$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b30c07c-7521-4792-9740-93f2aff19155.roa File: 2b30c07c-7521-4792-9740-93f2aff19155.roa (raw, json) Hash identifier: 0cFiwVsVLd40hVjUmCKIcBjea8LjSkREExWqhqQK3ns= Subject key identifier: 70:47:7E:73:77:66:5C:5C:C1:51:C2:B3:C6:26:C5:D8:72:08:66:BA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48BC34D9498E52E81AB9826A21ACBC1633DE6393 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b30c07c-7521-4792-9740-93f2aff19155.roa Signing time: Fri 03 Apr 2026 00:20:48 +0000 ROA not before: Fri 03 Apr 2026 00:20:48 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1feb:c040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:bc:34:d9:49:8e:52:e8:1a:b9:82:6a:21:ac:bc:16:33:de:63:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 3 00:20:48 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=6e82efc37ebf4c5d9865a514180669f8830afdc2da59c4986fe0bd74d9c3c5ea, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:47:c4:e6:e8:10:ce:f8:30:0c:48:ef:dc:c7: 70:33:49:00:9b:44:97:29:59:af:f8:3c:ad:56:ab: 65:de:17:ab:0f:12:b6:39:a5:fc:96:3c:74:ec:6c: 73:3a:36:be:60:dc:1a:03:83:d2:ee:1f:e6:77:1c: c6:ad:34:3d:80:f5:32:f0:78:8b:4a:88:a0:ba:45: 36:a5:fc:6b:3e:43:f3:19:cb:60:79:44:2e:5c:9e: 94:3c:d6:a2:43:60:3d:da:19:30:92:3a:ef:75:ce: 3f:b8:d6:dc:95:ea:5f:1b:fc:2d:04:43:b2:de:87: 68:53:e1:e2:37:03:f2:9f:8b:27:96:03:07:73:73: 31:94:bf:a9:ea:6e:68:ae:28:16:cf:5d:03:14:6c: 02:3c:6e:65:fa:1f:81:a8:03:44:d2:64:d2:f1:da: 27:c2:c6:f5:2a:ab:36:48:86:41:92:37:87:dd:4b: c0:3e:81:d9:16:d0:9c:6b:37:70:36:b9:dc:52:74: 03:84:70:6e:62:32:92:4a:25:3c:1a:fc:6f:4c:05: 7a:42:5f:c0:30:40:94:6a:ee:dd:c5:a7:3c:f1:5d: ef:0e:db:9d:bc:bb:86:3e:a6:58:78:54:2f:f0:59: f6:5f:71:db:37:f0:50:2c:d7:84:e6:95:46:85:f0: 91:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:47:7E:73:77:66:5C:5C:C1:51:C2:B3:C6:26:C5:D8:72:08:66:BA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b30c07c-7521-4792-9740-93f2aff19155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1feb:c040::/48 Signature Algorithm: sha256WithRSAEncryption 21:79:47:f8:bc:aa:c7:45:9f:32:b0:88:91:40:29:52:6e:f7: 5a:35:82:5e:5e:24:6c:93:d9:30:6e:92:8d:ba:1f:42:71:0c: 49:ef:50:b7:59:d9:73:e5:03:03:e7:8d:40:dc:be:b0:f3:91: ab:cf:57:0e:99:7c:b1:0c:b4:b6:93:3e:02:a8:41:85:7e:17: e2:8e:a3:6d:cf:fe:de:af:6f:8e:35:0e:82:61:3a:04:17:f1: f3:ad:3d:8c:07:ed:82:48:78:b2:e1:54:24:6a:fd:ac:7d:19: 1e:ba:4d:de:58:12:f0:a2:be:da:52:89:9f:72:f7:01:4c:f5: b8:f4:db:2d:a0:fb:6a:ae:a2:aa:10:64:96:67:7d:9b:53:91: c8:5e:d7:ad:0a:bd:d0:99:34:bb:cb:90:bf:e5:e2:77:c4:91: c3:dd:86:ea:7c:8c:3e:1b:a6:6c:73:ac:f8:36:30:f7:95:e5: 50:b5:de:3a:dc:5f:44:a7:56:87:73:ba:b3:67:6e:9f:fc:fb: 3d:87:23:28:12:56:9e:44:ad:07:4d:17:17:92:42:14:ac:73: 3e:2a:cd:dd:eb:c7:5f:a4:cc:3a:f8:9d:66:01:d1:e0:6d:71: 25:38:a9:67:0d:24:34:67:0e:47:d0:75:ae:bf:1f:e5:6b:9c: 96:4a:80:af -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSLw02UmOUugauYJqIay8FjPeY5MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDAzMDAyMDQ4WhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZTgyZWZjMzdlYmY0YzVkOTg2NWE1MTQxODA2NjlmODgz MGFmZGMyZGE1OWM0OTg2ZmUwYmQ3NGQ5YzNjNWVhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKR8Tm6BDO+DAMSO/cx3AzSQCbRJcpWa/4PK1Wq2XeF6sP ErY5pfyWPHTsbHM6Nr5g3BoDg9LuH+Z3HMatND2A9TLweItKiKC6RTal/Gs+Q/MZ y2B5RC5cnpQ81qJDYD3aGTCSOu91zj+41tyV6l8b/C0EQ7Leh2hT4eI3A/KfiyeW AwdzczGUv6nqbmiuKBbPXQMUbAI8bmX6H4GoA0TSZNLx2ifCxvUqqzZIhkGSN4fd S8A+gdkW0JxrN3A2udxSdAOEcG5iMpJKJTwa/G9MBXpCX8AwQJRq7t3FpzzxXe8O 2528u4Y+plh4VC/wWfZfcds38FAs14TmlUaF8JGrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcEd+c3dmXFzBUcKzxibF2HIIZrowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiMzBjMDdjLTc1MjEtNDc5Mi05NzQwLTkzZjJhZmYxOTE1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/rwEAwDQYJKoZIhvcNAQELBQADggEBACF5R/i8qsdFnzKwiJFAKVJu 91o1gl5eJGyT2TBuko26H0JxDEnvULdZ2XPlAwPnjUDcvrDzkavPVw6ZfLEMtLaT PgKoQYV+F+KOo23P/t6vb441DoJhOgQX8fOtPYwH7YJIeLLhVCRq/ax9GR66Td5Y EvCivtpSiZ9y9wFM9bj02y2g+2quoqoQZJZnfZtTkche160KvdCZNLvLkL/l4nfE kcPdhup8jD4bpmxzrPg2MPeV5VC13jrcX0SnVodzurNnbp/8+z2HIygSVp5ErQdN FxeSQhSscz4qzd3rx1+kzDr4nWYB0eBtcSU4qWcNJDRnDkfQda6/H+VrnJZKgK8= -----END CERTIFICATE-----Generated at Fri Apr 17 06:33:03 2026 by rpki-client