$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e6500f3-a539-4d94-90c5-d0e3ca90135a.roa File: 2e6500f3-a539-4d94-90c5-d0e3ca90135a.roa (raw, json) Hash identifier: n25UOLq9xKK429cy4Fw2sP922a92zLrTdoBJFV06bF4= Subject key identifier: 31:0C:69:BD:6E:FB:C1:DE:B9:25:C7:06:F0:8D:05:68:16:09:1F:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 36CF0B2638EEE5007BC370DBE1E9B8A98D46D02A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e6500f3-a539-4d94-90c5-d0e3ca90135a.roa Signing time: Fri 08 May 2026 00:20:50 +0000 ROA not before: Fri 08 May 2026 00:20:50 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f25:c800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:cf:0b:26:38:ee:e5:00:7b:c3:70:db:e1:e9:b8:a9:8d:46:d0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 00:20:50 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=f9aa8574e7cdcf949d53a847358d3c82fe98304ffdd6e783bb666624a985f9ae, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0f:7a:7a:35:5d:87:b7:9c:3e:57:a6:20:65: ca:c3:e6:5f:e3:4b:ff:98:9c:0e:19:ee:5a:cf:cd: 47:ce:04:38:9c:2d:f5:0c:16:ba:89:30:58:da:e4: 92:53:91:3e:44:da:0f:a4:94:d4:54:50:19:fd:b5: c3:ee:8f:6c:03:09:2c:14:4a:5e:3f:8e:46:a2:ca: ec:27:dc:42:af:ce:ef:bd:88:63:53:bf:49:63:d9: 84:46:b6:45:66:c3:33:19:55:23:25:6e:37:b4:82: 4b:66:7b:1b:b9:ae:6a:8a:61:09:3b:8a:3d:6b:5b: d1:dd:b4:cd:86:57:75:75:9b:e9:1a:9f:ad:5e:93: 7c:9c:9e:34:e7:d3:2a:63:b9:d8:24:dc:f2:74:32: a1:02:46:3f:d3:25:1a:89:da:de:58:5e:58:02:7f: f0:f4:b0:c2:d9:b8:f1:c0:80:85:c7:fe:9a:fe:b1: b3:df:b4:35:2d:ec:94:02:44:bf:44:28:fb:56:42: 6d:fd:f2:e1:c0:95:17:8b:70:ed:60:16:5c:1b:8e: aa:62:55:9c:99:4b:25:a6:31:d8:e2:3d:6b:0b:6a: 72:81:bc:f7:21:fe:d8:95:8c:c5:5b:90:44:21:8f: 12:6c:6e:c7:27:a0:f2:45:20:6a:15:a3:e8:23:d1: 5f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0C:69:BD:6E:FB:C1:DE:B9:25:C7:06:F0:8D:05:68:16:09:1F:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e6500f3-a539-4d94-90c5-d0e3ca90135a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f25:c800::/37 Signature Algorithm: sha256WithRSAEncryption 6b:5b:25:30:64:53:36:09:0c:bb:94:1a:ce:b5:df:77:b5:9b: 1b:e9:3c:9a:ef:eb:66:b1:44:c1:28:0e:c0:3a:ec:49:30:72: c8:5a:2f:aa:d4:0a:5f:52:d3:af:08:e9:80:bf:cb:81:fd:c2: 4f:5a:39:1b:00:71:d8:16:d4:fd:67:9a:c1:5f:81:fd:30:74: c3:c6:e4:f5:ff:4a:0a:72:f4:68:fa:fb:e9:57:97:9e:fb:df: e7:3a:1b:bf:fa:c0:a8:0c:5e:47:91:0e:8d:52:ee:0a:fc:3f: b9:4a:ff:3f:ed:19:b3:5e:73:cf:6c:fb:df:e1:cc:bc:4d:50: 97:68:ce:ee:86:a4:6d:fc:ab:5d:e8:dd:ef:f6:80:15:23:74: 28:10:9a:ff:7a:3f:6c:b2:90:9f:25:e6:44:b4:63:2b:ba:20: d4:1c:54:e4:df:b0:3e:b1:5d:fa:d2:d9:6c:64:c9:3a:5e:28: 40:96:3b:ed:1c:eb:52:a0:32:9b:df:90:8b:d2:2d:d9:bc:09: 33:3f:2f:89:9b:3e:b1:59:86:26:66:81:c9:c5:ad:ee:7d:eb: 04:26:46:b7:be:47:a9:a0:bb:e2:d0:4d:c7:55:43:9c:ac:c1: 0f:b9:68:36:b7:57:e7:19:3e:56:40:45:ef:6e:17:6e:4f:5c: df:3f:49:b3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUNs8LJjju5QB7w3Db4em4qY1G0CowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA4MDAyMDUwWhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOWFhODU3NGU3Y2RjZjk0OWQ1M2E4NDczNThkM2M4MmZl OTgzMDRmZmRkNmU3ODNiYjY2NjYyNGE5ODVmOWFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLD3p6NV2Ht5w+V6YgZcrD5l/jS/+YnA4Z7lrPzUfOBDic LfUMFrqJMFja5JJTkT5E2g+klNRUUBn9tcPuj2wDCSwUSl4/jkaiyuwn3EKvzu+9 iGNTv0lj2YRGtkVmwzMZVSMlbje0gktmexu5rmqKYQk7ij1rW9HdtM2GV3V1m+ka n61ek3ycnjTn0ypjudgk3PJ0MqECRj/TJRqJ2t5YXlgCf/D0sMLZuPHAgIXH/pr+ sbPftDUt7JQCRL9EKPtWQm398uHAlReLcO1gFlwbjqpiVZyZSyWmMdjiPWsLanKB vPch/tiVjMVbkEQhjxJsbscnoPJFIGoVo+gj0V/fAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUMQxpvW77wd65JccG8I0FaBYJH/UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJlNjUwMGYzLWE1MzktNGQ5NC05MGM1LWQwZTNjYTkwMTM1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8lyDANBgkqhkiG9w0BAQsFAAOCAQEAa1slMGRTNgkMu5QazrXfd7Wb G+k8mu/rZrFEwSgOwDrsSTByyFovqtQKX1LTrwjpgL/Lgf3CT1o5GwBx2BbU/Wea wV+B/TB0w8bk9f9KCnL0aPr76VeXnvvf5zobv/rAqAxeR5EOjVLuCvw/uUr/P+0Z s15zz2z73+HMvE1Ql2jO7oakbfyrXejd7/aAFSN0KBCa/3o/bLKQnyXmRLRjK7og 1BxU5N+wPrFd+tLZbGTJOl4oQJY77RzrUqAym9+Qi9It2bwJMz8viZs+sVmGJmaB ycWt7n3rBCZGt75HqaC74tBNx1VDnKzBD7loNrdX5xk+VkBF724Xbk9c3z9Jsw== -----END CERTIFICATE-----Generated at Tue May 12 21:52:13 2026 by rpki-client