$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22478e61-69b1-43c8-9d97-aedb4afd8d04.roa File: 22478e61-69b1-43c8-9d97-aedb4afd8d04.roa (raw, json) Hash identifier: QjdjVyjcUhwfl0QPq+OOzpQl1MGi88doSf4rsLf9F/4= Subject key identifier: E3:BD:E8:9D:E4:8B:22:EB:A5:DD:18:D9:EF:E8:60:7D:C0:10:CB:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D213C17CAC5ED42053CAAEB9DD69D3C79D7408B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22478e61-69b1-43c8-9d97-aedb4afd8d04.roa Signing time: Wed 25 Feb 2026 02:20:41 +0000 ROA not before: Wed 25 Feb 2026 02:20:41 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f11:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:21:3c:17:ca:c5:ed:42:05:3c:aa:eb:9d:d6:9d:3c:79:d7:40:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 02:20:41 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=c5b8084780f822a3e56f7d0bf2434e4a0534f175c5138eb4709ccbd7a62a0566, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:90:fd:cf:a1:65:93:b1:f8:21:c4:e3:9b:bb: df:03:fe:62:ad:9c:80:c5:54:bb:93:86:e7:89:05: cf:3c:b3:ea:4d:0c:2e:88:3e:37:f0:6d:d7:4f:e0: 14:d9:6f:38:74:21:0c:26:91:51:f8:39:86:06:a1: a8:5b:6d:9e:6d:c6:36:0d:31:97:35:69:a4:cc:e0: 50:50:57:7f:ac:d9:b2:bf:a7:d5:10:10:77:fd:34: 3d:83:59:8a:c9:e2:91:26:db:23:4c:86:91:f7:fc: ec:28:27:d1:12:ef:fb:64:b9:7e:57:3c:d8:4f:88: 1f:d4:b7:84:d5:b1:79:e9:a5:67:ab:9d:e9:f8:26: 49:56:96:be:0f:ea:c0:a3:7b:72:90:d5:c2:07:26: 95:3b:ad:a9:20:ca:62:d8:74:08:4e:fc:1b:18:a4: c5:85:5c:70:2d:b3:d7:13:f8:2e:61:c1:d3:11:57: 06:73:cd:58:6f:9b:1c:e8:30:14:74:e2:bc:b9:b7: 2d:21:4c:62:47:54:b7:8e:a5:25:23:a7:c3:78:8e: c7:44:4e:82:af:03:c2:a3:1e:5e:71:26:01:50:07: 8a:93:9a:14:24:51:5c:fe:b4:01:fc:76:9c:c7:32: cd:b0:20:c7:41:cf:7e:78:4e:28:8d:42:59:c4:b9: 2e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BD:E8:9D:E4:8B:22:EB:A5:DD:18:D9:EF:E8:60:7D:C0:10:CB:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22478e61-69b1-43c8-9d97-aedb4afd8d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f11:800::/38 Signature Algorithm: sha256WithRSAEncryption 38:78:dd:aa:83:fe:f5:66:e6:22:9e:d2:c7:a0:80:0a:6b:b9: bb:0a:2d:68:90:0f:95:e7:db:23:52:ef:b9:45:f7:ce:e9:b4: d1:e3:f7:aa:e3:6c:c4:83:5d:0b:ec:c9:c2:c8:8c:8e:96:09: ed:2d:a7:a9:02:07:2a:9e:7f:7f:7e:f1:62:df:1a:24:3a:23: 53:b4:1c:b4:1c:4a:1f:a0:88:0f:11:16:7f:5a:65:5a:2d:a6: b7:8f:1f:26:e1:2e:4b:86:9c:6f:cb:1f:a2:65:a5:12:f6:3a: 74:62:22:30:d3:76:0e:3e:55:7f:d6:11:21:9b:2f:40:9b:bc: b8:c2:11:ac:81:b2:03:4a:cd:29:7c:26:66:0a:a4:42:7e:4b: 52:9d:e1:74:d8:8b:43:15:c9:7a:73:cc:72:06:1c:d3:a3:cc: 68:d3:78:74:f3:37:2b:7e:97:62:46:7c:e4:b2:2d:ea:7e:d5: aa:96:1f:6f:08:fd:fb:60:de:1a:c9:6b:db:d1:44:3c:b1:0f: a6:3c:8c:fe:54:12:bc:26:c8:46:c5:0e:fc:97:85:a2:cf:6d: 9d:ce:a7:31:f6:d0:4f:83:db:a8:4f:e7:28:b2:7a:d2:15:f3: 89:f5:e3:f3:31:50:88:a6:a4:48:ef:67:3c:ca:76:57:0e:af: b0:4e:3f:15 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUbSE8F8rF7UIFPKrrndadPHnXQIswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDIyMDQxWhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNWI4MDg0NzgwZjgyMmEzZTU2ZjdkMGJmMjQzNGU0YTA1 MzRmMTc1YzUxMzhlYjQ3MDljY2JkN2E2MmEwNTY2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDokP3PoWWTsfghxOObu98D/mKtnIDFVLuThueJBc88s+pN DC6IPjfwbddP4BTZbzh0IQwmkVH4OYYGoahbbZ5txjYNMZc1aaTM4FBQV3+s2bK/ p9UQEHf9ND2DWYrJ4pEm2yNMhpH3/OwoJ9ES7/tkuX5XPNhPiB/Ut4TVsXnppWer nen4JklWlr4P6sCje3KQ1cIHJpU7rakgymLYdAhO/BsYpMWFXHAts9cT+C5hwdMR VwZzzVhvmxzoMBR04ry5ty0hTGJHVLeOpSUjp8N4jsdEToKvA8KjHl5xJgFQB4qT mhQkUVz+tAH8dpzHMs2wIMdBz354TiiNQlnEuS6DAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU473oneSLIuul3RjZ7+hgfcAQyw4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyNDc4ZTYxLTY5YjEtNDNjOC05ZDk3LWFlZGI0YWZkOGQwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8RCDANBgkqhkiG9w0BAQsFAAOCAQEAOHjdqoP+9WbmIp7Sx6CACmu5 uwotaJAPlefbI1LvuUX3zum00eP3quNsxINdC+zJwsiMjpYJ7S2nqQIHKp5/f37x Yt8aJDojU7QctBxKH6CIDxEWf1plWi2mt48fJuEuS4acb8sfomWlEvY6dGIiMNN2 Dj5Vf9YRIZsvQJu8uMIRrIGyA0rNKXwmZgqkQn5LUp3hdNiLQxXJenPMcgYc06PM aNN4dPM3K36XYkZ85LIt6n7VqpYfbwj9+2DeGslr29FEPLEPpjyM/lQSvCbIRsUO /JeFos9tnc6nMfbQT4PbqE/nKLJ60hXzifXj8zFQiKakSO9nPMp2Vw6vsE4/FQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:32 2026 by rpki-client