$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bf782f4-80f3-4512-91df-e930588d2fb7.roa File: 0bf782f4-80f3-4512-91df-e930588d2fb7.roa (raw, json) Hash identifier: VWivDyFUANaZhmCQV0TG6Ibd4AcSTpRbVP+HDDFVFNI= Subject key identifier: A0:BE:58:27:A1:B1:59:FF:E3:E9:6E:EC:62:FF:A5:B9:9C:B3:3A:AC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3498BBF0C330569CA32CCDB3F445D9CD5B78490A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bf782f4-80f3-4512-91df-e930588d2fb7.roa Signing time: Tue 24 Feb 2026 01:11:18 +0000 ROA not before: Tue 24 Feb 2026 01:11:18 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f00:8140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:98:bb:f0:c3:30:56:9c:a3:2c:cd:b3:f4:45:d9:cd:5b:78:49:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 01:11:18 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=11794dcfb09664e1e5b4841e3b645470e4e6436c1fc534c8b755b84c87badfc2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b1:07:88:36:4f:8b:5e:09:78:26:06:57:8b: 68:65:fe:aa:f0:7f:ec:61:f2:3c:85:1b:27:04:f6: 17:e3:fa:61:80:e5:ca:6a:29:37:db:5d:30:5d:b2: 50:82:e1:e2:62:d3:a0:8c:a4:7b:1e:c3:0f:da:8a: 15:42:7b:04:ed:cd:5d:69:59:90:a4:b6:24:88:c5: 93:5c:a9:d0:56:00:13:7c:65:11:19:d0:41:64:73: b0:29:ca:04:95:db:64:59:84:3f:60:49:54:f8:dc: e6:60:22:2f:72:46:08:3c:60:69:c7:55:0b:69:63: fd:9a:5c:50:b5:15:c6:ba:3f:d6:67:48:33:52:33: 49:1e:9a:9c:6f:1f:7b:0b:4f:30:f3:e8:f6:4f:41: 8c:9a:ca:6e:a2:cc:06:e1:49:25:93:33:af:c9:cb: 0f:eb:e4:c8:26:a4:3e:fb:10:5b:18:c3:63:9d:f0: e1:92:af:28:e8:af:05:dd:ff:5f:de:86:ff:f3:59: d1:61:79:ee:f7:c0:b7:c9:fa:8e:ab:c1:c7:24:15: d4:c7:5d:6a:9c:68:97:3f:ff:f0:7a:9f:41:09:08: 98:69:dd:7c:ff:db:1e:84:f8:7a:aa:48:65:7a:8a: 3d:8b:b8:90:35:3d:fb:f2:6f:83:90:2e:ea:e4:82: 3c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BE:58:27:A1:B1:59:FF:E3:E9:6E:EC:62:FF:A5:B9:9C:B3:3A:AC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0bf782f4-80f3-4512-91df-e930588d2fb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8140::/48 Signature Algorithm: sha256WithRSAEncryption 1f:9e:02:e3:7c:1b:0c:b9:96:81:f7:6f:2d:89:41:6a:dc:77: 46:8b:f7:4c:8a:76:7f:36:a1:8c:f6:53:5e:b1:25:17:1b:b0: 72:f0:4c:b5:e6:73:83:b8:d3:c5:da:eb:ba:c4:bc:a1:dd:3b: 6b:1b:db:17:ac:ae:07:2a:8a:1a:54:96:97:35:58:c2:4c:a8: b8:a5:77:df:85:ec:02:0b:3a:a4:b3:65:31:4d:84:ee:b1:80: 62:ce:61:b5:fd:1e:9d:39:9b:dc:cd:5f:c9:e4:47:58:3f:66: 83:e8:80:cb:e1:86:ce:fc:2f:9e:91:c0:b9:3e:c3:a4:72:30: db:60:47:ec:24:04:b6:26:4a:c4:80:82:a2:9e:c7:69:fd:0e: b7:4a:86:ae:ee:12:d0:f8:59:4a:26:72:a5:a3:91:6d:54:9f: 9e:a4:d7:0e:7e:49:b6:e9:e1:03:a1:b0:1b:84:29:3e:9a:c0: 3c:07:79:65:04:f7:00:ee:aa:b9:df:cb:d8:ad:be:cd:76:68: 3e:f0:63:bc:69:49:db:66:55:af:62:6f:fb:f3:bb:17:0a:6c: 58:56:2b:96:42:4a:ff:c2:57:74:98:4a:c2:ad:0a:91:67:67: 11:f5:bb:f9:81:4b:52:93:58:60:d5:13:dc:2f:a1:c3:ae:11: 8a:23:5c:3e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNJi78MMwVpyjLM2z9EXZzVt4SQowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDExMTE4WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTc5NGRjZmIwOTY2NGUxZTViNDg0MWUzYjY0NTQ3MGU0 ZTY0MzZjMWZjNTM0YzhiNzU1Yjg0Yzg3YmFkZmMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDsQeINk+LXgl4JgZXi2hl/qrwf+xh8jyFGycE9hfj+mGA 5cpqKTfbXTBdslCC4eJi06CMpHseww/aihVCewTtzV1pWZCktiSIxZNcqdBWABN8 ZREZ0EFkc7ApygSV22RZhD9gSVT43OZgIi9yRgg8YGnHVQtpY/2aXFC1Fca6P9Zn SDNSM0kempxvH3sLTzDz6PZPQYyaym6izAbhSSWTM6/Jyw/r5MgmpD77EFsYw2Od 8OGSryjorwXd/1/ehv/zWdFhee73wLfJ+o6rwcckFdTHXWqcaJc///B6n0EJCJhp 3Xz/2x6E+HqqSGV6ij2LuJA1Pfvyb4OQLurkgjxfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUoL5YJ6GxWf/j6W7sYv+luZyzOqwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBiZjc4MmY0LTgwZjMtNDUxMi05MWRmLWU5MzA1ODhkMmZiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgUAwDQYJKoZIhvcNAQELBQADggEBAB+eAuN8Gwy5loH3by2JQWrc d0aL90yKdn82oYz2U16xJRcbsHLwTLXmc4O408Xa67rEvKHdO2sb2xesrgcqihpU lpc1WMJMqLild9+F7AILOqSzZTFNhO6xgGLOYbX9Hp05m9zNX8nkR1g/ZoPogMvh hs78L56RwLk+w6RyMNtgR+wkBLYmSsSAgqKex2n9DrdKhq7uEtD4WUomcqWjkW1U n56k1w5+Sbbp4QOhsBuEKT6awDwHeWUE9wDuqrnfy9itvs12aD7wY7xpSdtmVa9i b/vzuxcKbFhWK5ZCSv/CV3SYSsKtCpFnZxH1u/mBS1KTWGDVE9wvocOuEYojXD4= -----END CERTIFICATE-----Generated at Sun Mar 1 22:09:09 2026 by rpki-client