$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b4a9c72-8e45-430b-b292-fefb99214347.roa File: 8b4a9c72-8e45-430b-b292-fefb99214347.roa (raw, json) Hash identifier: M5CfIB8fxlCm3NMK/lL+eRzBAVitY5mfhUbCbNBkBgU= Subject key identifier: E1:82:D5:E0:05:12:0D:E0:51:E8:48:78:AA:C5:B9:6C:B4:F3:9F:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 34789313E7AB681558F0F76AD342594A6ED12E7A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b4a9c72-8e45-430b-b292-fefb99214347.roa Signing time: Tue 24 Feb 2026 01:51:15 +0000 ROA not before: Tue 24 Feb 2026 01:51:15 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:3480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:78:93:13:e7:ab:68:15:58:f0:f7:6a:d3:42:59:4a:6e:d1:2e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 01:51:15 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=3122027149f8e8f9a5242a71136569c39d7ce012bc2fb5eeb6c6c515531ec537, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:57:22:04:91:56:52:23:f5:e1:92:4c:97:d7: 64:90:a4:cc:41:5e:ef:d9:c6:f4:34:6a:df:d8:45: 46:38:0c:f1:c8:62:3b:cb:e9:34:ef:af:82:b7:df: 01:19:c8:20:f8:8b:06:4c:c4:bb:b0:10:5a:e8:ca: 1b:ea:4a:e0:e1:62:75:9e:48:ee:de:f7:46:00:75: e0:72:9e:d1:8e:20:a0:c7:27:ad:f9:fa:62:77:f6: 5a:d1:2f:1c:b5:d8:e1:33:2f:1b:a1:89:68:1e:21: 13:5b:c9:c9:ae:d7:45:38:22:5a:b5:16:79:4b:27: 9e:13:3f:86:21:9b:aa:a4:fc:61:af:79:2a:78:74: 27:55:11:f7:f1:62:e9:66:84:39:d1:12:20:a5:a3: d2:e8:bf:e0:42:e4:cd:f6:98:59:3f:32:34:52:79: 77:11:48:e8:b4:46:de:9d:37:a9:d6:04:0d:fb:18: 77:79:c7:6f:ca:e2:6b:ba:0b:43:12:a3:bf:b2:17: 9c:83:47:ed:da:54:ef:77:97:79:11:cc:c8:f5:b3: 21:5e:d3:ff:8e:be:3c:b1:84:93:f3:e5:d2:e3:bf: 8d:51:73:aa:cd:c8:d2:5e:e1:8d:e1:c9:d8:b2:af: 87:8c:cc:11:8b:cb:be:ef:65:98:a8:02:b6:5c:c6: 5b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:82:D5:E0:05:12:0D:E0:51:E8:48:78:AA:C5:B9:6C:B4:F3:9F:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b4a9c72-8e45-430b-b292-fefb99214347.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:3480::/48 Signature Algorithm: sha256WithRSAEncryption 0d:e0:32:35:2d:53:40:a4:7c:65:bb:9d:60:80:b3:ee:bd:1c: c4:5e:00:e5:1d:e5:c9:c9:f8:7f:62:1d:45:b2:7a:4c:c8:98: 74:62:86:ac:e0:2d:76:00:63:04:fb:ae:0b:05:6b:d3:0a:ea: 8e:92:3b:5d:1a:e5:18:a7:7a:f8:5f:3b:81:18:5a:10:21:5a: d7:30:af:fa:1e:83:62:56:0d:ca:0d:8e:47:b5:e9:37:c4:45: 28:08:09:ba:53:03:85:3b:ec:fc:cf:0c:31:b2:a2:cd:30:21: 68:cb:00:35:96:e8:86:4d:d3:2e:8f:92:9d:8e:a3:9e:44:aa: d8:bb:0e:36:3e:bb:6f:24:9e:b3:70:5b:f4:e7:d9:33:82:2a: 88:cd:dd:cf:ae:36:71:5d:73:f8:a3:c1:fb:2f:2b:44:16:90: ed:5c:47:72:ec:38:6b:4b:83:1f:a6:58:8b:9c:7e:c8:d9:03: 89:41:99:a8:9e:64:60:70:1b:a6:72:35:be:5b:07:95:f5:e2: d9:21:43:27:75:83:2b:af:d2:2e:d5:fb:40:23:d3:cf:26:87: 84:97:3f:d7:84:e4:77:de:5c:cc:36:92:45:6e:c5:2e:f1:f8: 21:51:2f:19:6f:24:ae:f3:0f:54:cf:52:15:88:26:e6:af:c1: ad:cf:2c:70 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNHiTE+eraBVY8Pdq00JZSm7RLnowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDE1MTE1WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTIyMDI3MTQ5ZjhlOGY5YTUyNDJhNzExMzY1NjljMzlk N2NlMDEyYmMyZmI1ZWViNmM2YzUxNTUzMWVjNTM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjVyIEkVZSI/XhkkyX12SQpMxBXu/ZxvQ0at/YRUY4DPHI YjvL6TTvr4K33wEZyCD4iwZMxLuwEFroyhvqSuDhYnWeSO7e90YAdeByntGOIKDH J635+mJ39lrRLxy12OEzLxuhiWgeIRNbycmu10U4Ilq1FnlLJ54TP4Yhm6qk/GGv eSp4dCdVEffxYulmhDnREiClo9Lov+BC5M32mFk/MjRSeXcRSOi0Rt6dN6nWBA37 GHd5x2/K4mu6C0MSo7+yF5yDR+3aVO93l3kRzMj1syFe0/+OvjyxhJPz5dLjv41R c6rNyNJe4Y3hydiyr4eMzBGLy77vZZioArZcxlsxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4YLV4AUSDeBR6Eh4qsW5bLTznwkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhiNGE5YzcyLThlNDUtNDMwYi1iMjkyLWZlZmI5OTIxNDM0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9hNIAwDQYJKoZIhvcNAQELBQADggEBAA3gMjUtU0CkfGW7nWCAs+69 HMReAOUd5cnJ+H9iHUWyekzImHRihqzgLXYAYwT7rgsFa9MK6o6SO10a5Rinevhf O4EYWhAhWtcwr/oeg2JWDcoNjke16TfERSgICbpTA4U77PzPDDGyos0wIWjLADWW 6IZN0y6Pkp2Oo55Eqti7DjY+u28knrNwW/Tn2TOCKojN3c+uNnFdc/ijwfsvK0QW kO1cR3LsOGtLgx+mWIucfsjZA4lBmaieZGBwG6ZyNb5bB5X14tkhQyd1gyuv0i7V +0Aj088mh4SXP9eE5HfeXMw2kkVuxS7x+CFRLxlvJK7zD1TPUhWIJuavwa3PLHA= -----END CERTIFICATE-----Generated at Mon Mar 2 11:54:28 2026 by rpki-client