$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fea89f7-7c39-4289-a7bd-48144b69faee.roa File: 3fea89f7-7c39-4289-a7bd-48144b69faee.roa (raw, json) Hash identifier: brFxxDRet5307PA5WcFnJqX5I13YXwNyBQrmfXM26Bo= Subject key identifier: EB:60:45:A5:D7:16:35:84:31:82:55:3A:EA:51:AB:08:F5:D3:4C:AF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 779F353E705378CF699B5A05B6ECA4812DDC20FF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fea89f7-7c39-4289-a7bd-48144b69faee.roa Signing time: Sat 21 Feb 2026 01:00:07 +0000 ROA not before: Sat 21 Feb 2026 01:00:07 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:7400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:9f:35:3e:70:53:78:cf:69:9b:5a:05:b6:ec:a4:81:2d:dc:20:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:00:07 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=ac2b37635b51b0e7ac42d8df5f536b36b6287b0827bd054b6735da8f856a608c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d7:fe:68:f5:b7:3f:5c:ec:5c:87:cd:a3:50: 80:96:72:31:0d:ee:60:b0:46:47:07:3d:c9:d1:4f: 0e:8d:df:13:a4:38:f0:41:fe:77:b3:31:b9:ee:86: 51:5f:13:a0:46:b7:b1:e6:17:58:5c:a2:a3:b2:b7: a7:15:a8:8f:2e:d4:28:55:cf:9f:3f:2f:e2:bc:52: eb:d5:01:e6:29:b5:c5:a1:ad:4a:1b:4d:84:d9:e5: 90:8a:56:cc:2e:ef:83:6f:6c:8e:17:45:5b:1f:ed: cc:28:fb:80:49:c5:c2:ed:7c:2f:62:0d:4a:70:cf: 67:ae:c0:98:e8:df:e2:ed:a4:ce:5a:47:9d:be:ae: 94:1d:08:8b:23:4e:fb:72:0a:e2:18:97:f1:ba:ac: f0:0e:4c:d2:b3:b9:89:fc:57:e2:e8:52:1f:19:b3: e5:06:84:24:37:44:bf:55:6c:48:4c:67:10:85:df: bb:2b:7c:83:61:ee:99:65:3a:29:bb:ae:6a:a3:1c: 73:98:bf:1e:eb:29:77:7c:71:f3:1b:24:c0:fc:1b: ac:be:7b:94:4f:a4:a1:d7:7d:de:84:85:18:b8:ba: a5:3b:5b:04:13:59:0c:d9:f0:4d:35:39:2e:fc:b5: cf:99:37:fb:a9:3a:71:7e:08:53:0a:4f:af:c2:d4: cf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:60:45:A5:D7:16:35:84:31:82:55:3A:EA:51:AB:08:F5:D3:4C:AF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fea89f7-7c39-4289-a7bd-48144b69faee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:7400::/48 Signature Algorithm: sha256WithRSAEncryption 11:46:eb:aa:3b:1b:6d:f4:f9:3f:64:82:d2:17:2a:37:75:56: 10:3b:ec:de:62:21:e9:e3:43:47:9e:2b:91:ef:e2:74:2a:29: a2:1e:ff:35:4d:4f:15:32:08:fc:24:c4:ce:fd:11:d3:f9:34: 73:42:15:a1:bc:e3:66:57:60:cc:00:06:3a:3c:a8:69:da:68: 6e:84:a1:3a:53:0a:8f:84:21:88:89:34:db:b9:1d:f7:3d:6f: 31:0f:ba:ad:e8:c8:58:85:93:36:1d:d3:e3:8e:7b:47:52:f3: a5:d7:fe:65:ee:c4:11:0a:28:95:1b:b5:b8:69:ce:8a:3d:54: b7:f8:87:af:35:ec:ef:71:8a:11:85:53:ed:d3:1e:77:6d:b4: 2b:76:b8:7f:2c:06:1b:0e:5b:78:3a:60:49:e5:21:72:02:ce: 86:f9:3c:f8:ea:ba:0b:2e:0a:f8:8b:84:a9:24:90:ee:4c:3d: 71:c1:14:bf:c7:24:e2:d5:8d:08:e9:7d:e5:89:1a:52:b3:ac: 98:3c:f6:d3:a6:3d:c8:78:fb:56:13:f9:55:91:09:09:33:70: dd:bf:8a:01:90:6e:fa:74:42:3f:a9:72:d7:51:96:72:a2:04: 7a:8e:be:60:e1:9a:22:5c:1e:b6:43:85:0b:5b:4d:e7:81:a3: c8:69:b3:8b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUd581PnBTeM9pm1oFtuykgS3cIP8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDEwMDA3WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYzJiMzc2MzViNTFiMGU3YWM0MmQ4ZGY1ZjUzNmIzNmI2 Mjg3YjA4MjdiZDA1NGI2NzM1ZGE4Zjg1NmE2MDhjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDO1/5o9bc/XOxch82jUICWcjEN7mCwRkcHPcnRTw6N3xOk OPBB/nezMbnuhlFfE6BGt7HmF1hcoqOyt6cVqI8u1ChVz58/L+K8UuvVAeYptcWh rUobTYTZ5ZCKVswu74NvbI4XRVsf7cwo+4BJxcLtfC9iDUpwz2euwJjo3+LtpM5a R52+rpQdCIsjTvtyCuIYl/G6rPAOTNKzuYn8V+LoUh8Zs+UGhCQ3RL9VbEhMZxCF 37srfINh7pllOim7rmqjHHOYvx7rKXd8cfMbJMD8G6y+e5RPpKHXfd6EhRi4uqU7 WwQTWQzZ8E01OS78tc+ZN/upOnF+CFMKT6/C1M+dAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU62BFpdcWNYQxglU66lGrCPXTTK8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNmZWE4OWY3LTdjMzktNDI4OS1hN2JkLTQ4MTQ0YjY5ZmFlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sdAAwDQYJKoZIhvcNAQELBQADggEBABFG66o7G230+T9kgtIXKjd1 VhA77N5iIenjQ0eeK5Hv4nQqKaIe/zVNTxUyCPwkxM79EdP5NHNCFaG842ZXYMwA Bjo8qGnaaG6EoTpTCo+EIYiJNNu5Hfc9bzEPuq3oyFiFkzYd0+OOe0dS86XX/mXu xBEKKJUbtbhpzoo9VLf4h6817O9xihGFU+3THndttCt2uH8sBhsOW3g6YEnlIXIC zob5PPjqugsuCviLhKkkkO5MPXHBFL/HJOLVjQjpfeWJGlKzrJg89tOmPch4+1YT +VWRCQkzcN2/igGQbvp0Qj+pctdRlnKiBHqOvmDhmiJcHrZDhQtbTeeBo8hps4s= -----END CERTIFICATE-----Generated at Mon Mar 2 00:08:44 2026 by rpki-client