$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf5355c6-97b6-474a-b0c9-01e3e2980cc1.roa File: bf5355c6-97b6-474a-b0c9-01e3e2980cc1.roa (raw, json) Hash identifier: 13Zy+vQD7hkr4pMFLr9bMk+rRlx2r3+WPco3c43pZ9g= Subject key identifier: 16:8B:CA:85:CC:77:CC:98:A8:2E:DA:6D:49:19:F1:8A:9A:0B:D3:7B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2428B82D98A67872417EE465F62B13F7DC8A31D6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf5355c6-97b6-474a-b0c9-01e3e2980cc1.roa Signing time: Wed 25 Feb 2026 02:10:36 +0000 ROA not before: Wed 25 Feb 2026 02:10:36 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f2c:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:28:b8:2d:98:a6:78:72:41:7e:e4:65:f6:2b:13:f7:dc:8a:31:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 02:10:36 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=e1c906fb1150633d005d58e1351e2186dc46e4176fde023ce3f5a65924bff2b7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:69:77:e0:43:8b:8e:77:b2:14:a1:e3:7b:4d: 0d:0f:44:4b:92:bc:7d:1e:50:fb:e6:94:5a:5a:f2: b0:07:37:8a:cb:9d:cb:4a:92:6b:5d:27:bc:22:ac: a2:bb:fe:a4:63:2d:fd:c3:9d:5f:48:fc:b2:5e:98: 03:ae:1d:e0:b1:2f:66:43:19:73:06:39:21:6c:cd: f2:5a:f9:4d:0f:cb:3d:f6:b1:ec:b3:e8:79:ab:2d: 58:f6:71:e4:0f:5f:19:30:a2:d2:2a:0c:4e:29:ee: 92:2a:b0:5a:b2:e8:f2:b5:05:8e:bb:93:33:54:da: bb:74:2d:45:01:ee:25:94:b8:62:b0:f6:0d:13:d5: 79:5f:a5:64:e8:08:78:ac:d2:0c:d8:70:ce:28:40: a2:f4:15:87:00:c3:82:41:f2:ff:73:76:c6:2e:45: fd:68:c7:cd:99:d5:57:89:9b:90:58:26:dc:a2:da: 08:5a:41:34:d9:ea:25:bf:46:93:14:57:4c:00:8c: e0:c7:0b:08:7b:ea:f0:6f:f2:d1:52:cc:a3:c5:93: 88:45:f8:0e:35:55:82:44:34:f1:69:1b:f1:5c:2c: 60:8c:ff:2c:91:c2:43:cb:4e:bc:b3:fd:e4:ba:2a: 5a:b3:40:bf:d3:3b:50:e3:aa:32:5b:ca:b7:68:43: 05:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8B:CA:85:CC:77:CC:98:A8:2E:DA:6D:49:19:F1:8A:9A:0B:D3:7B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf5355c6-97b6-474a-b0c9-01e3e2980cc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2c:c000::/36 Signature Algorithm: sha256WithRSAEncryption 96:71:d8:f2:ab:4e:fc:e1:d3:68:59:15:22:c1:fd:30:5b:09: b2:98:e9:1a:61:20:bc:96:ea:14:9a:09:69:0c:22:00:a6:78: f0:e0:36:00:54:26:1e:88:17:a8:02:80:2b:e1:98:de:9a:53: 39:d1:af:9e:38:77:e7:51:50:0f:53:28:d0:2f:9a:1c:92:15: 93:a0:b6:f1:62:65:e0:86:71:5e:7f:bd:b4:ce:b9:33:a2:c3: 2d:59:4c:74:25:fa:5a:21:1a:7e:5c:6d:48:25:ac:76:f3:60: 0d:99:da:69:49:4e:21:d6:08:20:3c:37:66:93:04:0e:1d:e2: f2:fe:f8:3b:da:16:bc:8c:fa:85:89:20:bd:f0:15:1a:d3:48: c2:f5:8f:e6:ab:ab:02:cb:46:64:d6:b3:23:97:c2:2c:24:b1: b8:d9:19:d1:b2:0a:27:07:b5:ed:71:06:d7:3b:e6:35:fb:5e: 7b:9a:db:06:67:56:bc:b0:3d:c9:4d:f0:51:da:04:98:c4:34: 73:0e:bf:46:bb:02:3b:38:0b:34:fa:99:bb:9d:e1:20:19:bb: a3:51:ea:45:77:26:f0:50:1b:d5:fd:60:16:c1:c0:b3:08:17: 36:67:ad:01:ed:c8:f7:9c:5c:e2:bd:e4:5d:df:bf:64:4e:c6: 9f:a3:b0:9c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJCi4LZimeHJBfuRl9isT99yKMdYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDIxMDM2WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMWM5MDZmYjExNTA2MzNkMDA1ZDU4ZTEzNTFlMjE4NmRj NDZlNDE3NmZkZTAyM2NlM2Y1YTY1OTI0YmZmMmI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5aXfgQ4uOd7IUoeN7TQ0PREuSvH0eUPvmlFpa8rAHN4rL nctKkmtdJ7wirKK7/qRjLf3DnV9I/LJemAOuHeCxL2ZDGXMGOSFszfJa+U0Pyz32 seyz6HmrLVj2ceQPXxkwotIqDE4p7pIqsFqy6PK1BY67kzNU2rt0LUUB7iWUuGKw 9g0T1XlfpWToCHis0gzYcM4oQKL0FYcAw4JB8v9zdsYuRf1ox82Z1VeJm5BYJtyi 2ghaQTTZ6iW/RpMUV0wAjODHCwh76vBv8tFSzKPFk4hF+A41VYJENPFpG/FcLGCM /yyRwkPLTryz/eS6KlqzQL/TO1DjqjJbyrdoQwXpAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUFovKhcx3zJioLtptSRnxipoL03swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmNTM1NWM2LTk3YjYtNDc0YS1iMGM5LTAxZTNlMjk4MGNjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8swDANBgkqhkiG9w0BAQsFAAOCAQEAlnHY8qtO/OHTaFkVIsH9MFsJ spjpGmEgvJbqFJoJaQwiAKZ48OA2AFQmHogXqAKAK+GY3ppTOdGvnjh351FQD1Mo 0C+aHJIVk6C28WJl4IZxXn+9tM65M6LDLVlMdCX6WiEaflxtSCWsdvNgDZnaaUlO IdYIIDw3ZpMEDh3i8v74O9oWvIz6hYkgvfAVGtNIwvWP5qurAstGZNazI5fCLCSx uNkZ0bIKJwe17XEG1zvmNftee5rbBmdWvLA9yU3wUdoEmMQ0cw6/RrsCOzgLNPqZ u53hIBm7o1HqRXcm8FAb1f1gFsHAswgXNmetAe3I95xc4r3kXd+/ZE7Gn6OwnA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:27:22 2026 by rpki-client