$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a8d2dd8-0b0a-4a71-b300-2c252e935561.roa File: 2a8d2dd8-0b0a-4a71-b300-2c252e935561.roa (raw, json) Hash identifier: qOZiv4qJc0LC7dnTyBgIVAluZldUl3TCBx8AuhVwUZc= Subject key identifier: 0C:7F:4E:81:FA:29:06:8F:1F:87:CF:82:76:BC:FD:49:0A:3E:00:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 04C207DD36BBAD228A83EFD73A32751EEC3904AF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a8d2dd8-0b0a-4a71-b300-2c252e935561.roa Signing time: Sat 02 May 2026 01:20:05 +0000 ROA not before: Sat 02 May 2026 01:20:05 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fea:1020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c2:07:dd:36:bb:ad:22:8a:83:ef:d7:3a:32:75:1e:ec:39:04:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 01:20:05 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=0b42d6a06f4969651904915f8c24ea5f782d185e14b2ffdda610ea2059318253, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a8:7a:b8:a2:aa:8f:7d:f7:32:76:ce:53:f9: 5f:48:93:46:98:4d:0a:1a:8e:54:f9:60:cf:a6:90: cb:a4:ea:0e:ae:1f:32:aa:ce:90:d5:93:1a:3d:c9: dc:d8:4a:99:51:4b:80:81:45:af:a8:63:b8:f1:df: a7:5f:2a:44:67:0f:39:88:73:34:52:67:48:77:b5: e9:1a:5e:f9:57:3d:5a:35:18:c5:8f:10:a7:72:d9: 34:0b:25:b5:e4:db:98:0e:01:1f:37:bb:2b:5e:04: 82:21:19:ad:e6:59:c7:56:a0:ac:a5:a0:a6:4f:c8: f8:24:e3:ce:43:72:65:55:4d:94:0a:33:65:3d:fb: 5a:13:39:23:bb:15:00:3c:01:a7:46:18:e2:05:30: 51:60:35:d9:fd:85:cb:7d:1b:60:26:24:6f:9d:a9: 40:3c:e4:6c:3d:57:93:7a:21:e4:bb:71:75:f4:1d: f7:1d:15:15:15:aa:3a:b0:d3:57:be:4e:7c:86:ee: f3:ee:90:93:50:f4:13:4d:e6:43:2d:fc:cf:22:85: 0a:d4:ce:13:9e:a6:21:ee:37:5e:ec:71:3a:97:cf: c8:94:c0:8d:5c:66:a3:4d:8e:12:5d:69:f9:a1:ef: bb:40:9e:06:0b:87:21:6e:f0:58:a1:73:8f:b1:fc: 19:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7F:4E:81:FA:29:06:8F:1F:87:CF:82:76:BC:FD:49:0A:3E:00:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a8d2dd8-0b0a-4a71-b300-2c252e935561.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea:1020::/48 Signature Algorithm: sha256WithRSAEncryption 04:df:6a:e9:ac:04:9b:19:f8:77:d6:65:ac:fc:b2:ad:39:aa: 96:4d:ad:32:62:69:6b:fe:52:b3:75:48:5c:59:49:f0:8b:0f: 32:b8:3f:ab:c4:d5:a2:77:bf:8f:7c:62:10:55:66:b1:0c:59: 8f:5f:e8:bc:c7:c9:d6:ba:0b:8e:d3:12:d9:27:b6:9a:79:89: bf:2a:7d:1d:c9:69:8f:18:03:50:6c:45:64:40:ac:49:a4:30: 2f:0f:c3:c8:d1:04:9a:4b:de:74:c0:86:95:0a:1c:96:b7:cf: ec:ca:7d:fa:54:70:d9:05:db:80:d8:54:7d:36:83:34:d8:4e: bd:29:7e:59:cc:8f:21:d0:82:d1:af:eb:36:e0:3d:21:b6:2f: 2e:7f:c2:00:37:ce:89:7a:7f:dc:38:a4:98:8b:75:ee:19:01: 15:e2:64:19:36:a1:3d:6e:ae:72:36:f9:70:6f:22:4e:df:86: e8:0b:a0:13:bf:8e:05:b4:3f:1a:97:43:fa:1d:c2:10:d3:df: 61:e7:5d:8e:59:08:12:66:4f:1b:aa:03:ef:f1:e4:17:56:a6: 76:fe:7f:05:84:e2:fd:dd:4b:f1:8a:a8:96:f3:8c:33:35:12: c4:59:0b:b5:1a:2c:fe:ad:26:dd:c3:e5:f1:3b:ab:68:c7:6a: 3c:1f:c4:6e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBMIH3Ta7rSKKg+/XOjJ1Huw5BK8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAyMDEyMDA1WhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjQyZDZhMDZmNDk2OTY1MTkwNDkxNWY4YzI0ZWE1Zjc4 MmQxODVlMTRiMmZmZGRhNjEwZWEyMDU5MzE4MjUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcqHq4oqqPffcyds5T+V9Ik0aYTQoajlT5YM+mkMuk6g6u HzKqzpDVkxo9ydzYSplRS4CBRa+oY7jx36dfKkRnDzmIczRSZ0h3tekaXvlXPVo1 GMWPEKdy2TQLJbXk25gOAR83uyteBIIhGa3mWcdWoKyloKZPyPgk485DcmVVTZQK M2U9+1oTOSO7FQA8AadGGOIFMFFgNdn9hct9G2AmJG+dqUA85Gw9V5N6IeS7cXX0 HfcdFRUVqjqw01e+TnyG7vPukJNQ9BNN5kMt/M8ihQrUzhOepiHuN17scTqXz8iU wI1cZqNNjhJdafmh77tAngYLhyFu8Fihc4+x/Bn3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDH9OgfopBo8fh8+Cdrz9SQo+AJEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhOGQyZGQ4LTBiMGEtNGE3MS1iMzAwLTJjMjUyZTkzNTU2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/qECAwDQYJKoZIhvcNAQELBQADggEBAATfaumsBJsZ+HfWZaz8sq05 qpZNrTJiaWv+UrN1SFxZSfCLDzK4P6vE1aJ3v498YhBVZrEMWY9f6LzHyda6C47T Etkntpp5ib8qfR3JaY8YA1BsRWRArEmkMC8Pw8jRBJpL3nTAhpUKHJa3z+zKffpU cNkF24DYVH02gzTYTr0pflnMjyHQgtGv6zbgPSG2Ly5/wgA3zol6f9w4pJiLde4Z ARXiZBk2oT1urnI2+XBvIk7fhugLoBO/jgW0PxqXQ/odwhDT32HnXY5ZCBJmTxuq A+/x5BdWpnb+fwWE4v3dS/GKqJbzjDM1EsRZC7UaLP6tJt3D5fE7q2jHajwfxG4= -----END CERTIFICATE-----Generated at Sun May 3 14:46:08 2026 by rpki-client