$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c3d40c1-f4b5-473e-8c1b-c881742283af.roa File: 8c3d40c1-f4b5-473e-8c1b-c881742283af.roa (raw, json) Hash identifier: f3OKA65KA+EJ+a9X29qD92GFo309wKDzX/M7OjbbNCY= Subject key identifier: DD:AB:89:F2:18:8C:C4:BC:C2:3E:07:53:BB:DA:EC:6E:A2:C6:91:9A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 221CAB02A214BE041180153B52C0505B02EFAB84 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c3d40c1-f4b5-473e-8c1b-c881742283af.roa Signing time: Wed 11 Feb 2026 01:11:29 +0000 ROA not before: Wed 11 Feb 2026 01:11:29 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fea:ec80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:1c:ab:02:a2:14:be:04:11:80:15:3b:52:c0:50:5b:02:ef:ab:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 11 01:11:29 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=a2d341e2c68b65ae6b65cfc81e2d3cb680d4418812640b7e11f2a57e9d1f88ec, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:51:b7:46:4a:36:3b:bb:18:33:03:03:af:7b: d7:d5:3d:d8:b7:1a:95:7a:f8:f3:94:5d:05:bc:a7: 93:90:4f:d9:95:da:bf:8b:a5:69:a5:94:77:37:43: 2b:c8:4e:f7:bd:4b:63:b4:69:ce:8d:1d:db:ac:e2: 39:8d:73:fb:84:53:b3:5a:5c:e4:b6:4a:f5:0a:3c: de:37:e5:84:a0:bd:cc:f0:6b:34:fc:c0:f5:16:53: 2e:9a:41:9c:3a:a7:a4:e8:5d:a3:8d:19:dc:db:7f: 97:d8:0a:ad:33:f4:34:b1:31:8c:0a:22:a8:ee:ae: cc:fb:4f:53:82:f4:ad:58:b6:a0:27:a1:df:8b:1e: 02:2f:dd:af:74:f8:d7:bf:fd:5f:07:c5:a7:b6:17: bb:e7:57:9c:54:a5:49:31:22:04:89:d5:95:12:9a: 44:77:51:e9:a8:80:29:bd:80:46:4c:b9:22:ea:fb: cb:6e:40:8d:96:cd:4f:20:39:ff:08:9b:d2:e1:ed: 5d:bc:f1:0c:ec:d7:53:89:bc:54:2d:16:c3:e2:b8: c0:a6:7e:22:cb:73:cf:15:a8:ad:59:8d:93:b6:39: 49:9b:92:8c:38:09:a0:d7:8b:d1:7f:d7:8a:66:da: 20:4a:36:18:fc:2f:97:9b:4c:ae:18:a7:ff:1b:7c: 79:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AB:89:F2:18:8C:C4:BC:C2:3E:07:53:BB:DA:EC:6E:A2:C6:91:9A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c3d40c1-f4b5-473e-8c1b-c881742283af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea:ec80::/48 Signature Algorithm: sha256WithRSAEncryption af:96:b3:66:68:c3:d7:ca:83:6d:69:03:34:9c:ea:d1:38:53: 73:fb:7b:ae:ad:f8:36:d0:5b:28:5b:0b:03:ea:fe:00:32:7e: 3b:be:c3:c0:86:f8:c9:40:cd:e6:28:3e:26:71:c6:25:db:e9: bb:6c:16:2b:f4:3c:af:1f:05:c6:d2:48:33:de:38:a9:0b:29: 0c:f0:49:c5:11:b0:44:00:57:21:e8:b8:dd:65:8f:dc:1f:f9: 6e:d7:ff:79:8f:52:65:bc:87:b9:e2:a9:23:ba:9b:c2:2a:0d: 39:1b:34:9f:46:08:bd:2b:d8:81:ed:10:cc:b6:e1:18:e9:35: 33:b8:55:a8:a6:12:7c:59:53:62:ee:ba:f5:33:7e:6d:5d:4c: 92:15:ec:2f:45:ba:a4:da:b3:60:80:4a:55:27:98:3c:dc:ea: 00:21:9f:21:f7:5b:6e:44:67:8b:fd:26:9e:73:a8:57:75:09: bb:98:67:f5:5f:d7:88:b7:1c:33:d5:3b:dd:a3:14:96:6b:a1: cb:2a:20:be:c2:b6:01:53:10:d6:e0:6b:63:66:9f:b7:95:69: 8e:e4:07:05:56:2b:f7:77:4d:5d:5b:9a:59:e3:a8:84:03:fb: b0:c8:f3:9b:91:f9:4c:92:6f:5b:b7:72:bb:91:f5:ee:a1:cc: e4:fa:4d:e0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIhyrAqIUvgQRgBU7UsBQWwLvq4QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjExMDExMTI5WhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMmQzNDFlMmM2OGI2NWFlNmI2NWNmYzgxZTJkM2NiNjgw ZDQ0MTg4MTI2NDBiN2UxMWYyYTU3ZTlkMWY4OGVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGUbdGSjY7uxgzAwOve9fVPdi3GpV6+POUXQW8p5OQT9mV 2r+LpWmllHc3QyvITve9S2O0ac6NHdus4jmNc/uEU7NaXOS2SvUKPN435YSgvczw azT8wPUWUy6aQZw6p6ToXaONGdzbf5fYCq0z9DSxMYwKIqjursz7T1OC9K1YtqAn od+LHgIv3a90+Ne//V8Hxae2F7vnV5xUpUkxIgSJ1ZUSmkR3UemogCm9gEZMuSLq +8tuQI2WzU8gOf8Im9Lh7V288Qzs11OJvFQtFsPiuMCmfiLLc88VqK1ZjZO2OUmb kow4CaDXi9F/14pm2iBKNhj8L5ebTK4Yp/8bfHkRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3auJ8hiMxLzCPgdTu9rsbqLGkZowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhjM2Q0MGMxLWY0YjUtNDczZS04YzFiLWM4ODE3NDIyODNhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/q7IAwDQYJKoZIhvcNAQELBQADggEBAK+Ws2Zow9fKg21pAzSc6tE4 U3P7e66t+DbQWyhbCwPq/gAyfju+w8CG+MlAzeYoPiZxxiXb6btsFiv0PK8fBcbS SDPeOKkLKQzwScURsEQAVyHouN1lj9wf+W7X/3mPUmW8h7niqSO6m8IqDTkbNJ9G CL0r2IHtEMy24RjpNTO4VaimEnxZU2LuuvUzfm1dTJIV7C9FuqTas2CASlUnmDzc 6gAhnyH3W25EZ4v9Jp5zqFd1CbuYZ/Vf14i3HDPVO92jFJZrocsqIL7CtgFTENbg a2Nmn7eVaY7kBwVWK/d3TV1bmlnjqIQD+7DI85uR+UySb1u3cruR9e6hzOT6TeA= -----END CERTIFICATE-----Generated at Mon Mar 2 10:59:40 2026 by rpki-client