$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/742d0ee8-af2c-4ecc-8296-c513cad04cf8.roa File: 742d0ee8-af2c-4ecc-8296-c513cad04cf8.roa (raw, json) Hash identifier: AasnaoHh1Wza1C5Unw5+1qGhWkseNR8/ZAkT4+Ly/uc= Subject key identifier: 6B:5B:FF:9D:9C:3A:CD:AD:7B:19:53:7E:FE:5B:A4:F2:73:DF:49:18 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F9B712B68C84E4035FEF8602C201F103C31174D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/742d0ee8-af2c-4ecc-8296-c513cad04cf8.roa Signing time: Tue 24 Feb 2026 02:00:57 +0000 ROA not before: Tue 24 Feb 2026 02:00:57 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:9b:71:2b:68:c8:4e:40:35:fe:f8:60:2c:20:1f:10:3c:31:17:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 02:00:57 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=df71fcbcc4d82e2782d5feed574d9408e2508a51346b8579229a1ad89a121e7d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:43:66:d9:4b:56:ca:5d:42:21:e2:e0:47:58: a6:61:88:98:33:5d:6d:fd:c2:d8:4e:cf:58:6d:73: 81:06:a0:b1:93:66:6f:c0:e6:af:df:5e:a1:1c:f3: 75:a1:6d:79:bf:b8:d4:f6:cc:52:54:7c:cf:11:ec: ab:ec:b1:17:b2:cf:e6:9e:c8:66:c9:87:4c:ec:a8: 47:76:54:54:d4:df:47:d1:57:82:26:9c:6e:37:a6: 76:8c:1d:41:62:f9:b7:ed:d3:62:52:a7:cb:f1:bb: b6:eb:8b:f7:0c:53:ba:fd:b0:74:36:ed:ee:96:f7: c1:0a:e8:57:3c:47:d2:14:df:7d:2c:32:a1:0b:6b: e1:dd:43:e2:93:6f:d0:0f:0f:f1:66:ae:bd:bc:9c: 2c:6f:05:34:ab:60:cd:c6:b7:9a:67:56:fc:5f:ac: d7:5e:69:25:df:ed:49:02:d8:f4:3b:d7:e4:07:95: ae:3c:1f:6e:d4:4e:69:bd:11:7a:a7:55:16:6d:34: 22:4e:d7:52:00:30:4d:12:ff:06:b6:87:dc:63:d1: 07:dd:c0:8e:4f:83:e6:95:b2:67:62:50:29:e3:c2: 34:f4:d3:2e:16:9d:14:79:91:1d:af:36:87:98:38: c6:51:06:7f:86:f4:30:91:7e:2d:50:f2:c9:99:5e: 8d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5B:FF:9D:9C:3A:CD:AD:7B:19:53:7E:FE:5B:A4:F2:73:DF:49:18 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/742d0ee8-af2c-4ecc-8296-c513cad04cf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:6040::/48 Signature Algorithm: sha256WithRSAEncryption b1:4a:ce:47:03:8f:bc:e7:e3:8f:1b:19:3a:05:4f:18:42:ca: b9:5f:0b:04:c7:93:9c:62:4c:80:fb:6c:40:85:29:41:e9:e4: b0:ea:4f:e3:e8:4a:0f:3d:33:e2:6b:83:7e:94:3e:1e:9d:d3: db:17:09:07:75:4a:5b:27:6f:47:23:25:90:59:b4:26:b9:ea: 16:10:2e:6d:04:31:7b:5f:28:34:a9:32:4b:0c:e1:6d:cc:e5: 4c:62:dd:00:20:0f:bd:7d:14:e8:a8:c3:cc:9d:5e:d4:1c:5c: 00:65:41:aa:54:8c:8a:7d:d7:0e:25:71:3a:72:dd:9e:e0:57: 7d:78:49:ac:13:b6:be:c4:cb:48:ea:31:55:02:ee:9f:56:87: f9:1e:45:cb:4e:a8:6e:8a:f1:87:57:52:fa:3b:d3:cf:42:0b: f1:02:30:0e:ba:77:cd:21:52:cd:70:2a:ff:5a:07:09:b0:46: 73:ed:ab:72:af:44:f6:05:f0:6a:0f:59:ed:30:df:fa:35:5b: 2e:2f:c6:25:5b:1e:f3:87:30:d3:b4:a1:b7:66:7d:7c:0b:08: de:95:cd:ce:4d:da:20:65:1c:1e:3b:65:ff:3f:66:52:58:e6: 26:e1:97:dd:3a:7f:e2:30:59:ea:c3:b6:a7:35:63:aa:e5:d9: 6c:ca:ec:d5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUD5txK2jITkA1/vhgLCAfEDwxF00wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDIwMDU3WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjcxZmNiY2M0ZDgyZTI3ODJkNWZlZWQ1NzRkOTQwOGUy NTA4YTUxMzQ2Yjg1NzkyMjlhMWFkODlhMTIxZTdkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYQ2bZS1bKXUIh4uBHWKZhiJgzXW39wthOz1htc4EGoLGT Zm/A5q/fXqEc83WhbXm/uNT2zFJUfM8R7KvssReyz+aeyGbJh0zsqEd2VFTU30fR V4ImnG43pnaMHUFi+bft02JSp8vxu7bri/cMU7r9sHQ27e6W98EK6Fc8R9IU330s MqELa+HdQ+KTb9APD/Fmrr28nCxvBTSrYM3Gt5pnVvxfrNdeaSXf7UkC2PQ71+QH la48H27UTmm9EXqnVRZtNCJO11IAME0S/wa2h9xj0QfdwI5Pg+aVsmdiUCnjwjT0 0y4WnRR5kR2vNoeYOMZRBn+G9DCRfi1Q8smZXo2dAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUa1v/nZw6za17GVN+/luk8nPfSRgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc0MmQwZWU4LWFmMmMtNGVjYy04Mjk2LWM1MTNjYWQwNGNmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/yYEAwDQYJKoZIhvcNAQELBQADggEBALFKzkcDj7zn448bGToFTxhC yrlfCwTHk5xiTID7bECFKUHp5LDqT+PoSg89M+Jrg36UPh6d09sXCQd1Slsnb0cj JZBZtCa56hYQLm0EMXtfKDSpMksM4W3M5Uxi3QAgD719FOiow8ydXtQcXABlQapU jIp91w4lcTpy3Z7gV314SawTtr7Ey0jqMVUC7p9Wh/keRctOqG6K8YdXUvo7089C C/ECMA66d80hUs1wKv9aBwmwRnPtq3KvRPYF8GoPWe0w3/o1Wy4vxiVbHvOHMNO0 obdmfXwLCN6Vzc5N2iBlHB47Zf8/ZlJY5ibhl906f+IwWerDtqc1Y6rl2WzK7NU= -----END CERTIFICATE-----Generated at Sun Mar 1 22:19:49 2026 by rpki-client