$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2692bf1-a717-402b-8f04-c159c349044d.roa File: c2692bf1-a717-402b-8f04-c159c349044d.roa (raw, json) Hash identifier: 7dOIp3aDApC0UGgY3lXyK/QFvEtunF19jtpQr4cDPi0= Subject key identifier: 48:EA:3B:14:00:DE:C4:C8:3F:B8:43:3D:A9:92:93:EA:A8:F0:CC:E5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0FFD0584A5C6731AF522830932C041BE1880F49A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2692bf1-a717-402b-8f04-c159c349044d.roa Signing time: Fri 03 Apr 2026 00:20:49 +0000 ROA not before: Fri 03 Apr 2026 00:20:49 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1b:c000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:fd:05:84:a5:c6:73:1a:f5:22:83:09:32:c0:41:be:18:80:f4:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 3 00:20:49 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=25d0fbd0ccdc9d0b99faf4ad8eef5f82629ece9dc5b1e49ab8e7b82cc2a3c59e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8b:a2:46:68:3f:bc:16:c9:7b:d6:5d:8a:c7: 00:3c:d3:7e:8b:d5:8b:e3:1a:a2:4f:e2:4d:68:44: 15:ae:e9:d4:f4:80:ee:ea:7a:3f:40:aa:b1:e2:cf: cf:ca:6c:86:d6:a0:4d:82:5a:dc:a0:ab:24:e5:a2: 9c:a6:ca:b0:fe:da:3e:6c:fe:69:1c:33:a4:03:30: 9a:93:23:2d:1b:29:64:b7:ee:36:7d:5e:4c:8b:00: 93:38:34:3d:26:f3:45:95:99:ba:c3:0d:02:8b:78: 8f:96:44:6b:12:43:c3:a3:34:ef:7b:8e:9f:d7:46: 09:c5:c1:e6:19:06:3d:3d:96:b9:84:e2:a1:d9:e6: 0f:cb:43:26:2c:2b:0d:05:c4:10:75:72:9a:3f:78: 4d:35:b5:eb:03:bf:41:d1:c3:60:af:7d:73:65:3b: 89:39:13:bb:8e:f4:bf:5d:df:5d:80:32:8f:e6:16: 03:b8:80:d2:93:a5:25:40:2c:20:be:27:c1:67:03: f1:cd:b7:81:ab:29:3e:95:b4:f8:8b:c2:08:cc:a6: 25:91:c5:03:1d:94:39:04:2c:14:e8:82:86:2f:ec: 56:f9:64:7b:3a:b2:ca:fc:d8:61:d4:8c:04:df:fc: 5f:a7:ac:b6:00:19:df:10:31:4e:0a:82:7d:fc:15: 16:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EA:3B:14:00:DE:C4:C8:3F:B8:43:3D:A9:92:93:EA:A8:F0:CC:E5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2692bf1-a717-402b-8f04-c159c349044d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1b:c000::/36 Signature Algorithm: sha256WithRSAEncryption 82:2a:25:ba:39:ec:b4:5f:b6:1e:5a:34:aa:da:86:cb:d8:6a: fa:9f:6d:89:2f:57:92:50:81:fa:89:25:ae:29:82:cb:5c:29: 9e:f2:1a:86:f8:3b:44:61:e0:d7:b7:ae:1e:75:1a:c9:8a:31: 71:5d:93:68:a1:12:66:32:cc:18:a3:50:5b:25:aa:17:29:d0: 5a:a4:34:32:d0:51:06:31:c7:13:32:9e:50:bf:18:22:e4:67: 90:28:de:b8:25:d6:40:90:d7:9a:24:18:cf:bc:87:cf:fb:66: 2f:ff:54:7a:74:50:f2:42:f6:aa:1e:33:37:ea:b5:0a:b5:21: d2:38:de:bd:a2:30:45:d3:34:35:64:cb:94:ac:7c:24:ac:c8: 10:60:50:8e:bb:77:de:d5:44:2e:41:29:ee:a5:22:8e:5f:00: 4d:27:14:b3:21:58:be:cd:86:5c:56:39:e5:6d:1d:e6:72:6b: 7f:87:b5:b1:41:7a:13:c3:88:f3:36:04:4e:c4:08:45:db:f1: 17:05:9e:c7:1d:8c:a1:6c:25:8c:49:d5:b4:99:d7:a3:e4:f3: 67:f7:0e:ed:c0:14:bb:6e:fc:e1:01:2e:03:e0:02:72:79:20: 4f:3c:3e:bd:d7:78:bc:95:6e:90:71:16:49:71:92:d3:3f:9c: 57:6c:32:1a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUD/0FhKXGcxr1IoMJMsBBvhiA9JowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDAzMDAyMDQ5WhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNWQwZmJkMGNjZGM5ZDBiOTlmYWY0YWQ4ZWVmNWY4MjYy OWVjZTlkYzViMWU0OWFiOGU3YjgyY2MyYTNjNTllMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsi6JGaD+8Fsl71l2KxwA8036L1YvjGqJP4k1oRBWu6dT0 gO7qej9AqrHiz8/KbIbWoE2CWtygqyTlopymyrD+2j5s/mkcM6QDMJqTIy0bKWS3 7jZ9XkyLAJM4ND0m80WVmbrDDQKLeI+WRGsSQ8OjNO97jp/XRgnFweYZBj09lrmE 4qHZ5g/LQyYsKw0FxBB1cpo/eE01tesDv0HRw2CvfXNlO4k5E7uO9L9d312AMo/m FgO4gNKTpSVALCC+J8FnA/HNt4GrKT6VtPiLwgjMpiWRxQMdlDkELBTogoYv7Fb5 ZHs6ssr82GHUjATf/F+nrLYAGd8QMU4Kgn38FRabAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUSOo7FADexMg/uEM9qZKT6qjwzOUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MyNjkyYmYxLWE3MTctNDAyYi04ZjA0LWMxNTljMzQ5MDQ0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8bwDANBgkqhkiG9w0BAQsFAAOCAQEAgiolujnstF+2Hlo0qtqGy9hq +p9tiS9XklCB+oklrimCy1wpnvIahvg7RGHg17euHnUayYoxcV2TaKESZjLMGKNQ WyWqFynQWqQ0MtBRBjHHEzKeUL8YIuRnkCjeuCXWQJDXmiQYz7yHz/tmL/9UenRQ 8kL2qh4zN+q1CrUh0jjevaIwRdM0NWTLlKx8JKzIEGBQjrt33tVELkEp7qUijl8A TScUsyFYvs2GXFY55W0d5nJrf4e1sUF6E8OI8zYETsQIRdvxFwWexx2MoWwljEnV tJnXo+TzZ/cO7cAUu2784QEuA+ACcnkgTzw+vdd4vJVukHEWSXGS0z+cV2wyGg== -----END CERTIFICATE-----Generated at Fri Apr 17 07:03:45 2026 by rpki-client