$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ce55fb4-6d36-4012-a94e-a1087f808591.roa File: 9ce55fb4-6d36-4012-a94e-a1087f808591.roa (raw, json) Hash identifier: j55VdwDkDS9XxOaOyBGC/M06w0hXSVQi+rqeVf/iOMA= Subject key identifier: 76:B5:B0:51:C6:BB:3C:1F:9D:81:D8:22:0D:4B:8B:3E:C1:B7:E8:8C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4523F1C829790BD666F421996B9088EDC7BF3D10 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ce55fb4-6d36-4012-a94e-a1087f808591.roa Signing time: Sat 21 Feb 2026 01:00:57 +0000 ROA not before: Sat 21 Feb 2026 01:00:57 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:8800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:23:f1:c8:29:79:0b:d6:66:f4:21:99:6b:90:88:ed:c7:bf:3d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:00:57 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=83cd901859c8e977c9cd4a4256439a95aa239c9fa8eeb51731f35388b3ab1af8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fc:e4:e5:26:0b:9d:ae:e4:ca:c3:2a:48:c3: 55:ff:fe:e5:fb:3d:d8:13:68:f4:8e:d6:62:32:0b: d9:a9:d0:a7:76:51:d2:6f:40:56:3b:7f:6b:09:20: 33:99:0a:13:be:81:3e:21:42:49:e2:c0:b3:99:b1: 3b:aa:89:c0:de:29:e7:22:51:04:de:b7:54:2a:50: 82:c7:ea:66:9a:87:46:6a:20:b7:35:f3:a6:92:af: 40:38:d2:8d:08:02:8b:6e:37:0f:9a:41:f2:7e:61: 6f:15:e9:4e:7f:95:5f:9a:25:ae:74:29:fe:dd:27: 01:eb:8b:ab:b9:ce:72:c4:0f:9a:8b:1e:64:96:ff: 52:87:3b:c8:7a:c3:7d:2d:4c:39:2a:f5:7b:ed:3b: 9e:d9:41:08:ce:cc:8c:63:e5:19:b0:25:3f:fe:58: d7:c9:1a:a0:8c:89:58:fe:75:53:5a:da:f8:ed:20: c9:12:00:59:4a:87:f6:95:61:74:18:b5:a4:23:97: 0f:d8:87:e0:40:ec:df:cc:e6:b1:7b:84:32:03:0d: 7a:93:7c:b4:f4:af:b8:24:33:99:e1:fc:88:4e:11: 58:be:b1:09:1e:74:a2:f3:e8:2e:40:55:44:40:5a: f5:f2:be:d6:09:b5:d2:13:19:ed:52:05:52:d5:da: 2a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B5:B0:51:C6:BB:3C:1F:9D:81:D8:22:0D:4B:8B:3E:C1:B7:E8:8C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ce55fb4-6d36-4012-a94e-a1087f808591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:8800::/48 Signature Algorithm: sha256WithRSAEncryption d1:41:7c:e0:15:2c:44:2f:f1:94:a8:2e:30:71:58:7d:d8:35: ff:bc:5a:d1:88:62:c3:dc:b3:41:5f:39:73:72:2d:66:91:26: fc:33:be:12:a7:25:3c:fd:7d:9a:bc:56:db:ed:19:cd:7a:d0: 1e:85:19:55:12:b5:88:1c:79:95:8a:7e:7c:77:49:5d:5e:92: 26:68:fc:d5:e8:a6:49:e7:64:60:d7:99:0a:ce:29:fc:09:41: b8:e9:18:74:0a:4c:d7:4f:d8:2b:b9:67:d9:f3:55:ab:f8:15: 5b:5d:06:f8:d9:4b:39:94:d6:b8:68:a9:58:44:36:eb:a2:87: 21:82:91:7a:28:e9:4c:45:5c:f7:f9:85:13:28:d5:a6:7f:be: ae:79:e7:f2:d8:0f:8e:b5:21:bf:d9:31:86:66:b6:2b:d1:3c: eb:51:65:db:98:15:f2:5c:ff:05:33:a3:6f:ca:5b:7a:bc:66: 5c:00:62:4b:68:0c:d2:cb:04:6d:e7:3d:92:ab:8c:54:f0:28: 10:7f:94:17:2a:bc:4e:e4:ee:e3:6b:ef:8d:d2:72:3b:6d:09: 9a:89:02:71:ca:7c:24:9f:dc:54:fc:a9:17:59:fd:c7:01:85: d8:e6:6c:5b:29:95:0c:55:4e:78:f0:17:0a:ac:60:14:03:06: b7:3a:c2:9f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURSPxyCl5C9Zm9CGZa5CI7ce/PRAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDEwMDU3WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4M2NkOTAxODU5YzhlOTc3YzljZDRhNDI1NjQzOWE5NWFh MjM5YzlmYThlZWI1MTczMWYzNTM4OGIzYWIxYWY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJ/OTlJgudruTKwypIw1X//uX7PdgTaPSO1mIyC9mp0Kd2 UdJvQFY7f2sJIDOZChO+gT4hQkniwLOZsTuqicDeKeciUQTet1QqUILH6maah0Zq ILc186aSr0A40o0IAotuNw+aQfJ+YW8V6U5/lV+aJa50Kf7dJwHri6u5znLED5qL HmSW/1KHO8h6w30tTDkq9XvtO57ZQQjOzIxj5RmwJT/+WNfJGqCMiVj+dVNa2vjt IMkSAFlKh/aVYXQYtaQjlw/Yh+BA7N/M5rF7hDIDDXqTfLT0r7gkM5nh/IhOEVi+ sQkedKLz6C5AVURAWvXyvtYJtdITGe1SBVLV2iqjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdrWwUca7PB+dgdgiDUuLPsG36IwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzljZTU1ZmI0LTZkMzYtNDAxMi1hOTRlLWExMDg3ZjgwODU5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/siAAwDQYJKoZIhvcNAQELBQADggEBANFBfOAVLEQv8ZSoLjBxWH3Y Nf+8WtGIYsPcs0FfOXNyLWaRJvwzvhKnJTz9fZq8VtvtGc160B6FGVUStYgceZWK fnx3SV1ekiZo/NXopknnZGDXmQrOKfwJQbjpGHQKTNdP2Cu5Z9nzVav4FVtdBvjZ SzmU1rhoqVhENuuihyGCkXoo6UxFXPf5hRMo1aZ/vq555/LYD461Ib/ZMYZmtivR POtRZduYFfJc/wUzo2/KW3q8ZlwAYktoDNLLBG3nPZKrjFTwKBB/lBcqvE7k7uNr 743ScjttCZqJAnHKfCSf3FT8qRdZ/ccBhdjmbFsplQxVTnjwFwqsYBQDBrc6wp8= -----END CERTIFICATE-----Generated at Mon Mar 2 00:16:36 2026 by rpki-client