$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d08cfca-510f-4253-bd56-4705cca3455a.roa File: 2d08cfca-510f-4253-bd56-4705cca3455a.roa (raw, json) Hash identifier: cGbgnL6F5vIHnrdoiD/3JlqXiK6TWv7wQkptNlPHwSU= Subject key identifier: 93:18:EB:C4:89:EB:FD:7A:45:B5:2C:BD:81:13:C7:5F:06:7E:6D:03 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3EF856B597660EEC4F07606F11738DCBEF53E43E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d08cfca-510f-4253-bd56-4705cca3455a.roa Signing time: Fri 15 May 2026 01:11:18 +0000 ROA not before: Fri 15 May 2026 01:11:18 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:80b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f8:56:b5:97:66:0e:ec:4f:07:60:6f:11:73:8d:cb:ef:53:e4:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 01:11:18 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=5867e9c147d2f96dbb74520fa9d349e79dde13955d9f18e4ee69cdefc27e7b47, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:35:c0:ff:d2:34:97:c5:1c:c9:f0:2f:05: 09:64:ff:82:67:ac:1b:e3:de:b0:c2:f4:fd:fe:34: b2:64:16:97:a4:38:06:8c:85:6b:21:a7:09:e3:40: b6:a9:03:3e:ad:e2:12:b1:1a:52:17:6f:99:ac:62: d2:9b:cd:35:1e:55:79:4d:1c:6e:18:75:56:40:59: f8:d5:14:bc:5a:a7:91:a1:7e:a9:04:42:53:6d:64: 3f:0e:68:c8:73:f2:54:a0:6e:ab:8e:54:fb:f6:fe: aa:cf:f4:53:48:1e:e5:29:7c:45:c1:4c:48:6b:4f: e1:bc:b7:0d:31:f0:1e:b6:89:66:e8:ee:68:e4:4e: a1:b8:9f:2f:6b:68:41:18:c3:c6:28:e6:48:92:8d: 8a:8c:8d:27:49:4b:c9:50:60:fb:ad:9d:e3:a2:42: be:89:21:09:93:5f:98:2c:74:0a:bf:75:91:df:98: 66:a6:40:cb:53:34:02:db:af:a7:d6:d6:71:22:66: 3a:20:65:b9:44:6a:1b:89:f4:96:76:f8:fd:ab:68: a1:c7:09:f5:74:18:fe:0a:41:1d:48:74:fc:58:8f: 07:0e:21:80:1a:33:d2:64:87:2a:d2:7f:02:48:99: c3:7c:71:04:7d:a6:71:9d:71:3e:b9:9c:3b:e1:d2: e1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:18:EB:C4:89:EB:FD:7A:45:B5:2C:BD:81:13:C7:5F:06:7E:6D:03 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d08cfca-510f-4253-bd56-4705cca3455a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:80b0::/48 Signature Algorithm: sha256WithRSAEncryption 27:ed:24:44:49:4d:ca:30:77:a8:94:62:a3:51:9e:62:30:6b: 4f:f5:fc:ff:8a:79:60:73:23:f3:20:e8:07:32:ff:46:e8:6b: 7f:0c:17:e9:ce:75:46:30:32:57:67:45:c8:3b:7f:72:37:43: de:32:d8:73:0d:c6:11:75:89:e0:0b:e5:de:33:2e:19:4b:c5: 0a:27:4c:d7:5f:3b:67:90:bb:4f:89:ce:61:4a:49:10:a3:c8: 2b:39:34:6d:c7:30:44:81:4f:f7:56:d0:c7:fd:85:49:b0:3b: b6:99:5d:f6:57:23:1b:29:e5:25:02:af:47:26:c9:91:6a:c3: b3:c2:1c:da:03:a7:11:fb:e3:1c:e2:04:7a:80:bf:cb:66:4b: d2:68:40:ff:03:df:2f:f8:13:82:79:f7:7e:d1:56:75:1a:f5: 5c:9b:ec:e3:cf:9c:fb:04:44:51:88:26:41:27:02:f8:0c:46: 1d:23:e7:1e:8f:e9:24:88:4e:24:40:bd:d5:06:7b:08:dc:04: af:bb:31:6d:25:57:13:ab:69:1f:64:cc:84:f8:65:9c:a4:aa: b1:50:4e:e3:17:5b:7c:0d:98:0e:c4:d9:a3:93:cc:02:f2:e0: c8:6a:f3:c8:a2:63:3b:6c:71:01:b7:73:20:2e:cd:90:85:2f: 88:f5:c3:65 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPvhWtZdmDuxPB2BvEXONy+9T5D4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDExMTE4WhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODY3ZTljMTQ3ZDJmOTZkYmI3NDUyMGZhOWQzNDllNzlk ZGUxMzk1NWQ5ZjE4ZTRlZTY5Y2RlZmMyN2U3YjQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/GTXA/9I0l8UcyfAvBQlk/4JnrBvj3rDC9P3+NLJkFpek OAaMhWshpwnjQLapAz6t4hKxGlIXb5msYtKbzTUeVXlNHG4YdVZAWfjVFLxap5Gh fqkEQlNtZD8OaMhz8lSgbquOVPv2/qrP9FNIHuUpfEXBTEhrT+G8tw0x8B62iWbo 7mjkTqG4ny9raEEYw8Yo5kiSjYqMjSdJS8lQYPutneOiQr6JIQmTX5gsdAq/dZHf mGamQMtTNALbr6fW1nEiZjogZblEahuJ9JZ2+P2raKHHCfV0GP4KQR1IdPxYjwcO IYAaM9JkhyrSfwJImcN8cQR9pnGdcT65nDvh0uE9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkxjrxInr/XpFtSy9gRPHXwZ+bQMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJkMDhjZmNhLTUxMGYtNDI1My1iZDU2LTQ3MDVjY2EzNDU1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gLAwDQYJKoZIhvcNAQELBQADggEBACftJERJTcowd6iUYqNRnmIw a0/1/P+KeWBzI/Mg6Acy/0boa38MF+nOdUYwMldnRcg7f3I3Q94y2HMNxhF1ieAL 5d4zLhlLxQonTNdfO2eQu0+JzmFKSRCjyCs5NG3HMESBT/dW0Mf9hUmwO7aZXfZX Ixsp5SUCr0cmyZFqw7PCHNoDpxH74xziBHqAv8tmS9JoQP8D3y/4E4J5937RVnUa 9Vyb7OPPnPsERFGIJkEnAvgMRh0j5x6P6SSITiRAvdUGewjcBK+7MW0lVxOraR9k zIT4ZZykqrFQTuMXW3wNmA7E2aOTzALy4Mhq88iiYztscQG3cyAuzZCFL4j1w2U= -----END CERTIFICATE-----Generated at Sat Jun 13 08:17:45 2026 by rpki-client