$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57f409e2-1453-42c2-9a84-d3ea974306e8.roa File: 57f409e2-1453-42c2-9a84-d3ea974306e8.roa (raw, json) Hash identifier: QhKfRb+2TIzfEYKqQXraGZp7Q3Zp7WuGQwr5NH9Sogk= Subject key identifier: EF:95:4B:C7:CD:5A:53:2D:6A:02:3D:C3:AF:DA:C8:A4:96:85:07:79 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 72298638EB3F87B689B7ED17B4EF9056A9E82EAB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57f409e2-1453-42c2-9a84-d3ea974306e8.roa Signing time: Wed 11 Feb 2026 00:40:47 +0000 ROA not before: Wed 11 Feb 2026 00:40:47 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff3:20c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:29:86:38:eb:3f:87:b6:89:b7:ed:17:b4:ef:90:56:a9:e8:2e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 11 00:40:47 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=85aa730338923b85f2c1520c36322731b3d02b0b92095146f8b49f3bd80a4774, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2e:92:b4:de:a5:91:6e:f8:6c:95:1e:3e:53: 7e:c9:86:ec:bb:90:bf:61:a1:f4:90:c1:a0:da:e0: 2b:ac:bd:f7:c3:d2:ec:4c:eb:7d:92:1d:91:5b:e9: 20:93:7c:1c:92:7d:aa:63:28:70:7c:b4:8c:a7:71: e6:1f:45:0a:2b:01:d6:ae:46:56:b5:db:db:9b:7d: c4:55:7a:e9:73:b5:38:fb:ed:55:d1:f3:96:6c:fe: bd:ef:90:d3:2c:6f:c1:ef:21:b5:37:72:c9:45:bc: 30:cf:87:1f:1c:ce:81:9f:75:af:65:af:3f:06:8a: 97:db:7a:56:93:0e:f3:4d:2f:1b:93:be:ce:61:69: 7b:bb:ce:47:30:ba:fb:ce:38:f7:7a:1b:ab:32:93: ea:b9:08:46:ff:b2:ad:e7:cc:ed:a0:97:5c:31:01: f1:ca:8f:c8:37:00:f7:9b:6a:09:ae:b5:68:b4:63: 7d:2a:9e:b1:79:98:fa:68:50:68:23:b8:4c:72:38: c6:e0:c5:22:f7:69:b0:6d:81:82:be:df:44:fa:69: c5:3c:17:d8:30:05:8c:a7:db:19:a1:a6:24:9b:c2: da:3d:29:b5:f3:57:48:90:a3:6c:e5:56:77:f7:f1: e3:04:17:1b:fd:23:ab:b4:b4:54:95:41:d1:5c:20: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:95:4B:C7:CD:5A:53:2D:6A:02:3D:C3:AF:DA:C8:A4:96:85:07:79 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57f409e2-1453-42c2-9a84-d3ea974306e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:20c0::/46 Signature Algorithm: sha256WithRSAEncryption 73:49:d2:8d:77:05:0c:40:3e:22:95:94:75:e6:b4:b2:94:3a: 72:a6:7c:a0:1e:a6:2a:24:1b:cf:67:fb:68:df:0c:2f:69:d8: 1d:21:fc:3f:af:b9:af:24:5c:c3:b0:fb:00:f2:e2:d1:e0:44: d1:b4:7c:89:d1:96:8e:2b:2b:a6:8f:9d:5a:4d:32:15:46:69: 53:59:02:7b:4f:21:d5:9d:53:9c:12:4c:e4:ca:34:89:19:96: 27:14:c6:ff:05:57:0b:8c:4e:28:aa:66:aa:84:ee:13:f2:8b: 75:d4:c1:67:d5:f4:fd:ec:52:46:27:ec:00:0a:81:07:5b:be: c8:fc:ac:ec:d5:3e:e7:90:8a:07:a7:63:ad:d3:c6:82:9f:c7: 4a:ca:b9:df:21:1d:d1:3e:47:1d:ff:0e:39:ac:38:67:44:fb: 32:02:46:00:1c:9b:b8:2d:54:a9:2e:5d:40:9e:aa:fe:9b:36: 25:fe:d9:3c:ba:50:2c:da:84:70:ed:4d:2e:fc:3c:3c:4e:cd: 4b:4d:eb:7d:58:d5:ef:78:fd:17:40:6e:1f:f1:83:b1:d6:51: fe:5f:d3:21:42:38:0a:1f:c2:2d:b7:dd:6c:80:9f:cc:01:fc: 52:9a:09:4b:1c:c3:19:12:bb:c7:08:3b:84:93:e4:7f:f0:e2: 35:7a:a9:0b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcimGOOs/h7aJt+0XtO+QVqnoLqswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjExMDA0MDQ3WhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NWFhNzMwMzM4OTIzYjg1ZjJjMTUyMGMzNjMyMjczMWIz ZDAyYjBiOTIwOTUxNDZmOGI0OWYzYmQ4MGE0Nzc0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXLpK03qWRbvhslR4+U37Jhuy7kL9hofSQwaDa4CusvffD 0uxM632SHZFb6SCTfBySfapjKHB8tIynceYfRQorAdauRla129ubfcRVeulztTj7 7VXR85Zs/r3vkNMsb8HvIbU3cslFvDDPhx8czoGfda9lrz8GipfbelaTDvNNLxuT vs5haXu7zkcwuvvOOPd6G6syk+q5CEb/sq3nzO2gl1wxAfHKj8g3APebagmutWi0 Y30qnrF5mPpoUGgjuExyOMbgxSL3abBtgYK+30T6acU8F9gwBYyn2xmhpiSbwto9 KbXzV0iQo2zlVnf38eMEFxv9I6u0tFSVQdFcIIeDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU75VLx81aUy1qAj3Dr9rIpJaFB3kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU3ZjQwOWUyLTE0NTMtNDJjMi05YTg0LWQzZWE5NzQzMDZlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/zIMAwDQYJKoZIhvcNAQELBQADggEBAHNJ0o13BQxAPiKVlHXmtLKU OnKmfKAepiokG89n+2jfDC9p2B0h/D+vua8kXMOw+wDy4tHgRNG0fInRlo4rK6aP nVpNMhVGaVNZAntPIdWdU5wSTOTKNIkZlicUxv8FVwuMTiiqZqqE7hPyi3XUwWfV 9P3sUkYn7AAKgQdbvsj8rOzVPueQigenY63TxoKfx0rKud8hHdE+Rx3/DjmsOGdE +zICRgAcm7gtVKkuXUCeqv6bNiX+2Ty6UCzahHDtTS78PDxOzUtN631Y1e94/RdA bh/xg7HWUf5f0yFCOAofwi233WyAn8wB/FKaCUscwxkSu8cIO4ST5H/w4jV6qQs= -----END CERTIFICATE-----Generated at Mon Mar 2 00:07:48 2026 by rpki-client