$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3164b65b-ce88-465e-a4f5-932d48bcb8d9.roa File: 3164b65b-ce88-465e-a4f5-932d48bcb8d9.roa (raw, json) Hash identifier: IrnMeLsjcpNElwtPvihRkilmebqh6IJ8sJp4ThuB+G8= Subject key identifier: 6A:19:CE:0E:90:18:B9:CA:B2:2A:81:63:92:38:75:4A:FA:81:6E:F6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 25670A8B196FA0FB84E1C9ACBC80B0AB146FB681 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3164b65b-ce88-465e-a4f5-932d48bcb8d9.roa Signing time: Wed 25 Feb 2026 00:10:07 +0000 ROA not before: Wed 25 Feb 2026 00:10:07 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f36:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:67:0a:8b:19:6f:a0:fb:84:e1:c9:ac:bc:80:b0:ab:14:6f:b6:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 00:10:07 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=863c284bcad335c5c917a87c9f08188a15b6c53e9148a7ceee32f3d4672b1778, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:85:11:ac:5f:5a:6c:73:29:cc:45:e0:f8:34: 66:b9:1b:10:72:fd:3f:96:63:cd:15:4a:61:16:f9: d7:fd:9b:a7:8e:4f:8a:2b:da:28:f3:c0:ae:f6:d4: 17:1d:b5:52:3f:cc:43:77:1b:e3:b7:8d:cd:d3:f4: d3:b3:89:5b:d7:f8:69:db:36:2e:b5:e7:4b:94:b1: de:ad:2b:db:71:46:d3:bb:4e:51:9b:3f:20:9a:93: 92:c4:3a:df:1c:f0:2f:5f:fb:df:6c:5a:56:eb:f8: 41:c8:91:e5:57:93:9a:a6:85:21:87:45:70:4d:21: 8c:ca:28:f7:2a:e8:73:4f:3b:e4:9b:42:8f:bb:9a: c5:1b:c1:30:a7:d8:9a:fb:6c:e5:c4:01:50:0e:17: de:ea:6d:0e:d8:ae:f2:6a:0b:fa:59:e2:96:d8:cd: 4c:23:d8:48:df:a7:95:d0:ee:c4:8c:6b:47:4b:6a: f4:d7:47:36:34:5b:c2:0f:9b:89:fc:91:5c:43:23: 1c:d1:3a:45:aa:13:02:7f:6b:6b:3c:ff:ca:03:32: 1c:9b:e4:a8:7f:65:9e:50:75:cd:e2:32:a9:2f:c4: db:a5:bc:b7:8d:e2:12:d6:52:64:7b:48:7d:b6:04: 10:bf:4c:94:7a:6a:b6:21:c8:9e:4e:ae:dd:01:97: de:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:19:CE:0E:90:18:B9:CA:B2:2A:81:63:92:38:75:4A:FA:81:6E:F6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3164b65b-ce88-465e-a4f5-932d48bcb8d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f36:c000::/40 Signature Algorithm: sha256WithRSAEncryption 48:8f:bd:2d:53:60:6f:da:7d:6e:9a:cf:0d:24:73:8f:a9:e3: b6:71:af:2b:b9:a4:68:ad:2b:a4:c2:30:f2:e4:63:e4:1c:5d: ae:f8:82:f6:f3:60:03:b3:5b:56:6e:e2:62:8a:16:8b:4d:45: ea:36:5f:78:24:62:f6:b3:1d:c9:d5:49:88:3a:b8:6e:43:9c: 7e:46:08:1b:e8:b5:c8:cb:1e:03:d3:18:77:0a:c0:3c:56:57: ec:39:2a:ab:d1:0f:e7:d2:c9:9f:f4:bc:f5:e1:80:1c:e3:f0: bd:48:ba:6e:8f:08:75:76:c0:b7:4e:98:02:e8:0c:a7:52:11: d5:7a:6b:82:ac:83:48:81:a9:68:11:a5:23:be:9d:0e:7a:f2: 25:89:20:09:d7:21:99:c9:88:c1:c1:00:33:03:b0:d3:d1:35: 41:d3:b2:d4:c7:bb:e7:99:cf:17:4d:b6:c5:e6:e2:f9:3f:c2: 2d:74:ed:80:d7:24:d7:bb:e6:7f:2b:75:6b:e2:0c:8b:a8:ac: 2f:f8:c5:a1:b8:2d:8a:9a:88:0c:91:c7:e1:eb:03:ae:a0:8f: a7:3f:7e:2d:bc:e4:44:68:22:8d:a0:c2:00:c5:68:f9:20:fa: bd:53:bd:a9:3f:52:50:83:9e:db:de:b6:b4:84:37:ac:7b:9a: 89:5f:b2:4e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJWcKixlvoPuE4cmsvICwqxRvtoEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDAxMDA3WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjNjMjg0YmNhZDMzNWM1YzkxN2E4N2M5ZjA4MTg4YTE1 YjZjNTNlOTE0OGE3Y2VlZTMyZjNkNDY3MmIxNzc4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1hRGsX1pscynMReD4NGa5GxBy/T+WY80VSmEW+df9m6eO T4or2ijzwK721BcdtVI/zEN3G+O3jc3T9NOziVvX+GnbNi6150uUsd6tK9txRtO7 TlGbPyCak5LEOt8c8C9f+99sWlbr+EHIkeVXk5qmhSGHRXBNIYzKKPcq6HNPO+Sb Qo+7msUbwTCn2Jr7bOXEAVAOF97qbQ7YrvJqC/pZ4pbYzUwj2Ejfp5XQ7sSMa0dL avTXRzY0W8IPm4n8kVxDIxzROkWqEwJ/a2s8/8oDMhyb5Kh/ZZ5Qdc3iMqkvxNul vLeN4hLWUmR7SH22BBC/TJR6arYhyJ5Ort0Bl95nAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUahnODpAYucqyKoFjkjh1SvqBbvYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMxNjRiNjViLWNlODgtNDY1ZS1hNGY1LTkzMmQ0OGJjYjhkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB82wDANBgkqhkiG9w0BAQsFAAOCAQEASI+9LVNgb9p9bprPDSRzj6nj tnGvK7mkaK0rpMIw8uRj5BxdrviC9vNgA7NbVm7iYooWi01F6jZfeCRi9rMdydVJ iDq4bkOcfkYIG+i1yMseA9MYdwrAPFZX7Dkqq9EP59LJn/S89eGAHOPwvUi6bo8I dXbAt06YAugMp1IR1XprgqyDSIGpaBGlI76dDnryJYkgCdchmcmIwcEAMwOw09E1 QdOy1Me755nPF022xebi+T/CLXTtgNck17vmfyt1a+IMi6isL/jFobgtipqIDJHH 4esDrqCPpz9+LbzkRGgijaDCAMVo+SD6vVO9qT9SUIOe2962tIQ3rHuaiV+yTg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:23 2026 by rpki-client