$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20ca9902-35f4-49bd-a3fb-c25e447e29cc.roa File: 20ca9902-35f4-49bd-a3fb-c25e447e29cc.roa (raw, json) Hash identifier: e5j+TvzM9KIBarzxNQVUfkFfZz9bIFBQxWcz7/ZlE3Y= Subject key identifier: 4F:51:CD:F0:3A:67:E3:7E:77:A1:CD:0E:A5:0F:EF:55:94:D5:BB:20 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 42BB9ABC8BACDEECBC5CE5C26CDC32A7209341E2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20ca9902-35f4-49bd-a3fb-c25e447e29cc.roa Signing time: Tue 24 Feb 2026 02:20:33 +0000 ROA not before: Tue 24 Feb 2026 02:20:33 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:6060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:bb:9a:bc:8b:ac:de:ec:bc:5c:e5:c2:6c:dc:32:a7:20:93:41:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 02:20:33 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=3fcd7c6795cd63315a157d0cb7d2906e84ab1df8182c92094036c01c2b462b8b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3a:af:26:13:6d:22:39:33:f4:18:79:a3:10: f3:48:44:34:9a:ff:97:78:c4:a4:ff:7e:4e:e3:81: 29:80:b8:07:8c:2f:08:2d:48:e2:51:be:67:03:b5: d3:50:b0:a0:23:02:8d:fb:c9:c9:24:14:e9:03:e6: 12:d8:28:1b:ed:29:fd:6b:24:69:2b:1e:4c:fd:f3: 27:de:2a:f5:46:0a:f8:be:9b:b2:e9:9b:8b:5e:bd: 3c:45:bf:73:e5:fe:37:35:74:6c:b3:10:ad:2a:1c: a6:b1:9f:dc:c4:d6:0e:f2:41:cc:12:00:21:05:40: ac:8d:a5:16:0a:02:8c:79:96:39:e2:74:be:42:d1: 81:7a:b0:2c:5b:32:6d:b9:94:1e:dc:78:0b:9e:70: 4a:c6:e7:d3:f2:79:b4:7f:fc:a3:81:8e:a4:5a:50: d1:be:6a:4a:9c:78:df:eb:0a:f5:0f:42:5d:c9:95: d5:f2:97:f8:ce:1b:49:06:80:0b:29:74:39:a3:3e: 8e:ef:b3:e2:93:27:69:5b:f9:55:6c:56:b6:83:7c: b7:7a:77:67:32:2d:bb:ba:52:6e:46:58:7c:03:ae: ec:6f:51:af:e2:9a:17:22:ff:0f:3d:46:e2:1e:ec: 40:a3:b7:7f:51:f5:73:c5:3f:1c:fc:c0:e1:4a:1e: dd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:51:CD:F0:3A:67:E3:7E:77:A1:CD:0E:A5:0F:EF:55:94:D5:BB:20 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20ca9902-35f4-49bd-a3fb-c25e447e29cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:6060::/48 Signature Algorithm: sha256WithRSAEncryption 14:be:28:1e:1b:e2:a1:28:a8:96:46:cf:93:8d:34:36:65:bb: 9b:d7:26:d9:0e:00:90:34:4a:3a:18:93:19:a6:37:f9:fe:f0: d3:19:9f:06:82:a0:fe:d4:b8:0a:e4:f9:70:be:69:17:5e:55: d8:ce:ad:25:e6:b1:72:e2:29:76:95:ce:bd:9d:0c:ac:99:5f: 7a:c4:21:68:02:a3:65:13:45:71:9b:73:71:13:80:6d:87:3b: 5a:29:75:bc:06:69:8f:32:77:3c:6f:1c:0e:bc:6a:bd:48:fb: 77:bb:3d:9a:94:1b:74:81:c9:b8:7c:b3:19:70:d3:ee:28:15: a1:10:ff:e7:e6:13:eb:cd:26:81:50:f2:2e:a0:e5:fb:18:72: 89:c1:48:e3:c6:4e:4c:12:3b:da:6e:58:44:98:a4:07:7b:68: 03:c3:25:c2:5b:fd:c9:e9:72:f2:82:d1:a8:58:9e:43:55:1b: 02:76:58:41:50:1d:e0:b0:84:99:81:0b:c1:f2:4b:9e:0c:75: 2b:64:fd:a4:4f:98:e7:f4:db:83:8b:e5:e4:9d:f0:e4:ab:c6: 00:e9:52:38:98:9e:ba:2c:1c:7e:42:78:f2:02:2a:7b:f9:cd: 62:bb:60:7d:47:90:03:6e:27:ea:46:37:92:7f:c4:e1:14:a4: cc:0a:64:dc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQruavIus3uy8XOXCbNwypyCTQeIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDIyMDMzWhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZmNkN2M2Nzk1Y2Q2MzMxNWExNTdkMGNiN2QyOTA2ZTg0 YWIxZGY4MTgyYzkyMDk0MDM2YzAxYzJiNDYyYjhiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdOq8mE20iOTP0GHmjEPNIRDSa/5d4xKT/fk7jgSmAuAeM LwgtSOJRvmcDtdNQsKAjAo37yckkFOkD5hLYKBvtKf1rJGkrHkz98yfeKvVGCvi+ m7Lpm4tevTxFv3Pl/jc1dGyzEK0qHKaxn9zE1g7yQcwSACEFQKyNpRYKAox5ljni dL5C0YF6sCxbMm25lB7ceAuecErG59PyebR//KOBjqRaUNG+akqceN/rCvUPQl3J ldXyl/jOG0kGgAspdDmjPo7vs+KTJ2lb+VVsVraDfLd6d2cyLbu6Um5GWHwDruxv Ua/imhci/w89RuIe7ECjt39R9XPFPxz8wOFKHt1jAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUT1HN8Dpn4353oc0OpQ/vVZTVuyAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIwY2E5OTAyLTM1ZjQtNDliZC1hM2ZiLWMyNWU0NDdlMjljYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AYGAwDQYJKoZIhvcNAQELBQADggEBABS+KB4b4qEoqJZGz5ONNDZl u5vXJtkOAJA0SjoYkxmmN/n+8NMZnwaCoP7UuArk+XC+aRdeVdjOrSXmsXLiKXaV zr2dDKyZX3rEIWgCo2UTRXGbc3ETgG2HO1opdbwGaY8ydzxvHA68ar1I+3e7PZqU G3SBybh8sxlw0+4oFaEQ/+fmE+vNJoFQ8i6g5fsYconBSOPGTkwSO9puWESYpAd7 aAPDJcJb/cnpcvKC0ahYnkNVGwJ2WEFQHeCwhJmBC8HyS54MdStk/aRPmOf024OL 5eSd8OSrxgDpUjiYnrosHH5CePICKnv5zWK7YH1HkANuJ+pGN5J/xOEUpMwKZNw= -----END CERTIFICATE-----Generated at Sun Mar 1 22:12:43 2026 by rpki-client