$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf2879dc-a3c0-4fe8-91e9-164299bad956.roa File: cf2879dc-a3c0-4fe8-91e9-164299bad956.roa (raw, json) Hash identifier: oXD3r40Q13Qm5Lf9ZWSqUk6NK4B3y8qFowd+2TI6ap4= Subject key identifier: DF:A8:96:2B:5C:BF:EE:2D:BD:3C:42:27:2A:96:F4:67:C5:02:61:24 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11E11DDC071BC2C2589C75EEDC022D38657151D3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf2879dc-a3c0-4fe8-91e9-164299bad956.roa Signing time: Fri 01 May 2026 00:40:07 +0000 ROA not before: Fri 01 May 2026 00:40:07 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1e:cc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e1:1d:dc:07:1b:c2:c2:58:9c:75:ee:dc:02:2d:38:65:71:51:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 1 00:40:07 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=c9d783178df37a2a4e1dac53e670a6c2a3411f1f9a5ae8b7a35ded2f85cd6770, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7c:51:29:21:cf:c4:1c:6d:63:39:ee:2d:d4: c0:43:c2:40:72:af:a2:d0:83:33:e5:f7:cc:26:77: 09:47:3a:c9:92:62:28:b8:44:92:fe:61:35:eb:26: 08:6b:14:76:9f:b2:14:0b:01:c3:5b:35:3a:a2:d9: 1f:b8:05:fe:ef:6a:c6:09:77:d6:2a:0a:56:ad:12: 7e:2f:17:9e:08:12:de:c0:69:80:51:c3:7c:ec:0e: 49:6c:a3:11:9c:11:11:d4:df:1a:42:32:ae:e0:43: 29:fb:7a:c3:e0:03:31:ed:4a:1e:ab:43:6a:15:23: 64:64:93:67:65:ae:a5:99:8e:23:5a:b4:0e:a1:e6: c3:9a:a4:9c:9d:12:c9:5a:74:52:16:de:d7:71:1e: 93:e4:ee:22:9d:82:48:8e:75:7c:c3:d8:21:f5:d9: 3c:52:ae:32:d7:8a:37:0e:ea:c6:fe:45:9b:10:69: 10:c5:33:10:63:88:47:a1:76:ee:d2:15:b6:40:da: bb:70:d0:7f:76:bb:42:60:63:bf:c6:21:a2:6a:5c: 0e:32:c2:fd:cc:63:33:6c:9d:ad:09:fd:5f:cf:44: 81:05:d5:f5:e6:ab:5b:94:a0:11:9c:4b:95:e6:32: 7d:99:5b:3d:e2:52:6a:9e:eb:ff:c9:a4:cf:54:8a: 9a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A8:96:2B:5C:BF:EE:2D:BD:3C:42:27:2A:96:F4:67:C5:02:61:24 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf2879dc-a3c0-4fe8-91e9-164299bad956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1e:cc00::/38 Signature Algorithm: sha256WithRSAEncryption 61:b3:71:1d:74:2c:ef:8f:37:91:86:8e:6d:17:65:cb:9e:7d: 89:3b:87:91:11:f9:7e:be:29:eb:06:6b:de:74:f5:82:fd:90: 45:2e:a9:68:20:1a:51:eb:cf:8f:0e:40:0f:de:fd:66:c1:1e: d2:f5:9e:51:14:c5:19:a1:b6:57:21:dc:84:a3:91:2a:a3:ce: 79:8c:9a:85:2f:02:55:c3:6f:a2:a6:21:5d:cc:bb:51:83:ee: bf:a9:13:31:0f:9e:2b:4e:c0:b9:8e:fe:bf:7d:93:38:5d:ff: 5c:c3:b2:c1:ff:9a:1f:01:92:82:ae:11:12:a8:ae:e1:8d:2b: dd:cd:93:ed:cf:e3:7f:9d:8e:0d:5c:3a:4b:c8:03:42:3b:54: de:a5:5f:e9:02:cf:f7:0b:bc:3b:64:35:d2:ce:41:32:ec:82: 47:69:c8:19:2a:3c:e1:5e:04:e2:d1:40:66:66:fd:ea:17:a9: 33:16:3b:3b:b9:e2:d4:b2:c7:c6:c6:a0:db:1a:c9:2f:f8:9e: 0b:48:3d:53:64:62:9f:43:8f:95:21:77:23:0d:42:94:3f:b0: d5:29:50:10:29:cc:0f:8c:d5:07:3e:19:6a:2f:50:bb:31:73: 6b:3d:f6:80:3f:8e:18:10:4e:ec:c4:92:90:87:c6:b0:57:d6: 27:4d:9d:cc -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUEeEd3AcbwsJYnHXu3AItOGVxUdMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDA0MDA3WhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOWQ3ODMxNzhkZjM3YTJhNGUxZGFjNTNlNjcwYTZjMmEz NDExZjFmOWE1YWU4YjdhMzVkZWQyZjg1Y2Q2NzcwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4fFEpIc/EHG1jOe4t1MBDwkByr6LQgzPl98wmdwlHOsmS Yii4RJL+YTXrJghrFHafshQLAcNbNTqi2R+4Bf7vasYJd9YqClatEn4vF54IEt7A aYBRw3zsDklsoxGcERHU3xpCMq7gQyn7esPgAzHtSh6rQ2oVI2Rkk2dlrqWZjiNa tA6h5sOapJydEsladFIW3tdxHpPk7iKdgkiOdXzD2CH12TxSrjLXijcO6sb+RZsQ aRDFMxBjiEehdu7SFbZA2rtw0H92u0JgY7/GIaJqXA4ywv3MYzNsna0J/V/PRIEF 1fXmq1uUoBGcS5XmMn2ZWz3iUmqe6//JpM9UipqTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU36iWK1y/7i29PEInKpb0Z8UCYSQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NmMjg3OWRjLWEzYzAtNGZlOC05MWU5LTE2NDI5OWJhZDk1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8ezDANBgkqhkiG9w0BAQsFAAOCAQEAYbNxHXQs7483kYaObRdly559 iTuHkRH5fr4p6wZr3nT1gv2QRS6paCAaUevPjw5AD979ZsEe0vWeURTFGaG2VyHc hKORKqPOeYyahS8CVcNvoqYhXcy7UYPuv6kTMQ+eK07AuY7+v32TOF3/XMOywf+a HwGSgq4REqiu4Y0r3c2T7c/jf52ODVw6S8gDQjtU3qVf6QLP9wu8O2Q10s5BMuyC R2nIGSo84V4E4tFAZmb96hepMxY7O7ni1LLHxsag2xrJL/ieC0g9U2Rin0OPlSF3 Iw1ClD+w1SlQECnMD4zVBz4Zai9QuzFzaz32gD+OGBBO7MSSkIfGsFfWJ02dzA== -----END CERTIFICATE-----Generated at Sun May 3 15:33:07 2026 by rpki-client