$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f591016-c6e3-4850-8b50-6a21507352a2.roa File: 9f591016-c6e3-4850-8b50-6a21507352a2.roa (raw, json) Hash identifier: NOI5rfx8V6ACx6jLvvnbfIl9T4Dn+2ULf64lYy5H//k= Subject key identifier: 35:B1:3A:DE:FA:A3:AE:2A:7E:51:E8:F3:A7:8B:C2:B5:42:3A:FA:E3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7CCF3BB5FA071635CC0C57647D5C896B6A666463 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f591016-c6e3-4850-8b50-6a21507352a2.roa Signing time: Wed 11 Feb 2026 00:40:07 +0000 ROA not before: Wed 11 Feb 2026 00:40:07 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fea:7440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:cf:3b:b5:fa:07:16:35:cc:0c:57:64:7d:5c:89:6b:6a:66:64:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 11 00:40:07 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=73c03b60edf23d2da857964806b92a2743d552d906aa9b073f1322c210c56ce5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:34:7e:ef:e7:15:7e:e9:6e:87:29:05:a0:b5: c8:89:5f:73:a9:36:44:ee:72:3b:ef:67:cf:0a:94: d8:ea:05:44:32:8b:cf:b6:25:17:cc:79:c3:34:4f: 21:62:b5:82:73:1b:58:00:84:eb:35:c9:7c:b5:c4: 6a:57:a0:24:1d:cc:ae:ce:c3:ef:65:c3:2d:2e:80: 06:87:b0:cb:7a:d5:e6:e4:22:8a:3f:d4:68:15:c7: ef:f0:f6:83:15:e8:f2:37:cc:aa:46:da:c5:df:c3: 95:99:44:69:52:27:00:8e:33:b7:7d:ed:bd:c4:a4: af:03:e6:ce:6f:93:52:55:25:59:fe:19:46:16:a8: ca:71:cc:48:4d:a7:73:5c:7d:2f:50:6b:09:89:4f: e5:1f:b4:90:8d:98:38:5a:57:e3:71:9f:7a:9e:0f: 44:c1:16:71:60:e0:aa:3e:a6:7e:ac:17:3c:1c:d8: e3:5f:e6:d4:b1:92:57:ca:11:b6:3e:04:a2:d8:9c: 20:f3:d9:4e:87:e9:08:12:8e:c2:ed:8e:8f:84:d6: 44:f3:96:35:54:f4:38:2d:56:b6:7a:ea:3b:ae:89: 0f:48:c8:ff:df:d3:af:2e:9a:44:e2:1d:50:7d:97: 1d:c1:22:33:77:ee:94:3c:35:ff:b5:da:d9:88:94: 32:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B1:3A:DE:FA:A3:AE:2A:7E:51:E8:F3:A7:8B:C2:B5:42:3A:FA:E3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f591016-c6e3-4850-8b50-6a21507352a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea:7440::/48 Signature Algorithm: sha256WithRSAEncryption c1:95:15:e1:8f:3d:0c:67:a9:6c:7d:60:c3:42:e3:15:d7:6c: 1b:1f:1a:6e:a8:21:fb:db:fb:a2:83:94:31:a0:88:e4:a9:5b: ea:62:6b:fd:f1:14:6b:50:db:d2:91:b2:fb:0d:8e:2e:50:f5: 30:9d:1c:67:83:c4:5d:6d:ad:97:90:73:1f:b4:9c:80:70:95: a3:ae:f3:5c:a5:22:8e:93:b6:4e:d5:c2:be:3f:03:15:f9:94: 04:ed:b8:cf:a7:71:10:d1:3c:e6:c5:79:f5:f3:54:d8:92:a9: a1:af:b8:3b:64:98:eb:5e:c9:f2:df:35:02:cb:64:81:06:f0: 5f:58:9f:96:4e:48:0b:c4:dd:f6:50:7d:cc:8e:3c:e3:48:af: c7:e4:3b:57:42:f8:50:4a:73:a1:14:44:fa:d2:c0:66:b2:92: d9:07:9f:dc:34:f4:ec:6f:65:85:66:1a:6c:ee:3a:12:12:eb: 44:53:18:cb:9b:88:c5:8d:ef:c4:82:39:98:f2:db:7d:fc:18: 0c:6c:f9:63:57:c5:4b:a5:a8:e5:11:43:ae:69:7a:87:85:55: e2:19:c7:50:4c:5e:f0:d6:47:5f:ab:b9:47:58:2e:92:2e:9c: 70:c7:0e:31:5e:87:82:20:69:b8:ee:13:cb:5b:ca:ea:98:69: eb:b9:3c:31 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfM87tfoHFjXMDFdkfVyJa2pmZGMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjExMDA0MDA3WhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3M2MwM2I2MGVkZjIzZDJkYTg1Nzk2NDgwNmI5MmEyNzQz ZDU1MmQ5MDZhYTliMDczZjEzMjJjMjEwYzU2Y2U1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiNH7v5xV+6W6HKQWgtciJX3OpNkTucjvvZ88KlNjqBUQy i8+2JRfMecM0TyFitYJzG1gAhOs1yXy1xGpXoCQdzK7Ow+9lwy0ugAaHsMt61ebk Ioo/1GgVx+/w9oMV6PI3zKpG2sXfw5WZRGlSJwCOM7d97b3EpK8D5s5vk1JVJVn+ GUYWqMpxzEhNp3NcfS9QawmJT+UftJCNmDhaV+Nxn3qeD0TBFnFg4Ko+pn6sFzwc 2ONf5tSxklfKEbY+BKLYnCDz2U6H6QgSjsLtjo+E1kTzljVU9DgtVrZ66juuiQ9I yP/f068umkTiHVB9lx3BIjN37pQ8Nf+12tmIlDKVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNbE63vqjrip+Uejzp4vCtUI6+uMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlmNTkxMDE2LWM2ZTMtNDg1MC04YjUwLTZhMjE1MDczNTJhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/qdEAwDQYJKoZIhvcNAQELBQADggEBAMGVFeGPPQxnqWx9YMNC4xXX bBsfGm6oIfvb+6KDlDGgiOSpW+pia/3xFGtQ29KRsvsNji5Q9TCdHGeDxF1trZeQ cx+0nIBwlaOu81ylIo6Ttk7Vwr4/AxX5lATtuM+ncRDRPObFefXzVNiSqaGvuDtk mOteyfLfNQLLZIEG8F9Yn5ZOSAvE3fZQfcyOPONIr8fkO1dC+FBKc6EURPrSwGay ktkHn9w09OxvZYVmGmzuOhIS60RTGMubiMWN78SCOZjy2338GAxs+WNXxUulqOUR Q65peoeFVeIZx1BMXvDWR1+ruUdYLpIunHDHDjFeh4IgabjuE8tbyuqYaeu5PDE= -----END CERTIFICATE-----Generated at Mon Mar 2 00:23:38 2026 by rpki-client