$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfe391ad-5eeb-4700-8d7e-f9440e6f58db.roa File: cfe391ad-5eeb-4700-8d7e-f9440e6f58db.roa (raw, json) Hash identifier: tIEO+EIn2+Oh89KTkeABeV+Q5JAJHVQS2EEcD0sU58k= Subject key identifier: E2:96:2F:E2:D0:BC:14:BC:5C:C6:0A:BC:CF:B2:66:B9:B5:EC:7A:36 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1E14B32A8CB966395A71951BF2471EE6BB94D762 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfe391ad-5eeb-4700-8d7e-f9440e6f58db.roa Signing time: Tue 12 May 2026 01:00:09 +0000 ROA not before: Tue 12 May 2026 01:00:09 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffb:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:14:b3:2a:8c:b9:66:39:5a:71:95:1b:f2:47:1e:e6:bb:94:d7:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:00:09 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=4ffc7b69a8ecd2ce6bd9508d5a831a34abf63242a989d237755119e2be936b6b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7e:bd:14:b5:59:8a:41:8d:c5:c2:ed:26:05: 5e:ef:1b:60:ae:bb:9c:c7:84:f1:62:46:80:3a:4f: 42:a9:77:82:c4:15:af:b3:68:9c:84:a0:03:1d:df: b4:da:d6:cd:62:1b:ec:89:c7:1a:39:ab:8b:84:c6: 56:5e:88:da:b0:1f:55:f7:0d:8a:25:97:c7:26:b9: f6:56:01:4b:78:eb:fd:42:43:36:cf:0c:b7:84:8b: bd:c5:03:a1:c0:e5:d9:87:d8:25:64:f8:f1:84:b4: 3f:23:02:be:4b:76:d7:45:11:9f:9a:1f:e5:7f:0e: 12:37:52:ca:d0:06:b0:ce:44:69:76:c9:46:ee:15: 97:90:25:3b:e6:b9:70:78:47:58:b4:66:89:55:63: 51:2f:26:79:19:b8:e7:68:91:1f:db:22:36:27:d3: eb:88:53:46:74:c1:ee:94:d1:b1:7d:8c:cf:8b:83: 4f:48:34:68:f1:48:5a:df:a3:65:fc:79:00:f1:06: 6a:93:9c:06:0d:91:1f:3a:a2:e3:65:5d:f4:ae:3c: e7:a7:3f:eb:ac:bf:c0:9f:6b:04:f9:90:92:0c:b0: de:0b:f0:37:04:67:8f:5d:f6:0a:47:20:06:54:94: 73:6f:36:4e:85:f1:d9:54:80:cc:c6:5f:a2:c7:42: 56:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:96:2F:E2:D0:BC:14:BC:5C:C6:0A:BC:CF:B2:66:B9:B5:EC:7A:36 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfe391ad-5eeb-4700-8d7e-f9440e6f58db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:2000::/40 Signature Algorithm: sha256WithRSAEncryption 47:5d:cb:4d:1e:e6:77:3d:72:e3:bf:49:b5:ba:41:23:14:5c: 6f:61:4d:d5:b8:e5:98:ef:bb:69:27:17:14:cd:ae:26:51:95: 7f:46:a6:d2:2e:3c:aa:c7:c2:b9:33:a2:50:8d:e7:88:87:da: 0d:dc:e0:42:77:17:b7:1b:50:0f:57:f0:52:1c:3b:f6:b8:44: 73:57:10:a5:8b:02:93:3e:9b:a2:0c:55:a0:28:36:4f:1f:c3: 53:a0:26:5d:b5:7f:4b:51:e2:ff:0b:c5:e1:9d:8e:3a:ad:92: 99:5a:84:bc:e5:f1:32:a8:30:83:c0:cf:2d:63:00:50:71:a3: 4e:fe:d6:ee:74:50:da:26:59:04:21:0e:19:34:b1:a0:e0:21: d6:6f:a7:fc:0e:24:26:26:75:4a:39:37:fa:0b:44:f6:d1:c2: 97:d8:3d:18:08:9b:5a:34:15:05:46:0b:6b:75:e1:f0:e7:6d: 18:ee:7e:38:75:69:c0:13:6f:a1:b7:34:3a:c1:53:7d:13:e0: d9:c6:79:9a:32:20:e8:6b:77:a2:ef:d5:4a:4e:de:9f:87:02: 34:83:14:7b:a1:9b:44:bb:a0:0c:39:44:28:33:5c:51:0d:fa: cd:d7:8b:01:2e:38:0a:44:be:7b:86:43:c0:8e:0d:60:61:f6: 34:48:7c:24 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUHhSzKoy5ZjlacZUb8kce5ruU12IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDEwMDA5WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZmZjN2I2OWE4ZWNkMmNlNmJkOTUwOGQ1YTgzMWEzNGFi ZjYzMjQyYTk4OWQyMzc3NTUxMTllMmJlOTM2YjZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbfr0UtVmKQY3Fwu0mBV7vG2Cuu5zHhPFiRoA6T0Kpd4LE Fa+zaJyEoAMd37Ta1s1iG+yJxxo5q4uExlZeiNqwH1X3DYoll8cmufZWAUt46/1C QzbPDLeEi73FA6HA5dmH2CVk+PGEtD8jAr5LdtdFEZ+aH+V/DhI3UsrQBrDORGl2 yUbuFZeQJTvmuXB4R1i0ZolVY1EvJnkZuOdokR/bIjYn0+uIU0Z0we6U0bF9jM+L g09INGjxSFrfo2X8eQDxBmqTnAYNkR86ouNlXfSuPOenP+usv8CfawT5kJIMsN4L 8DcEZ49d9gpHIAZUlHNvNk6F8dlUgMzGX6LHQlbVAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU4pYv4tC8FLxcxgq8z7JmubXsejYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NmZTM5MWFkLTVlZWItNDcwMC04ZDdlLWY5NDQwZTZmNThkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/7IDANBgkqhkiG9w0BAQsFAAOCAQEAR13LTR7mdz1y479JtbpBIxRc b2FN1bjlmO+7aScXFM2uJlGVf0am0i48qsfCuTOiUI3niIfaDdzgQncXtxtQD1fw Uhw79rhEc1cQpYsCkz6bogxVoCg2Tx/DU6AmXbV/S1Hi/wvF4Z2OOq2SmVqEvOXx Mqgwg8DPLWMAUHGjTv7W7nRQ2iZZBCEOGTSxoOAh1m+n/A4kJiZ1Sjk3+gtE9tHC l9g9GAibWjQVBUYLa3Xh8OdtGO5+OHVpwBNvobc0OsFTfRPg2cZ5mjIg6Gt3ou/V Sk7en4cCNIMUe6GbRLugDDlEKDNcUQ36zdeLAS44CkS+e4ZDwI4NYGH2NEh8JA== -----END CERTIFICATE-----Generated at Wed May 13 07:19:53 2026 by rpki-client