$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4a34394-c7a0-4904-970a-45b3cba40517.roa File: f4a34394-c7a0-4904-970a-45b3cba40517.roa (raw, json) Hash identifier: 9YXtMRel+tLDlVdqsz/SH/rEoc4GIY7RpfMUiRR13Fw= Subject key identifier: 6C:8B:04:CE:3C:E3:2B:2E:C9:A0:DD:EA:CB:03:BE:78:E6:DB:A5:0F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 12A45E9FAEFE8900AFD2E16FD386C746BEA67218 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4a34394-c7a0-4904-970a-45b3cba40517.roa Signing time: Sat 16 May 2026 01:31:03 +0000 ROA not before: Sat 16 May 2026 01:31:03 +0000 ROA not after: Fri 14 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a4:5e:9f:ae:fe:89:00:af:d2:e1:6f:d3:86:c7:46:be:a6:72:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 01:31:03 2026 GMT Not After : Aug 14 23:59:59 2026 GMT Subject: serialNumber=b2d2a37203ea6065f65c95eacc8cc1489e0b33cb292c08824924ec43cf97f279, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ee:f6:52:a9:15:c0:eb:3f:17:ad:75:d6:0f: b3:d8:90:6a:d4:f7:bd:31:10:ad:a6:11:31:52:2d: 5a:68:bf:a5:bf:72:f3:83:33:5e:46:27:ad:35:83: 3a:ac:38:a1:d3:56:3f:d3:16:1f:2e:4d:31:08:2a: bd:cd:db:2b:7d:6b:d8:46:e9:7f:49:a3:92:67:24: 7d:cc:00:b9:a1:20:1a:15:5e:d5:2d:85:53:6c:98: f3:8c:dc:95:08:cf:4f:48:fd:eb:7d:48:5f:a2:d6: ab:f7:f3:17:f0:c9:e0:be:0c:07:10:0e:d7:20:0e: f7:14:4e:3d:f7:47:71:7e:76:a2:a2:b2:d6:c5:66: f5:f2:02:8d:d3:6c:be:fc:c8:b2:34:93:9b:85:b5: f7:15:4b:43:c4:dc:38:7e:d8:ee:3d:83:b0:a4:e9: d2:71:f2:e9:c3:93:16:c8:99:72:6f:e5:6e:a3:b8: 6b:81:44:26:0e:a1:e3:dc:df:93:e6:ca:de:20:fc: bd:37:e7:eb:cf:96:dd:08:b1:5d:4f:7d:3f:8b:08: 5a:1b:d0:9c:68:76:c6:21:2c:e0:03:c6:e9:3d:f8: 77:0c:3b:14:e7:31:d9:42:0b:f6:b3:5e:0e:94:10: 0e:6e:fb:3a:69:2d:9e:d4:e3:c3:ae:8c:13:c0:e5: a1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8B:04:CE:3C:E3:2B:2E:C9:A0:DD:EA:CB:03:BE:78:E6:DB:A5:0F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4a34394-c7a0-4904-970a-45b3cba40517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:4000::/40 Signature Algorithm: sha256WithRSAEncryption 6c:1f:2f:fd:53:2a:c7:be:92:37:eb:d6:3d:27:dd:30:cb:74: 73:84:e7:4b:48:80:fb:90:60:3b:5c:fb:4a:13:f5:bb:f0:0f: 80:ed:1f:ec:60:3e:14:fa:c9:64:33:7f:1c:7f:a4:19:af:b8: 66:f7:1f:94:e5:62:97:8d:66:e6:ea:96:3d:b8:00:1e:36:5b: 97:1d:4b:fe:4d:a8:01:c3:c2:9d:6a:1c:b5:a4:77:19:d6:03: 6d:74:9d:0b:e7:b4:a3:f9:ee:a7:7d:9e:83:c2:3b:b5:30:49: 75:0a:64:41:1b:02:27:8d:fe:42:59:c0:9b:a9:06:8a:72:ae: ac:e6:92:89:d0:ea:0e:05:48:da:8c:45:37:80:fd:4e:1f:66: 11:fb:6c:ba:63:68:fe:44:5a:3a:b4:f7:7c:7b:9e:ce:e3:87: 14:9a:bd:03:f1:9f:a2:a6:7e:1d:3a:f3:30:da:91:0b:8c:e0: 47:62:b7:8d:af:e4:6e:53:79:ba:b1:b1:57:3a:2b:3d:1d:fc: 64:c2:a7:47:12:62:77:a4:ee:26:4d:dc:f1:22:c3:97:bf:e5: f8:7d:cb:6a:ae:79:af:a8:fb:eb:1a:b1:88:e8:87:50:b3:07: 10:43:3a:3f:5e:a1:41:47:45:cd:f2:5d:80:50:78:69:09:2a: 29:99:52:8f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUEqRen67+iQCv0uFv04bHRr6mchgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDEzMTAzWhcNMjYwODE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmQyYTM3MjAzZWE2MDY1ZjY1Yzk1ZWFjYzhjYzE0ODll MGIzM2NiMjkyYzA4ODI0OTI0ZWM0M2NmOTdmMjc5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx7vZSqRXA6z8XrXXWD7PYkGrU970xEK2mETFSLVpov6W/ cvODM15GJ601gzqsOKHTVj/TFh8uTTEIKr3N2yt9a9hG6X9Jo5JnJH3MALmhIBoV XtUthVNsmPOM3JUIz09I/et9SF+i1qv38xfwyeC+DAcQDtcgDvcUTj33R3F+dqKi stbFZvXyAo3TbL78yLI0k5uFtfcVS0PE3Dh+2O49g7Ck6dJx8unDkxbImXJv5W6j uGuBRCYOoePc35Pmyt4g/L035+vPlt0IsV1PfT+LCFob0JxodsYhLOADxuk9+HcM OxTnMdlCC/azXg6UEA5u+zppLZ7U48OujBPA5aEtAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUbIsEzjzjKy7JoN3qywO+eObbpQ8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y0YTM0Mzk0LWM3YTAtNDkwNC05NzBhLTQ1YjNjYmE0MDUxNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB//QDANBgkqhkiG9w0BAQsFAAOCAQEAbB8v/VMqx76SN+vWPSfdMMt0 c4TnS0iA+5BgO1z7ShP1u/APgO0f7GA+FPrJZDN/HH+kGa+4ZvcflOVil41m5uqW PbgAHjZblx1L/k2oAcPCnWoctaR3GdYDbXSdC+e0o/nup32eg8I7tTBJdQpkQRsC J43+QlnAm6kGinKurOaSidDqDgVI2oxFN4D9Th9mEftsumNo/kRaOrT3fHuezuOH FJq9A/GfoqZ+HTrzMNqRC4zgR2K3ja/kblN5urGxVzorPR38ZMKnRxJid6TuJk3c 8SLDl7/l+H3Laq55r6j76xqxiOiHULMHEEM6P16hQUdFzfJdgFB4aQkqKZlSjw== -----END CERTIFICATE-----Generated at Sat Jun 13 09:50:47 2026 by rpki-client