$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c538b13e-0806-4990-a5f5-81b220e6ea95.roa File: c538b13e-0806-4990-a5f5-81b220e6ea95.roa (raw, json) Hash identifier: /Et9pNsBj6d2s4e67N8bguUf2oANBZ3mb5ifxNmlHHM= Subject key identifier: 3D:6C:A8:E4:5B:99:B5:17:14:EC:83:21:61:C4:AB:D9:93:28:EA:A7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 22D1560A68CF7F88DC5C3B5F1C4E142BDA958B36 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c538b13e-0806-4990-a5f5-81b220e6ea95.roa Signing time: Wed 25 Feb 2026 00:30:14 +0000 ROA not before: Wed 25 Feb 2026 00:30:14 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d1:56:0a:68:cf:7f:88:dc:5c:3b:5f:1c:4e:14:2b:da:95:8b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 00:30:14 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=7bd0f2260dc2adf276e3363396c75f9a1722a7fc432e3eb942e55d0c0a06fcfb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f0:e4:3d:8b:21:fc:d0:1b:67:dd:4b:a3:20: 52:14:77:2e:f4:dd:8b:9e:5f:af:9d:a2:c6:36:f2: c7:5f:17:90:fc:c2:3d:62:7b:79:d1:07:8f:a9:9b: c5:50:6e:b2:f9:ee:56:93:fd:c6:fc:9c:f2:b2:a4: 38:2d:f3:46:fb:01:44:28:b3:f1:8c:c9:54:81:2d: b5:ee:30:e2:49:e7:61:ee:da:fa:4a:04:72:cd:ed: 49:fe:15:13:1c:96:09:ed:42:07:79:14:98:83:23: 1a:01:e7:4b:c6:c4:cc:2c:24:6b:2c:54:90:98:7a: 46:87:7a:61:ec:c5:51:ab:61:b4:ce:28:7e:87:36: 1c:9f:eb:29:40:95:7c:6d:2f:5c:e6:19:c0:ba:26: 99:bf:b8:37:72:c9:b8:e1:e2:52:3e:3d:cc:3b:6b: 22:7a:52:98:b9:32:37:da:9a:14:47:3c:70:1d:46: 2c:78:5b:97:63:d1:13:34:68:68:f1:54:81:e0:c5: bd:ab:87:be:63:01:45:d7:d5:7b:d4:9c:37:52:46: 6a:e0:a5:fc:c3:d3:5f:6d:6d:e8:04:95:1c:74:e3: 35:03:3c:fc:a1:77:bc:5d:a7:cb:57:c2:9f:d3:ab: fd:f3:a7:71:61:a3:14:0d:a3:02:5f:59:1a:4a:68: 7e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6C:A8:E4:5B:99:B5:17:14:EC:83:21:61:C4:AB:D9:93:28:EA:A7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c538b13e-0806-4990-a5f5-81b220e6ea95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:6000::/40 Signature Algorithm: sha256WithRSAEncryption 1f:a6:82:c1:ec:16:72:01:c7:8d:88:36:67:4b:4a:31:6d:fd: 8f:ea:a1:dc:e5:c5:39:bc:e7:e4:ac:ad:ac:95:c4:8c:5e:18: b5:77:1d:31:2e:a0:2e:78:4a:c0:5d:e8:2e:8a:d9:5c:d5:81: 76:04:d0:22:4a:03:3c:03:d0:6e:2d:bc:ea:6d:5e:5f:2f:a4: 94:a2:32:f3:70:21:e9:25:30:f8:ea:34:1b:28:28:bf:ae:8a: 7c:36:d6:3d:be:12:8c:97:7f:85:e6:84:22:8a:4b:92:48:c2: 6e:9d:f6:b8:91:4c:d5:66:b9:28:2d:39:97:c6:be:6f:aa:05: dc:11:7c:69:48:10:26:fb:88:51:0e:b0:cc:62:c6:d8:e0:33: d9:76:82:e0:02:1e:e0:81:b9:3b:23:84:26:cb:e0:24:75:df: 5b:fd:8c:d5:a4:4f:1b:de:e8:e5:57:cf:fe:28:29:8b:0f:fa: d5:65:b1:d2:89:d2:fa:f8:b8:d7:2f:04:48:df:d2:e3:c3:af: 07:e4:b4:02:a1:c5:57:10:57:03:51:0f:85:49:8a:42:eb:1d: 89:73:6e:a4:e5:8e:bb:2e:b1:3e:df:09:55:47:c2:6f:8a:fe: c3:cb:89:8a:2e:8a:8a:b8:31:f4:92:0d:5b:40:4d:ce:2e:26: 49:8e:f8:9d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUItFWCmjPf4jcXDtfHE4UK9qVizYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDAzMDE0WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YmQwZjIyNjBkYzJhZGYyNzZlMzM2MzM5NmM3NWY5YTE3 MjJhN2ZjNDMyZTNlYjk0MmU1NWQwYzBhMDZmY2ZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq8OQ9iyH80Btn3UujIFIUdy703YueX6+dosY28sdfF5D8 wj1ie3nRB4+pm8VQbrL57laT/cb8nPKypDgt80b7AUQos/GMyVSBLbXuMOJJ52Hu 2vpKBHLN7Un+FRMclgntQgd5FJiDIxoB50vGxMwsJGssVJCYekaHemHsxVGrYbTO KH6HNhyf6ylAlXxtL1zmGcC6Jpm/uDdyybjh4lI+Pcw7ayJ6Upi5MjfamhRHPHAd Rix4W5dj0RM0aGjxVIHgxb2rh75jAUXX1XvUnDdSRmrgpfzD019tbegElRx04zUD PPyhd7xdp8tXwp/Tq/3zp3FhoxQNowJfWRpKaH6DAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUPWyo5FuZtRcU7IMhYcSr2ZMo6qcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M1MzhiMTNlLTA4MDYtNDk5MC1hNWY1LTgxYjIyMGU2ZWE5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9pYDANBgkqhkiG9w0BAQsFAAOCAQEAH6aCwewWcgHHjYg2Z0tKMW39 j+qh3OXFObzn5KytrJXEjF4YtXcdMS6gLnhKwF3oLorZXNWBdgTQIkoDPAPQbi28 6m1eXy+klKIy83Ah6SUw+Oo0Gygov66KfDbWPb4SjJd/heaEIopLkkjCbp32uJFM 1Wa5KC05l8a+b6oF3BF8aUgQJvuIUQ6wzGLG2OAz2XaC4AIe4IG5OyOEJsvgJHXf W/2M1aRPG97o5VfP/igpiw/61WWx0onS+vi41y8ESN/S48OvB+S0AqHFVxBXA1EP hUmKQusdiXNupOWOuy6xPt8JVUfCb4r+w8uJii6Kirgx9JINW0BNzi4mSY74nQ== -----END CERTIFICATE-----Generated at Mon Mar 2 04:56:44 2026 by rpki-client