$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a68372f8-040b-4a15-a8cc-dd38793c7cbc.roa File: a68372f8-040b-4a15-a8cc-dd38793c7cbc.roa (raw, json) Hash identifier: WcQlnsr2eVnanhoBROGo73QerHTbggnfD+fL+xso+Ks= Subject key identifier: 03:FE:8C:22:CC:17:08:AF:3B:E6:0B:AE:F9:C3:BE:57:F7:A8:2B:4B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 080BEF652CA72D9FD12BAB6A39311B7F0236C71E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a68372f8-040b-4a15-a8cc-dd38793c7cbc.roa Signing time: Sat 07 Feb 2026 00:10:09 +0000 ROA not before: Sat 07 Feb 2026 00:10:09 +0000 ROA not after: Fri 08 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f27:4000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:0b:ef:65:2c:a7:2d:9f:d1:2b:ab:6a:39:31:1b:7f:02:36:c7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 7 00:10:09 2026 GMT Not After : May 8 23:59:59 2026 GMT Subject: serialNumber=905a5e68748ca114b2979b8eb9a406e0af39f2b4943e0fcae91b791dee7d7d42, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:80:61:af:db:4f:1f:65:95:0d:1a:76:d8:77: 4b:e4:d6:fa:d2:28:b4:7b:ee:ff:bd:49:fb:91:58: 94:52:38:8b:b5:f5:1b:50:a9:ff:bb:7c:19:38:d1: 2a:9f:3b:26:8d:b9:3f:69:49:c2:ee:70:65:8c:7e: 12:98:24:f1:e3:8b:e3:83:d7:6d:4a:b8:61:2f:fa: 17:ad:ff:94:c2:cd:e4:92:d0:1a:63:1c:47:6f:44: 42:fa:a7:a6:d5:75:fb:3a:f8:14:d9:31:a9:ce:56: 26:6a:4c:94:65:2b:f6:e7:31:1d:ca:f1:d9:1c:1e: ab:bc:30:4f:f8:76:bc:42:bb:d6:dc:d3:b4:3b:53: 49:d6:88:44:f2:d0:a0:ba:7a:61:5c:f6:b8:bf:73: 11:37:14:fb:77:d2:e3:3d:19:15:84:cf:29:42:f8: 08:3b:7c:8e:50:83:6e:fd:9f:42:06:06:85:16:03: 3e:1e:81:0f:47:82:6f:ed:a5:cc:c5:39:47:fa:49: 62:d0:76:1c:bd:cb:ad:47:38:65:42:f5:74:fa:97: 9d:10:e2:0f:36:ad:16:c0:c6:81:98:bf:99:b7:71: e1:e4:19:6d:d0:ca:ec:e6:53:e2:5f:bc:6d:99:03: 8c:e2:32:94:42:04:45:ae:ee:06:b5:c0:b2:22:3d: 8a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FE:8C:22:CC:17:08:AF:3B:E6:0B:AE:F9:C3:BE:57:F7:A8:2B:4B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a68372f8-040b-4a15-a8cc-dd38793c7cbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f27:4000::/36 Signature Algorithm: sha256WithRSAEncryption 32:e9:b3:b3:51:32:12:ce:6d:1f:7e:11:05:8e:1d:ab:05:74: b3:ff:64:aa:e4:56:8f:53:29:fa:c5:02:76:c8:9b:a9:b9:62: 2a:d3:32:c7:2a:85:0c:18:76:ac:15:aa:79:dc:58:05:ce:c1: aa:bf:c4:26:98:90:a5:04:b0:93:35:67:78:3f:26:91:d9:61: 71:a5:ba:92:62:7f:df:37:78:c0:68:d5:66:4e:f9:71:ac:07: 03:b7:d0:d4:30:23:63:f7:37:7e:8e:70:dd:0e:c2:cd:26:69: 62:23:fb:3b:d6:77:08:ef:81:22:a6:f7:51:fb:30:ed:c5:1a: 01:d7:64:e4:8b:9a:9f:19:44:d5:13:26:35:d5:59:b2:fc:76: 85:d6:38:dd:bc:7f:cb:68:f1:f7:e0:f5:9e:fd:6b:79:63:38: bf:f0:7d:0f:d6:36:47:8b:0e:b4:26:a3:10:0d:9d:1d:76:ac: 67:61:c1:58:53:bb:0f:5b:4d:60:6c:b6:14:a7:e8:ee:d1:fc: c1:b9:2e:53:84:18:16:52:1c:4a:5e:d8:43:2f:05:53:10:98: 34:c6:f3:2d:f6:35:b4:8c:e2:c0:50:f2:77:f7:78:f4:66:bf: 88:9c:98:42:30:40:65:02:a6:78:d4:7f:92:5f:d6:7a:54:71: 24:87:cb:f5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCAvvZSynLZ/RK6tqOTEbfwI2xx4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA3MDAxMDA5WhcNMjYwNTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDVhNWU2ODc0OGNhMTE0YjI5NzliOGViOWE0MDZlMGFm MzlmMmI0OTQzZTBmY2FlOTFiNzkxZGVlN2Q3ZDQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+gGGv208fZZUNGnbYd0vk1vrSKLR77v+9SfuRWJRSOIu1 9RtQqf+7fBk40SqfOyaNuT9pScLucGWMfhKYJPHji+OD121KuGEv+het/5TCzeSS 0BpjHEdvREL6p6bVdfs6+BTZManOViZqTJRlK/bnMR3K8dkcHqu8ME/4drxCu9bc 07Q7U0nWiETy0KC6emFc9ri/cxE3FPt30uM9GRWEzylC+Ag7fI5Qg279n0IGBoUW Az4egQ9Hgm/tpczFOUf6SWLQdhy9y61HOGVC9XT6l50Q4g82rRbAxoGYv5m3ceHk GW3QyuzmU+JfvG2ZA4ziMpRCBEWu7ga1wLIiPYpDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUA/6MIswXCK875guu+cO+V/eoK0swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E2ODM3MmY4LTA0MGItNGExNS1hOGNjLWRkMzg3OTNjN2NiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8nQDANBgkqhkiG9w0BAQsFAAOCAQEAMumzs1EyEs5tH34RBY4dqwV0 s/9kquRWj1Mp+sUCdsibqbliKtMyxyqFDBh2rBWqedxYBc7Bqr/EJpiQpQSwkzVn eD8mkdlhcaW6kmJ/3zd4wGjVZk75cawHA7fQ1DAjY/c3fo5w3Q7CzSZpYiP7O9Z3 CO+BIqb3Ufsw7cUaAddk5IuanxlE1RMmNdVZsvx2hdY43bx/y2jx9+D1nv1reWM4 v/B9D9Y2R4sOtCajEA2dHXasZ2HBWFO7D1tNYGy2FKfo7tH8wbkuU4QYFlIcSl7Y Qy8FUxCYNMbzLfY1tIziwFDyd/d49Ga/iJyYQjBAZQKmeNR/kl/WelRxJIfL9Q== -----END CERTIFICATE-----Generated at Mon Mar 2 04:54:50 2026 by rpki-client