$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b519037c-7945-4289-a2a4-2873cdd84b35.roa File: b519037c-7945-4289-a2a4-2873cdd84b35.roa (raw, json) Hash identifier: DJ3mSzt+95sAA/+8/G/DyxGcjBcnJnCUNiJ5mq3wKZg= Subject key identifier: 4F:87:BA:6D:29:AA:5F:39:3C:81:15:F8:A8:92:A5:96:58:CB:84:D0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 612FC77A1E6B355364DD6B9B86F23A9D564341FF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b519037c-7945-4289-a2a4-2873cdd84b35.roa Signing time: Tue 10 Feb 2026 00:30:48 +0000 ROA not before: Tue 10 Feb 2026 00:30:48 +0000 ROA not after: Mon 11 May 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ffe:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:2f:c7:7a:1e:6b:35:53:64:dd:6b:9b:86:f2:3a:9d:56:43:41:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 10 00:30:48 2026 GMT Not After : May 11 23:59:59 2026 GMT Subject: serialNumber=3d444909b3a94449e64dd87eb5d3c3d7021800b56be72c5f2e8dcf8c51b64691, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fb:98:36:54:6e:84:66:39:25:66:41:1b:26: 19:d1:e8:25:28:a6:01:79:d4:73:a5:21:cd:ae:d6: 62:84:c8:cb:72:ef:41:38:34:d3:d8:c6:34:85:17: 9d:b4:69:10:64:6d:dd:3a:f9:7e:e3:e7:2b:fb:33: 8b:ac:3e:5f:01:3b:59:67:6c:8e:2d:6a:71:73:93: 79:ca:fe:17:e5:4c:80:74:f8:2c:7f:59:f5:c7:23: cf:54:57:b2:f3:e0:03:5d:bc:de:33:0d:a8:b7:de: 32:21:44:e6:f1:07:42:e6:75:80:c3:79:19:e3:da: 74:d7:34:25:d2:4c:aa:6b:b0:78:36:69:88:60:ab: e8:52:33:05:77:4a:4a:99:09:97:d4:a3:e5:eb:e5: 98:16:6a:ef:33:83:e1:76:5d:5a:c9:3b:e2:c6:13: b7:ee:a4:52:fd:65:8a:78:44:72:ab:d5:0d:b6:b9: cb:f7:72:ca:23:54:3e:91:cd:5f:4b:e2:52:7e:d1: c9:b1:dc:8e:d0:d6:4e:13:6f:af:6f:f7:e6:97:70: 6c:61:9a:2b:d6:44:a0:51:aa:4b:50:36:96:cf:39: 09:bc:5f:c6:a5:87:0c:e6:fb:33:da:20:74:cd:1e: 99:a2:5d:71:bf:81:72:7f:f7:ff:38:37:20:08:9a: e5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:87:BA:6D:29:AA:5F:39:3C:81:15:F8:A8:92:A5:96:58:CB:84:D0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b519037c-7945-4289-a2a4-2873cdd84b35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffe:5000::/40 Signature Algorithm: sha256WithRSAEncryption c7:e7:e9:e2:ee:c2:c5:80:8a:d0:5b:cc:d3:36:9f:37:e9:e8: dd:b5:73:8d:e3:da:32:14:43:da:b5:74:ec:61:7a:66:fb:cd: 6e:d0:1d:18:d0:47:32:ae:a2:c4:f7:10:91:cb:e2:57:6f:e4: 3f:2e:66:7e:d9:01:e6:b2:87:2c:40:02:ea:0e:a8:cc:f5:7b: 37:c7:74:e4:95:85:83:f2:d3:2d:ae:b9:77:c5:e5:03:a0:47: b0:76:f5:b9:d6:3e:bc:26:1f:d9:1e:ab:e8:b7:12:c2:ba:f4: e8:ab:8d:1f:56:22:1e:9f:56:71:de:22:4c:15:ad:ac:4b:60: 40:19:19:8e:61:c0:6d:03:37:c4:5f:b5:11:01:33:e5:25:52: ad:ea:85:96:4d:d5:af:ee:b2:ac:24:e1:9a:08:17:34:48:f3: c7:e6:59:60:56:f5:43:5f:d6:bb:4a:00:82:d0:3b:58:79:b1: e0:3e:c0:5d:e3:95:76:01:87:f9:85:01:b6:b1:31:1a:d2:b6: 04:ac:0b:d6:3b:d7:62:99:7a:0f:a7:5b:d6:70:11:b9:a5:8d: 0c:e2:05:9d:b7:c0:90:c1:3e:04:6d:b2:44:f6:f9:11:03:58: fc:6a:ca:9e:b4:0e:07:52:3c:47:a0:6d:dc:c9:ba:30:eb:f9: 86:e8:cc:0a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYS/Heh5rNVNk3WubhvI6nVZDQf8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDAzMDQ4WhcNMjYwNTExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZDQ0NDkwOWIzYTk0NDQ5ZTY0ZGQ4N2ViNWQzYzNkNzAy MTgwMGI1NmJlNzJjNWYyZThkY2Y4YzUxYjY0NjkxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx+5g2VG6EZjklZkEbJhnR6CUopgF51HOlIc2u1mKEyMty 70E4NNPYxjSFF520aRBkbd06+X7j5yv7M4usPl8BO1lnbI4tanFzk3nK/hflTIB0 +Cx/WfXHI89UV7Lz4ANdvN4zDai33jIhRObxB0LmdYDDeRnj2nTXNCXSTKprsHg2 aYhgq+hSMwV3SkqZCZfUo+Xr5ZgWau8zg+F2XVrJO+LGE7fupFL9ZYp4RHKr1Q22 ucv3csojVD6RzV9L4lJ+0cmx3I7Q1k4Tb69v9+aXcGxhmivWRKBRqktQNpbPOQm8 X8alhwzm+zPaIHTNHpmiXXG/gXJ/9/84NyAImuVHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUT4e6bSmqXzk8gRX4qJKllljLhNAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I1MTkwMzdjLTc5NDUtNDI4OS1hMmE0LTI4NzNjZGQ4NGIzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/+UDANBgkqhkiG9w0BAQsFAAOCAQEAx+fp4u7CxYCK0FvM0zafN+no 3bVzjePaMhRD2rV07GF6ZvvNbtAdGNBHMq6ixPcQkcviV2/kPy5mftkB5rKHLEAC 6g6ozPV7N8d05JWFg/LTLa65d8XlA6BHsHb1udY+vCYf2R6r6LcSwrr06KuNH1Yi Hp9Wcd4iTBWtrEtgQBkZjmHAbQM3xF+1EQEz5SVSreqFlk3Vr+6yrCThmggXNEjz x+ZZYFb1Q1/Wu0oAgtA7WHmx4D7AXeOVdgGH+YUBtrExGtK2BKwL1jvXYpl6D6db 1nARuaWNDOIFnbfAkME+BG2yRPb5EQNY/GrKnrQOB1I8R6Bt3Mm6MOv5hujMCg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:58 2026 by rpki-client