$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f65e59e0-7d81-48b4-8a29-e0dba0e570f8.roa File: f65e59e0-7d81-48b4-8a29-e0dba0e570f8.roa (raw, json) Hash identifier: EfHHQFJflIpdk4VV1U64knhs+42n5qZdapDiSvHB3JI= Subject key identifier: 25:6A:39:68:A0:2D:CA:62:00:D9:EF:44:4A:EC:61:D8:99:4A:C6:DB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2857063364FFDABB339F2073B2267A83A4D0D67C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f65e59e0-7d81-48b4-8a29-e0dba0e570f8.roa Signing time: Fri 03 Apr 2026 00:10:08 +0000 ROA not before: Fri 03 Apr 2026 00:10:08 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:bc00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:57:06:33:64:ff:da:bb:33:9f:20:73:b2:26:7a:83:a4:d0:d6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 3 00:10:08 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=0e49df799831730343bd34d33f5cec5ddd0dd4fe9827497e9a8a8716d7c0d222, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8e:ad:75:31:6b:d3:4a:93:c1:36:46:59:b7: 6d:24:74:c3:a1:f8:c7:41:95:04:03:5d:16:2b:b7: ae:78:4a:c2:a6:dd:57:60:c9:74:a8:9a:db:88:9c: 36:1d:cb:68:51:58:8d:d6:38:0a:df:84:0e:1d:52: 83:84:c5:78:79:5e:09:53:a2:bb:0a:08:30:6f:2b: b0:86:6f:ec:a3:f4:64:e7:c7:b5:20:fb:3e:aa:9f: 68:3c:2f:b9:c1:94:25:5d:a5:c9:d2:11:20:5d:ff: ba:52:71:bb:ab:1c:9a:03:de:d8:19:14:f0:b0:7f: e7:25:9b:e6:d7:43:96:22:a3:17:51:2f:64:4b:29: 53:24:d9:c1:ed:f6:43:7b:43:71:0f:6c:20:b3:b3: 18:e9:56:6e:a4:93:33:94:54:7b:56:1a:04:c9:84: f0:2d:99:68:12:ab:16:67:38:01:a9:d4:ff:f5:ec: 54:90:97:db:49:eb:24:04:1f:3c:de:8c:bc:cd:4e: 1c:c9:3d:34:d6:b4:93:5c:a4:7f:f6:f0:a7:b9:ce: ef:4f:26:13:ab:0f:83:63:4c:01:18:eb:47:10:70: fc:45:a1:50:88:44:66:1d:f8:01:d3:bb:72:6b:a4: 0a:22:e5:1a:5d:97:fb:e9:e8:7f:26:f5:72:7e:e4: d2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6A:39:68:A0:2D:CA:62:00:D9:EF:44:4A:EC:61:D8:99:4A:C6:DB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f65e59e0-7d81-48b4-8a29-e0dba0e570f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:bc00::/48 Signature Algorithm: sha256WithRSAEncryption 09:6c:25:d1:7b:91:c2:9d:81:a7:c7:03:b1:3d:63:ef:f7:f6: 9c:9e:13:59:00:42:83:12:45:81:61:dd:cd:8a:26:ec:2d:b1: c8:90:3a:cd:ed:f4:30:89:16:2e:bb:71:72:9d:28:60:96:1a: af:c5:5d:a1:00:e7:2f:b0:93:b4:62:f1:be:0b:1c:01:b8:72: 8c:e5:3c:f7:7c:9e:5b:86:94:d9:0c:be:57:63:52:53:f3:d8: 99:50:78:54:e3:af:b2:61:c9:f7:21:29:d9:d1:95:b0:48:0a: 1b:a3:39:d1:ab:66:17:dd:af:3f:16:87:cf:30:34:53:81:f0: 4e:1c:7e:5e:18:44:82:d4:f1:40:6f:49:51:42:4e:84:9a:bb: aa:a5:82:b0:18:4e:d4:1c:90:15:5e:d8:2a:d1:b0:26:c2:c1: ae:ad:67:78:cb:f9:68:95:8e:97:3a:60:42:ae:7f:b7:26:f4: d8:59:54:e7:02:69:92:e6:aa:b8:83:b7:0f:cc:6a:cf:8b:03: a8:d8:30:78:87:0a:1b:ba:05:35:83:a8:e3:47:9b:8e:7b:b9: ed:da:43:0e:34:bc:3d:fb:bc:e0:8a:1d:88:55:2c:c6:b1:85: 59:38:2f:57:e4:69:c2:aa:1a:0e:7f:02:a5:1f:7e:8f:bb:6e: 5e:f6:e6:9a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKFcGM2T/2rsznyBzsiZ6g6TQ1nwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDAzMDAxMDA4WhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTQ5ZGY3OTk4MzE3MzAzNDNiZDM0ZDMzZjVjZWM1ZGRk MGRkNGZlOTgyNzQ5N2U5YThhODcxNmQ3YzBkMjIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhjq11MWvTSpPBNkZZt20kdMOh+MdBlQQDXRYrt654SsKm 3VdgyXSomtuInDYdy2hRWI3WOArfhA4dUoOExXh5XglTorsKCDBvK7CGb+yj9GTn x7Ug+z6qn2g8L7nBlCVdpcnSESBd/7pScburHJoD3tgZFPCwf+clm+bXQ5YioxdR L2RLKVMk2cHt9kN7Q3EPbCCzsxjpVm6kkzOUVHtWGgTJhPAtmWgSqxZnOAGp1P/1 7FSQl9tJ6yQEHzzejLzNThzJPTTWtJNcpH/28Ke5zu9PJhOrD4NjTAEY60cQcPxF oVCIRGYd+AHTu3JrpAoi5Rpdl/vp6H8m9XJ+5NLvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJWo5aKAtymIA2e9ESuxh2JlKxtswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y2NWU1OWUwLTdkODEtNDhiNC04YTI5LWUwZGJhMGU1NzBmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/svAAwDQYJKoZIhvcNAQELBQADggEBAAlsJdF7kcKdgafHA7E9Y+/3 9pyeE1kAQoMSRYFh3c2KJuwtsciQOs3t9DCJFi67cXKdKGCWGq/FXaEA5y+wk7Ri 8b4LHAG4cozlPPd8nluGlNkMvldjUlPz2JlQeFTjr7JhyfchKdnRlbBIChujOdGr Zhfdrz8Wh88wNFOB8E4cfl4YRILU8UBvSVFCToSau6qlgrAYTtQckBVe2CrRsCbC wa6tZ3jL+WiVjpc6YEKuf7cm9NhZVOcCaZLmqriDtw/Mas+LA6jYMHiHChu6BTWD qONHm457ue3aQw40vD37vOCKHYhVLMaxhVk4L1fkacKqGg5/AqUffo+7bl725po= -----END CERTIFICATE-----Generated at Fri Apr 17 04:42:37 2026 by rpki-client