$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ecb3ce3-b1c9-46df-ad6b-0f6f40ca73d8.roa File: 6ecb3ce3-b1c9-46df-ad6b-0f6f40ca73d8.roa (raw, json) Hash identifier: 6PHH1le7az0m5w6wkXHfJIMZYl5x2D3IShNvPie7K4s= Subject key identifier: FB:7C:E1:DA:77:D6:4C:6D:92:1F:34:16:31:00:25:B9:AD:B5:14:05 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 297AA40C05AF46B0FDEB9C25ADB4E79E03C0F415 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ecb3ce3-b1c9-46df-ad6b-0f6f40ca73d8.roa Signing time: Sat 28 Feb 2026 00:40:40 +0000 ROA not before: Sat 28 Feb 2026 00:40:40 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 156.2.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7a:a4:0c:05:af:46:b0:fd:eb:9c:25:ad:b4:e7:9e:03:c0:f4:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 28 00:40:40 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=99bc8425569e2cf40c20787b9065ddbff0af2ed54bcbd5848ada1cef9cc8919a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2e:f7:0b:0d:7d:68:4f:4a:a0:a2:75:9f:2a: b7:81:88:2d:f5:e4:89:b5:cc:d4:12:dd:a7:f0:d4: f9:32:24:34:f8:d0:a5:35:af:f2:b5:06:b0:d2:60: f5:dd:fe:ac:d3:0b:c4:73:5c:3e:96:ab:ef:25:52: a3:fd:a2:cc:b1:d5:1d:67:56:57:1e:18:c5:3b:d4: 73:7b:d4:76:80:6a:cf:79:72:e3:bb:60:4f:38:db: d6:e8:ac:21:82:9e:0e:d1:e5:e3:a1:ff:40:40:ac: 0c:72:9a:a3:11:63:1a:16:31:c5:6c:b1:42:9a:a7: 40:67:bd:e0:bb:7d:fb:3e:44:3f:e9:b7:14:21:f2: bc:35:55:ac:e7:73:08:ed:d3:41:4b:87:a8:dc:b6: 64:ea:0d:58:16:b8:8d:24:22:13:06:56:b1:0e:de: 12:93:ec:6d:53:c2:9a:c3:68:b4:8d:d4:b1:c3:32: 67:c0:74:f6:14:31:50:07:2e:5b:4d:c6:f7:e9:41: a7:01:13:75:38:9b:bb:3d:00:d2:58:13:c4:63:00: 6d:27:49:08:0d:b6:3e:24:c5:ac:df:c8:74:35:0f: 90:3e:fb:00:74:08:b2:f0:01:6a:1a:a3:ca:2b:79: 3d:1e:c9:c0:2b:af:51:73:0d:9d:4d:e5:35:e2:d2: f2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7C:E1:DA:77:D6:4C:6D:92:1F:34:16:31:00:25:B9:AD:B5:14:05 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ecb3ce3-b1c9-46df-ad6b-0f6f40ca73d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.2.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7c:3d:2e:ca:a2:9d:f9:65:68:08:57:bb:aa:22:bd:5f:65:0e: ce:4e:40:c8:10:c9:d4:69:be:5e:b8:84:7a:44:99:3e:db:d1: 27:12:b6:6d:d8:51:1f:16:7f:42:c3:ee:96:e8:77:85:80:78: c8:6d:94:75:fe:2a:9d:08:1c:c0:a7:cb:9b:d5:46:a2:cc:a2: f6:1a:be:3a:7d:4a:41:5b:53:14:d6:af:c4:9d:14:19:c5:07: 5c:1c:61:b0:11:ee:36:41:81:59:2d:52:e0:ed:1e:10:f3:24: a2:ee:32:d2:a6:1b:ac:d9:53:ec:8f:29:9a:e2:89:c6:58:3d: 0a:0c:50:34:58:82:98:eb:d0:1c:68:bb:67:91:13:d9:69:36: bd:b2:b9:a8:f9:86:f7:36:d2:df:21:bb:43:66:9e:ea:4c:11: 64:2c:04:9a:dd:60:21:83:5d:8e:33:ca:60:84:23:1d:af:97: 1c:17:97:a6:9c:12:e4:22:3a:5b:76:bf:10:61:bf:90:68:c4: b2:39:74:00:b6:45:62:1d:ce:15:ee:40:80:9e:03:31:6c:f2: 35:85:1a:62:7e:f0:0b:d4:ab:53:61:00:2f:a2:eb:34:b4:ed: 3a:f6:0e:40:01:48:cd:63:21:2b:fe:4b:ef:d0:2e:ea:14:db: 40:1a:ad:cf -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKXqkDAWvRrD965wlrbTnngPA9BUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI4MDA0MDQwWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OWJjODQyNTU2OWUyY2Y0MGMyMDc4N2I5MDY1ZGRiZmYw YWYyZWQ1NGJjYmQ1ODQ4YWRhMWNlZjljYzg5MTlhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvLvcLDX1oT0qgonWfKreBiC315Im1zNQS3afw1PkyJDT4 0KU1r/K1BrDSYPXd/qzTC8RzXD6Wq+8lUqP9osyx1R1nVlceGMU71HN71HaAas95 cuO7YE8429borCGCng7R5eOh/0BArAxymqMRYxoWMcVssUKap0BnveC7ffs+RD/p txQh8rw1Vazncwjt00FLh6jctmTqDVgWuI0kIhMGVrEO3hKT7G1TwprDaLSN1LHD MmfAdPYUMVAHLltNxvfpQacBE3U4m7s9ANJYE8RjAG0nSQgNtj4kxazfyHQ1D5A+ +wB0CLLwAWoao8oreT0eycArr1FzDZ1N5TXi0vLzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU+3zh2nfWTG2SHzQWMQAlua21FAUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZlY2IzY2UzLWIxYzktNDZkZi1hZDZiLTBmNmY0MGNhNzNkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCcAjANBgkqhkiG9w0BAQsFAAOCAQEAfD0uyqKd+WVoCFe7qiK9X2UOzk5A yBDJ1Gm+XriEekSZPtvRJxK2bdhRHxZ/QsPuluh3hYB4yG2Udf4qnQgcwKfLm9VG osyi9hq+On1KQVtTFNavxJ0UGcUHXBxhsBHuNkGBWS1S4O0eEPMkou4y0qYbrNlT 7I8pmuKJxlg9CgxQNFiCmOvQHGi7Z5ET2Wk2vbK5qPmG9zbS3yG7Q2ae6kwRZCwE mt1gIYNdjjPKYIQjHa+XHBeXppwS5CI6W3a/EGG/kGjEsjl0ALZFYh3OFe5AgJ4D MWzyNYUaYn7wC9SrU2EAL6LrNLTtOvYOQAFIzWMhK/5L79Au6hTbQBqtzw== -----END CERTIFICATE-----Generated at Sun Mar 1 22:16:10 2026 by rpki-client