$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bcbc762-63cb-4216-960c-cf87023fe104.roa File: 4bcbc762-63cb-4216-960c-cf87023fe104.roa (raw, json) Hash identifier: x4k1SemuDUy8AZ7eGgC7eN84t7pT96RzRt+e70X3bMc= Subject key identifier: F4:32:1D:3D:21:9F:1E:8B:D1:19:4A:82:DB:EC:E4:7C:D4:91:2A:6A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11B2BAF272E82D0E22C5919B99F8165AB24DB22D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bcbc762-63cb-4216-960c-cf87023fe104.roa Signing time: Tue 24 Feb 2026 00:40:14 +0000 ROA not before: Tue 24 Feb 2026 00:40:14 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff2:50c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b2:ba:f2:72:e8:2d:0e:22:c5:91:9b:99:f8:16:5a:b2:4d:b2:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 00:40:14 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=dc74958151bf0fcea387a2709a03371c9aeaee8717ec5cbe3c559b4e9fe62a2b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:12:96:8d:1f:c1:9b:ba:24:63:89:60:bb:5b: 4e:67:2e:08:32:ef:72:53:8a:8f:47:d7:e3:a0:e1: 2a:d6:4b:65:aa:ce:6f:22:fb:a4:08:74:66:24:39: 4d:82:6d:01:93:c8:98:1d:a3:45:9b:17:cb:3f:c8: f8:24:3c:40:df:80:eb:33:7c:41:db:39:7e:b4:ea: 94:50:0a:58:28:b7:1b:25:d1:4d:7e:45:16:13:87: 7a:bb:84:dc:d1:f8:4c:3a:7c:ec:ae:0c:37:66:e8: 3e:b9:42:02:a9:6e:d2:2b:35:9f:d5:b4:b6:c0:9b: 14:a6:99:3b:62:92:b2:b2:6f:f1:84:76:d0:f9:c0: 82:62:b6:76:ee:a9:e5:c7:b8:b9:ce:9c:dd:a2:04: c2:88:95:27:f0:7a:08:d6:b1:27:05:70:c1:b3:97: 56:49:3d:34:c1:06:e9:b3:96:2d:f2:0c:92:ae:5b: 80:fc:0d:34:c2:ce:da:e3:db:dd:41:ca:c5:e8:67: 2e:e9:1f:1a:10:a3:36:ce:da:22:7d:b8:bc:cb:3d: 7f:73:a3:d5:c3:d2:5d:97:7c:67:ac:73:6a:7c:c0: 0f:78:0c:61:ad:ec:34:fb:da:a9:ca:37:64:d0:90: d7:af:f5:dd:87:29:9c:65:52:c7:dc:eb:45:a3:bf: 55:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:32:1D:3D:21:9F:1E:8B:D1:19:4A:82:DB:EC:E4:7C:D4:91:2A:6A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bcbc762-63cb-4216-960c-cf87023fe104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:50c0::/48 Signature Algorithm: sha256WithRSAEncryption d0:b6:5f:c3:e6:5f:28:12:48:36:3e:fd:7d:23:80:dd:53:b1: 0f:84:a1:84:fc:f3:0c:ab:23:bd:85:d8:97:44:c9:e8:9c:53: 43:8e:e5:bd:e1:83:9b:a0:a4:12:84:47:71:39:82:4f:c3:9e: 95:69:4a:aa:6e:b7:1b:42:6e:3e:6b:c8:39:de:45:df:77:06: 97:80:81:5f:dd:7a:9f:1c:bf:f7:f2:42:c4:68:a5:33:9c:9f: 93:d8:21:16:8e:a0:b2:af:b0:67:3b:98:5b:e0:a3:dd:60:e0: 06:75:98:b8:a1:67:e0:f1:ef:9d:2b:b6:a1:84:6a:db:95:3a: cd:95:44:da:0f:9e:9e:71:e4:f5:71:9a:71:fb:20:bb:81:da: 38:cc:df:17:31:42:11:3b:dd:48:c2:b1:08:25:bd:7c:e3:2c: 4d:d0:1c:ad:9c:58:4d:7f:83:c9:bc:e6:d5:0b:c4:df:d8:5d: 6d:0c:a7:12:e2:32:0f:d9:d8:72:9f:29:cf:2f:d9:f2:80:ff: d6:d3:c7:5c:bc:4a:83:27:9d:c5:80:73:f0:db:7d:f5:2b:b1: 47:5e:b7:f4:86:d2:f4:c3:70:99:e9:50:c6:10:63:c2:b1:cd: 18:07:92:84:48:1c:91:c8:84:ba:9f:79:8d:1f:38:f1:21:d0: 8b:7b:5a:9e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEbK68nLoLQ4ixZGbmfgWWrJNsi0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDA0MDE0WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYzc0OTU4MTUxYmYwZmNlYTM4N2EyNzA5YTAzMzcxYzlh ZWFlZTg3MTdlYzVjYmUzYzU1OWI0ZTlmZTYyYTJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdEpaNH8GbuiRjiWC7W05nLggy73JTio9H1+Og4SrWS2Wq zm8i+6QIdGYkOU2CbQGTyJgdo0WbF8s/yPgkPEDfgOszfEHbOX606pRQClgotxsl 0U1+RRYTh3q7hNzR+Ew6fOyuDDdm6D65QgKpbtIrNZ/VtLbAmxSmmTtikrKyb/GE dtD5wIJitnbuqeXHuLnOnN2iBMKIlSfwegjWsScFcMGzl1ZJPTTBBumzli3yDJKu W4D8DTTCztrj291BysXoZy7pHxoQozbO2iJ9uLzLPX9zo9XD0l2XfGesc2p8wA94 DGGt7DT72qnKN2TQkNev9d2HKZxlUsfc60Wjv1V3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU9DIdPSGfHovRGUqC2+zkfNSRKmowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRiY2JjNzYyLTYzY2ItNDIxNi05NjBjLWNmODcwMjNmZTEwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/yUMAwDQYJKoZIhvcNAQELBQADggEBANC2X8PmXygSSDY+/X0jgN1T sQ+EoYT88wyrI72F2JdEyeicU0OO5b3hg5ugpBKER3E5gk/DnpVpSqputxtCbj5r yDneRd93BpeAgV/dep8cv/fyQsRopTOcn5PYIRaOoLKvsGc7mFvgo91g4AZ1mLih Z+Dx750rtqGEatuVOs2VRNoPnp5x5PVxmnH7ILuB2jjM3xcxQhE73UjCsQglvXzj LE3QHK2cWE1/g8m85tULxN/YXW0MpxLiMg/Z2HKfKc8v2fKA/9bTx1y8SoMnncWA c/DbffUrsUdet/SG0vTDcJnpUMYQY8KxzRgHkoRIHJHIhLqfeY0fOPEh0It7Wp4= -----END CERTIFICATE-----Generated at Mon Mar 2 00:14:14 2026 by rpki-client