$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/430f9de8-7aca-4990-8867-0daaf0d82e64.roa File: 430f9de8-7aca-4990-8867-0daaf0d82e64.roa (raw, json) Hash identifier: PCwy2ItKX7supEBHh2QGAj+orhE/Hh9sotAaq30dFHk= Subject key identifier: 97:00:60:0F:65:38:74:A8:34:F4:63:EE:85:85:A1:8F:A5:FE:2C:21 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5FB10E7D0420796338B929EF17DF8FB420771ED3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/430f9de8-7aca-4990-8867-0daaf0d82e64.roa Signing time: Wed 11 Feb 2026 00:41:14 +0000 ROA not before: Wed 11 Feb 2026 00:41:14 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff2:80e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:b1:0e:7d:04:20:79:63:38:b9:29:ef:17:df:8f:b4:20:77:1e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 11 00:41:14 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=8cc27462a61ff22b2f9e8107a3ceea007bb5749e39b0d9df4a40b991077b330f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2e:bf:a7:c9:82:a9:13:67:48:23:93:35:01: f0:60:2d:99:6f:55:cc:c3:e8:2c:07:b5:7d:9b:5c: 6a:5c:ba:64:3b:d7:53:90:6b:3d:cb:b3:f5:18:61: 15:b7:6e:f9:9e:71:ba:19:13:5d:61:c1:0c:3c:50: 1c:d3:11:3b:b1:87:26:ec:39:b2:dd:fa:b6:f5:bf: 37:b4:31:56:50:ea:7b:2e:84:64:50:c2:c7:0e:3c: 56:64:9d:96:1c:07:7d:c5:7b:4b:d3:6b:ed:81:43: cd:45:d2:61:aa:95:2d:32:71:75:e1:9e:47:c4:c3: e5:98:48:26:ec:f7:e0:e3:58:84:83:17:4e:c6:cf: 76:6f:7c:3f:ac:68:ed:9c:17:45:9f:01:a0:40:1f: 44:55:cf:41:49:5a:b1:2d:98:76:89:4b:97:03:51: 65:48:bd:c3:ad:98:43:38:10:2f:e3:2c:ac:38:d6: 9c:49:7c:6a:52:7f:ac:50:99:56:55:38:9d:4f:a2: 66:34:f0:47:18:a3:0e:f5:b0:6a:89:ca:f8:5f:dc: e5:5d:81:a9:71:91:0d:8f:f4:c7:89:db:a1:a4:e2: d7:fe:fd:34:e4:3a:b2:cb:4d:e2:6b:bd:e9:5d:c2: 0f:c8:10:33:11:cc:62:89:48:a4:c2:7b:05:0d:79: e0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:00:60:0F:65:38:74:A8:34:F4:63:EE:85:85:A1:8F:A5:FE:2C:21 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/430f9de8-7aca-4990-8867-0daaf0d82e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:80e0::/48 Signature Algorithm: sha256WithRSAEncryption 13:8e:62:7b:9c:4d:7e:66:f5:d9:08:4d:37:da:15:d3:12:23: 2c:a0:bd:d0:cd:b5:db:d8:6c:b4:aa:20:68:30:1e:54:24:b4: 99:85:e4:eb:c9:8b:21:4f:78:3a:07:69:20:92:3b:37:06:bb: 7d:7a:01:71:dd:92:32:ad:cf:e5:4a:62:68:bb:cc:fa:4a:86: 64:28:e9:59:17:7d:20:20:d6:c5:56:39:47:24:56:74:29:c3: 55:8d:81:18:a9:61:59:55:45:aa:45:af:bf:bc:05:f8:86:22: 1f:53:b5:cd:69:4d:3e:0b:7b:bd:47:53:ce:5d:c6:87:94:6f: 9b:6a:b6:a8:7d:8e:fc:6e:1e:74:74:a5:29:2e:1d:a8:41:39: 74:60:3f:3b:24:6a:9b:fa:d8:c6:7f:34:3b:b3:4f:d6:8d:4a: 8f:16:37:1f:98:84:ae:31:58:fe:35:04:53:95:a5:92:53:25: 73:35:f2:14:44:f0:ee:01:15:b4:92:ee:cd:d2:9c:4a:db:45: 6b:cd:b9:1b:22:c8:63:53:62:8a:f6:65:50:52:8d:b1:a5:cd: c4:b0:81:de:f8:be:af:ef:44:47:fe:43:ed:ea:e9:83:58:62: 1c:d7:ad:ab:6c:09:2a:f9:1e:33:c6:3f:56:d0:46:75:7e:09: 02:bf:a2:e2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUX7EOfQQgeWM4uSnvF9+PtCB3HtMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjExMDA0MTE0WhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4Y2MyNzQ2MmE2MWZmMjJiMmY5ZTgxMDdhM2NlZWEwMDdi YjU3NDllMzliMGQ5ZGY0YTQwYjk5MTA3N2IzMzBmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVLr+nyYKpE2dII5M1AfBgLZlvVczD6CwHtX2bXGpcumQ7 11OQaz3Ls/UYYRW3bvmecboZE11hwQw8UBzTETuxhybsObLd+rb1vze0MVZQ6nsu hGRQwscOPFZknZYcB33Fe0vTa+2BQ81F0mGqlS0ycXXhnkfEw+WYSCbs9+DjWISD F07Gz3ZvfD+saO2cF0WfAaBAH0RVz0FJWrEtmHaJS5cDUWVIvcOtmEM4EC/jLKw4 1pxJfGpSf6xQmVZVOJ1PomY08EcYow71sGqJyvhf3OVdgalxkQ2P9MeJ26Gk4tf+ /TTkOrLLTeJrveldwg/IEDMRzGKJSKTCewUNeeDVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlwBgD2U4dKg09GPuhYWhj6X+LCEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQzMGY5ZGU4LTdhY2EtNDk5MC04ODY3LTBkYWFmMGQ4MmU2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/ygOAwDQYJKoZIhvcNAQELBQADggEBABOOYnucTX5m9dkITTfaFdMS IyygvdDNtdvYbLSqIGgwHlQktJmF5OvJiyFPeDoHaSCSOzcGu316AXHdkjKtz+VK Ymi7zPpKhmQo6VkXfSAg1sVWOUckVnQpw1WNgRipYVlVRapFr7+8BfiGIh9Ttc1p TT4Le71HU85dxoeUb5tqtqh9jvxuHnR0pSkuHahBOXRgPzskapv62MZ/NDuzT9aN So8WNx+YhK4xWP41BFOVpZJTJXM18hRE8O4BFbSS7s3SnErbRWvNuRsiyGNTYor2 ZVBSjbGlzcSwgd74vq/vREf+Q+3q6YNYYhzXratsCSr5HjPGP1bQRnV+CQK/ouI= -----END CERTIFICATE-----Generated at Sun Mar 1 22:26:34 2026 by rpki-client