$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72333184-87ac-4997-aef3-ad6d2ebcdd26.roa File: 72333184-87ac-4997-aef3-ad6d2ebcdd26.roa (raw, json) Hash identifier: 88YVEThddYrbDhRFnxdL6TKtlhMOFnR1Ob4mZSRPT0Y= Subject key identifier: BC:FB:71:CC:A2:2D:4D:1E:7A:46:8C:AF:A9:A0:88:13:D5:10:D3:CA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 57B08CAE9E78350806C7A44B35D1CC625F1C83CD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72333184-87ac-4997-aef3-ad6d2ebcdd26.roa Signing time: Sat 21 Feb 2026 01:01:17 +0000 ROA not before: Sat 21 Feb 2026 01:01:17 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b0:8c:ae:9e:78:35:08:06:c7:a4:4b:35:d1:cc:62:5f:1c:83:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:01:17 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=3b929138af2a8c3de92fd3185b7b0bc1d763a9b1ffb3e9e657f99334fb49bad0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:eb:cf:32:78:8b:83:d3:4d:6f:6c:6b:f1:99: a9:3c:18:0f:3e:9c:cd:cc:b1:c7:58:36:f0:c7:67: 4a:64:83:6c:c9:1f:7f:b7:95:c5:85:c3:fe:ac:d0: d3:3e:1e:48:e8:9d:74:d2:80:e2:c4:16:7e:22:39: 19:6b:6f:70:42:d1:03:c1:6b:e5:75:ef:58:56:18: 4c:5e:d6:32:0d:36:52:0b:83:f7:69:1d:72:b6:f0: 52:65:65:f1:dd:ce:aa:dd:ca:fb:c4:1f:24:9b:ba: ec:88:3b:33:55:81:8a:6e:4f:bd:dd:e1:f8:bc:5d: 33:e7:75:3c:41:a0:da:ce:8a:28:b6:0e:18:0a:3f: 51:fc:a8:cb:40:a9:13:ec:90:b7:e8:93:05:74:22: 5b:e1:2e:fa:b4:44:0e:bc:a4:2a:d6:5c:f7:e1:09: 84:44:67:38:c2:b4:ee:50:78:9e:69:9b:07:c8:f4: 1e:7b:91:5f:fe:26:e7:a5:35:de:10:53:bf:1c:2d: c0:5d:cf:a2:f0:81:e9:d0:8e:1b:b2:57:21:7a:c5: 63:ea:91:4f:2a:c5:69:57:fa:40:52:75:2d:65:a0: 41:c8:0a:0b:dc:2e:fd:bf:7f:bf:66:22:12:ab:5a: 02:fc:b6:13:57:63:a5:24:55:ac:c1:20:72:4d:61: 9c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FB:71:CC:A2:2D:4D:1E:7A:46:8C:AF:A9:A0:88:13:D5:10:D3:CA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72333184-87ac-4997-aef3-ad6d2ebcdd26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:2000::/48 Signature Algorithm: sha256WithRSAEncryption 47:86:00:e7:ec:26:89:1d:18:f6:30:ea:bf:91:ff:dd:ae:15: d7:09:59:33:16:d9:67:79:09:ac:a1:01:3a:81:bb:29:92:01: 3b:ce:e1:87:51:86:20:ba:fa:d1:64:5b:8d:4b:f6:ed:09:33: 1a:3f:76:64:eb:57:47:66:24:4e:c7:fe:b6:46:d0:d4:03:f0: a4:45:a2:13:39:c6:c1:ec:26:4a:ea:e5:fd:93:a9:dd:f2:68: 61:d5:78:4c:9d:70:f3:b8:26:59:57:e2:bd:cd:db:f1:37:7a: fb:78:2c:80:5a:00:d9:c6:41:b1:80:9d:b3:18:53:32:f7:d6: 44:b8:0b:7d:64:08:7a:81:b7:cf:0a:30:5d:85:13:61:f3:94: 55:96:db:74:a0:b9:1c:b2:ff:13:88:44:3f:b7:ad:c0:03:38: 48:7b:13:ef:05:2d:65:b2:fe:d6:8b:93:f6:fa:05:17:cd:a1: 2a:fe:7d:cf:f9:cc:6c:4e:d9:6b:2b:eb:0b:23:69:1c:eb:07: 59:90:d4:cc:a0:1a:6d:4d:68:e0:ba:22:41:ef:db:45:1e:27: dd:20:88:bb:79:79:e3:78:7e:ed:74:8f:b8:80:f1:ad:8f:1d: 88:c7:6a:e9:ad:67:b8:e3:5b:24:2f:97:8b:1d:25:7c:3a:bc: a6:a6:86:6a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUV7CMrp54NQgGx6RLNdHMYl8cg80wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDEwMTE3WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjkyOTEzOGFmMmE4YzNkZTkyZmQzMTg1YjdiMGJjMWQ3 NjNhOWIxZmZiM2U5ZTY1N2Y5OTMzNGZiNDliYWQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDY688yeIuD001vbGvxmak8GA8+nM3MscdYNvDHZ0pkg2zJ H3+3lcWFw/6s0NM+HkjonXTSgOLEFn4iORlrb3BC0QPBa+V171hWGExe1jINNlIL g/dpHXK28FJlZfHdzqrdyvvEHySbuuyIOzNVgYpuT73d4fi8XTPndTxBoNrOiii2 DhgKP1H8qMtAqRPskLfokwV0IlvhLvq0RA68pCrWXPfhCYREZzjCtO5QeJ5pmwfI 9B57kV/+JuelNd4QU78cLcBdz6LwgenQjhuyVyF6xWPqkU8qxWlX+kBSdS1loEHI CgvcLv2/f79mIhKrWgL8thNXY6UkVazBIHJNYZxvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvPtxzKItTR56RoyvqaCIE9UQ08owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcyMzMzMTg0LTg3YWMtNDk5Ny1hZWYzLWFkNmQyZWJjZGQyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sIAAwDQYJKoZIhvcNAQELBQADggEBAEeGAOfsJokdGPYw6r+R/92u FdcJWTMW2Wd5CayhATqBuymSATvO4YdRhiC6+tFkW41L9u0JMxo/dmTrV0dmJE7H /rZG0NQD8KRFohM5xsHsJkrq5f2Tqd3yaGHVeEydcPO4JllX4r3N2/E3evt4LIBa ANnGQbGAnbMYUzL31kS4C31kCHqBt88KMF2FE2HzlFWW23SguRyy/xOIRD+3rcAD OEh7E+8FLWWy/taLk/b6BRfNoSr+fc/5zGxO2Wsr6wsjaRzrB1mQ1MygGm1NaOC6 IkHv20UeJ90giLt5eeN4fu10j7iA8a2PHYjHaumtZ7jjWyQvl4sdJXw6vKamhmo= -----END CERTIFICATE-----Generated at Sun Mar 1 22:26:22 2026 by rpki-client