$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c2bd85f-f452-4747-945b-c8dd45da7768.roa File: 2c2bd85f-f452-4747-945b-c8dd45da7768.roa (raw, json) Hash identifier: siqzPqQLpt2bGqy8p1DWD7VjQyelh5A3uBzrE3qz8b4= Subject key identifier: 67:7C:27:8F:82:6C:B8:A4:D5:52:82:67:36:D6:78:64:32:8F:E5:89 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6ED523AB5D81632D632D660CD658911604119BCD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c2bd85f-f452-4747-945b-c8dd45da7768.roa Signing time: Thu 12 Mar 2026 16:11:23 +0000 ROA not before: Thu 12 Mar 2026 16:11:23 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f33:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d5:23:ab:5d:81:63:2d:63:2d:66:0c:d6:58:91:16:04:11:9b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:11:23 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=5464b82a1ef3f4accdb063f84fd78c240c3d835b151b342bcac4b27bf31ce400, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d1:e0:97:03:5e:88:5f:0c:26:54:ef:56:36: 59:5a:20:6b:88:42:cc:50:c6:e3:f1:3b:98:3d:bc: 31:1b:a1:05:07:73:93:9f:1a:55:80:63:62:f3:23: 73:52:26:7a:58:ed:25:e0:9c:33:c4:8e:cf:e4:b3: 7e:62:0d:a4:72:00:6e:00:50:ff:91:85:b4:d8:65: e1:ff:38:2d:ec:3e:1c:5b:3f:ec:2a:a4:6e:d6:de: b0:ed:06:aa:bb:24:37:69:60:c8:ab:50:7b:1a:55: b7:76:83:c5:c6:93:e8:a9:d4:b8:e2:60:c5:3d:62: 9a:b6:02:a2:db:51:57:a4:43:02:70:86:c7:87:d5: 41:69:e7:a9:de:95:51:3c:ac:a2:d1:7a:a2:26:49: 04:da:fe:01:10:1b:99:a0:d7:e9:d7:2a:f1:c7:3d: ec:3d:87:d4:c0:52:95:64:47:02:6d:e6:19:d3:5f: 78:28:5f:1e:24:af:25:06:ca:c1:6d:e4:14:26:ae: 8c:3b:82:a5:42:3e:8a:c8:a5:ad:34:85:70:e2:37: 3f:84:72:9b:81:bd:cd:d3:34:5e:68:2f:39:fe:eb: 8a:cd:dd:33:fd:0a:b1:1b:20:61:16:d1:46:30:f4: b1:1b:0a:13:2e:18:e4:b4:80:9c:7e:a4:56:36:32: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7C:27:8F:82:6C:B8:A4:D5:52:82:67:36:D6:78:64:32:8F:E5:89 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c2bd85f-f452-4747-945b-c8dd45da7768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f33:c000::/40 Signature Algorithm: sha256WithRSAEncryption b0:2c:78:70:5a:c9:5e:b2:52:0d:36:3e:ae:20:8f:41:dd:a7: 61:a6:e5:ac:fa:66:c1:87:bf:b4:70:9d:77:d4:e4:ae:df:85: 49:73:ee:68:69:a6:af:93:2b:d1:3f:87:6c:32:34:e2:11:a6: f7:41:73:ae:c9:3f:8b:fb:99:31:c7:d1:da:db:7e:23:6d:97: 4b:13:77:78:8e:d3:cd:87:83:6c:f2:95:cd:dc:bf:46:0a:84: 0a:70:c0:f1:80:72:bb:8b:79:e7:2b:40:16:8c:79:25:f9:c7: 66:36:44:08:02:96:a7:5d:91:72:5a:2c:61:d7:24:75:f2:36: b8:33:45:e5:ab:16:e8:70:1c:b5:1f:f3:5e:8b:fc:a7:41:84: 29:e2:04:7b:a6:31:ac:ca:09:e0:ba:37:77:37:d1:95:a4:dd: fc:a9:36:03:08:d5:77:10:d1:c5:78:27:61:7d:77:6f:49:fb: f2:05:03:21:c4:18:5a:25:5e:54:69:a4:e3:24:24:00:99:88: 57:f3:3e:31:07:b5:10:78:85:d3:49:3c:86:6d:f8:7f:2f:f5: 24:02:56:87:74:98:0f:53:d9:55:0e:3f:1d:ea:40:69:c6:72: c8:2f:b9:65:1f:e7:9a:2b:7f:91:dd:83:53:c7:36:f4:a4:08: 59:31:d1:d7 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUbtUjq12BYy1jLWYM1liRFgQRm80wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYxMTIzWhcNMjYwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NDY0YjgyYTFlZjNmNGFjY2RiMDYzZjg0ZmQ3OGMyNDBj M2Q4MzViMTUxYjM0MmJjYWM0YjI3YmYzMWNlNDAwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCe0eCXA16IXwwmVO9WNllaIGuIQsxQxuPxO5g9vDEboQUH c5OfGlWAY2LzI3NSJnpY7SXgnDPEjs/ks35iDaRyAG4AUP+RhbTYZeH/OC3sPhxb P+wqpG7W3rDtBqq7JDdpYMirUHsaVbd2g8XGk+ip1LjiYMU9Ypq2AqLbUVekQwJw hseH1UFp56nelVE8rKLReqImSQTa/gEQG5mg1+nXKvHHPew9h9TAUpVkRwJt5hnT X3goXx4kryUGysFt5BQmrow7gqVCPorIpa00hXDiNz+EcpuBvc3TNF5oLzn+64rN 3TP9CrEbIGEW0UYw9LEbChMuGOS0gJx+pFY2MqHnAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUZ3wnj4JsuKTVUoJnNtZ4ZDKP5YkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJjMmJkODVmLWY0NTItNDc0Ny05NDViLWM4ZGQ0NWRhNzc2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8zwDANBgkqhkiG9w0BAQsFAAOCAQEAsCx4cFrJXrJSDTY+riCPQd2n YablrPpmwYe/tHCdd9Tkrt+FSXPuaGmmr5Mr0T+HbDI04hGm90Fzrsk/i/uZMcfR 2tt+I22XSxN3eI7TzYeDbPKVzdy/RgqECnDA8YByu4t55ytAFox5JfnHZjZECAKW p12RclosYdckdfI2uDNF5asW6HActR/zXov8p0GEKeIEe6YxrMoJ4Lo3dzfRlaTd /Kk2AwjVdxDRxXgnYX13b0n78gUDIcQYWiVeVGmk4yQkAJmIV/M+MQe1EHiF00k8 hm34fy/1JAJWh3SYD1PZVQ4/HepAacZyyC+5ZR/nmit/kd2DU8c29KQIWTHR1w== -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:15 2026 by rpki-client