cf:d5:aa:7c:1b:9e:bb:32:cb:c0:d4:b5:0b:4b: db:8b:ce:b1:d3:01:c2:26:4d:62:22:f8:60:24:4c:63:49:9a: 5b:fc:b0:3a:a8:47:ce:70:66:a7:87:b8:73:71:6f:d8:9a:0c: 3f:35:9a:4d:61:a2:1c:17:a3:42:93:3b:32:49:f0:10:c6:be: 8e:18:20:61:e5:59:26:85:4a:65:e9:1c:30:a7:a6:17:12:80: 65:75:ea:42:b3:4a:d4:a0:05:9c:5a:aa:55:c4:78:68:90:fb: be:64:d7:a8:f7:58:67:8d:ab:2f:4e:5e:ef:37:c1:bc:ec:4b: c2:1c:8a:c7:b5:5b:da:75:78:28:ec:88:15:b1:f7:e3:4c:48: 43:b4:b2:3d:ff:c1:62:7a:46:6b:a3:4d:c0:fd:ca:a3:5b:6e: d4:5d:ee:59:21:dd:5c:00:53:45:bc:45:28:5b:75:aa:7d:6e: 0c:87:76:cd:9b:01:d1:43:49:31:db:a5:7e:53:06:93:10:bc: 78:af:c9:ef:0f:50:de:dc:69:12:3b:2d:15:01:35:b9:50:18: 96:05:5b:2d:56:e1:24:73:f1:11:1a:0e:ba:85:b2:c3:00:fc: 7b:f0:1c:ed -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUcwFjX/cX49PzYfBX1xRgeMbdf0kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDAzMjEzNjUxWhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTFlZDg2MmNkNDRiNzA2ODJiMTA1MzdlY2YwOGZiMDgz OGU1YzhjMmQxNTU4ZTM5YWFhNjdkOGZkNjg4NjI4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2wlVWktgOt0WAZ1KIcFM98WWpk+1xGixH9VHsm6vF3sXT pikyc2RmHOOg8Ft8nJTt7sf/Nf8ViQV/WVS2Hh39luUcMVw40kNM2a+5TCASKYdd LGIqQGMKZn7jMMsb1e0aiClGSZln1fx1W3EupxkErTQrK0a9L3qVDvjWLOqDQbQr HqM52Nd1WHkZUPB7kUp49/fmRI3YXy5SH/892L9HepeVS58dg5F/4vlbPag9uk7E 2uHlXlFMEU7LQcM9XN/iT71D7q+w3R5mRqK5nJmXS/SKky3HjaQ/MbFee2zpV5ee PLCWTE63ofxgr/ZEE1ZO9CyB8QL8XPAG1SgQ86xBAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUazcqfy49Krs6ehf3ut0KwhDE+lwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M2OGY3MThjLWI3OTQtNGYxYi04YmE1LTIzYjg1YWJjYTQwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgUmAB8UIDANBgkqhkiG9w0BAQsFAAOCAQEAAHfHi5BX/VeIGYSQ9TZiUaEE 33mFSM/Vqnwbnrsyy8DUtQtL24vOsdMBwiZNYiL4YCRMY0maW/ywOqhHznBmp4e4 c3Fv2JoMPzWaTWGiHBejQpM7MknwEMa+jhggYeVZJoVKZekcMKemFxKAZXXqQrNK 1KAFnFqqVcR4aJD7vmTXqPdYZ42rL05e7zfBvOxLwhyKx7Vb2nV4KOyIFbH340xI Q7SyPf/BYnpGa6NNwP3Ko1tu1F3uWSHdXABTRbxFKFt1qn1uDId2zZsB0UNJMdul flMGkxC8eK/J7w9Q3txpEjstFQE1uVAYlgVbLVbhJHPxERoOuoWywwD8e/Ac7Q== -----END CERTIFICATE-----Generated at Fri Apr 17 04:35:24 2026 by rpki-client