$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e68000d-b224-4a7b-afd2-7a6c5c55bbe8.roa File: 5e68000d-b224-4a7b-afd2-7a6c5c55bbe8.roa (raw, json) Hash identifier: qAKcAzBzzuOgvsB5hmktgUa2tAQZgD2QuX61lTstOmM= Subject key identifier: 79:5F:9E:F3:7A:24:50:8D:E4:17:0A:A1:59:EA:FC:D8:13:8A:9E:35 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 437AC5880A93CDE6016C63D746633254169CA804 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e68000d-b224-4a7b-afd2-7a6c5c55bbe8.roa Signing time: Tue 10 Feb 2026 00:40:08 +0000 ROA not before: Tue 10 Feb 2026 00:40:08 +0000 ROA not after: Mon 11 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fa0:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7a:c5:88:0a:93:cd:e6:01:6c:63:d7:46:63:32:54:16:9c:a8:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 10 00:40:08 2026 GMT Not After : May 11 23:59:59 2026 GMT Subject: serialNumber=3e925e18df7714626d76cf364b45421daacb253b2257a9dd64e0e4fe00734a57, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:76:fc:84:ec:89:b1:4f:35:37:15:ea:65:ac: 72:bb:d4:da:13:fc:0d:4a:8b:55:58:68:d0:e8:2e: 02:dd:c3:f3:b7:37:3d:1f:36:71:9c:30:62:29:70: d2:03:ce:9d:71:04:a0:78:5f:bd:5d:31:d9:05:fa: 3d:d1:ab:67:c1:4e:5e:bd:09:2a:b6:f6:37:44:8b: a0:91:21:37:5f:08:ef:eb:14:96:a3:56:d2:50:ae: d9:d4:fc:1d:a3:7c:e6:98:3a:be:fc:c1:40:f9:e1: 85:82:20:9b:c6:61:05:51:19:c0:de:6a:45:b0:ae: 6a:19:60:cd:45:34:97:0f:85:73:e7:ec:fc:2c:54: a0:27:e6:34:9e:20:6f:91:32:4c:a0:b4:64:d3:ae: 7e:dd:5e:86:46:15:0d:ff:b2:83:a9:18:7d:2f:b8: ee:30:b7:be:fb:59:8a:42:bb:fe:57:e4:bf:3e:b6: 11:ec:ce:fc:3c:0a:48:dd:33:ce:a4:37:7e:ce:17: b3:b1:8d:0e:ea:e9:32:32:cb:0b:41:34:0d:8f:97: bd:df:f0:b9:ea:66:59:b2:1f:23:c7:a6:35:c7:81: 66:6d:c8:e7:4e:26:ad:22:ed:25:c0:3c:67:af:8f: ee:c5:af:5b:fc:ee:58:29:38:1d:e9:7e:ab:6d:ee: e6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5F:9E:F3:7A:24:50:8D:E4:17:0A:A1:59:EA:FC:D8:13:8A:9E:35 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e68000d-b224-4a7b-afd2-7a6c5c55bbe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:c000::/40 Signature Algorithm: sha256WithRSAEncryption d7:3e:97:01:48:11:07:6b:18:8e:4d:cd:a7:2d:51:de:fc:da: 69:e3:c0:3c:d0:26:9a:79:17:1b:b7:62:03:4a:84:6b:cc:3e: cc:b7:e7:ff:68:7e:c4:95:4d:af:98:57:81:6c:15:31:9c:6b: 13:06:eb:e2:67:6b:82:c4:23:d2:ea:72:d9:b9:20:b2:eb:66: 65:2b:5d:9f:9c:d7:f3:75:0b:6e:a8:1f:8e:6b:c8:53:c0:04: 87:e8:08:99:59:8d:dc:f1:4d:b8:cf:b4:f9:17:c4:3c:0a:52: e8:8f:f5:b7:80:9f:95:b4:ce:9e:2e:cc:e7:cb:2a:0b:e1:fe: 6d:89:fd:26:e7:d8:3c:9d:18:b7:0a:c3:13:ce:ac:4c:00:0d: 30:57:02:cb:10:b6:81:d4:50:98:50:89:93:65:fd:55:48:bc: e3:a4:4c:73:d6:91:19:8c:c3:0e:36:13:9b:f1:cb:62:c0:0d: a5:8d:b5:12:4f:7b:d0:14:bf:87:a7:58:2a:fb:a9:7a:69:1c: cc:92:fa:bb:72:ea:22:ea:d9:ae:aa:d4:10:ff:a3:46:97:8b: ef:41:d9:95:20:3f:6e:79:d6:bb:13:e0:36:d2:8d:65:67:ba: 33:a2:a1:63:fc:fd:30:7d:22:61:ee:94:63:01:3e:26:45:cc: 8c:81:a9:64 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQ3rFiAqTzeYBbGPXRmMyVBacqAQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDA0MDA4WhcNMjYwNTExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTkyNWUxOGRmNzcxNDYyNmQ3NmNmMzY0YjQ1NDIxZGFh Y2IyNTNiMjI1N2E5ZGQ2NGUwZTRmZTAwNzM0YTU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2dvyE7ImxTzU3FeplrHK71NoT/A1Ki1VYaNDoLgLdw/O3 Nz0fNnGcMGIpcNIDzp1xBKB4X71dMdkF+j3Rq2fBTl69CSq29jdEi6CRITdfCO/r FJajVtJQrtnU/B2jfOaYOr78wUD54YWCIJvGYQVRGcDeakWwrmoZYM1FNJcPhXPn 7PwsVKAn5jSeIG+RMkygtGTTrn7dXoZGFQ3/soOpGH0vuO4wt777WYpCu/5X5L8+ thHszvw8CkjdM86kN37OF7OxjQ7q6TIyywtBNA2Pl73f8LnqZlmyHyPHpjXHgWZt yOdOJq0i7SXAPGevj+7Fr1v87lgpOB3pfqtt7uZNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUeV+e83okUI3kFwqhWer82BOKnjUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlNjgwMDBkLWIyMjQtNGE3Yi1hZmQyLTdhNmM1YzU1YmJlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+gwDANBgkqhkiG9w0BAQsFAAOCAQEA1z6XAUgRB2sYjk3Npy1R3vza aePAPNAmmnkXG7diA0qEa8w+zLfn/2h+xJVNr5hXgWwVMZxrEwbr4mdrgsQj0upy 2bkgsutmZStdn5zX83ULbqgfjmvIU8AEh+gImVmN3PFNuM+0+RfEPApS6I/1t4Cf lbTOni7M58sqC+H+bYn9JufYPJ0YtwrDE86sTAANMFcCyxC2gdRQmFCJk2X9VUi8 46RMc9aRGYzDDjYTm/HLYsANpY21Ek970BS/h6dYKvupemkczJL6u3LqIurZrqrU EP+jRpeL70HZlSA/bnnWuxPgNtKNZWe6M6KhY/z9MH0iYe6UYwE+JkXMjIGpZA== -----END CERTIFICATE-----Generated at Mon Mar 2 05:42:23 2026 by rpki-client