$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/191e7ed1-19d9-4097-bbc5-875240f55a22.roa File: 191e7ed1-19d9-4097-bbc5-875240f55a22.roa (raw, json) Hash identifier: c3xqMnV4dEcQ1xA2F/yy7Z4INiAVxLl5zFQktqVdy9M= Subject key identifier: 7F:49:B4:F5:5B:BE:25:AC:C8:59:8A:8F:33:98:6C:25:2B:96:C0:F6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7CE063D03B9DB41E194246E17F8DC4943FFAD7CD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/191e7ed1-19d9-4097-bbc5-875240f55a22.roa Signing time: Wed 11 Feb 2026 00:51:23 +0000 ROA not before: Wed 11 Feb 2026 00:51:23 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff3:a440::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e0:63:d0:3b:9d:b4:1e:19:42:46:e1:7f:8d:c4:94:3f:fa:d7:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 11 00:51:23 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=36ecbb1ae4e49654f6900721002fb889ac8f633144e3629227b453b194d0a744, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0b:bf:78:91:25:94:ed:82:b3:d0:73:16:83: 51:3b:86:7d:91:49:a7:b5:bd:d0:84:58:7d:fd:eb: 55:c3:91:91:56:be:49:cb:1b:6d:67:37:b9:83:28: e7:12:65:15:95:02:df:17:29:a3:10:36:da:cc:fd: 4b:41:c2:8c:73:bd:a2:2a:59:fd:56:87:28:ca:5e: 41:7d:c6:66:79:07:f1:14:db:6a:c4:04:4a:4c:f1: bd:3a:33:8d:b5:5e:c6:7c:a2:78:55:a2:1a:e4:c9: 19:15:05:94:50:11:30:b6:75:1f:cd:0b:d7:e0:56: fe:04:b3:8c:33:d2:63:d1:55:a5:4b:e9:47:6e:2d: cc:c7:d7:d9:43:b9:3f:36:04:b7:2a:e4:d5:56:19: 50:0a:cd:ea:78:b9:02:66:cd:06:d0:9d:4e:eb:2f: a7:1a:29:38:60:a2:01:20:6b:f5:2b:52:65:65:29: e3:86:56:08:b3:ac:0d:61:64:a4:f8:f5:e9:5f:f6: 74:4b:6c:6d:06:07:44:07:d2:62:78:b7:81:5e:39: 82:e5:38:dd:a6:14:84:9b:7c:e7:fe:9c:80:c6:2b: 8a:26:25:a6:ea:ef:ca:9c:76:15:0b:bd:0d:e5:dc: 60:5c:35:4e:17:80:12:2d:cd:65:41:f8:39:3b:fc: 7b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:49:B4:F5:5B:BE:25:AC:C8:59:8A:8F:33:98:6C:25:2B:96:C0:F6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/191e7ed1-19d9-4097-bbc5-875240f55a22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:a440::/46 Signature Algorithm: sha256WithRSAEncryption 71:91:a3:97:34:af:1f:54:93:2e:47:10:dc:92:c3:3a:11:94: e4:11:26:b6:53:c9:34:30:a9:24:bd:c9:9a:05:03:b9:56:0d: a7:c4:6b:29:d7:aa:f4:5e:5f:81:4c:8e:e8:d3:48:75:ce:eb: ac:c4:39:ad:13:15:6b:51:41:0f:b9:cc:f1:32:71:a2:e2:47: e7:ac:6a:9c:79:c0:5a:2d:73:bb:40:3d:12:c0:ec:59:50:48: 93:65:4f:e4:1c:f5:78:e5:33:8f:1b:71:ca:7e:29:1f:9d:1e: a1:7b:d0:1e:02:b3:37:17:9f:33:53:e4:04:da:29:43:07:5f: 43:a6:1a:cb:3f:28:79:81:70:03:87:f3:93:43:d8:88:15:49: 6b:c8:f7:af:5e:5c:67:ce:1a:c7:24:68:13:e1:2c:ce:de:5c: fe:52:0d:92:0c:b6:9f:db:ae:7a:c9:e7:e3:b5:1f:14:fd:5c: 69:7b:1f:54:82:65:85:e5:6f:fd:e7:a4:90:ef:1c:79:73:45: d6:92:d0:46:b1:2c:cd:ac:71:48:6e:67:f3:80:de:98:70:33: 0e:8c:c0:84:90:0f:f0:78:98:f6:47:0e:b6:b7:0a:f9:ed:3f: a5:06:28:96:f7:3a:39:22:49:de:7e:e4:9c:6a:a5:7e:50:41: 82:bf:52:fd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfOBj0DudtB4ZQkbhf43ElD/6180wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjExMDA1MTIzWhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNmVjYmIxYWU0ZTQ5NjU0ZjY5MDA3MjEwMDJmYjg4OWFj OGY2MzMxNDRlMzYyOTIyN2I0NTNiMTk0ZDBhNzQ0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrC794kSWU7YKz0HMWg1E7hn2RSae1vdCEWH3961XDkZFW vknLG21nN7mDKOcSZRWVAt8XKaMQNtrM/UtBwoxzvaIqWf1WhyjKXkF9xmZ5B/EU 22rEBEpM8b06M421XsZ8onhVohrkyRkVBZRQETC2dR/NC9fgVv4Es4wz0mPRVaVL 6UduLczH19lDuT82BLcq5NVWGVAKzep4uQJmzQbQnU7rL6caKThgogEga/UrUmVl KeOGVgizrA1hZKT49elf9nRLbG0GB0QH0mJ4t4FeOYLlON2mFISbfOf+nIDGK4om Jabq78qcdhULvQ3l3GBcNU4XgBItzWVB+Dk7/HsHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUf0m09Vu+JazIWYqPM5hsJSuWwPYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE5MWU3ZWQxLTE5ZDktNDA5Ny1iYmM1LTg3NTI0MGY1NWEyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/zpEAwDQYJKoZIhvcNAQELBQADggEBAHGRo5c0rx9Uky5HENySwzoR lOQRJrZTyTQwqSS9yZoFA7lWDafEaynXqvReX4FMjujTSHXO66zEOa0TFWtRQQ+5 zPEycaLiR+esapx5wFotc7tAPRLA7FlQSJNlT+Qc9XjlM48bccp+KR+dHqF70B4C szcXnzNT5ATaKUMHX0OmGss/KHmBcAOH85ND2IgVSWvI969eXGfOGsckaBPhLM7e XP5SDZIMtp/brnrJ5+O1HxT9XGl7H1SCZYXlb/3npJDvHHlzRdaS0EaxLM2scUhu Z/OA3phwMw6MwISQD/B4mPZHDra3CvntP6UGKJb3OjkiSd5+5JxqpX5QQYK/Uv0= -----END CERTIFICATE-----Generated at Mon Mar 2 06:35:53 2026 by rpki-client