$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aea1a8c4-9623-482e-bac8-7f47ab2e6116.roa File: aea1a8c4-9623-482e-bac8-7f47ab2e6116.roa (raw, json) Hash identifier: +8V/OtEVK67jRmWHjRZ1qVh9d19wXlWzcsOKFhFA3xo= Subject key identifier: A8:96:51:59:44:3E:98:20:FB:C9:4D:C6:1F:4E:2E:C4:88:0A:7A:F7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1456BD6DFBBE8643C77F3FC8C8C7EC4765287229 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aea1a8c4-9623-482e-bac8-7f47ab2e6116.roa Signing time: Wed 25 Feb 2026 01:51:05 +0000 ROA not before: Wed 25 Feb 2026 01:51:05 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f23:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:56:bd:6d:fb:be:86:43:c7:7f:3f:c8:c8:c7:ec:47:65:28:72:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 01:51:05 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=cde60d84713a35ee5354ed1add3afa1a8b50e017b4e2841a90b0293c4d5a870a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:98:83:c9:83:9c:01:08:74:24:0e:50:9b:8a: eb:e3:0b:a8:84:66:b9:b4:cc:e4:12:ed:bf:0d:1f: 22:d0:ed:30:17:7f:76:c9:17:d7:0e:dd:1c:16:e4: 2b:90:a6:3e:b2:38:76:70:22:48:4f:a8:ce:8c:6c: b4:32:35:d0:c5:44:ef:58:4c:a3:1e:53:16:d1:82: e6:7e:a2:c2:1d:85:51:e6:d7:86:74:b6:5b:11:ef: 64:1c:b1:24:f7:bb:ab:c4:ae:03:58:b7:3f:c9:80: b3:03:0e:54:b9:a2:72:38:85:59:34:f6:39:bb:f0: fb:57:0a:9c:1f:0c:7a:9b:f1:73:71:ce:0d:f1:79: 0c:3a:cb:d4:f5:ca:33:7c:32:a4:6b:65:6f:86:49: 17:a4:bc:be:83:0a:9f:a4:5e:fb:51:af:3e:41:1f: c0:62:30:4b:01:5d:d9:0c:e3:26:2b:18:4f:11:bc: fe:0d:c2:18:c9:5b:51:29:e0:0d:13:e5:65:24:44: e5:ff:d7:4a:f8:e7:73:63:b1:3e:65:db:c3:62:14: f4:b0:c2:41:8d:1c:d8:c2:49:74:c6:4f:81:f6:60: 19:e8:1c:11:d2:62:87:d6:a2:ea:15:7d:18:89:77: ff:c2:56:97:e2:af:14:6d:e8:f6:28:8d:21:3e:73: 37:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:96:51:59:44:3E:98:20:FB:C9:4D:C6:1F:4E:2E:C4:88:0A:7A:F7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aea1a8c4-9623-482e-bac8-7f47ab2e6116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f23:8000::/36 Signature Algorithm: sha256WithRSAEncryption 39:0c:38:5d:28:64:04:ad:f6:04:db:4c:f3:df:e4:8d:a2:68: 6f:c5:b5:e5:19:b7:b7:6d:0c:c5:b8:1b:6a:d1:7b:4c:26:e5: e6:30:42:1d:2d:93:cc:cb:6d:90:ff:f7:b2:b6:a0:5a:cc:32: a3:c7:d3:0a:86:9f:05:54:47:5f:eb:c5:b2:8e:e3:33:9a:80: 47:be:65:23:47:46:4e:12:2a:f3:ca:81:18:8d:54:de:bf:95: cf:9b:a5:ca:3b:c7:1a:bc:49:a6:3d:bb:ec:28:57:3b:9e:e4: 6f:39:5f:b9:c5:7f:c6:2d:6a:a3:28:19:39:77:52:23:7a:27: dd:e5:2a:b5:47:6d:08:6d:b4:e1:3c:43:9a:75:7c:48:d6:38: f5:25:01:1c:02:52:1b:76:a8:81:e4:0a:a6:20:93:3d:4a:88: cc:37:56:df:97:04:ef:92:ca:e4:59:42:01:47:03:fa:76:62: a6:5c:63:25:fd:96:68:41:87:71:8e:e2:71:f7:1c:ea:e4:c2: 92:1a:0a:39:38:bf:f6:ba:49:bd:96:a9:9b:29:b4:30:d8:bd: e1:0b:f9:24:91:ac:c0:16:da:1d:7b:cd:2b:68:23:54:fa:45: 37:7b:5d:8c:5a:0e:d0:6c:90:92:7c:61:04:c2:70:d7:cb:f7: 1e:68:03:3f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFFa9bfu+hkPHfz/IyMfsR2UocikwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDE1MTA1WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZGU2MGQ4NDcxM2EzNWVlNTM1NGVkMWFkZDNhZmExYThi NTBlMDE3YjRlMjg0MWE5MGIwMjkzYzRkNWE4NzBhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQmIPJg5wBCHQkDlCbiuvjC6iEZrm0zOQS7b8NHyLQ7TAX f3bJF9cO3RwW5CuQpj6yOHZwIkhPqM6MbLQyNdDFRO9YTKMeUxbRguZ+osIdhVHm 14Z0tlsR72QcsST3u6vErgNYtz/JgLMDDlS5onI4hVk09jm78PtXCpwfDHqb8XNx zg3xeQw6y9T1yjN8MqRrZW+GSRekvL6DCp+kXvtRrz5BH8BiMEsBXdkM4yYrGE8R vP4NwhjJW1Ep4A0T5WUkROX/10r453NjsT5l28NiFPSwwkGNHNjCSXTGT4H2YBno HBHSYofWouoVfRiJd//CVpfirxRt6PYojSE+czfvAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUqJZRWUQ+mCD7yU3GH04uxIgKevcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlYTFhOGM0LTk2MjMtNDgyZS1iYWM4LTdmNDdhYjJlNjExNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8jgDANBgkqhkiG9w0BAQsFAAOCAQEAOQw4XShkBK32BNtM89/kjaJo b8W15Rm3t20MxbgbatF7TCbl5jBCHS2TzMttkP/3sragWswyo8fTCoafBVRHX+vF so7jM5qAR75lI0dGThIq88qBGI1U3r+Vz5ulyjvHGrxJpj277ChXO57kbzlfucV/ xi1qoygZOXdSI3on3eUqtUdtCG204TxDmnV8SNY49SUBHAJSG3aogeQKpiCTPUqI zDdW35cE75LK5FlCAUcD+nZiplxjJf2WaEGHcY7icfcc6uTCkhoKOTi/9rpJvZap mym0MNi94Qv5JJGswBbaHXvNK2gjVPpFN3tdjFoO0GyQknxhBMJw18v3HmgDPw== -----END CERTIFICATE-----Generated at Sun Mar 1 22:26:51 2026 by rpki-client