$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b61501-4505-4056-a7c1-935daabf5a4e.roa File: 24b61501-4505-4056-a7c1-935daabf5a4e.roa (raw, json) Hash identifier: FN0PqulYng8zHwRd34qPsLT8FYWbDXwxQmJCiDHLZ9M= Subject key identifier: CD:C0:DB:6A:CC:6B:E1:B1:52:CE:1D:31:63:6D:4C:98:02:91:C7:75 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6E19F855BF8C939EF032B5A1212D265CB9C9E09D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b61501-4505-4056-a7c1-935daabf5a4e.roa Signing time: Sun 08 Feb 2026 00:41:34 +0000 ROA not before: Sun 08 Feb 2026 00:41:34 +0000 ROA not after: Sat 09 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fa0:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:19:f8:55:bf:8c:93:9e:f0:32:b5:a1:21:2d:26:5c:b9:c9:e0:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 8 00:41:34 2026 GMT Not After : May 9 23:59:59 2026 GMT Subject: serialNumber=e34086eca30fe5c9728e52b0a71fc371605452ee51d852fd980884a4679bdc8d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fb:6c:62:71:65:a3:11:e1:93:b8:41:3b:cf: ac:70:5f:e5:e1:95:fa:cf:90:dc:67:99:30:8e:e0: 8f:d0:a7:24:17:a8:79:c5:75:6f:c0:a9:fa:f5:f9: 67:cd:45:22:a1:74:1f:6f:bb:0f:02:65:ca:45:c8: 4a:9a:d3:55:a3:fd:9e:b0:77:78:80:a6:e2:77:f7: 78:cd:28:16:53:39:70:e8:46:aa:e2:e1:94:94:4b: e5:52:8f:d9:cc:fe:c9:ff:b1:78:b3:b1:c8:46:2d: d0:5e:a8:68:a2:a0:d5:55:a1:fa:ba:38:e0:04:c3: 8f:40:97:53:d5:d6:c9:ba:fc:18:54:5b:bb:3e:c4: 15:a4:56:9b:f1:9b:5a:77:6d:12:df:45:31:59:a8: 04:b9:03:6c:ca:91:78:c1:33:a4:6c:b8:4e:1d:3b: 44:ac:60:24:7a:16:7b:51:2d:14:88:b1:83:04:eb: 91:4a:06:f2:bf:c9:45:c5:99:0b:28:65:9e:6c:a2: 76:f8:4f:d6:04:57:42:67:70:bd:b9:1e:2e:e7:34: 0c:ba:1d:b3:d3:87:b5:77:f1:26:eb:79:35:58:a8: b0:2a:f6:8f:ca:d8:a1:b4:66:15:01:e8:dd:9e:d5: 23:2c:d3:63:86:41:12:21:22:d1:18:cd:39:9d:42: 55:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C0:DB:6A:CC:6B:E1:B1:52:CE:1D:31:63:6D:4C:98:02:91:C7:75 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b61501-4505-4056-a7c1-935daabf5a4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:6000::/40 Signature Algorithm: sha256WithRSAEncryption 17:bc:37:cc:94:c5:62:fd:60:2b:3b:19:a9:2f:01:e8:0c:1a: ac:4e:60:8b:1b:72:d8:6e:c3:21:1d:88:ab:69:bd:44:03:3e: 23:d2:16:2c:3c:ad:c1:3e:60:4c:9a:a6:e4:f4:bd:be:60:a5: b6:16:65:97:2a:e3:de:87:da:76:df:fb:e0:8b:09:e2:56:3c: 5a:18:b5:e3:2a:43:70:08:81:24:ab:2e:53:f4:d9:3b:e2:ac: 3d:0d:ed:96:1e:ba:40:d6:70:25:a1:70:cc:82:d7:1a:62:6d: ea:62:1e:82:8a:8c:27:69:09:1a:5a:97:0f:8c:13:53:73:42: 93:f0:4f:d0:e6:e1:51:68:73:f7:85:bf:3a:ce:23:86:60:00: bf:df:55:04:a4:c2:b4:9b:6c:f7:4d:98:d7:f0:b1:89:d9:c8: 54:d0:1f:16:1d:54:e1:1b:8f:f3:62:8f:36:21:57:f8:ea:e9: 72:28:a7:69:9f:a6:e1:35:f1:46:ed:8d:f8:6b:89:9e:a0:1e: 78:32:79:1f:30:c8:94:1d:68:0a:37:13:66:28:f5:a4:30:5b: 97:8c:a7:b2:17:68:54:2b:b3:82:84:4c:84:52:db:6c:d6:b5: 04:11:30:5f:ce:da:19:08:45:3a:cd:b8:82:fb:6c:80:26:74: c5:5c:dd:b5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUbhn4Vb+Mk57wMrWhIS0mXLnJ4J0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA4MDA0MTM0WhcNMjYwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMzQwODZlY2EzMGZlNWM5NzI4ZTUyYjBhNzFmYzM3MTYw NTQ1MmVlNTFkODUyZmQ5ODA4ODRhNDY3OWJkYzhkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDD+2xicWWjEeGTuEE7z6xwX+XhlfrPkNxnmTCO4I/QpyQX qHnFdW/Aqfr1+WfNRSKhdB9vuw8CZcpFyEqa01Wj/Z6wd3iApuJ393jNKBZTOXDo Rqri4ZSUS+VSj9nM/sn/sXizschGLdBeqGiioNVVofq6OOAEw49Al1PV1sm6/BhU W7s+xBWkVpvxm1p3bRLfRTFZqAS5A2zKkXjBM6RsuE4dO0SsYCR6FntRLRSIsYME 65FKBvK/yUXFmQsoZZ5sonb4T9YEV0JncL25Hi7nNAy6HbPTh7V38SbreTVYqLAq 9o/K2KG0ZhUB6N2e1SMs02OGQRIhItEYzTmdQlUxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUzcDbasxr4bFSzh0xY21MmAKRx3UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI0YjYxNTAxLTQ1MDUtNDA1Ni1hN2MxLTkzNWRhYWJmNWE0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+gYDANBgkqhkiG9w0BAQsFAAOCAQEAF7w3zJTFYv1gKzsZqS8B6Awa rE5gixty2G7DIR2Iq2m9RAM+I9IWLDytwT5gTJqm5PS9vmClthZllyrj3ofadt/7 4IsJ4lY8Whi14ypDcAiBJKsuU/TZO+KsPQ3tlh66QNZwJaFwzILXGmJt6mIegoqM J2kJGlqXD4wTU3NCk/BP0ObhUWhz94W/Os4jhmAAv99VBKTCtJts902Y1/CxidnI VNAfFh1U4RuP82KPNiFX+OrpciinaZ+m4TXxRu2N+GuJnqAeeDJ5HzDIlB1oCjcT Zij1pDBbl4ynshdoVCuzgoRMhFLbbNa1BBEwX87aGQhFOs24gvtsgCZ0xVzdtQ== -----END CERTIFICATE-----Generated at Mon Mar 2 00:07:15 2026 by rpki-client