$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5adca02c-6787-4a0f-ae64-8edefab86421.roa File: 5adca02c-6787-4a0f-ae64-8edefab86421.roa (raw, json) Hash identifier: xvNzRALtk+7wTvKX63NbRx2of5MZI4ADluHUrBZZ60Q= Subject key identifier: 12:BD:E1:70:9A:8E:DE:CA:47:8A:2B:65:4F:3C:E7:DD:07:E2:64:46 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1303FA172E6CFCAA42F0E6AF3138B38D3EAFC90D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5adca02c-6787-4a0f-ae64-8edefab86421.roa Signing time: Wed 25 Feb 2026 02:01:17 +0000 ROA not before: Wed 25 Feb 2026 02:01:17 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f25:4000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:03:fa:17:2e:6c:fc:aa:42:f0:e6:af:31:38:b3:8d:3e:af:c9:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 02:01:17 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=e6e3f3ba23171847158d7d2b2847481143e34257821d623ba42d21d85ca2cec1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ba:3a:5a:b8:15:5e:5b:19:0e:86:79:41:ad: 95:d4:45:53:ce:7f:62:d7:73:85:24:33:22:5a:7d: a6:7d:70:b5:76:14:26:22:96:49:4c:79:67:97:8c: e1:1b:c9:2f:0b:aa:14:05:12:41:9a:74:cd:71:5d: c6:2f:a4:d1:93:6b:77:63:ec:df:c7:b0:90:17:64: 94:30:0f:9e:c7:ab:e2:92:51:24:ba:93:e1:58:22: a2:1e:9e:86:c3:1d:a8:f3:e2:28:dc:7b:5b:f2:01: 7e:6f:93:06:9c:b0:47:7f:fe:45:f2:9b:84:7a:ae: dc:9c:e8:aa:22:2f:d1:ff:ae:c5:de:a8:e6:a7:e5: c5:65:17:8e:09:69:32:dd:d3:ed:cc:81:a2:cc:7a: bd:fb:62:de:4b:e6:6b:70:9b:83:90:68:27:4a:dd: 11:35:f4:b1:d9:80:00:d9:42:00:36:6d:dd:88:c6: 6b:95:ea:50:89:c5:f3:d3:12:4c:23:f1:77:fb:f8: bd:e8:b0:a8:1e:3c:7f:d0:91:01:e8:eb:aa:45:75: 27:9e:82:c7:84:d9:fd:aa:76:0b:dd:31:1e:8e:a4: 66:6d:14:29:a3:65:86:10:6c:b8:08:76:55:62:d6: a9:10:90:4d:f0:26:e2:06:8b:c8:03:cd:9c:33:5a: 1b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BD:E1:70:9A:8E:DE:CA:47:8A:2B:65:4F:3C:E7:DD:07:E2:64:46 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5adca02c-6787-4a0f-ae64-8edefab86421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f25:4000::/37 Signature Algorithm: sha256WithRSAEncryption 7d:e4:6f:6c:85:dd:ee:7e:e4:8d:cc:a7:bc:db:85:70:e6:3a: b8:81:97:f5:08:9d:72:66:92:07:38:bc:21:57:33:23:9a:1d: 98:40:c7:11:3b:82:7a:a8:88:a2:39:e3:03:ad:36:2a:08:af: 23:3d:f3:96:ac:3a:b2:5b:c9:3b:3a:d2:8f:c5:fa:1e:d8:05: 2e:c1:c6:78:95:a7:ee:a0:82:3d:28:bc:f1:0f:ee:f3:68:f1: 02:a6:5e:8b:d3:83:49:20:a2:eb:5b:ea:f0:74:74:37:f5:47: 36:69:6a:cf:7d:86:e4:8f:2d:6d:cb:20:9e:1a:d0:40:12:b8: 01:0c:de:9a:ac:b9:54:5a:63:1e:85:39:8d:15:32:17:73:34: 79:96:fd:16:b8:df:ff:82:2b:29:f7:0c:64:82:e6:52:1f:fa: e1:a1:cb:8e:ed:3d:26:b8:f6:ef:fd:85:cf:19:07:5d:bb:4f: e2:ba:c6:83:a2:b9:e9:41:63:f9:56:6a:21:33:5f:e1:cd:1e: ad:9a:6d:89:fd:18:d6:58:b4:0b:18:4a:89:cd:0e:2d:6a:b6: 2d:c7:6c:26:0e:56:4d:aa:0e:a9:9d:14:02:09:8f:ef:4c:c2: 99:09:e8:9d:e2:9b:ef:9c:04:92:bb:4e:bd:a9:5c:63:f9:1c: ef:a5:09:54 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUEwP6Fy5s/KpC8OavMTizjT6vyQ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDIwMTE3WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNmUzZjNiYTIzMTcxODQ3MTU4ZDdkMmIyODQ3NDgxMTQz ZTM0MjU3ODIxZDYyM2JhNDJkMjFkODVjYTJjZWMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRujpauBVeWxkOhnlBrZXURVPOf2LXc4UkMyJafaZ9cLV2 FCYilklMeWeXjOEbyS8LqhQFEkGadM1xXcYvpNGTa3dj7N/HsJAXZJQwD57Hq+KS USS6k+FYIqIenobDHajz4ijce1vyAX5vkwacsEd//kXym4R6rtyc6KoiL9H/rsXe qOan5cVlF44JaTLd0+3MgaLMer37Yt5L5mtwm4OQaCdK3RE19LHZgADZQgA2bd2I xmuV6lCJxfPTEkwj8Xf7+L3osKgePH/QkQHo66pFdSeegseE2f2qdgvdMR6OpGZt FCmjZYYQbLgIdlVi1qkQkE3wJuIGi8gDzZwzWhsfAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUEr3hcJqO3spHiitlTzzn3QfiZEYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVhZGNhMDJjLTY3ODctNGEwZi1hZTY0LThlZGVmYWI4NjQyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8lQDANBgkqhkiG9w0BAQsFAAOCAQEAfeRvbIXd7n7kjcynvNuFcOY6 uIGX9QidcmaSBzi8IVczI5odmEDHETuCeqiIojnjA602KgivIz3zlqw6slvJOzrS j8X6HtgFLsHGeJWn7qCCPSi88Q/u82jxAqZei9ODSSCi61vq8HR0N/VHNmlqz32G 5I8tbcsgnhrQQBK4AQzemqy5VFpjHoU5jRUyF3M0eZb9Frjf/4IrKfcMZILmUh/6 4aHLju09Jrj27/2FzxkHXbtP4rrGg6K56UFj+VZqITNf4c0erZptif0Y1li0CxhK ic0OLWq2LcdsJg5WTaoOqZ0UAgmP70zCmQnoneKb75wEkrtOvalcY/kc76UJVA== -----END CERTIFICATE-----Generated at Mon Mar 2 00:11:02 2026 by rpki-client