$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cf85e12-5577-4f6f-a5ee-1dd191504217.roa File: 2cf85e12-5577-4f6f-a5ee-1dd191504217.roa (raw, json) Hash identifier: PT/Z9J196NBWXsLhVvDas3QxDNgbryoUBoV85RGyeSk= Subject key identifier: 98:4B:11:DD:46:7F:FE:AA:F2:F5:15:D4:F2:CB:6D:C5:9A:1F:2D:61 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 176671FC379CEA30D101FED4E7D4CD6465DBB4B8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cf85e12-5577-4f6f-a5ee-1dd191504217.roa Signing time: Fri 15 May 2026 00:51:08 +0000 ROA not before: Fri 15 May 2026 00:51:08 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:66:71:fc:37:9c:ea:30:d1:01:fe:d4:e7:d4:cd:64:65:db:b4:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 00:51:08 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=8ca25d2270f84dc6a0c0c31ac2d19c9f8ee094980f91d3a31b5fefba953d0f94, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0b:b9:ba:a4:13:46:09:b3:fd:f5:0a:70:91: 14:c1:26:3a:fb:27:00:ca:53:b3:19:a4:a3:d9:30: 99:e0:9c:e6:3d:94:c2:7c:31:8a:c7:83:04:2b:7a: f5:f4:cf:e7:b6:98:f7:d0:18:48:19:82:60:bb:82: c1:20:26:b0:3a:11:d0:0e:5c:e3:38:79:a3:f9:1c: a5:13:20:b6:c9:fd:80:4a:e8:71:e3:96:66:c1:bb: 8a:0c:30:be:ed:9f:95:e9:cd:9b:42:f4:10:f7:07: 15:0a:9f:a9:ac:ea:d8:41:7a:3a:90:a4:d4:fb:d2: fd:1c:a6:71:fc:f3:c0:0f:29:e6:0c:19:f5:72:01: 7b:70:5e:69:44:11:19:02:77:5f:12:76:29:64:dc: fd:f6:d1:e7:8d:dc:6f:da:6c:ee:84:93:a8:08:7b: 8f:e7:8e:25:22:02:9e:60:e1:ef:60:1f:c1:d3:c6: 31:f7:19:fb:94:af:0f:8f:3f:22:27:66:2f:cc:b0: 6f:36:e3:b9:2a:85:68:43:bb:d9:46:dd:b2:6b:02: c1:e8:36:27:0a:51:06:f3:04:69:82:c7:5a:a7:ae: 3f:78:38:1d:44:05:31:6a:41:84:7c:5e:8e:44:42: 58:21:73:a9:cf:3d:c5:c3:b4:08:7c:80:6f:19:79: 9c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4B:11:DD:46:7F:FE:AA:F2:F5:15:D4:F2:CB:6D:C5:9A:1F:2D:61 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cf85e12-5577-4f6f-a5ee-1dd191504217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8040::/48 Signature Algorithm: sha256WithRSAEncryption be:6c:97:5d:49:e1:60:1f:7d:53:d7:a1:98:86:72:65:2d:99: 23:c3:d7:8d:15:dd:2a:8e:e0:d0:46:65:1c:5a:a5:71:29:a2: bb:b4:ce:95:23:ee:55:13:4c:63:b2:ae:91:84:a8:57:8c:02: 46:4f:17:2f:76:23:a9:70:53:04:fb:78:e8:7b:34:f1:32:47: 9c:4c:1e:29:de:7a:7a:4f:7e:f2:56:20:41:30:67:a4:c9:1d: e0:92:93:4e:2c:e4:69:0a:2b:58:70:fa:6f:d2:8f:91:ea:08: c6:ef:ca:9a:5a:03:95:aa:47:17:e1:bc:20:97:79:d7:4b:a4: 18:f4:b4:b8:2e:21:20:aa:2e:99:59:ff:51:b3:ad:ae:77:60: 55:ac:68:e3:56:cd:26:59:c5:4d:ac:2c:32:81:b4:fa:b3:94: cb:cb:bc:91:fe:b9:1e:90:5d:3d:2a:ae:f1:1e:93:ff:e2:76: 33:75:dc:93:82:6e:a8:1b:26:97:8e:da:38:c7:73:a7:88:2c: 47:c7:49:ca:72:de:e8:45:7e:a6:40:f6:e7:44:6f:ce:6c:ee: ee:a8:c7:29:c1:d3:7b:fd:fd:66:f9:66:30:e4:20:9d:23:a3: 99:d2:77:c4:7c:52:80:e0:39:8a:5b:33:96:3c:77:2f:25:ff: 62:f9:8b:7b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUF2Zx/Dec6jDRAf7U59TNZGXbtLgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDA1MTA4WhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4Y2EyNWQyMjcwZjg0ZGM2YTBjMGMzMWFjMmQxOWM5Zjhl ZTA5NDk4MGY5MWQzYTMxYjVmZWZiYTk1M2QwZjk0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTC7m6pBNGCbP99QpwkRTBJjr7JwDKU7MZpKPZMJngnOY9 lMJ8MYrHgwQrevX0z+e2mPfQGEgZgmC7gsEgJrA6EdAOXOM4eaP5HKUTILbJ/YBK 6HHjlmbBu4oMML7tn5XpzZtC9BD3BxUKn6ms6thBejqQpNT70v0cpnH888APKeYM GfVyAXtwXmlEERkCd18Sdilk3P320eeN3G/abO6Ek6gIe4/njiUiAp5g4e9gH8HT xjH3GfuUrw+PPyInZi/MsG8247kqhWhDu9lG3bJrAsHoNicKUQbzBGmCx1qnrj94 OB1EBTFqQYR8Xo5EQlghc6nPPcXDtAh8gG8ZeZyZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmEsR3UZ//qry9RXU8sttxZofLWEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJjZjg1ZTEyLTU1NzctNGY2Zi1hNWVlLTFkZDE5MTUwNDIxNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gEAwDQYJKoZIhvcNAQELBQADggEBAL5sl11J4WAffVPXoZiGcmUt mSPD140V3SqO4NBGZRxapXEporu0zpUj7lUTTGOyrpGEqFeMAkZPFy92I6lwUwT7 eOh7NPEyR5xMHineenpPfvJWIEEwZ6TJHeCSk04s5GkKK1hw+m/Sj5HqCMbvyppa A5WqRxfhvCCXeddLpBj0tLguISCqLplZ/1Gzra53YFWsaONWzSZZxU2sLDKBtPqz lMvLvJH+uR6QXT0qrvEek//idjN13JOCbqgbJpeO2jjHc6eILEfHScpy3uhFfqZA 9udEb85s7u6oxynB03v9/Wb5ZjDkIJ0jo5nSd8R8UoDgOYpbM5Y8dy8l/2L5i3s= -----END CERTIFICATE-----Generated at Sat Jun 13 05:49:21 2026 by rpki-client