$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c817374e-a90b-4403-98c2-a40a1245a667.roa File: c817374e-a90b-4403-98c2-a40a1245a667.roa (raw, json) Hash identifier: I54VEBWUv+XeMktwOjJouihN5xUEHyp0D3tkF5vbSB0= Subject key identifier: E8:34:34:64:EB:0C:55:46:CE:BA:05:05:6D:7F:77:28:70:4D:95:23 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E7757C147FBEE8A84322762C718064AC6C2BFEA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c817374e-a90b-4403-98c2-a40a1245a667.roa Signing time: Fri 15 May 2026 00:10:06 +0000 ROA not before: Fri 15 May 2026 00:10:06 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f11:c800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:77:57:c1:47:fb:ee:8a:84:32:27:62:c7:18:06:4a:c6:c2:bf:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 00:10:06 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=8dd2423e3111536e744085901fda9ac95f5ff1d47afb55b9b84bd6e6043da125, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e7:97:a2:9a:fc:89:e5:13:cf:31:59:66:f5: e1:d2:35:8d:2e:10:6b:d5:8b:40:f1:c9:cd:2a:f1: 6f:24:01:69:2a:e2:5f:a6:d5:3a:fc:28:05:37:2d: b8:01:1b:1f:8d:14:78:67:77:35:dd:49:35:05:7d: d5:d3:89:af:74:b6:3d:d8:38:fb:65:fa:0d:79:40: aa:b1:e1:50:4e:1a:b2:8d:91:9c:49:71:99:76:ba: 72:ef:7f:80:fd:52:6e:2f:9f:72:1d:d4:d5:53:09: 7e:6f:f0:b1:5e:50:69:6a:4b:26:cc:b7:3e:37:b0: 28:7f:17:5d:70:94:3d:aa:03:f7:b5:11:7f:c9:ee: 74:ae:21:c5:4a:af:22:e8:40:da:be:5b:32:37:20: a8:c7:66:ed:be:b6:af:da:97:1d:1d:01:5e:b8:af: ce:f6:3b:d0:9f:b7:00:9b:49:f5:56:39:95:06:59: c1:9a:b8:3f:5f:28:30:0c:33:30:2f:09:ff:c2:b7: 2e:91:3c:83:e5:59:2a:7c:1b:14:1b:82:c5:7c:e7: 4a:3d:d3:92:4e:fd:14:98:9d:c4:a3:f7:9e:52:10: 70:00:a9:06:d6:a6:bf:01:fa:e7:96:3b:2b:82:a9: f9:c5:ae:61:fa:a9:41:91:b4:ba:f8:e4:e0:c2:00: d0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:34:34:64:EB:0C:55:46:CE:BA:05:05:6D:7F:77:28:70:4D:95:23 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c817374e-a90b-4403-98c2-a40a1245a667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f11:c800::/37 Signature Algorithm: sha256WithRSAEncryption 92:d4:bd:d9:ad:d0:3b:24:05:6f:4d:90:43:58:a1:a3:de:7e: 25:3d:45:04:bf:df:92:60:42:71:a5:23:4e:17:a2:3c:33:e1: 37:0b:93:54:b6:03:5b:3d:c0:f3:3e:51:01:66:2c:67:6f:f8: b5:b5:ff:8b:2e:f5:ba:c3:4c:cd:b7:9f:a7:69:a7:28:fe:24: f5:90:75:ce:0d:e9:92:a2:cd:03:67:4c:1a:b7:5c:b1:2f:9a: 52:90:24:db:fe:f5:a7:bf:b5:ee:18:f7:21:32:16:15:b9:9a: 8f:14:ca:de:78:98:82:57:6f:fb:b5:44:2e:49:74:ec:9f:91: 96:4d:90:2d:61:25:48:06:5e:0f:40:09:da:2b:68:1d:1b:7e: 80:a5:8d:81:4f:6a:5f:5d:86:88:62:90:b3:26:89:ab:3f:77: 62:f5:f6:9a:37:e4:7e:0d:b6:ec:3f:98:b1:19:f1:08:36:d9: d3:63:a0:96:0a:6c:db:af:b3:e6:33:90:56:fb:e7:18:7e:29: 30:e9:67:4f:14:81:57:cf:2a:82:21:79:d1:b7:4d:c2:49:cf: 21:f3:17:bc:63:f3:48:88:bb:31:5c:8f:f4:0d:28:38:4f:32: 2e:72:6e:53:e7:87:48:7b:c3:42:3c:5d:d8:9e:49:0d:1e:3a: 8a:88:c2:92 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUDndXwUf77oqEMidixxgGSsbCv+owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDAxMDA2WhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZGQyNDIzZTMxMTE1MzZlNzQ0MDg1OTAxZmRhOWFjOTVm NWZmMWQ0N2FmYjU1YjliODRiZDZlNjA0M2RhMTI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCn55eimvyJ5RPPMVlm9eHSNY0uEGvVi0Dxyc0q8W8kAWkq 4l+m1Tr8KAU3LbgBGx+NFHhndzXdSTUFfdXTia90tj3YOPtl+g15QKqx4VBOGrKN kZxJcZl2unLvf4D9Um4vn3Id1NVTCX5v8LFeUGlqSybMtz43sCh/F11wlD2qA/e1 EX/J7nSuIcVKryLoQNq+WzI3IKjHZu2+tq/alx0dAV64r872O9CftwCbSfVWOZUG WcGauD9fKDAMMzAvCf/Cty6RPIPlWSp8GxQbgsV850o905JO/RSYncSj955SEHAA qQbWpr8B+ueWOyuCqfnFrmH6qUGRtLr45ODCANAHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU6DQ0ZOsMVUbOugUFbX93KHBNlSMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4MTczNzRlLWE5MGItNDQwMy05OGMyLWE0MGExMjQ1YTY2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8RyDANBgkqhkiG9w0BAQsFAAOCAQEAktS92a3QOyQFb02QQ1iho95+ JT1FBL/fkmBCcaUjTheiPDPhNwuTVLYDWz3A8z5RAWYsZ2/4tbX/iy71usNMzbef p2mnKP4k9ZB1zg3pkqLNA2dMGrdcsS+aUpAk2/71p7+17hj3ITIWFbmajxTK3niY gldv+7VELkl07J+Rlk2QLWElSAZeD0AJ2itoHRt+gKWNgU9qX12GiGKQsyaJqz93 YvX2mjfkfg227D+YsRnxCDbZ02Oglgps26+z5jOQVvvnGH4pMOlnTxSBV88qgiF5 0bdNwknPIfMXvGPzSIi7MVyP9A0oOE8yLnJuU+eHSHvDQjxd2J5JDR46iojCkg== -----END CERTIFICATE-----Generated at Sat Jun 13 13:03:25 2026 by rpki-client