$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18aafe86-d89b-4759-996d-3d39fd786463.roa File: 18aafe86-d89b-4759-996d-3d39fd786463.roa (raw, json) Hash identifier: /S45jEkBphm250jgMRKRWE/DiTKcqFSl2mRbrDnJAeI= Subject key identifier: 4D:CB:8F:E8:82:76:C6:B2:F0:FE:9E:80:AA:46:BF:F6:4B:E0:FD:2E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 534A3CA5024AAA69A589FC5FC9806EC85035AA8C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18aafe86-d89b-4759-996d-3d39fd786463.roa Signing time: Tue 24 Feb 2026 01:00:14 +0000 ROA not before: Tue 24 Feb 2026 01:00:14 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 7224 IP address blocks: 2600:1ffd:1fff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:4a:3c:a5:02:4a:aa:69:a5:89:fc:5f:c9:80:6e:c8:50:35:aa:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 01:00:14 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=266a9513f2c2398ea6ed97f8dc62c18edb4de315f6b36323d7234fec6e3da538, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b3:7e:ca:7e:99:80:ef:87:90:4a:52:e9:82: 62:fd:35:48:7c:fe:6e:57:54:1b:63:06:16:dc:94: 16:87:d2:a3:99:8a:69:d1:df:88:fb:47:a2:37:f1: f7:12:8a:44:09:12:fd:07:08:4b:12:78:33:b3:9b: 04:cc:d4:4b:4d:18:4d:25:50:c3:a0:77:9f:29:eb: 05:93:a1:b6:6d:f0:63:e6:41:65:4c:f4:77:5e:c9: c0:1d:19:7c:0e:5e:31:7d:c3:5c:1e:1f:a1:ce:44: 0b:a6:a1:74:96:0f:8c:18:bf:7e:f4:a5:4c:d6:e8: fb:af:c8:46:76:4c:95:7c:96:d3:d6:91:eb:13:f6: de:f5:03:a4:ef:00:ae:c7:9f:4c:0f:74:b3:49:d1: 7d:53:9c:84:65:d7:9c:6f:92:50:b0:be:90:20:47: 04:14:7a:74:6d:75:01:ae:50:0f:8a:55:49:50:a1: 07:43:70:72:8f:61:96:01:23:56:4e:45:69:d2:0c: 43:0a:21:a5:4b:c7:0c:f0:1c:dd:31:71:7c:d2:f3: 47:82:15:15:cf:bf:1c:51:cc:ae:21:c3:5c:ea:29: 20:30:46:85:f8:71:e7:91:73:1c:7a:fd:6b:20:55: 12:03:a2:21:09:d7:74:9f:33:d0:28:ee:ca:96:b2: 5f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CB:8F:E8:82:76:C6:B2:F0:FE:9E:80:AA:46:BF:F6:4B:E0:FD:2E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18aafe86-d89b-4759-996d-3d39fd786463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:1fff::/48 Signature Algorithm: sha256WithRSAEncryption ae:d9:79:54:fb:b2:5d:4c:de:b6:e8:08:59:89:9f:22:1b:f9: e5:c3:0c:7e:dd:46:13:c4:3b:bb:03:2a:91:9e:cb:ab:f1:b0: b7:e6:ce:05:80:c7:a0:be:95:50:af:93:32:1c:e1:67:02:15: e8:e4:d6:24:d8:30:f4:66:a8:40:70:f6:43:2b:36:a2:a7:fe: a0:34:55:75:3b:eb:3c:5e:88:d3:44:a1:02:f6:8c:8b:e8:56: 02:1d:ba:59:5e:e6:40:3b:e4:6f:73:df:12:2b:ba:60:c7:77: 02:e5:c7:7e:53:ee:aa:7d:fd:29:cc:69:e1:d2:f7:7b:24:61: 0d:6e:02:43:c7:65:53:2e:19:e9:f9:10:ac:0c:88:9a:78:e4: 8f:45:a9:96:51:d0:aa:50:50:fa:14:07:86:f3:87:36:8d:e3: 0c:e3:a2:dd:6d:7f:93:51:57:1c:e4:a3:5f:69:28:37:26:2a: 72:e2:45:ca:13:a7:7b:8d:12:55:ea:d3:50:72:15:0e:a0:14: ab:4a:2d:f6:b5:2b:71:e8:ce:06:f7:7b:12:a5:7f:60:c3:21: 97:41:a4:d8:0a:81:a3:c0:7a:04:e4:59:15:a9:df:ab:f0:90: 1d:85:de:4e:41:89:d1:e4:68:60:7a:96:4f:b6:bd:42:29:a1: 37:71:13:d1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUU0o8pQJKqmmlifxfyYBuyFA1qowwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDEwMDE0WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNjZhOTUxM2YyYzIzOThlYTZlZDk3ZjhkYzYyYzE4ZWRi NGRlMzE1ZjZiMzYzMjNkNzIzNGZlYzZlM2RhNTM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxs37KfpmA74eQSlLpgmL9NUh8/m5XVBtjBhbclBaH0qOZ imnR34j7R6I38fcSikQJEv0HCEsSeDOzmwTM1EtNGE0lUMOgd58p6wWTobZt8GPm QWVM9HdeycAdGXwOXjF9w1weH6HORAumoXSWD4wYv370pUzW6PuvyEZ2TJV8ltPW kesT9t71A6TvAK7Hn0wPdLNJ0X1TnIRl15xvklCwvpAgRwQUenRtdQGuUA+KVUlQ oQdDcHKPYZYBI1ZORWnSDEMKIaVLxwzwHN0xcXzS80eCFRXPvxxRzK4hw1zqKSAw RoX4ceeRcxx6/WsgVRIDoiEJ13SfM9Ao7sqWsl8nAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTcuP6IJ2xrLw/p6Aqka/9kvg/S4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE4YWFmZTg2LWQ4OWItNDc1OS05OTZkLTNkMzlmZDc4NjQ2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9H/8wDQYJKoZIhvcNAQELBQADggEBAK7ZeVT7sl1M3rboCFmJnyIb +eXDDH7dRhPEO7sDKpGey6vxsLfmzgWAx6C+lVCvkzIc4WcCFejk1iTYMPRmqEBw 9kMrNqKn/qA0VXU76zxeiNNEoQL2jIvoVgIdulle5kA75G9z3xIrumDHdwLlx35T 7qp9/SnMaeHS93skYQ1uAkPHZVMuGen5EKwMiJp45I9FqZZR0KpQUPoUB4bzhzaN 4wzjot1tf5NRVxzko19pKDcmKnLiRcoTp3uNElXq01ByFQ6gFKtKLfa1K3Hozgb3 exKlf2DDIZdBpNgKgaPAegTkWRWp36vwkB2F3k5BidHkaGB6lk+2vUIpoTdxE9E= -----END CERTIFICATE-----Generated at Mon Mar 2 05:41:23 2026 by rpki-client