$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/138a7d63-0213-4c9e-9cce-a87b8eb4558f.roa File: 138a7d63-0213-4c9e-9cce-a87b8eb4558f.roa (raw, json) Hash identifier: AnwvThUWyxKLmec8lQTbblQvT2cP3IY64zj/BX/SZkY= Subject key identifier: A4:3C:D7:59:3A:7A:6B:62:72:69:96:62:2E:9A:6D:6B:A5:1A:71:82 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6A6C6DFC646C4A2089A283217781326B98DB9571 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/138a7d63-0213-4c9e-9cce-a87b8eb4558f.roa Signing time: Tue 10 Feb 2026 01:01:18 +0000 ROA not before: Tue 10 Feb 2026 01:01:18 +0000 ROA not after: Mon 11 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:8492::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:6c:6d:fc:64:6c:4a:20:89:a2:83:21:77:81:32:6b:98:db:95:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 10 01:01:18 2026 GMT Not After : May 11 23:59:59 2026 GMT Subject: serialNumber=ddec639ed6b02a689980ecdc1aa9e82abe47764fa06aae5517ce71b2c83bd797, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a0:03:7e:ef:bf:65:4e:15:bd:1a:f5:21:9c: 39:b2:31:8c:b1:c9:f5:10:e3:f8:0d:6a:e4:04:1e: 1d:f1:cf:d1:6a:cc:86:97:d0:e0:3a:52:8f:dc:f4: ee:dc:dd:65:5f:ed:01:86:6f:7c:51:3a:b1:e0:4a: 72:cb:b7:a5:a9:da:3f:aa:3d:f5:ba:6e:85:16:77: f1:0b:57:95:2a:94:c4:8c:b3:24:f2:25:be:79:c3: 5f:1a:39:8d:bf:eb:66:0a:60:c9:30:40:5a:9e:ad: d1:a8:79:86:c5:bb:df:f0:68:90:83:25:a4:de:0a: ae:6c:f5:fa:38:4f:08:95:62:cf:b5:09:6c:cc:ac: e2:62:82:30:ad:f2:3a:c5:64:09:2e:d2:b4:d3:b2: 67:a0:93:73:b4:5e:f6:eb:11:b5:eb:97:2a:c3:89: 6f:44:cf:da:c8:73:99:ad:93:a3:9a:ab:81:94:e8: 67:b5:82:ed:61:48:53:63:eb:99:01:b9:e7:36:23: ee:c4:07:e0:58:10:78:95:d2:62:cd:a7:2c:a1:99: 76:3c:c2:fe:01:87:97:dd:17:5f:cf:c0:6b:54:2c: 2b:ce:92:d6:62:82:57:0e:5d:79:bf:7a:c4:4d:26: d8:aa:93:8e:76:47:c7:68:36:e2:67:ec:31:8f:59: 00:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3C:D7:59:3A:7A:6B:62:72:69:96:62:2E:9A:6D:6B:A5:1A:71:82 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/138a7d63-0213-4c9e-9cce-a87b8eb4558f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:8492::/48 Signature Algorithm: sha256WithRSAEncryption 93:da:e8:7b:e9:53:cb:be:e5:3d:e9:08:73:7a:02:2a:f1:09: f5:6a:c2:81:0e:69:46:b5:37:c6:0b:1d:4a:33:81:df:69:8e: 5f:c3:d0:2a:56:56:94:cc:0f:f8:92:55:b9:be:77:7e:5a:53: 7a:99:b9:bd:02:6f:5c:1e:2b:c7:51:55:53:ea:b1:c3:6b:44: e8:09:b9:80:6a:11:7b:1d:b4:9c:dd:f8:bb:50:0f:ec:8b:10: e3:60:de:4d:26:91:93:53:19:3b:4b:05:02:d3:9e:54:5b:97: b5:5c:c2:08:8e:06:ed:9a:b7:4a:c5:96:0a:81:09:f4:57:2d: 90:99:e3:30:ca:2f:b3:f6:7f:41:2a:bd:94:29:45:b4:fc:27: 56:fa:6b:c0:68:67:99:39:98:4d:c7:ce:7c:dd:c6:30:08:d6: 1f:5a:88:3f:85:8e:58:94:9e:83:f8:da:79:f5:09:14:e4:97: d5:4b:7e:94:ee:6c:18:62:70:40:1a:bd:8f:6d:d9:6d:1c:a7: bf:0b:46:a8:40:a8:a2:63:ad:a5:48:d0:42:76:31:0d:2d:c5: cb:ef:87:95:2a:00:90:1a:1a:3e:09:22:70:9d:99:68:ef:8d: 6e:e4:ac:1d:56:35:f5:f8:da:a5:36:a1:28:88:9d:23:e1:d0: 45:cc:68:80 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUamxt/GRsSiCJooMhd4Eya5jblXEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDEwMTE4WhcNMjYwNTExMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGVjNjM5ZWQ2YjAyYTY4OTk4MGVjZGMxYWE5ZTgyYWJl NDc3NjRmYTA2YWFlNTUxN2NlNzFiMmM4M2JkNzk3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsoAN+779lThW9GvUhnDmyMYyxyfUQ4/gNauQEHh3xz9Fq zIaX0OA6Uo/c9O7c3WVf7QGGb3xROrHgSnLLt6Wp2j+qPfW6boUWd/ELV5UqlMSM syTyJb55w18aOY2/62YKYMkwQFqerdGoeYbFu9/waJCDJaTeCq5s9fo4TwiVYs+1 CWzMrOJigjCt8jrFZAku0rTTsmegk3O0XvbrEbXrlyrDiW9Ez9rIc5mtk6Oaq4GU 6Ge1gu1hSFNj65kBuec2I+7EB+BYEHiV0mLNpyyhmXY8wv4Bh5fdF1/PwGtULCvO ktZiglcOXXm/esRNJtiqk452R8doNuJn7DGPWQDpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpDzXWTp6a2JyaZZiLppta6UacYIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEzOGE3ZDYzLTAyMTMtNGM5ZS05Y2NlLWE4N2I4ZWI0NTU4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9hJIwDQYJKoZIhvcNAQELBQADggEBAJPa6HvpU8u+5T3pCHN6Airx CfVqwoEOaUa1N8YLHUozgd9pjl/D0CpWVpTMD/iSVbm+d35aU3qZub0Cb1weK8dR VVPqscNrROgJuYBqEXsdtJzd+LtQD+yLEONg3k0mkZNTGTtLBQLTnlRbl7VcwgiO Bu2at0rFlgqBCfRXLZCZ4zDKL7P2f0EqvZQpRbT8J1b6a8BoZ5k5mE3HznzdxjAI 1h9aiD+FjliUnoP42nn1CRTkl9VLfpTubBhicEAavY9t2W0cp78LRqhAqKJjraVI 0EJ2MQ0txcvvh5UqAJAaGj4JInCdmWjvjW7krB1WNfX42qU2oSiInSPh0EXMaIA= -----END CERTIFICATE-----Generated at Mon Mar 2 01:57:44 2026 by rpki-client