$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05df2a26-ba8a-4f23-818b-e03f3af060b8.roa File: 05df2a26-ba8a-4f23-818b-e03f3af060b8.roa (raw, json) Hash identifier: hVol/wUSn8vJtGLZrRaXdwRQExAGXaJfynF5hGo2+2M= Subject key identifier: AC:FA:C1:6B:61:25:AE:F8:12:72:BD:0F:7A:79:9A:CD:0E:DC:31:B0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0D668C619280D1C7BF640138BD469EDDF2EEE0E3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05df2a26-ba8a-4f23-818b-e03f3af060b8.roa Signing time: Wed 25 Feb 2026 02:00:06 +0000 ROA not before: Wed 25 Feb 2026 02:00:06 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:3400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:66:8c:61:92:80:d1:c7:bf:64:01:38:bd:46:9e:dd:f2:ee:e0:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 02:00:06 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=9c31943a224e38304c2db77b89b771203495a8d47d9543289f26844696b37b2c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cf:70:a6:29:ab:82:bc:ba:74:96:5e:02:25: 04:bb:55:fd:1f:2c:99:bd:a5:84:05:18:71:2a:9c: 2a:f1:e1:b8:54:39:d9:f6:0f:b6:3f:64:23:ce:ab: df:40:5d:13:91:c4:90:73:a2:e7:41:ff:e2:13:f0: d9:26:d2:2e:ef:fc:ba:7d:df:d7:31:3c:f8:1d:e8: 1d:a7:83:ec:11:69:c4:5b:67:e8:7d:9f:a2:84:1f: 46:2d:aa:4f:02:d3:d5:98:17:5e:58:3b:5f:4f:db: 33:e6:45:93:3a:16:bf:48:82:c4:29:56:96:38:9f: ac:83:5d:24:ce:bc:ed:e7:66:6f:5a:aa:d6:ee:4f: 0a:28:1c:6e:56:d1:67:2e:1c:38:e8:aa:3d:2d:54: 9b:72:4b:5a:ae:86:14:96:91:d9:75:20:62:a4:4e: 24:79:f2:98:e6:4f:7b:91:e9:c5:65:84:35:34:69: 25:70:91:a9:54:4c:55:50:65:46:0f:5f:c9:d3:68: e4:ea:02:22:38:98:2c:b4:c2:d5:da:93:7f:88:a2: 1f:94:ec:9b:aa:bf:64:1d:73:79:7b:81:45:e8:ab: 89:65:69:46:ae:8f:f0:10:54:16:74:2a:7c:00:95: d5:ae:e6:88:4a:c6:9c:5b:07:98:e4:b4:97:5a:8d: 90:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FA:C1:6B:61:25:AE:F8:12:72:BD:0F:7A:79:9A:CD:0E:DC:31:B0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05df2a26-ba8a-4f23-818b-e03f3af060b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:3400::/40 Signature Algorithm: sha256WithRSAEncryption d6:bc:25:34:8f:bc:18:e6:dd:4b:38:9d:9d:cb:b6:98:51:5e: 82:29:19:63:b0:de:a2:d3:79:ca:75:29:73:82:74:12:8d:5d: 44:bd:dd:0b:8d:31:a6:18:66:71:04:da:e0:ca:c9:c1:6e:dc: 0e:7d:f9:d3:ce:6b:da:ec:8e:72:cd:d0:b6:d8:b0:a3:42:dc: 6a:40:10:62:a5:3d:99:32:3c:66:a4:9a:df:be:16:7c:7f:01: 1f:01:aa:75:83:a7:07:88:e8:ee:ea:ee:1d:76:c0:16:ea:76: 85:f8:39:8f:d5:9e:76:5d:a8:a1:b6:a5:b8:6b:dc:8d:19:ce: ae:ba:d2:78:08:c3:bb:e5:dd:5f:33:5b:9e:af:1f:f6:7e:ac: aa:ee:31:be:f6:74:5a:58:7e:47:ce:45:5e:8e:68:29:83:21: 9b:a5:a0:76:e0:c7:2b:d2:da:2c:37:29:a6:f6:1e:95:63:27: ea:8a:22:d5:35:e4:b6:1a:b2:a6:91:08:e3:ab:b5:a0:d1:43: c2:5f:a7:52:f7:e9:3b:e8:76:92:8a:6c:64:99:72:0d:52:65: 71:e5:80:cf:40:d5:0b:66:42:a4:fb:aa:ea:5b:39:c1:6a:ba: e3:80:1c:35:5a:c7:b4:8d:95:b0:03:ef:91:b5:33:0d:36:56: 98:f2:9e:a1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUDWaMYZKA0ce/ZAE4vUae3fLu4OMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDIwMDA2WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YzMxOTQzYTIyNGUzODMwNGMyZGI3N2I4OWI3NzEyMDM0 OTVhOGQ0N2Q5NTQzMjg5ZjI2ODQ0Njk2YjM3YjJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFz3CmKauCvLp0ll4CJQS7Vf0fLJm9pYQFGHEqnCrx4bhU Odn2D7Y/ZCPOq99AXRORxJBzoudB/+IT8Nkm0i7v/Lp939cxPPgd6B2ng+wRacRb Z+h9n6KEH0Ytqk8C09WYF15YO19P2zPmRZM6Fr9IgsQpVpY4n6yDXSTOvO3nZm9a qtbuTwooHG5W0WcuHDjoqj0tVJtyS1quhhSWkdl1IGKkTiR58pjmT3uR6cVlhDU0 aSVwkalUTFVQZUYPX8nTaOTqAiI4mCy0wtXak3+Ioh+U7Juqv2Qdc3l7gUXoq4ll aUauj/AQVBZ0KnwAldWu5ohKxpxbB5jktJdajZDbAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUrPrBa2ElrvgScr0PenmazQ7cMbAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA1ZGYyYTI2LWJhOGEtNGYyMy04MThiLWUwM2YzYWYwNjBiOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/yNDANBgkqhkiG9w0BAQsFAAOCAQEA1rwlNI+8GObdSzidncu2mFFe gikZY7DeotN5ynUpc4J0Eo1dRL3dC40xphhmcQTa4MrJwW7cDn35085r2uyOcs3Q ttiwo0LcakAQYqU9mTI8ZqSa374WfH8BHwGqdYOnB4jo7uruHXbAFup2hfg5j9We dl2oobaluGvcjRnOrrrSeAjDu+XdXzNbnq8f9n6squ4xvvZ0Wlh+R85FXo5oKYMh m6WgduDHK9LaLDcppvYelWMn6ooi1TXkthqyppEI46u1oNFDwl+nUvfpO+h2kops ZJlyDVJlceWAz0DVC2ZCpPuq6ls5wWq644AcNVrHtI2VsAPvkbUzDTZWmPKeoQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:09:09 2026 by rpki-client