$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a257878e-10ee-4838-922c-30999880ff07.roa File: a257878e-10ee-4838-922c-30999880ff07.roa (raw, json) Hash identifier: qacvpe1CyzUqxXtnVzOJsji2S8h5cqB6ANX8KdW4FgI= Subject key identifier: D9:4D:33:3F:10:CE:2A:F8:F1:61:51:DC:8C:4A:BA:3A:8A:AD:05:95 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 79609287D88EF50FE3B221D4D5C6934F2FC8A690 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a257878e-10ee-4838-922c-30999880ff07.roa Signing time: Thu 26 Feb 2026 01:00:53 +0000 ROA not before: Thu 26 Feb 2026 01:00:53 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fed:3400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:60:92:87:d8:8e:f5:0f:e3:b2:21:d4:d5:c6:93:4f:2f:c8:a6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 26 01:00:53 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=3f200bd15233df87e252ddb5ff00fbda6d59da582ac59ec0615348d96c983791, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5e:5d:02:55:d5:cc:46:5a:f2:ea:2c:bd:3c: 16:60:f1:6e:ee:00:75:32:dc:7e:3f:20:53:1f:72: 0e:58:8e:00:bc:66:c4:1f:63:28:4c:b6:3a:fd:1d: e0:1e:bb:0d:21:93:2b:c7:03:f3:3f:90:02:61:85: c7:f5:c1:30:b9:20:ab:22:e3:ab:42:c9:aa:94:c9: e4:4c:d0:3d:49:c1:2b:c6:a8:52:ea:8c:0b:a1:4e: d5:e7:c9:4b:0c:bf:fa:32:a1:f9:10:30:a0:a7:3f: cf:d5:41:df:d1:83:11:c9:2b:8f:62:08:e5:90:c9: 23:6e:b1:a9:63:8c:a9:bb:cc:94:80:36:e1:94:0a: e2:6c:2b:2d:54:8d:2f:71:da:ae:1f:13:39:99:a0: 26:9d:2c:52:fb:c6:5c:d1:ea:b9:17:87:96:5d:4b: be:00:fc:04:0f:08:9d:cb:1d:c3:2a:40:36:90:2e: 23:b6:70:3f:4b:ad:3d:f6:c6:a6:6c:15:dd:0a:32: 45:6d:39:61:fc:c9:70:2c:d2:50:8d:c9:9c:ab:5a: 20:34:04:c6:8f:92:f5:ed:85:35:8d:cc:61:75:37: ef:09:87:7b:0b:ef:af:71:40:bf:c8:8b:0b:54:78: be:2b:26:bd:e3:e1:e6:01:a5:1e:1b:36:c8:1f:e7: 38:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4D:33:3F:10:CE:2A:F8:F1:61:51:DC:8C:4A:BA:3A:8A:AD:05:95 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a257878e-10ee-4838-922c-30999880ff07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fed:3400::/40 Signature Algorithm: sha256WithRSAEncryption 39:aa:a5:d1:34:89:b0:26:b3:04:4f:10:d4:5e:d7:c6:d8:96: 9f:50:36:a7:27:5f:91:24:54:5c:1c:2b:fa:6f:e9:51:0d:76: ca:d7:e2:06:9b:4c:13:0a:76:07:2a:79:f3:1c:cf:e0:53:b0: 66:d5:0b:5f:b8:06:a3:15:99:46:d4:0f:b8:04:a4:23:e2:ba: 4f:fa:27:fe:ee:d7:16:93:d8:98:ff:ef:65:7d:e7:41:da:7a: 9a:a0:a5:18:84:52:fa:67:74:d8:1b:b2:0a:44:eb:94:34:df: a5:5b:fd:72:3a:08:5d:e5:ca:84:ff:bb:3a:88:75:e1:48:39: 86:db:51:b3:af:48:d0:a0:59:17:c7:d7:f2:eb:64:fd:1e:ed: df:21:c4:0d:3c:cb:0b:e1:71:f3:17:02:2a:02:f1:fe:d3:e7: 1f:a9:8b:7e:cc:6b:c0:4a:57:25:dc:a6:5e:ea:6e:51:37:a8: 3f:51:13:73:39:04:fc:2b:9f:bb:03:5f:ae:02:7f:5f:f3:8e: f4:23:5b:f6:07:4a:22:18:c6:fa:3a:b9:e3:da:8c:6f:ff:52: 8a:f5:34:e0:67:12:f1:65:a0:7a:38:f4:e6:71:f4:d3:01:b1: 5f:c6:f3:2e:3d:21:80:b7:ad:cc:3e:b5:22:5d:32:43:8d:35: 88:32:3e:b1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUeWCSh9iO9Q/jsiHU1caTTy/IppAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI2MDEwMDUzWhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZjIwMGJkMTUyMzNkZjg3ZTI1MmRkYjVmZjAwZmJkYTZk NTlkYTU4MmFjNTllYzA2MTUzNDhkOTZjOTgzNzkxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjXl0CVdXMRlry6iy9PBZg8W7uAHUy3H4/IFMfcg5YjgC8 ZsQfYyhMtjr9HeAeuw0hkyvHA/M/kAJhhcf1wTC5IKsi46tCyaqUyeRM0D1JwSvG qFLqjAuhTtXnyUsMv/oyofkQMKCnP8/VQd/RgxHJK49iCOWQySNusaljjKm7zJSA NuGUCuJsKy1UjS9x2q4fEzmZoCadLFL7xlzR6rkXh5ZdS74A/AQPCJ3LHcMqQDaQ LiO2cD9LrT32xqZsFd0KMkVtOWH8yXAs0lCNyZyrWiA0BMaPkvXthTWNzGF1N+8J h3sL769xQL/IiwtUeL4rJr3j4eYBpR4bNsgf5zizAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU2U0zPxDOKvjxYVHcjEq6OoqtBZUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyNTc4NzhlLTEwZWUtNDgzOC05MjJjLTMwOTk5ODgwZmYwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/tNDANBgkqhkiG9w0BAQsFAAOCAQEAOaql0TSJsCazBE8Q1F7XxtiW n1A2pydfkSRUXBwr+m/pUQ12ytfiBptMEwp2Byp58xzP4FOwZtULX7gGoxWZRtQP uASkI+K6T/on/u7XFpPYmP/vZX3nQdp6mqClGIRS+md02BuyCkTrlDTfpVv9cjoI XeXKhP+7Ooh14Ug5httRs69I0KBZF8fX8utk/R7t3yHEDTzLC+Fx8xcCKgLx/tPn H6mLfsxrwEpXJdymXupuUTeoP1ETczkE/CufuwNfrgJ/X/OO9CNb9gdKIhjG+jq5 49qMb/9SivU04GcS8WWgejj05nH00wGxX8bzLj0hgLetzD61Il0yQ401iDI+sQ== -----END CERTIFICATE-----Generated at Mon Mar 2 03:57:36 2026 by rpki-client