$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf7f3c9b-89c0-4589-b30d-a3112c021c5b.roa File: bf7f3c9b-89c0-4589-b30d-a3112c021c5b.roa (raw, json) Hash identifier: Im5QHXnXWKo6QfPobBqDHqW1SqrZRy2TcEe0jOlo1OY= Subject key identifier: 60:2C:DC:AB:AC:1B:74:BA:96:E1:8E:47:08:5C:CE:BE:F3:12:BA:D1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 19CE23DAE7EC6C9269E667BF4F70BB1A330B23D7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf7f3c9b-89c0-4589-b30d-a3112c021c5b.roa Signing time: Wed 25 Feb 2026 02:00:53 +0000 ROA not before: Wed 25 Feb 2026 02:00:53 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f22:4000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ce:23:da:e7:ec:6c:92:69:e6:67:bf:4f:70:bb:1a:33:0b:23:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 02:00:53 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=c3a458dbc7f320a428c511ef11c3aa98153a5b72987bf36c1ebdf3cf4fb21348, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:56:5c:46:ec:21:6c:0a:ea:1b:bd:4b:c6:cf: 72:96:c7:89:51:41:b9:4a:e9:35:fa:38:f1:5a:00: fa:6f:ee:ea:ff:ea:4a:49:be:c2:51:a9:7e:df:87: 0b:7f:c2:4c:0f:d4:64:fe:f4:69:95:86:d4:5f:14: cd:df:bc:48:b0:db:0b:95:92:4a:5a:b7:3b:50:2d: 47:f1:2a:43:76:6d:3d:ba:d6:51:dc:7a:71:19:89: ff:31:dd:bd:e1:3b:b5:3c:c2:bb:9e:24:3c:20:26: a6:aa:fa:5f:77:bc:ab:8f:d7:f2:60:ad:fc:68:60: bd:42:1d:6e:e9:bb:5c:e3:1d:81:f9:4b:fe:c0:bf: 4e:24:4f:ed:b9:38:95:15:11:a5:a5:44:86:f6:fe: cf:a7:0e:c5:0e:eb:7d:f5:ee:f9:c0:11:48:16:62: 13:42:73:db:a1:18:1e:be:f8:62:ce:41:4f:33:c6: a0:7e:a3:f8:d1:7f:7a:a6:7d:4e:5b:7e:b0:20:0c: b5:24:0d:bb:7f:27:ac:f4:40:f8:08:77:e4:9b:91: 60:16:9a:a5:af:e2:52:94:46:d1:4e:dc:6b:8d:4a: 30:47:b7:fb:cf:4f:b0:78:e8:7a:ca:5c:10:41:d5: 87:62:a0:f3:a6:1a:0b:e9:60:6d:14:e4:24:e1:d9: 1d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2C:DC:AB:AC:1B:74:BA:96:E1:8E:47:08:5C:CE:BE:F3:12:BA:D1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf7f3c9b-89c0-4589-b30d-a3112c021c5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f22:4000::/36 Signature Algorithm: sha256WithRSAEncryption a7:df:23:2f:e8:75:8f:c8:d6:25:98:5b:3b:0a:ad:a4:fa:39: 11:40:8c:f5:80:21:a0:d4:85:64:92:6e:6a:2f:f5:82:f8:99: a4:06:51:c6:e6:a5:ec:fa:ba:56:8c:4b:2a:9b:c9:46:fd:9d: a1:cc:4f:50:00:2a:c2:ca:99:54:34:3e:c1:f0:23:8c:94:bf: 3c:b1:41:03:dd:62:67:97:40:32:10:61:ff:de:5a:ef:f3:5b: a7:e4:44:b8:13:00:9e:2a:81:ae:e5:f5:3b:f2:ff:c1:e0:4f: 10:07:0f:5e:95:fc:92:0f:d0:65:fa:60:cc:42:ff:2f:9d:a5: 0f:cd:5a:ba:ab:08:30:45:63:ef:c2:39:ea:b4:c8:2a:c8:84: 26:bd:c2:62:72:a8:1e:bf:91:aa:77:12:9b:61:f6:b1:de:f4: 2b:55:14:f5:e0:70:95:59:e5:bb:a2:95:3f:82:e4:66:f7:8a: 27:89:22:54:fc:03:81:7e:54:4d:30:bc:ac:5f:82:c4:5c:a5: 4c:eb:30:2f:83:58:76:c6:95:f1:de:fa:61:d2:47:e4:ad:30: 34:c9:b1:2e:61:0d:f9:21:6d:91:d0:f6:f5:2a:51:93:c3:dd: c4:4e:a2:10:f9:77:c6:7e:a3:37:78:b6:f3:26:1f:83:49:0d: 77:37:5f:c6 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUGc4j2ufsbJJp5me/T3C7GjMLI9cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDIwMDUzWhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjM2E0NThkYmM3ZjMyMGE0MjhjNTExZWYxMWMzYWE5ODE1 M2E1YjcyOTg3YmYzNmMxZWJkZjNjZjRmYjIxMzQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyVlxG7CFsCuobvUvGz3KWx4lRQblK6TX6OPFaAPpv7ur/ 6kpJvsJRqX7fhwt/wkwP1GT+9GmVhtRfFM3fvEiw2wuVkkpatztQLUfxKkN2bT26 1lHcenEZif8x3b3hO7U8wrueJDwgJqaq+l93vKuP1/JgrfxoYL1CHW7pu1zjHYH5 S/7Av04kT+25OJUVEaWlRIb2/s+nDsUO63317vnAEUgWYhNCc9uhGB6++GLOQU8z xqB+o/jRf3qmfU5bfrAgDLUkDbt/J6z0QPgId+SbkWAWmqWv4lKURtFO3GuNSjBH t/vPT7B46HrKXBBB1YdioPOmGgvpYG0U5CTh2R1bAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUYCzcq6wbdLqW4Y5HCFzOvvMSutEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmN2YzYzliLTg5YzAtNDU4OS1iMzBkLWEzMTEyYzAyMWM1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8iQDANBgkqhkiG9w0BAQsFAAOCAQEAp98jL+h1j8jWJZhbOwqtpPo5 EUCM9YAhoNSFZJJuai/1gviZpAZRxual7Pq6VoxLKpvJRv2docxPUAAqwsqZVDQ+ wfAjjJS/PLFBA91iZ5dAMhBh/95a7/Nbp+REuBMAniqBruX1O/L/weBPEAcPXpX8 kg/QZfpgzEL/L52lD81auqsIMEVj78I56rTIKsiEJr3CYnKoHr+RqncSm2H2sd70 K1UU9eBwlVnlu6KVP4LkZveKJ4kiVPwDgX5UTTC8rF+CxFylTOswL4NYdsaV8d76 YdJH5K0wNMmxLmEN+SFtkdD29SpRk8PdxE6iEPl3xn6jN3i28yYfg0kNdzdfxg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:20:16 2026 by rpki-client