$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c3a9442-11f5-4da8-849a-8e9085cd735c.roa File: 6c3a9442-11f5-4da8-849a-8e9085cd735c.roa (raw, json) Hash identifier: 60n8kGHumCKUka0sS29KB+xQ7b9Tq8svWHxe/UJyr/I= Subject key identifier: 14:18:8D:AE:DE:F0:4F:C5:11:6B:81:70:8D:41:53:00:4C:4C:47:3F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B7A788E7182AC1469E555A8ED4F52C9EB3B90A8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c3a9442-11f5-4da8-849a-8e9085cd735c.roa Signing time: Sat 21 Feb 2026 00:40:08 +0000 ROA not before: Sat 21 Feb 2026 00:40:08 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fec:1800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:7a:78:8e:71:82:ac:14:69:e5:55:a8:ed:4f:52:c9:eb:3b:90:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:40:08 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=70ceda4c23d817113dd64d00c4bbebb15da38d2f25f6b49c90e78d6a61030320, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d9:2c:97:a7:26:3c:a7:b1:2f:22:17:13:3b: 95:66:40:57:4b:62:b0:b8:39:0c:e5:cd:8c:cb:7c: 44:a8:87:a2:c8:a0:2d:b0:61:35:9b:e2:80:df:ef: d4:7f:75:84:5d:b4:53:76:1c:4f:45:fa:94:7a:9d: 52:ab:45:18:73:34:c6:9c:85:3c:09:d8:25:66:b4: 5e:1e:28:0d:fe:93:63:21:0c:60:7d:8d:95:55:25: 72:c1:58:d4:b2:80:28:91:27:00:55:3f:62:f2:bb: 6e:6d:ab:65:1d:d1:03:78:ab:2a:b4:e0:7e:0e:8b: 1e:29:15:9f:9c:8c:e2:c0:11:cf:f7:a6:72:f7:a8: 78:ee:12:71:25:21:1a:b5:c0:c1:b1:b3:78:84:63: 96:1b:31:7a:d6:18:3a:4d:0e:8a:b7:1d:eb:71:aa: 24:ce:24:42:ba:59:d7:19:87:82:aa:be:f6:4f:3a: 46:2e:e0:fb:8f:19:92:d6:33:77:90:85:10:fd:f9: 47:ca:01:6f:92:7f:3f:26:88:04:60:95:6c:2e:0f: 4c:b7:af:fa:30:b0:71:f9:e0:c5:6a:5c:f1:40:38: 23:40:f0:9f:1f:aa:85:3e:89:73:a4:d2:d9:3b:05: 10:73:01:c1:3a:3c:bb:1d:6e:fe:8c:fe:8c:62:39: 15:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:18:8D:AE:DE:F0:4F:C5:11:6B:81:70:8D:41:53:00:4C:4C:47:3F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c3a9442-11f5-4da8-849a-8e9085cd735c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:1800::/48 Signature Algorithm: sha256WithRSAEncryption 7d:85:c2:88:35:61:e6:03:fe:9e:8e:09:9d:f7:5d:a1:70:b1: 83:e0:58:9f:d0:b3:54:2e:39:18:1a:a6:bd:ed:c4:e6:94:42: 10:13:1c:21:a4:e7:b2:68:49:57:7a:df:25:52:9b:21:c8:2f: e1:47:df:e6:c5:59:9c:2d:9c:d7:71:d0:cd:41:46:60:fb:f1: f4:33:bc:94:6a:1e:c7:50:69:4a:1c:73:c8:73:05:0f:e1:01: ff:3b:98:df:1a:6b:59:89:48:dc:2b:b5:56:36:3e:f3:e2:6f: 5d:1a:82:3a:9c:63:e9:0c:91:39:e1:3a:38:ec:a0:78:97:e2: 07:10:94:38:a1:9d:fb:23:7e:0f:fd:41:d3:09:0d:22:cc:0e: 70:0f:5d:e3:a6:b4:12:04:f3:cc:14:a2:72:72:b4:1a:b9:a9: 41:c6:d7:13:69:f0:4f:3b:b9:12:90:97:ca:ff:a7:a2:87:a1: e4:99:c4:a7:a6:10:a2:dd:7b:24:bd:5a:dd:e3:6e:b9:dc:1d: 6b:b2:85:45:26:f9:aa:8f:a6:74:ad:14:7d:2a:03:55:07:7e: fb:9a:89:e2:8b:6e:dd:d2:0e:6a:5a:69:89:7f:a2:ca:1e:77: 96:38:d3:90:4b:a7:9d:36:35:3c:4f:f9:61:12:bc:65:7b:17: 2d:9b:5d:9c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUO3p4jnGCrBRp5VWo7U9Syes7kKgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDA0MDA4WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MGNlZGE0YzIzZDgxNzExM2RkNjRkMDBjNGJiZWJiMTVk YTM4ZDJmMjVmNmI0OWM5MGU3OGQ2YTYxMDMwMzIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCp2SyXpyY8p7EvIhcTO5VmQFdLYrC4OQzlzYzLfESoh6LI oC2wYTWb4oDf79R/dYRdtFN2HE9F+pR6nVKrRRhzNMachTwJ2CVmtF4eKA3+k2Mh DGB9jZVVJXLBWNSygCiRJwBVP2Lyu25tq2Ud0QN4qyq04H4Oix4pFZ+cjOLAEc/3 pnL3qHjuEnElIRq1wMGxs3iEY5YbMXrWGDpNDoq3HetxqiTOJEK6WdcZh4KqvvZP OkYu4PuPGZLWM3eQhRD9+UfKAW+Sfz8miARglWwuD0y3r/owsHH54MVqXPFAOCNA 8J8fqoU+iXOk0tk7BRBzAcE6PLsdbv6M/oxiORVbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFBiNrt7wT8URa4FwjUFTAExMRz8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZjM2E5NDQyLTExZjUtNGRhOC04NDlhLThlOTA4NWNkNzM1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sGAAwDQYJKoZIhvcNAQELBQADggEBAH2Fwog1YeYD/p6OCZ33XaFw sYPgWJ/Qs1QuORgapr3txOaUQhATHCGk57JoSVd63yVSmyHIL+FH3+bFWZwtnNdx 0M1BRmD78fQzvJRqHsdQaUocc8hzBQ/hAf87mN8aa1mJSNwrtVY2PvPib10agjqc Y+kMkTnhOjjsoHiX4gcQlDihnfsjfg/9QdMJDSLMDnAPXeOmtBIE88wUonJytBq5 qUHG1xNp8E87uRKQl8r/p6KHoeSZxKemEKLdeyS9Wt3jbrncHWuyhUUm+aqPpnSt FH0qA1UHfvuaieKLbt3SDmpaaYl/osoed5Y405BLp502NTxP+WESvGV7Fy2bXZw= -----END CERTIFICATE-----Generated at Sun Mar 1 22:24:10 2026 by rpki-client