$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2af3cff2-866a-4113-89c5-1f4d664924c6.roa File: 2af3cff2-866a-4113-89c5-1f4d664924c6.roa (raw, json) Hash identifier: yb8CYsrvMy5Kaj00dgEnTuWmrTHLQmhQ/8SBGr75b7M= Subject key identifier: 9E:54:34:61:A0:42:23:76:12:70:8C:DC:65:83:A0:E8:08:FC:F2:C3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D78FE2AAFFDADE23E47C2F129F2BA5A848D0030 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2af3cff2-866a-4113-89c5-1f4d664924c6.roa Signing time: Wed 29 Apr 2026 00:21:05 +0000 ROA not before: Wed 29 Apr 2026 00:21:05 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f01:4806::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:78:fe:2a:af:fd:ad:e2:3e:47:c2:f1:29:f2:ba:5a:84:8d:00:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:21:05 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=36a6ba547517f8638aab636390e42c480c2c9647568fa9bd63940b81b73bbb21, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:76:e7:3a:f9:71:f1:7d:d5:96:5c:1f:5f:a4: a0:75:c9:22:b2:e7:c2:52:30:d7:3f:28:82:e6:74: f4:03:eb:92:a3:21:df:ea:eb:52:6b:7f:6a:de:cd: d3:aa:51:da:4b:7f:c4:0d:bb:3d:ce:86:16:c5:25: a1:33:97:a9:23:ee:8f:f0:7d:8b:70:f6:19:c3:ce: d6:45:de:21:c7:2f:84:98:69:cc:7b:21:5b:bc:58: 21:5a:17:71:df:ca:2e:dc:91:59:d0:e6:47:3a:96: 1b:8b:e2:ab:ad:96:84:34:db:83:60:a7:4b:64:66: 89:36:5b:dd:fe:e1:c7:0a:b0:1a:ab:b5:17:a4:de: 4c:d0:ec:e3:90:3b:12:89:78:b9:7f:06:5b:31:e1: 0b:35:05:32:42:24:28:23:cc:62:7a:de:c9:f7:75: d1:7c:74:00:fd:c8:4a:8e:a5:35:0b:52:20:36:40: 54:19:2b:8d:2d:b6:10:4b:39:0a:fa:86:d3:af:65: 9d:3b:b2:93:b0:2c:19:27:50:60:6f:da:07:dd:fd: bb:b6:43:59:9f:84:d0:85:aa:8d:1a:e4:e8:d0:95: 8a:0b:b9:11:52:b9:df:7e:26:35:27:35:00:21:15: 7e:eb:8e:17:d7:36:61:6a:65:0c:5d:b5:05:64:fe: a5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:54:34:61:A0:42:23:76:12:70:8C:DC:65:83:A0:E8:08:FC:F2:C3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2af3cff2-866a-4113-89c5-1f4d664924c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f01:4806::/47 Signature Algorithm: sha256WithRSAEncryption 20:c0:39:b4:ac:e7:d6:23:a1:9c:e9:be:0d:bb:2b:94:d6:b6: f7:77:2e:d1:2d:46:30:f0:1c:af:a0:11:f2:26:0f:d4:6f:19: 7e:c6:64:c2:6a:dd:aa:9b:76:58:ac:5d:cf:d9:d9:ee:f9:a2: 6f:3b:e9:38:a1:4e:7c:e8:d1:7a:bc:9f:46:2d:98:e6:12:2c: f3:eb:e2:1c:8c:bb:b1:7c:d8:02:57:16:23:74:ec:03:81:c3: be:03:93:4a:dc:1c:89:8a:26:c8:2d:a0:a8:87:3c:31:17:75: 5c:6c:0e:86:15:3e:1e:c8:cf:b7:a3:79:aa:fb:ac:17:61:19: 01:a3:3d:ab:76:1a:52:a1:1c:bd:31:57:ba:71:4d:dd:df:9a: 2f:51:bd:e3:04:d6:f0:c7:e2:42:dc:ad:f5:04:dd:c7:24:1a: df:59:0f:64:86:a4:fa:7c:09:54:e9:57:c1:ce:dc:94:a3:17: 31:8a:00:3b:53:fe:c1:d6:3a:a5:7e:63:ee:d6:f3:eb:d2:a2: 62:f5:0a:b8:5f:30:3c:99:e5:ad:71:bc:b0:c6:29:14:84:44: bd:b7:b9:10:4b:6e:c2:58:16:c9:d6:0a:f0:fe:e9:8b:b3:e1: 1b:dd:98:b1:06:33:0c:ce:66:22:20:db:f1:ed:18:86:ef:2b: 42:e7:3b:d4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbXj+Kq/9reI+R8LxKfK6WoSNADAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDAyMTA1WhcNMjYwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNmE2YmE1NDc1MTdmODYzOGFhYjYzNjM5MGU0MmM0ODBj MmM5NjQ3NTY4ZmE5YmQ2Mzk0MGI4MWI3M2JiYjIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrduc6+XHxfdWWXB9fpKB1ySKy58JSMNc/KILmdPQD65Kj Id/q61Jrf2rezdOqUdpLf8QNuz3OhhbFJaEzl6kj7o/wfYtw9hnDztZF3iHHL4SY acx7IVu8WCFaF3Hfyi7ckVnQ5kc6lhuL4qutloQ024Ngp0tkZok2W93+4ccKsBqr tRek3kzQ7OOQOxKJeLl/Blsx4Qs1BTJCJCgjzGJ63sn3ddF8dAD9yEqOpTULUiA2 QFQZK40tthBLOQr6htOvZZ07spOwLBknUGBv2gfd/bu2Q1mfhNCFqo0a5OjQlYoL uRFSud9+JjUnNQAhFX7rjhfXNmFqZQxdtQVk/qUvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnlQ0YaBCI3YScIzcZYOg6Aj88sMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhZjNjZmYyLTg2NmEtNDExMy04OWM1LTFmNGQ2NjQ5MjRjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAB8BSAYwDQYJKoZIhvcNAQELBQADggEBACDAObSs59YjoZzpvg27K5TW tvd3LtEtRjDwHK+gEfImD9RvGX7GZMJq3aqbdlisXc/Z2e75om876TihTnzo0Xq8 n0YtmOYSLPPr4hyMu7F82AJXFiN07AOBw74Dk0rcHImKJsgtoKiHPDEXdVxsDoYV Ph7Iz7ejear7rBdhGQGjPat2GlKhHL0xV7pxTd3fmi9RveME1vDH4kLcrfUE3cck Gt9ZD2SGpPp8CVTpV8HO3JSjFzGKADtT/sHWOqV+Y+7W8+vSomL1CrhfMDyZ5a1x vLDGKRSERL23uRBLbsJYFsnWCvD+6Yuz4RvdmLEGMwzOZiIg2/HtGIbvK0LnO9Q= -----END CERTIFICATE-----Generated at Mon May 4 21:39:25 2026 by rpki-client