$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e9d1f91-84a2-4115-9586-c4eaba69c0b2.roa File: 0e9d1f91-84a2-4115-9586-c4eaba69c0b2.roa (raw, json) Hash identifier: 2b0D8Bcy2dgFyfrwElMrrbWjkDrAOu2IdjrWNSBcJNs= Subject key identifier: B6:D3:39:52:D9:0C:3E:B7:42:16:CE:7D:7E:8E:AE:E6:EE:A3:DE:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 235DC85429E296D1146C2EA0E79B51999C6561F8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e9d1f91-84a2-4115-9586-c4eaba69c0b2.roa Signing time: Wed 25 Feb 2026 00:10:13 +0000 ROA not before: Wed 25 Feb 2026 00:10:13 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f1b:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:5d:c8:54:29:e2:96:d1:14:6c:2e:a0:e7:9b:51:99:9c:65:61:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 00:10:13 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=5c57cd24c322a139d3483a775acd9ccaf8a81ad6f09ddb3b4a9f5c03fcfe968c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:15:e7:c8:0c:06:9f:66:12:87:7e:2f:57:66: 22:f8:7f:2b:4d:24:81:22:b2:ed:bc:dc:43:ba:3a: 14:0b:f2:f8:c4:9a:a3:db:3d:3a:44:ca:f6:d7:4c: c3:54:76:64:21:29:73:f4:1f:ab:a3:a6:cb:e4:53: 4d:7e:73:4a:82:98:2d:a0:4d:88:fd:43:59:14:4e: 71:4a:20:42:97:9a:61:ad:91:6a:12:4e:d4:cd:7c: 6d:78:85:88:05:b9:8d:30:18:42:20:f7:c7:df:46: fa:47:cb:6d:ff:9f:37:27:38:0d:85:49:72:fa:8f: c2:b4:db:a7:92:af:da:69:34:21:2b:7b:9e:6d:c1: 2f:c7:1c:ed:f4:7b:3f:7d:bd:04:72:13:82:41:55: 00:32:69:62:3c:20:f2:e3:28:a4:46:a3:33:c3:91: 89:b9:1b:28:9d:62:20:d9:16:b4:9b:06:2d:58:50: 23:71:89:dd:f0:ee:d3:2e:ff:be:57:fa:8d:0c:e9: 55:f5:d7:b2:d0:52:5d:97:dd:c2:2c:e0:fa:d3:ce: fc:5e:72:c3:96:b8:e7:9e:1e:fc:32:c6:02:85:4d: bd:09:e1:f3:1c:4b:3b:8f:99:88:24:cf:0d:8d:28: 37:a0:03:f0:6d:66:83:03:79:a3:19:a0:47:b2:f5: b4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D3:39:52:D9:0C:3E:B7:42:16:CE:7D:7E:8E:AE:E6:EE:A3:DE:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e9d1f91-84a2-4115-9586-c4eaba69c0b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1b:4000::/36 Signature Algorithm: sha256WithRSAEncryption 19:bf:a7:38:e9:2f:d8:55:b6:8b:93:9a:1c:c6:ef:3b:a1:45: 0e:a5:69:72:d1:8c:5f:f9:5a:1d:a7:5f:94:aa:ea:86:5a:1a: fb:15:06:9f:10:8d:bc:3c:02:45:70:01:19:c2:df:9d:48:da: 0d:5d:dc:f7:3b:93:42:5f:29:6a:36:1f:63:05:1e:3d:1f:40: 87:4b:32:c8:fc:81:be:5c:97:5e:d4:60:cb:c6:40:4a:cf:f6: 0e:34:5c:f8:fc:5c:a7:59:2c:43:11:15:ee:48:f9:96:20:75: e8:ee:a4:81:23:1e:90:00:05:4b:65:ca:d5:2b:1c:9b:4f:05: cd:b3:55:c8:96:65:63:e8:07:2e:90:41:6f:62:96:18:f5:5b: 84:d9:5a:99:81:4a:9e:57:aa:ea:98:52:d0:e8:7d:dc:21:49: 54:07:da:94:e6:b7:27:2c:8a:f8:f3:68:2e:50:b3:5a:59:ab: c6:50:01:10:32:99:4e:6c:86:71:7f:dc:1e:b3:35:1d:d7:16: 73:b8:6e:11:c3:68:61:6e:2a:60:aa:c3:29:24:4a:3c:cf:13: 83:c8:18:1f:d7:44:5b:02:55:a8:af:2e:e3:de:c2:34:92:34: cd:4e:e9:aa:55:44:1e:cb:04:f7:23:fe:fe:a8:3d:0e:83:e6: fe:99:4c:24 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUI13IVCniltEUbC6g55tRmZxlYfgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDAxMDEzWhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzU3Y2QyNGMzMjJhMTM5ZDM0ODNhNzc1YWNkOWNjYWY4 YTgxYWQ2ZjA5ZGRiM2I0YTlmNWMwM2ZjZmU5NjhjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGFefIDAafZhKHfi9XZiL4fytNJIEisu283EO6OhQL8vjE mqPbPTpEyvbXTMNUdmQhKXP0H6ujpsvkU01+c0qCmC2gTYj9Q1kUTnFKIEKXmmGt kWoSTtTNfG14hYgFuY0wGEIg98ffRvpHy23/nzcnOA2FSXL6j8K026eSr9ppNCEr e55twS/HHO30ez99vQRyE4JBVQAyaWI8IPLjKKRGozPDkYm5GyidYiDZFrSbBi1Y UCNxid3w7tMu/75X+o0M6VX117LQUl2X3cIs4PrTzvxecsOWuOeeHvwyxgKFTb0J 4fMcSzuPmYgkzw2NKDegA/BtZoMDeaMZoEey9bQLAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUttM5UtkMPrdCFs59fo6u5u6j3jswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBlOWQxZjkxLTg0YTItNDExNS05NTg2LWM0ZWFiYTY5YzBiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8bQDANBgkqhkiG9w0BAQsFAAOCAQEAGb+nOOkv2FW2i5OaHMbvO6FF DqVpctGMX/laHadflKrqhloa+xUGnxCNvDwCRXABGcLfnUjaDV3c9zuTQl8pajYf YwUePR9Ah0syyPyBvlyXXtRgy8ZASs/2DjRc+Pxcp1ksQxEV7kj5liB16O6kgSMe kAAFS2XK1Sscm08FzbNVyJZlY+gHLpBBb2KWGPVbhNlamYFKnleq6phS0Oh93CFJ VAfalOa3JyyK+PNoLlCzWlmrxlABEDKZTmyGcX/cHrM1HdcWc7huEcNoYW4qYKrD KSRKPM8Tg8gYH9dEWwJVqK8u497CNJI0zU7pqlVEHssE9yP+/qg9DoPm/plMJA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:13:13 2026 by rpki-client