$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99c2d777-6b3c-4fd7-b962-4d3208537c27.roa File: 99c2d777-6b3c-4fd7-b962-4d3208537c27.roa (raw, json) Hash identifier: mLxx7UAzQU15vBuassdlgc8xAJKZJ5pZtxjj7IlVVa0= Subject key identifier: 6A:C6:99:4A:EC:B1:EF:DC:2A:2B:72:90:E1:FB:F5:B6:68:AB:8B:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 05F9790F5F6A1905FB274F9934AE4189ED7CD0AB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99c2d777-6b3c-4fd7-b962-4d3208537c27.roa Signing time: Tue 24 Feb 2026 00:10:04 +0000 ROA not before: Tue 24 Feb 2026 00:10:04 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f9:79:0f:5f:6a:19:05:fb:27:4f:99:34:ae:41:89:ed:7c:d0:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 00:10:04 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=1b570331c64220f94a0f909db99137b8f6b8a33756a4760c3667dcdc78de4b95, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:17:52:e9:ac:28:f4:bd:26:a8:b7:f8:ac:ec: f8:8b:28:08:8a:af:9a:22:7c:b6:61:a4:6d:c3:bf: 33:13:f8:f3:bc:2b:ee:f0:a1:a1:b3:04:ac:ae:fa: 93:18:37:81:29:ca:a6:07:d4:d9:8b:38:0d:69:32: 4d:da:81:f8:e1:68:fb:25:5c:f0:64:30:39:47:90: e1:6d:25:07:87:dc:e1:8c:63:8f:39:22:c9:42:2d: bb:d4:90:34:b4:c7:65:d6:5a:98:27:fe:5a:0a:69: b8:74:c3:22:fc:17:63:46:28:64:18:b4:4a:b3:70: 63:1f:26:93:14:4f:10:99:ad:5a:68:f8:de:f6:bd: 33:26:b7:74:77:a4:4f:52:37:73:a2:1a:ff:f0:5e: 3f:9a:04:e1:31:83:e1:c4:c0:ec:37:0a:da:d5:4e: 8f:53:bd:6f:4b:f5:b4:9b:eb:0d:75:32:5b:cd:9f: 03:d7:cd:66:cd:c1:5e:74:1b:1b:cf:56:29:4e:f9: e5:90:1d:5b:38:d1:3e:c6:85:29:67:9b:a3:50:b6: a0:56:82:f5:9b:63:1e:35:01:5a:ac:5a:2a:0d:c5: fc:23:ac:b4:ec:13:c6:64:7d:32:9b:4c:15:37:0d: 35:1a:58:ce:69:b1:51:64:b6:a0:0b:70:5d:49:46: 59:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C6:99:4A:EC:B1:EF:DC:2A:2B:72:90:E1:FB:F5:B6:68:AB:8B:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99c2d777-6b3c-4fd7-b962-4d3208537c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:1080::/48 Signature Algorithm: sha256WithRSAEncryption 88:bd:00:70:df:d5:7e:eb:7c:9a:da:65:62:f3:64:81:34:47: 71:79:3a:37:30:19:25:c8:a8:b8:5c:10:6b:51:45:37:69:0a: cb:26:60:dd:67:dd:9c:21:97:dc:0a:ad:d6:c5:74:85:e3:6c: 5b:f6:62:ee:68:39:60:74:33:7e:09:59:18:df:07:61:d3:d6: e9:10:21:71:fa:4b:f1:df:34:62:67:e4:1b:a4:c8:0d:f4:4f: cd:4f:2c:78:f8:7f:33:93:29:66:19:60:e0:54:d4:13:a5:83: c9:96:c8:a5:c6:f3:9d:df:8c:5e:24:07:20:5f:51:ae:4b:c2: 1e:14:37:27:19:a6:28:b6:95:8e:2c:e5:cd:87:8c:e4:70:aa: a2:fb:57:b2:03:f1:f7:b7:73:1c:f4:28:c1:79:7e:7e:bc:fb: 25:9d:ff:9a:5b:ad:73:3e:0e:a8:61:c3:e7:b5:54:6f:0b:b4: f4:e1:03:da:c9:81:e4:7a:c4:8e:88:e1:26:30:ab:98:bf:01: 1c:f7:55:bd:fe:ad:d5:1b:0b:c5:15:1b:40:09:b5:de:c3:81: e3:e0:5a:38:35:bb:b2:c3:a6:80:a3:0a:b2:78:b8:e0:24:45: b1:5c:7d:59:f1:19:93:c6:3a:19:3d:3f:19:d1:3e:3e:46:f2: c0:0c:cf:8a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBfl5D19qGQX7J0+ZNK5Bie180KswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDAxMDA0WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjU3MDMzMWM2NDIyMGY5NGEwZjkwOWRiOTkxMzdiOGY2 YjhhMzM3NTZhNDc2MGMzNjY3ZGNkYzc4ZGU0Yjk1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhF1LprCj0vSaot/is7PiLKAiKr5oifLZhpG3DvzMT+PO8 K+7woaGzBKyu+pMYN4EpyqYH1NmLOA1pMk3agfjhaPslXPBkMDlHkOFtJQeH3OGM Y485IslCLbvUkDS0x2XWWpgn/loKabh0wyL8F2NGKGQYtEqzcGMfJpMUTxCZrVpo +N72vTMmt3R3pE9SN3OiGv/wXj+aBOExg+HEwOw3CtrVTo9TvW9L9bSb6w11MlvN nwPXzWbNwV50GxvPVilO+eWQHVs40T7GhSlnm6NQtqBWgvWbYx41AVqsWioNxfwj rLTsE8ZkfTKbTBU3DTUaWM5psVFktqALcF1JRlkjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUasaZSuyx79wqK3KQ4fv1tmiri5kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk5YzJkNzc3LTZiM2MtNGZkNy1iOTYyLTRkMzIwODUzN2MyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9hEIAwDQYJKoZIhvcNAQELBQADggEBAIi9AHDf1X7rfJraZWLzZIE0 R3F5OjcwGSXIqLhcEGtRRTdpCssmYN1n3Zwhl9wKrdbFdIXjbFv2Yu5oOWB0M34J WRjfB2HT1ukQIXH6S/HfNGJn5BukyA30T81PLHj4fzOTKWYZYOBU1BOlg8mWyKXG 853fjF4kByBfUa5Lwh4UNycZpii2lY4s5c2HjORwqqL7V7ID8fe3cxz0KMF5fn68 +yWd/5pbrXM+Dqhhw+e1VG8LtPThA9rJgeR6xI6I4SYwq5i/ARz3Vb3+rdUbC8UV G0AJtd7DgePgWjg1u7LDpoCjCrJ4uOAkRbFcfVnxGZPGOhk9PxnRPj5G8sAMz4o= -----END CERTIFICATE-----Generated at Mon Mar 2 05:36:49 2026 by rpki-client