$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b89a009-e727-4373-9b2f-0630ee140cbd.roa File: 2b89a009-e727-4373-9b2f-0630ee140cbd.roa (raw, json) Hash identifier: WvrKtaInUPcDYG2EOc6W8vKGC7f9cm0HeWm1QSZZNiM= Subject key identifier: 59:CB:A2:E0:24:B1:83:BB:7C:E5:A3:5E:06:9D:61:4E:91:E7:70:1E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 71ECA067511C2F560BDAABE49B1F6CAED79D4DF3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b89a009-e727-4373-9b2f-0630ee140cbd.roa Signing time: Mon 04 May 2026 01:30:07 +0000 ROA not before: Mon 04 May 2026 01:30:07 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f70:ec00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ec:a0:67:51:1c:2f:56:0b:da:ab:e4:9b:1f:6c:ae:d7:9d:4d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 01:30:07 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=c8e706bdb2822e2fd3312a3e151d402ce73687d6aa7c1d31e56335ae422aaba6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a7:f3:31:c8:fa:c3:ba:c6:ff:a8:e5:21:67: f6:6a:08:d4:e8:2f:ea:01:40:dc:65:50:ee:d8:de: b8:c1:aa:43:83:3c:61:57:6c:15:aa:ff:75:fa:cc: 96:1a:ae:c3:93:59:3e:b5:2b:33:2c:fe:20:ce:0b: 49:f9:0f:64:04:3e:4b:f1:1f:63:8e:4d:8a:58:60: 87:a7:22:4b:74:9e:aa:8e:af:09:aa:ca:45:42:bf: 81:25:c1:4c:30:b2:32:63:67:04:15:ea:ba:ea:81: 1d:4a:02:d4:f8:31:3b:27:35:4b:e6:88:d5:12:dc: 32:4e:e8:6a:60:58:5d:c0:ef:3c:0f:06:e3:29:d8: 7a:7f:b8:48:69:da:c7:af:63:67:59:41:f1:95:9a: bb:d4:27:3b:7a:d6:2a:8e:9d:ba:db:22:74:54:cc: 42:9b:ef:ef:d6:97:dc:e4:9d:c1:45:41:fe:15:07: 6d:f2:40:62:39:ef:9f:49:7b:d7:0c:23:3d:1c:da: 41:c9:7c:ef:da:21:ec:3a:06:d6:0d:f5:9e:84:43: d0:0e:40:d0:85:10:f6:08:e1:20:c3:ca:4b:8d:64: 4e:d8:67:fc:c2:8a:5f:d8:f2:9e:c2:d9:f0:c5:4d: cf:ea:8e:a9:eb:2f:c7:e2:92:7f:15:aa:ca:a4:af: 90:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CB:A2:E0:24:B1:83:BB:7C:E5:A3:5E:06:9D:61:4E:91:E7:70:1E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b89a009-e727-4373-9b2f-0630ee140cbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f70:ec00::/40 Signature Algorithm: sha256WithRSAEncryption 3e:06:fc:5c:1d:cc:a9:3e:c6:b3:cc:cf:79:fb:f8:aa:96:d1: ef:91:5d:60:a7:39:b7:bb:01:6b:61:7a:fd:2c:14:20:d5:ba: 31:e1:3d:51:2e:67:8e:01:40:f1:95:7c:c0:7c:8c:55:9c:ba: 28:c1:fb:1b:e0:c2:51:e6:94:fd:3b:5d:37:61:d7:89:2d:c5: 8c:73:76:61:5b:4b:85:a1:26:5b:ee:5a:9c:12:ba:26:bc:dc: 6e:38:ad:78:31:9b:a9:1a:41:c2:a3:3a:2b:08:0a:3a:a5:23: 6d:7e:3d:81:97:5d:bf:da:f4:d2:30:51:ab:30:d3:b0:9a:f9: b4:4e:98:c0:a7:ad:39:41:0f:a4:3c:df:5e:43:41:10:ff:7b: 44:20:81:19:2c:7e:60:1d:96:d5:8a:95:ad:bc:e0:dd:89:ee: 6d:b9:7d:10:46:05:b1:2d:69:d7:62:46:06:74:6e:2d:41:83: 3d:46:7d:b2:59:72:07:13:e9:95:ee:4e:48:84:bd:84:6c:10: 2b:5c:e7:2b:f3:a3:24:46:3e:68:a9:c8:3b:53:b4:e3:57:ac: 9b:94:53:93:57:71:fe:06:d1:5a:88:79:7f:11:43:c5:bd:25: f3:0d:f1:db:e6:f5:f1:e4:93:96:e4:7d:5c:8b:63:b7:fa:f7: 59:d2:1e:c8 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUceygZ1EcL1YL2qvkmx9srtedTfMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDEzMDA3WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOGU3MDZiZGIyODIyZTJmZDMzMTJhM2UxNTFkNDAyY2U3 MzY4N2Q2YWE3YzFkMzFlNTYzMzVhZTQyMmFhYmE2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCip/MxyPrDusb/qOUhZ/ZqCNToL+oBQNxlUO7Y3rjBqkOD PGFXbBWq/3X6zJYarsOTWT61KzMs/iDOC0n5D2QEPkvxH2OOTYpYYIenIkt0nqqO rwmqykVCv4ElwUwwsjJjZwQV6rrqgR1KAtT4MTsnNUvmiNUS3DJO6GpgWF3A7zwP BuMp2Hp/uEhp2sevY2dZQfGVmrvUJzt61iqOnbrbInRUzEKb7+/Wl9zkncFFQf4V B23yQGI5759Je9cMIz0c2kHJfO/aIew6BtYN9Z6EQ9AOQNCFEPYI4SDDykuNZE7Y Z/zCil/Y8p7C2fDFTc/qjqnrL8fikn8Vqsqkr5CjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUWcui4CSxg7t85aNeBp1hTpHncB4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiODlhMDA5LWU3MjctNDM3My05YjJmLTA2MzBlZTE0MGNiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9w7DANBgkqhkiG9w0BAQsFAAOCAQEAPgb8XB3MqT7Gs8zPefv4qpbR 75FdYKc5t7sBa2F6/SwUINW6MeE9US5njgFA8ZV8wHyMVZy6KMH7G+DCUeaU/Ttd N2HXiS3FjHN2YVtLhaEmW+5anBK6JrzcbjiteDGbqRpBwqM6KwgKOqUjbX49gZdd v9r00jBRqzDTsJr5tE6YwKetOUEPpDzfXkNBEP97RCCBGSx+YB2W1YqVrbzg3Ynu bbl9EEYFsS1p12JGBnRuLUGDPUZ9sllyBxPple5OSIS9hGwQK1znK/OjJEY+aKnI O1O041esm5RTk1dx/gbRWoh5fxFDxb0l8w3x2+b18eSTluR9XItjt/r3WdIeyA== -----END CERTIFICATE-----Generated at Tue May 12 21:40:07 2026 by rpki-client