$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b25c2d87-d081-445b-a869-d1875686b10e.roa File: b25c2d87-d081-445b-a869-d1875686b10e.roa (raw, json) Hash identifier: iSH2uPktr98V37sggSLs9FrfnlBiNy++7ezXMTgNW08= Subject key identifier: FA:AC:B3:0B:56:BC:17:28:03:78:B2:36:B9:16:0C:F3:2F:75:E9:55 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 444CB36AC7701F50C218E8B21D89D92D1D89FDC4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b25c2d87-d081-445b-a869-d1875686b10e.roa Signing time: Wed 25 Feb 2026 02:20:08 +0000 ROA not before: Wed 25 Feb 2026 02:20:08 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1f:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:4c:b3:6a:c7:70:1f:50:c2:18:e8:b2:1d:89:d9:2d:1d:89:fd:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 02:20:08 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=c7b328ba5cf258ec8a5183a23dbaba3aceb06aa28c8a2e409802c0c83ddd749d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0f:15:7c:c9:e3:d2:2d:37:44:62:0f:30:e5: 26:35:b1:b8:92:d1:cf:eb:13:a2:b5:62:35:2b:07: 84:19:61:b0:19:1d:fb:86:68:24:e8:53:cc:8d:be: 0a:4b:b5:ec:88:88:d6:89:46:f6:e8:f6:94:0c:62: 6d:fd:84:85:34:cd:57:b0:1d:0c:59:a6:c7:ec:d3: 80:30:48:60:a3:d5:26:b3:85:a3:d3:63:cf:20:bd: a2:a0:dd:0a:39:59:74:7d:9f:ef:e4:f1:64:b3:d7: dc:53:16:17:c5:e1:51:e2:26:31:66:80:ea:ab:30: 88:30:04:00:11:0a:8d:37:26:c1:35:d6:d0:17:6d: 35:e8:2b:ce:f7:79:78:ad:f9:62:6d:97:65:54:33: ea:ac:1f:14:19:6f:dd:89:99:16:6b:3c:cb:bc:c4: 95:e7:e3:ce:cf:93:a2:22:b4:2e:b8:a0:9a:70:c6: 43:e7:58:5a:10:12:f0:93:0b:93:26:de:c9:1b:e1: e9:6b:70:8f:da:7a:84:e9:9b:6d:a3:69:5c:d8:4a: a3:ca:7c:92:c8:0b:79:eb:2a:7b:3c:08:fc:14:be: 4e:43:d7:18:d5:b0:a7:25:40:d3:fd:bd:e6:a5:fb: 23:fe:aa:f2:73:b1:96:1b:ab:96:91:66:cc:74:77: 73:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AC:B3:0B:56:BC:17:28:03:78:B2:36:B9:16:0C:F3:2F:75:E9:55 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b25c2d87-d081-445b-a869-d1875686b10e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1f:4000::/36 Signature Algorithm: sha256WithRSAEncryption 8e:8b:13:33:22:ff:0c:73:4f:f1:9f:b8:b0:e8:9c:68:1b:ff: 2a:8b:bf:d0:fc:97:63:43:08:11:85:30:e9:02:b1:25:a3:ba: 61:e2:86:05:14:59:db:df:9a:e2:9a:11:1d:ef:a0:b7:5c:1d: 12:79:1f:8b:5e:81:1c:6e:10:c5:9c:e0:1c:66:79:b0:ee:93: 42:cc:83:2c:fe:06:3f:09:d4:83:fb:0d:f7:dd:23:b6:9a:96: 0b:bb:75:40:2c:55:a1:db:e8:b3:ce:6a:65:79:0f:3f:ae:e8: 57:da:86:14:ab:ea:0b:c8:2c:9e:a3:14:5e:f7:d2:9f:8e:b6: 24:fa:67:73:90:ac:97:ab:60:8b:84:e2:57:8a:cc:11:69:f8: 01:a4:97:29:19:56:a1:28:00:28:05:4c:bd:d5:e6:ac:26:95: a1:08:8e:eb:2d:d3:eb:01:f4:b0:ef:de:de:cc:7e:90:fd:62: 49:d8:f0:e3:b1:e4:2d:e6:e3:ac:bb:3e:db:96:16:cb:9f:60: 9b:c9:52:25:ac:87:a3:75:0c:9b:27:69:6f:c9:5d:89:1f:42: ad:2a:b4:99:ed:04:d9:7c:ef:9b:da:52:8b:47:c0:c1:5b:84: a9:99:fe:17:7c:f7:af:9e:b0:23:46:fe:64:1c:ed:e9:da:5a: 45:0c:c3:5f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUREyzasdwH1DCGOiyHYnZLR2J/cQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDIyMDA4WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjN2IzMjhiYTVjZjI1OGVjOGE1MTgzYTIzZGJhYmEzYWNl YjA2YWEyOGM4YTJlNDA5ODAyYzBjODNkZGQ3NDlkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiDxV8yePSLTdEYg8w5SY1sbiS0c/rE6K1YjUrB4QZYbAZ HfuGaCToU8yNvgpLteyIiNaJRvbo9pQMYm39hIU0zVewHQxZpsfs04AwSGCj1Saz haPTY88gvaKg3Qo5WXR9n+/k8WSz19xTFhfF4VHiJjFmgOqrMIgwBAARCo03JsE1 1tAXbTXoK873eXit+WJtl2VUM+qsHxQZb92JmRZrPMu8xJXn487Pk6IitC64oJpw xkPnWFoQEvCTC5Mm3skb4elrcI/aeoTpm22jaVzYSqPKfJLIC3nrKns8CPwUvk5D 1xjVsKclQNP9veal+yP+qvJzsZYbq5aRZsx0d3OHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU+qyzC1a8FygDeLI2uRYM8y916VUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IyNWMyZDg3LWQwODEtNDQ1Yi1hODY5LWQxODc1Njg2YjEwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8fQDANBgkqhkiG9w0BAQsFAAOCAQEAjosTMyL/DHNP8Z+4sOicaBv/ Kou/0PyXY0MIEYUw6QKxJaO6YeKGBRRZ29+a4poRHe+gt1wdEnkfi16BHG4QxZzg HGZ5sO6TQsyDLP4GPwnUg/sN990jtpqWC7t1QCxVodvos85qZXkPP67oV9qGFKvq C8gsnqMUXvfSn462JPpnc5Csl6tgi4TiV4rMEWn4AaSXKRlWoSgAKAVMvdXmrCaV oQiO6y3T6wH0sO/e3sx+kP1iSdjw47HkLebjrLs+25YWy59gm8lSJayHo3UMmydp b8ldiR9CrSq0me0E2Xzvm9pSi0fAwVuEqZn+F3z3r56wI0b+ZBzt6dpaRQzDXw== -----END CERTIFICATE-----Generated at Mon Mar 2 01:59:15 2026 by rpki-client