$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa File: 09200eb5-786c-452c-91b5-6e7b43daf2f1.roa (raw, json) Hash identifier: VjGRx+SHGL2cbKm5Fyv7zUd6TwWEF9v9K4cwPBTeczw= Subject key identifier: 83:0E:A8:AB:01:3A:8E:F9:98:41:86:DB:69:D0:00:69:85:C6:C2:4E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6846ABF3EA81507D57BFA793619EF366D441B8F9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa Signing time: Sun 08 Feb 2026 00:20:37 +0000 ROA not before: Sun 08 Feb 2026 00:20:37 +0000 ROA not after: Sat 09 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:46:ab:f3:ea:81:50:7d:57:bf:a7:93:61:9e:f3:66:d4:41:b8:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 8 00:20:37 2026 GMT Not After : May 9 23:59:59 2026 GMT Subject: serialNumber=2c7d14b3961e81cad7b8773f4b7d05156930c3fe68c4f04225001a4903ac791e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5b:75:33:69:2e:9c:1e:48:0b:18:e6:63:94: 65:88:73:6b:77:ef:11:03:5d:b2:a4:42:56:03:7a: 8a:95:ee:32:91:c0:91:63:70:12:e7:f3:f8:7a:5e: 11:35:42:c5:d4:24:5d:0e:0b:53:4d:2f:6f:aa:a8: ab:33:f9:59:3c:75:55:f4:b9:84:b0:00:6e:76:b3: 5b:32:7b:3a:34:ce:f6:a9:42:e6:95:bf:1a:ab:1b: ed:c9:a8:74:89:b0:b0:01:90:15:dd:01:21:1d:01: 0c:49:96:b1:3c:3a:8e:57:db:68:dd:27:e5:ed:6e: 9b:27:0b:1c:a7:d8:81:9b:f3:f2:25:0a:ab:ed:35: 55:47:bc:bd:09:37:9e:d3:d1:56:d8:37:08:6d:eb: 74:a6:a9:86:04:84:e6:b3:8a:1d:8f:9a:dc:24:b0: e1:ff:1e:a2:6e:37:6b:fe:04:ee:53:65:81:2b:de: f6:c9:b3:40:34:e3:8a:6d:9d:d7:57:a9:8b:67:02: 4d:79:0b:b3:35:03:d0:07:02:33:71:19:ca:6f:05: 2b:5b:02:6d:27:01:8a:83:34:7b:06:3e:7f:a8:df: c8:b2:ce:67:ea:6d:4c:6e:e1:a9:c0:a1:5e:f2:5b: ad:90:7c:35:0d:03:6b:8b:6f:12:eb:fc:ec:b1:d5: 4a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0E:A8:AB:01:3A:8E:F9:98:41:86:DB:69:D0:00:69:85:C6:C2:4E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2e::/36 Signature Algorithm: sha256WithRSAEncryption cf:bb:d9:75:67:ee:71:31:e7:da:3c:39:43:07:45:8f:93:90: 62:dc:f9:c6:75:0e:a5:26:30:be:5d:6d:22:e3:61:fe:a1:d7: 26:a0:c8:28:86:01:45:52:e8:e9:e1:c8:db:b0:af:d6:08:ca: c0:56:c8:77:50:a2:47:76:e3:dd:98:32:a6:d2:21:dc:5c:ef: 77:97:b3:51:75:18:1a:46:05:b3:e6:44:5e:54:f2:f5:e7:6d: 45:b1:52:72:a4:f8:30:58:e5:01:04:10:c2:27:9a:7d:7c:f1: a3:3b:2e:bd:2a:ca:d3:a2:06:99:6c:5f:c9:26:b9:f6:1a:9c: 5b:56:6f:87:23:cc:59:41:2d:32:96:5b:cc:c2:3d:87:4c:06: c0:fa:4f:63:e3:04:e9:40:32:55:3c:34:2d:ac:da:a4:5a:15: d4:05:d7:b1:78:13:c9:45:0a:7f:3e:58:09:52:5d:43:32:0f: 18:86:11:4e:71:25:f1:c3:08:4f:5e:39:08:05:a6:29:ff:0d: d3:74:1f:cd:c6:e2:df:98:92:d9:13:3f:df:c0:dc:6f:1c:1a: 66:41:89:46:13:9e:e2:0f:05:d4:a1:b5:55:09:ea:49:14:0c: c4:1b:bf:c7:21:bd:bd:fe:ff:d6:2f:71:c7:7d:3a:4f:da:f8: 6d:95:c0:ba -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaEar8+qBUH1Xv6eTYZ7zZtRBuPkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA4MDAyMDM3WhcNMjYwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYzdkMTRiMzk2MWU4MWNhZDdiODc3M2Y0YjdkMDUxNTY5 MzBjM2ZlNjhjNGYwNDIyNTAwMWE0OTAzYWM3OTFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBW3UzaS6cHkgLGOZjlGWIc2t37xEDXbKkQlYDeoqV7jKR wJFjcBLn8/h6XhE1QsXUJF0OC1NNL2+qqKsz+Vk8dVX0uYSwAG52s1syezo0zvap QuaVvxqrG+3JqHSJsLABkBXdASEdAQxJlrE8Oo5X22jdJ+XtbpsnCxyn2IGb8/Il CqvtNVVHvL0JN57T0VbYNwht63SmqYYEhOazih2PmtwksOH/HqJuN2v+BO5TZYEr 3vbJs0A044ptnddXqYtnAk15C7M1A9AHAjNxGcpvBStbAm0nAYqDNHsGPn+o38iy zmfqbUxu4anAoV7yW62QfDUNA2uLbxLr/Oyx1UphAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUgw6oqwE6jvmYQYbbadAAaYXGwk4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA5MjAwZWI1LTc4NmMtNDUyYy05MWI1LTZlN2I0M2RhZjJmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8uADANBgkqhkiG9w0BAQsFAAOCAQEAz7vZdWfucTHn2jw5QwdFj5OQ Ytz5xnUOpSYwvl1tIuNh/qHXJqDIKIYBRVLo6eHI27Cv1gjKwFbId1CiR3bj3Zgy ptIh3Fzvd5ezUXUYGkYFs+ZEXlTy9edtRbFScqT4MFjlAQQQwieafXzxozsuvSrK 06IGmWxfySa59hqcW1ZvhyPMWUEtMpZbzMI9h0wGwPpPY+ME6UAyVTw0LazapFoV 1AXXsXgTyUUKfz5YCVJdQzIPGIYRTnEl8cMIT145CAWmKf8N03Qfzcbi35iS2RM/ 38DcbxwaZkGJRhOe4g8F1KG1VQnqSRQMxBu/xyG9vf7/1i9xx306T9r4bZXAug== -----END CERTIFICATE-----Generated at Sun Mar 1 22:28:50 2026 by rpki-client