$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9b4bc59-ac32-4604-850d-b602691e81ea.roa File: b9b4bc59-ac32-4604-850d-b602691e81ea.roa (raw, json) Hash identifier: gW0htm9LJY2PJdNS/swO4DqW1k9sRakZc5ymzfvYC1Q= Subject key identifier: A8:D6:0B:6E:AF:AA:9D:EF:0D:76:0A:19:18:24:EA:A1:DA:D1:29:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54172D22ED0F86D6EEF1A7648A5F9E6A158FB42E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9b4bc59-ac32-4604-850d-b602691e81ea.roa Signing time: Sat 21 Feb 2026 00:30:19 +0000 ROA not before: Sat 21 Feb 2026 00:30:19 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f11:c000::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:17:2d:22:ed:0f:86:d6:ee:f1:a7:64:8a:5f:9e:6a:15:8f:b4:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:30:19 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=8345d39fe710eb1d064a6e273055e95cb667fe50051c90fdc473602cc85d921b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:83:38:76:42:d4:a5:fe:9a:b3:9b:d3:c4:5b: 5d:9c:7b:52:b9:c6:7b:74:f9:54:04:5b:9d:73:19: 3a:c2:bd:a2:b9:3c:7a:91:ad:4b:ee:b4:4c:48:01: 77:e2:7f:b7:80:d0:c4:74:d4:99:2b:ec:24:af:f9: 19:cd:13:3c:c9:ef:f3:a1:31:79:e1:17:9a:c7:ca: ec:5b:84:ca:78:b4:52:f2:94:bc:66:cf:0d:0d:d6: 4c:3a:30:18:28:b1:4e:68:bf:0c:91:28:6e:c7:5d: 40:8a:94:ce:91:16:b0:b8:5c:cc:bd:f2:b3:7c:70: 91:21:da:9b:2b:ce:8e:90:99:41:fa:7d:61:27:77: 24:3a:ba:1b:25:2e:9d:39:10:46:44:67:d1:f9:c7: ea:f0:f6:a8:6e:00:19:d4:9c:1a:22:25:66:3e:a7: 8a:fd:d3:71:ba:c3:e0:39:50:83:a3:da:67:e9:65: 69:b6:21:c5:c3:7c:46:e2:7c:21:c5:a2:72:73:73: 8b:52:47:bb:fd:93:a4:5d:a1:45:e4:30:e4:7a:fd: d3:d8:17:32:61:ce:fc:58:34:3c:57:a9:f5:01:21: e8:f9:6a:66:d8:4d:3b:90:9c:56:b0:ad:dc:2a:fe: 62:03:42:a2:76:42:fd:e7:04:3c:f7:43:b6:90:5d: 09:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D6:0B:6E:AF:AA:9D:EF:0D:76:0A:19:18:24:EA:A1:DA:D1:29:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9b4bc59-ac32-4604-850d-b602691e81ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f11:c000::/42 Signature Algorithm: sha256WithRSAEncryption 29:c8:3f:c5:61:cf:a6:ab:3e:99:65:5f:0e:13:62:06:77:d6: ab:88:82:f2:bc:5d:05:d7:a1:2a:10:fd:98:df:5b:1f:6e:f4: fd:02:16:80:65:93:6f:a5:1d:0b:13:79:80:4a:97:ac:98:0b: 79:f9:f6:76:40:bc:1e:a0:62:a5:cb:d5:69:51:f4:0f:10:a5: ad:e3:5e:e8:39:d4:9d:ae:da:ea:36:1e:ee:03:a2:ef:45:3d: 85:52:bc:37:90:9c:d7:f6:bd:07:c8:68:42:74:84:40:1e:c4: e7:80:3d:c2:1a:06:d6:8d:6a:aa:09:74:09:90:c2:ba:2f:96: 4a:4c:33:cd:dd:03:ca:d6:9a:56:13:06:a7:4e:2e:f6:9b:2f: 53:d0:83:2d:40:56:31:ac:ef:ac:6e:93:d4:68:61:75:5c:97: 7d:67:82:1d:dc:69:17:05:f5:d3:f2:45:03:f3:eb:88:75:db: b3:21:58:5a:9a:fa:22:41:d5:28:1c:3e:bb:87:97:c7:e0:cc: f0:f0:59:74:dd:a3:8a:cb:58:da:d0:2d:6a:8e:18:12:22:58: 2f:fe:67:2d:b3:c2:2b:53:0d:a6:73:7d:aa:6d:78:2b:9b:f4: 53:b3:4f:c7:6d:12:46:5d:b8:29:b5:e7:10:06:ba:27:05:be: aa:54:0c:8e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVBctIu0Phtbu8adkil+eahWPtC4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDAzMDE5WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzQ1ZDM5ZmU3MTBlYjFkMDY0YTZlMjczMDU1ZTk1Y2I2 NjdmZTUwMDUxYzkwZmRjNDczNjAyY2M4NWQ5MjFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTgzh2QtSl/pqzm9PEW12ce1K5xnt0+VQEW51zGTrCvaK5 PHqRrUvutExIAXfif7eA0MR01Jkr7CSv+RnNEzzJ7/OhMXnhF5rHyuxbhMp4tFLy lLxmzw0N1kw6MBgosU5ovwyRKG7HXUCKlM6RFrC4XMy98rN8cJEh2psrzo6QmUH6 fWEndyQ6uhslLp05EEZEZ9H5x+rw9qhuABnUnBoiJWY+p4r903G6w+A5UIOj2mfp ZWm2IcXDfEbifCHFonJzc4tSR7v9k6RdoUXkMOR6/dPYFzJhzvxYNDxXqfUBIej5 ambYTTuQnFawrdwq/mIDQqJ2Qv3nBDz3Q7aQXQnJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqNYLbq+qne8NdgoZGCTqodrRKbgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I5YjRiYzU5LWFjMzItNDYwNC04NTBkLWI2MDI2OTFlODFlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAB8RwAAwDQYJKoZIhvcNAQELBQADggEBACnIP8Vhz6arPpllXw4TYgZ3 1quIgvK8XQXXoSoQ/ZjfWx9u9P0CFoBlk2+lHQsTeYBKl6yYC3n59nZAvB6gYqXL 1WlR9A8Qpa3jXug51J2u2uo2Hu4Dou9FPYVSvDeQnNf2vQfIaEJ0hEAexOeAPcIa BtaNaqoJdAmQwrovlkpMM83dA8rWmlYTBqdOLvabL1PQgy1AVjGs76xuk9RoYXVc l31ngh3caRcF9dPyRQPz64h127MhWFqa+iJB1SgcPruHl8fgzPDwWXTdo4rLWNrQ LWqOGBIiWC/+Zy2zwitTDaZzfapteCub9FOzT8dtEkZduCm15xAGuicFvqpUDI4= -----END CERTIFICATE-----Generated at Sun Mar 1 22:17:17 2026 by rpki-client