$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38153cce-e525-47a5-af36-a8f25ad480b4.roa File: 38153cce-e525-47a5-af36-a8f25ad480b4.roa (raw, json) Hash identifier: hpyMjqDqywBXm5d9H3tkrF8wz9YjCde6vSeM3k3ZnCA= Subject key identifier: 25:E3:FD:35:D4:5D:51:9A:F6:54:74:40:B8:5D:1E:0F:49:49:99:3E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1C9A21737EBB99F762E709AFE750D5CED5AD9B07 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38153cce-e525-47a5-af36-a8f25ad480b4.roa Signing time: Wed 25 Feb 2026 02:00:52 +0000 ROA not before: Wed 25 Feb 2026 02:00:52 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f21:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:9a:21:73:7e:bb:99:f7:62:e7:09:af:e7:50:d5:ce:d5:ad:9b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 02:00:52 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=ecf9381b9909fca670b29295a5d312997b708e4caaf66d486588d7f8ba13bc90, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bb:bc:07:1a:0d:33:7b:cc:f1:66:40:e5:63: c2:cc:78:11:81:dc:71:9a:52:52:20:2f:41:e4:8e: 9a:b1:da:dd:aa:31:33:8b:63:14:69:2f:a6:d6:16: 18:40:4f:2a:a4:7d:f7:1c:48:18:f8:48:56:2b:d7: 1a:22:52:02:52:d6:da:79:8b:f4:2c:ce:e9:d5:f0: b1:47:39:b0:c4:b1:5a:26:4e:e9:72:56:30:1a:15: c5:f0:f2:a0:a2:12:dd:36:79:4c:27:9d:5a:a4:7f: 64:b8:f4:41:65:e0:f4:a8:d1:37:6c:ec:e4:43:23: 33:86:86:48:e2:f3:40:4d:d4:35:d4:5b:27:fa:6e: 64:f6:77:78:bd:45:b7:d5:35:01:b2:d9:1f:32:0a: 72:ab:d0:16:13:b3:0b:a4:93:23:1d:96:95:9b:82: 69:e4:64:fa:3f:e3:3f:00:31:4d:75:d5:ee:04:0b: 52:c7:f9:65:2e:0e:27:36:2c:3a:7b:db:7d:80:6a: 8a:1d:a5:fc:09:9d:4b:ac:df:68:3c:b7:b1:b8:54: fb:cd:fb:e8:ac:c8:d3:83:10:a9:ba:34:59:d2:d6: 57:e1:e6:54:39:20:c5:30:fe:8d:0b:46:5a:ee:67: fe:3e:03:0f:d2:8b:88:9a:a0:04:b5:5e:58:ce:bf: 4c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E3:FD:35:D4:5D:51:9A:F6:54:74:40:B8:5D:1E:0F:49:49:99:3E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38153cce-e525-47a5-af36-a8f25ad480b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f21:8000::/36 Signature Algorithm: sha256WithRSAEncryption a2:c3:d7:2d:98:5e:1e:4c:e8:88:49:cf:7d:7a:fa:0d:2b:b1: 90:82:3f:1a:d5:4d:bd:bd:e5:98:2f:70:0e:cd:48:b0:74:cf: c1:53:52:38:6e:c8:8a:1b:74:2b:da:09:95:60:2f:0e:1d:74: 75:90:a7:4f:9f:ad:d7:2a:68:28:16:5f:2d:4d:d4:bf:fa:db: 39:da:94:3b:67:a0:49:9f:d9:98:c6:34:5e:d8:02:14:ce:6e: d1:27:0a:70:97:a6:aa:17:26:c2:0f:bc:24:6b:13:db:de:62: c8:9c:bb:d6:b1:e1:f7:f8:c9:2c:fa:3e:58:6e:fd:5c:61:be: ee:73:1a:dc:9c:cf:7c:21:9e:f5:c8:c5:10:87:8c:b6:32:30: 3a:bf:82:a1:23:92:8e:c4:27:90:fd:11:25:df:fc:4b:9f:a5: 5e:63:74:09:71:5a:1c:a5:e4:b2:14:44:3b:c0:87:4b:63:17: 1e:08:6a:92:09:f6:47:c6:bf:c2:e3:d7:5b:1b:90:21:12:39: 5f:b8:69:cc:05:ea:9a:72:c6:24:a5:c9:35:a5:f6:68:1d:74: 8f:2e:aa:65:39:ec:c7:bf:d5:8c:0c:43:6a:6a:52:8b:c3:cf: 18:1e:ed:fc:73:f5:b5:36:62:aa:cc:3b:21:6b:48:2a:82:51: 42:88:1b:6d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUHJohc367mfdi5wmv51DVztWtmwcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDIwMDUyWhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlY2Y5MzgxYjk5MDlmY2E2NzBiMjkyOTVhNWQzMTI5OTdi NzA4ZTRjYWFmNjZkNDg2NTg4ZDdmOGJhMTNiYzkwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPu7wHGg0ze8zxZkDlY8LMeBGB3HGaUlIgL0Hkjpqx2t2q MTOLYxRpL6bWFhhATyqkffccSBj4SFYr1xoiUgJS1tp5i/QszunV8LFHObDEsVom TulyVjAaFcXw8qCiEt02eUwnnVqkf2S49EFl4PSo0Tds7ORDIzOGhkji80BN1DXU Wyf6bmT2d3i9RbfVNQGy2R8yCnKr0BYTswukkyMdlpWbgmnkZPo/4z8AMU111e4E C1LH+WUuDic2LDp7232AaoodpfwJnUus32g8t7G4VPvN++isyNODEKm6NFnS1lfh 5lQ5IMUw/o0LRlruZ/4+Aw/Si4iaoAS1XljOv0y/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUJeP9NdRdUZr2VHRAuF0eD0lJmT4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4MTUzY2NlLWU1MjUtNDdhNS1hZjM2LWE4ZjI1YWQ0ODBiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8hgDANBgkqhkiG9w0BAQsFAAOCAQEAosPXLZheHkzoiEnPfXr6DSux kII/GtVNvb3lmC9wDs1IsHTPwVNSOG7Iiht0K9oJlWAvDh10dZCnT5+t1ypoKBZf LU3Uv/rbOdqUO2egSZ/ZmMY0XtgCFM5u0ScKcJemqhcmwg+8JGsT295iyJy71rHh 9/jJLPo+WG79XGG+7nMa3JzPfCGe9cjFEIeMtjIwOr+CoSOSjsQnkP0RJd/8S5+l XmN0CXFaHKXkshREO8CHS2MXHghqkgn2R8a/wuPXWxuQIRI5X7hpzAXqmnLGJKXJ NaX2aB10jy6qZTnsx7/VjAxDampSi8PPGB7t/HP1tTZiqsw7IWtIKoJRQogbbQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:21:53 2026 by rpki-client