$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a194b9c-e4c6-4606-a7b0-da5f125af9c1.roa File: 4a194b9c-e4c6-4606-a7b0-da5f125af9c1.roa (raw, json) Hash identifier: cFSiDZwx4XBVbTWWzzSh+73LMDRXlPTEHun2KrIunIY= Subject key identifier: AF:07:E3:E2:DE:81:8F:31:C7:56:06:54:77:24:BC:3A:AE:74:7E:87 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D18BBB80874C032E1D9570C4ABDC9751DCECE89 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a194b9c-e4c6-4606-a7b0-da5f125af9c1.roa Signing time: Wed 25 Feb 2026 00:31:17 +0000 ROA not before: Wed 25 Feb 2026 00:31:17 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f14::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:18:bb:b8:08:74:c0:32:e1:d9:57:0c:4a:bd:c9:75:1d:ce:ce:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 00:31:17 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=40fb1955c769c02ef627ffa46a5b652866fdbb1b9a6d2ef377a131668af793aa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0b:52:93:d7:9a:34:45:8f:a3:7d:16:a4:be: 02:62:fb:f7:b9:8c:94:9f:f3:39:16:12:1c:95:47: 57:f3:32:cc:d7:62:90:62:eb:c3:6e:78:35:71:fb: 99:6e:fc:8b:ef:88:55:53:27:a4:8a:c3:58:e4:71: 33:03:fa:3e:e1:bf:33:0e:88:34:f0:3b:ce:e8:98: 91:68:92:82:da:1f:7f:ec:47:9e:55:db:b0:cc:39: 0f:f3:b7:10:31:1b:89:b7:23:74:85:58:8a:ed:9c: 5a:0a:90:ae:02:4b:d6:1f:5d:79:40:ed:d9:0f:47: 1c:25:99:12:15:74:6c:45:36:57:b8:07:15:d8:fb: 44:c0:9d:50:2a:14:95:4c:08:95:ae:2f:cd:c4:e8: f5:e3:69:72:38:66:2e:14:63:d8:b2:a8:a0:33:79: f6:62:e3:b3:07:49:46:c5:4b:a2:c0:36:85:a5:a8: fd:ff:35:4d:b9:25:0d:43:f6:b9:7d:98:d9:98:31: 8b:2a:3a:b7:50:60:15:72:ef:d5:57:f7:d4:ca:53: 1c:e8:36:f8:8c:9c:43:fb:ae:46:37:8d:07:03:96: 98:70:c1:00:4a:e1:76:b1:07:1e:20:18:f7:4d:ff: e7:65:eb:89:97:5c:eb:4d:06:40:53:fb:ce:f8:13: 26:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:07:E3:E2:DE:81:8F:31:C7:56:06:54:77:24:BC:3A:AE:74:7E:87 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a194b9c-e4c6-4606-a7b0-da5f125af9c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f14::/35 Signature Algorithm: sha256WithRSAEncryption 94:4f:58:4d:80:f8:fb:86:89:58:23:61:51:61:f5:e2:3f:b3: 9e:ad:d3:e9:6c:04:89:d9:f3:e0:ca:e8:a8:5e:99:5d:11:1e: 02:2a:2e:23:ed:2d:3b:6b:fe:74:86:41:c9:27:7e:b9:5f:af: b0:12:51:60:bf:94:57:d8:70:df:ff:fb:ff:a2:bc:74:24:7f: d0:a3:25:0b:84:7a:ed:d1:81:82:19:f7:9b:c0:79:7f:00:e6: 4b:3c:2b:36:bb:42:12:2b:10:79:8b:50:10:8d:47:55:5e:fa: 32:e9:cf:33:17:fc:83:b4:46:21:e6:6e:d9:ec:7e:6d:ad:9e: 73:91:02:7b:cc:ad:53:d8:35:eb:d1:1c:16:50:fa:87:c0:75: 72:4a:42:f1:fe:3f:22:3a:b4:00:da:99:db:8d:4a:c0:52:e9: 5f:06:31:4f:c7:ef:18:03:2c:84:88:92:31:9b:e6:19:1c:a6: 66:07:6d:89:fa:49:c0:ec:df:9f:73:20:c2:8d:a8:b5:2e:2b: 05:a4:b4:4c:e9:d5:15:3a:e5:e0:c7:ee:8a:bc:8b:fc:1d:45: d3:5d:7c:09:23:8a:ab:10:00:20:3e:b7:e2:7c:01:eb:b1:f7: c9:cf:c6:c9:13:f6:19:0e:29:d2:12:1c:37:06:50:6b:7b:30: 85:e8:20:42 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXRi7uAh0wDLh2VcMSr3JdR3OzokwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDAzMTE3WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MGZiMTk1NWM3NjljMDJlZjYyN2ZmYTQ2YTViNjUyODY2 ZmRiYjFiOWE2ZDJlZjM3N2ExMzE2NjhhZjc5M2FhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRC1KT15o0RY+jfRakvgJi+/e5jJSf8zkWEhyVR1fzMszX YpBi68NueDVx+5lu/IvviFVTJ6SKw1jkcTMD+j7hvzMOiDTwO87omJFokoLaH3/s R55V27DMOQ/ztxAxG4m3I3SFWIrtnFoKkK4CS9YfXXlA7dkPRxwlmRIVdGxFNle4 BxXY+0TAnVAqFJVMCJWuL83E6PXjaXI4Zi4UY9iyqKAzefZi47MHSUbFS6LANoWl qP3/NU25JQ1D9rl9mNmYMYsqOrdQYBVy79VX99TKUxzoNviMnEP7rkY3jQcDlphw wQBK4XaxBx4gGPdN/+dl64mXXOtNBkBT+874EybxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUrwfj4t6BjzHHVgZUdyS8Oq50focwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhMTk0YjljLWU0YzYtNDYwNi1hN2IwLWRhNWYxMjVhZjljMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgUmAB8UADANBgkqhkiG9w0BAQsFAAOCAQEAlE9YTYD4+4aJWCNhUWH14j+z nq3T6WwEidnz4MroqF6ZXREeAiouI+0tO2v+dIZBySd+uV+vsBJRYL+UV9hw3//7 /6K8dCR/0KMlC4R67dGBghn3m8B5fwDmSzwrNrtCEisQeYtQEI1HVV76MunPMxf8 g7RGIeZu2ex+ba2ec5ECe8ytU9g169EcFlD6h8B1ckpC8f4/Ijq0ANqZ241KwFLp XwYxT8fvGAMshIiSMZvmGRymZgdtifpJwOzfn3Mgwo2otS4rBaS0TOnVFTrl4Mfu iryL/B1F0118CSOKqxAAID634nwB67H3yc/GyRP2GQ4p0hIcNwZQa3swheggQg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:18:41 2026 by rpki-client