$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3aec067d-d861-49fc-af71-b63181af6267.roa File: 3aec067d-d861-49fc-af71-b63181af6267.roa (raw, json) Hash identifier: 1ivLgA/EIGTNXu+vovlQI5Xl3rFR561178jU6OK8OJA= Subject key identifier: 2F:16:83:12:0A:7C:7B:C1:5C:32:E1:9C:A9:81:33:BF:2F:1C:F6:20 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7232F4CED93440F72A4146C5726563E66B00C509 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3aec067d-d861-49fc-af71-b63181af6267.roa Signing time: Sun 01 Mar 2026 00:10:39 +0000 ROA not before: Sun 01 Mar 2026 00:10:39 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f68:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:32:f4:ce:d9:34:40:f7:2a:41:46:c5:72:65:63:e6:6b:00:c5:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 1 00:10:39 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=d2b681517ea442d2a1b42c0f450067649525083d3cbfa7a368793db3e1f34e80, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b5:98:c7:75:48:30:bc:8d:64:bc:e1:87:08: 3a:d0:e9:c0:1e:59:26:c2:5c:d1:55:d1:b6:37:c6: 0c:5b:ce:70:cd:cd:90:5b:62:04:f5:57:4d:25:f0: a1:88:e9:01:52:e7:08:8a:80:ab:d1:ed:1e:e6:d9: 4d:c8:8f:2a:cc:1d:73:8f:0a:9c:c5:b3:1c:14:e4: 66:9e:7e:ff:62:29:7a:02:c6:ff:d2:74:06:1a:05: 64:c2:46:1c:c7:d9:3e:56:4f:cc:40:c2:b8:93:68: 94:6b:12:c0:ac:19:27:7d:47:ca:f7:0b:c1:61:0f: f8:24:dd:3e:c3:9a:74:41:3d:8d:01:b7:3e:90:17: a4:ba:54:b4:7d:f6:5a:25:ff:09:7a:c9:d2:92:af: fe:1b:74:7e:d5:6a:7b:ef:20:6d:1a:8b:9a:b6:2a: 45:a9:8e:81:56:40:53:58:91:11:ba:4e:64:dc:c8: 81:c3:07:aa:5e:07:8c:b5:91:1e:79:a2:45:b3:1b: 53:3e:f6:94:ba:e8:f5:6b:7a:bb:c0:4c:bf:0b:3a: 45:31:ca:9a:2b:6f:6e:e1:40:fb:e7:ee:61:ac:a6: a6:5e:d0:b7:33:59:64:d2:a7:f0:d2:8f:7e:a8:37: 42:c7:da:1a:12:7c:2a:c8:2f:17:83:7c:28:5d:19: af:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:16:83:12:0A:7C:7B:C1:5C:32:E1:9C:A9:81:33:BF:2F:1C:F6:20 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3aec067d-d861-49fc-af71-b63181af6267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f68:1000::/40 Signature Algorithm: sha256WithRSAEncryption 19:41:a7:ca:20:2e:9c:ee:0c:44:96:96:6e:1a:01:e4:4e:88: cf:fd:9b:36:1e:52:d9:c9:80:71:57:ce:3e:43:c6:e3:63:93: 75:61:bc:f1:a4:ac:60:90:fd:fe:31:33:ce:a6:0a:1d:36:54: f5:8c:91:6f:7e:5b:57:3f:a4:06:ab:8d:be:ba:7d:91:99:9a: 14:c8:93:fd:f5:1d:f2:2f:8a:67:35:8c:aa:93:1d:98:39:a8: b6:96:75:8a:ff:75:9e:9c:6a:fe:31:44:03:fe:1d:3f:21:b8: a9:e6:cf:17:78:31:81:4f:81:a4:19:68:a1:69:a9:96:07:94: 78:0c:29:da:8d:96:99:dc:34:45:79:eb:64:fd:0a:ad:63:8d: 1d:a4:4d:ec:3c:ad:fb:21:35:e3:35:75:59:d2:22:e4:42:9f: 2b:68:30:5b:ad:60:2f:3a:2a:60:89:14:92:af:63:52:96:ed: b7:6d:d6:5c:e2:36:5c:5d:c2:43:09:32:05:0e:c6:7e:09:11: 53:6d:50:90:d5:51:5f:6b:86:d3:34:1e:b6:92:19:6d:04:8a: 24:cb:8a:16:44:6d:11:88:04:68:62:44:a4:4c:c3:ff:e3:8c: 42:a0:93:76:cb:4f:f8:c9:5d:cc:b8:e1:6f:21:14:39:b2:a0: 3b:bd:85:fe -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUcjL0ztk0QPcqQUbFcmVj5msAxQkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzAxMDAxMDM5WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMmI2ODE1MTdlYTQ0MmQyYTFiNDJjMGY0NTAwNjc2NDk1 MjUwODNkM2NiZmE3YTM2ODc5M2RiM2UxZjM0ZTgwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCutZjHdUgwvI1kvOGHCDrQ6cAeWSbCXNFV0bY3xgxbznDN zZBbYgT1V00l8KGI6QFS5wiKgKvR7R7m2U3IjyrMHXOPCpzFsxwU5Gaefv9iKXoC xv/SdAYaBWTCRhzH2T5WT8xAwriTaJRrEsCsGSd9R8r3C8FhD/gk3T7DmnRBPY0B tz6QF6S6VLR99lol/wl6ydKSr/4bdH7VanvvIG0ai5q2KkWpjoFWQFNYkRG6TmTc yIHDB6peB4y1kR55okWzG1M+9pS66PVrervATL8LOkUxyporb27hQPvn7mGspqZe 0LczWWTSp/DSj36oN0LH2hoSfCrILxeDfChdGa8lAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQULxaDEgp8e8FcMuGcqYEzvy8c9iAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNhZWMwNjdkLWQ4NjEtNDlmYy1hZjcxLWI2MzE4MWFmNjI2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9oEDANBgkqhkiG9w0BAQsFAAOCAQEAGUGnyiAunO4MRJaWbhoB5E6I z/2bNh5S2cmAcVfOPkPG42OTdWG88aSsYJD9/jEzzqYKHTZU9YyRb35bVz+kBquN vrp9kZmaFMiT/fUd8i+KZzWMqpMdmDmotpZ1iv91npxq/jFEA/4dPyG4qebPF3gx gU+BpBlooWmplgeUeAwp2o2Wmdw0RXnrZP0KrWONHaRN7Dyt+yE14zV1WdIi5EKf K2gwW61gLzoqYIkUkq9jUpbtt23WXOI2XF3CQwkyBQ7GfgkRU21QkNVRX2uG0zQe tpIZbQSKJMuKFkRtEYgEaGJEpEzD/+OMQqCTdstP+MldzLjhbyEUObKgO72F/g== -----END CERTIFICATE-----Generated at Mon Mar 2 04:55:04 2026 by rpki-client