$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d135eb9-4879-4568-98c1-f37c5449cc5a.roa File: 3d135eb9-4879-4568-98c1-f37c5449cc5a.roa (raw, json) Hash identifier: sq+FZPeK7aYPIvFV9k+/OZa14TF4zb+6L23wepfEXIs= Subject key identifier: 2B:E8:C9:15:47:DD:79:C0:95:BE:10:35:CF:0E:01:50:07:D7:35:BB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 287F6CB8F2EE2F5A03A29D4E2FC126E15EA44387 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d135eb9-4879-4568-98c1-f37c5449cc5a.roa Signing time: Tue 10 Feb 2026 00:30:13 +0000 ROA not before: Tue 10 Feb 2026 00:30:13 +0000 ROA not after: Mon 11 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:818f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:7f:6c:b8:f2:ee:2f:5a:03:a2:9d:4e:2f:c1:26:e1:5e:a4:43:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 10 00:30:13 2026 GMT Not After : May 11 23:59:59 2026 GMT Subject: serialNumber=fabbd48c717c836c61e1d3fb6420defa4df5acec8f62e49d877209bada3f0778, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:db:36:de:a3:5d:a3:99:81:43:cd:ba:7b:3b: 14:f4:69:d7:21:8d:a9:f7:da:8e:54:78:90:de:c6: cb:83:64:30:46:19:83:0c:de:e3:67:db:cf:2d:36: 7c:f1:af:eb:a2:1b:f8:40:b9:6e:b1:f2:d8:b2:0b: a8:cc:b5:a7:7a:02:50:c5:ac:e2:9c:cb:3f:a7:10: 6a:83:43:45:60:b4:d3:76:39:05:15:c2:46:95:6d: cc:a1:3e:e6:8f:5e:28:fc:dd:a8:15:03:54:7a:b4: b7:cf:50:6e:cf:50:f7:a2:b7:58:4a:4d:b6:08:21: 91:9b:02:70:17:9f:8e:4c:22:72:ec:6a:f0:d7:5a: b9:8b:5c:72:e5:43:d0:d5:98:12:46:2f:a4:b8:38: 38:21:a7:8d:1c:a4:0d:27:5c:9c:14:37:16:48:76: 22:57:4a:9e:aa:67:d6:34:5e:67:a4:a4:02:38:20: ca:49:dd:4c:1a:ef:de:f0:ae:d0:d1:65:d1:9f:bf: a9:aa:0e:c0:bb:19:2e:8d:27:00:db:95:93:ad:0d: ca:ef:e7:de:22:50:1d:3d:6f:70:78:2a:5f:ee:7d: 28:88:b7:e2:53:48:bd:ef:4a:4d:2d:5c:e5:86:9e: 9e:b9:20:df:90:10:38:a4:8e:37:d8:71:59:7e:ea: b3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E8:C9:15:47:DD:79:C0:95:BE:10:35:CF:0E:01:50:07:D7:35:BB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d135eb9-4879-4568-98c1-f37c5449cc5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:818f::/48 Signature Algorithm: sha256WithRSAEncryption d1:76:22:54:de:31:b8:ef:6c:16:d6:47:0d:32:df:e8:6c:a0: 7d:07:b3:c6:7c:bc:9f:5f:99:a3:79:61:f7:be:9c:4f:13:9f: f2:5f:06:91:30:d8:39:cd:c1:40:76:d1:6f:e6:76:c3:cc:87: 80:91:5c:e7:ed:8d:3d:31:c7:61:27:67:d5:6c:f9:8a:78:1b: d6:c2:f5:10:29:45:2c:bc:67:e1:b1:09:d8:c0:24:0b:cb:ee: 53:12:8a:42:81:fe:ae:29:67:77:73:0d:c8:8b:c9:5e:b2:77: 1e:7f:66:41:d5:8b:c7:60:46:f9:da:7b:eb:f8:b1:47:e7:56: af:45:ad:fa:18:f2:2e:c6:bd:9d:ee:dc:29:5b:f3:64:5b:2b: ce:4e:7f:fd:85:96:91:ba:bf:59:31:c8:d5:f9:2c:07:5d:df: ba:e0:f7:eb:56:19:9b:00:cf:7a:e4:cf:0e:f6:ec:81:f9:26: 80:ec:68:f5:d3:b8:40:69:bd:c5:38:e6:74:ff:c0:5a:90:c3: f8:85:ef:9b:fe:31:c3:0d:a0:e2:5e:7a:35:b4:6d:72:09:62: fe:0e:18:00:0e:80:f7:df:22:b0:32:a0:1d:17:1a:bc:4d:1e: db:cc:8f:45:81:1e:b1:f5:a0:27:e7:4f:e6:6e:98:d0:3f:05: 44:bb:f0:af -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKH9suPLuL1oDop1OL8Em4V6kQ4cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDAzMDEzWhcNMjYwNTExMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYWJiZDQ4YzcxN2M4MzZjNjFlMWQzZmI2NDIwZGVmYTRk ZjVhY2VjOGY2MmU0OWQ4NzcyMDliYWRhM2YwNzc4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCg2zbeo12jmYFDzbp7OxT0adchjan32o5UeJDexsuDZDBG GYMM3uNn288tNnzxr+uiG/hAuW6x8tiyC6jMtad6AlDFrOKcyz+nEGqDQ0VgtNN2 OQUVwkaVbcyhPuaPXij83agVA1R6tLfPUG7PUPeit1hKTbYIIZGbAnAXn45MInLs avDXWrmLXHLlQ9DVmBJGL6S4ODghp40cpA0nXJwUNxZIdiJXSp6qZ9Y0XmekpAI4 IMpJ3Uwa797wrtDRZdGfv6mqDsC7GS6NJwDblZOtDcrv594iUB09b3B4Kl/ufSiI t+JTSL3vSk0tXOWGnp65IN+QEDikjjfYcVl+6rPxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUK+jJFUfdecCVvhA1zw4BUAfXNbswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNkMTM1ZWI5LTQ4NzktNDU2OC05OGMxLWYzN2M1NDQ5Y2M1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9gY8wDQYJKoZIhvcNAQELBQADggEBANF2IlTeMbjvbBbWRw0y3+hs oH0Hs8Z8vJ9fmaN5Yfe+nE8Tn/JfBpEw2DnNwUB20W/mdsPMh4CRXOftjT0xx2En Z9Vs+Yp4G9bC9RApRSy8Z+GxCdjAJAvL7lMSikKB/q4pZ3dzDciLyV6ydx5/ZkHV i8dgRvnae+v4sUfnVq9FrfoY8i7GvZ3u3Clb82RbK85Of/2FlpG6v1kxyNX5LAdd 37rg9+tWGZsAz3rkzw727IH5JoDsaPXTuEBpvcU45nT/wFqQw/iF75v+McMNoOJe ejW0bXIJYv4OGAAOgPffIrAyoB0XGrxNHtvMj0WBHrH1oCfnT+ZumNA/BUS78K8= -----END CERTIFICATE-----Generated at Mon Mar 2 00:24:52 2026 by rpki-client