$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c56ff21d-fa51-44da-8d5b-81a37c826302.roa File: c56ff21d-fa51-44da-8d5b-81a37c826302.roa (raw, json) Hash identifier: KBYCpq+eyh86NNBWJcqL6Gkqe0V7gyWl/e1QerkwsFQ= Subject key identifier: 31:C6:51:B0:DA:22:36:84:A5:36:B2:48:75:85:1A:EC:86:FD:34:C5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 342238B9B43BC19DFD54394AD421E0AFBC0F903C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c56ff21d-fa51-44da-8d5b-81a37c826302.roa Signing time: Tue 24 Feb 2026 01:10:07 +0000 ROA not before: Tue 24 Feb 2026 01:10:07 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:81d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:22:38:b9:b4:3b:c1:9d:fd:54:39:4a:d4:21:e0:af:bc:0f:90:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 01:10:07 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=4144e2698be5b51c20c56e9953980f9f0086d92a1ffb2b512f5ff5070d8aa797, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:47:9a:38:2d:af:08:b1:51:a9:73:91:8d:12: fc:7b:22:86:cc:cc:c0:92:5c:85:22:1e:af:6d:b1: ff:fe:90:4e:0d:c7:88:62:77:98:48:43:d8:1a:02: 9e:38:53:6a:af:b4:4e:d7:55:f1:94:e4:2a:a8:cd: 50:79:ed:4f:48:dd:68:ef:ee:52:b4:72:2e:e0:fa: 87:67:be:98:33:0f:01:71:56:c3:23:bb:53:18:ec: 67:91:79:13:f5:89:e3:a4:b4:0c:38:23:be:dc:60: dd:8e:09:fd:2f:ba:cd:41:0e:57:5f:35:35:d4:31: 5a:4e:08:4f:19:c9:61:d1:1c:6c:4e:12:37:5d:29: 91:0b:bf:04:0a:b5:1d:c3:15:06:4f:05:ec:48:b9: 0a:b3:3b:8c:69:f2:a0:71:a5:0e:89:ce:53:c2:6d: 3d:08:1e:d1:99:9b:4a:fd:3f:62:13:df:89:97:1b: fd:0b:e7:21:d5:35:28:ff:f5:bc:cf:27:63:24:11: 85:5c:50:fc:2a:cb:b7:d3:4c:3d:0e:4e:52:d0:f6: b8:7b:06:11:9c:47:ad:0d:36:57:2d:36:68:77:64: 2c:b5:b4:99:c3:dd:b3:c5:0a:ec:e3:59:1e:62:5f: 34:8a:5a:25:2b:b8:cc:6a:e7:03:99:fb:6f:9c:05: 96:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C6:51:B0:DA:22:36:84:A5:36:B2:48:75:85:1A:EC:86:FD:34:C5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c56ff21d-fa51-44da-8d5b-81a37c826302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:81d0::/48 Signature Algorithm: sha256WithRSAEncryption a3:40:a2:18:e1:cd:a3:5d:d9:1d:4e:2e:c5:1e:f4:c8:0e:ae: a4:f4:cb:55:e0:50:4f:67:00:50:4c:fd:6f:1e:c1:df:80:97: 49:f0:dc:be:30:17:f2:b3:e0:f5:2e:42:d5:28:28:ab:f2:68: 55:8b:30:b2:08:32:d1:46:46:88:66:b8:20:cd:4b:92:bc:2f: e4:e6:03:c2:79:cc:e5:08:ed:7b:af:bc:e8:f3:81:9a:b8:45: 5b:f6:9a:a2:b6:98:1f:50:e3:6d:d4:ae:6d:81:20:58:6c:41: 1b:84:b2:0d:18:b5:d2:92:0b:ba:42:c6:e2:93:54:8f:74:cd: 58:82:eb:7f:fb:9e:ff:e8:e2:5e:9e:7e:1a:63:cc:59:fe:da: f2:56:83:a1:e0:d3:de:fb:c7:92:f9:1b:67:bf:31:18:0a:6d: 54:3e:93:f5:a8:0b:b7:df:0a:42:6e:10:3a:cb:fb:77:0a:68: f4:03:b0:39:e9:b4:24:3a:b0:cb:af:ca:db:44:03:d5:5c:78: 14:49:17:15:61:e6:da:79:41:7a:44:21:cc:d4:df:51:c6:e9: ef:8f:37:46:54:6d:b4:06:75:2d:e0:a2:9a:18:5b:99:32:29: 0a:56:c7:bc:a9:c6:3a:e6:f6:16:07:bd:66:65:72:d0:e6:7a: ca:e1:85:6d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNCI4ubQ7wZ39VDlK1CHgr7wPkDwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDExMDA3WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTQ0ZTI2OThiZTViNTFjMjBjNTZlOTk1Mzk4MGY5ZjAw ODZkOTJhMWZmYjJiNTEyZjVmZjUwNzBkOGFhNzk3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpR5o4La8IsVGpc5GNEvx7IobMzMCSXIUiHq9tsf/+kE4N x4hid5hIQ9gaAp44U2qvtE7XVfGU5CqozVB57U9I3Wjv7lK0ci7g+odnvpgzDwFx VsMju1MY7GeReRP1ieOktAw4I77cYN2OCf0vus1BDldfNTXUMVpOCE8ZyWHRHGxO EjddKZELvwQKtR3DFQZPBexIuQqzO4xp8qBxpQ6JzlPCbT0IHtGZm0r9P2IT34mX G/0L5yHVNSj/9bzPJ2MkEYVcUPwqy7fTTD0OTlLQ9rh7BhGcR60NNlctNmh3ZCy1 tJnD3bPFCuzjWR5iXzSKWiUruMxq5wOZ+2+cBZZLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMcZRsNoiNoSlNrJIdYUa7Ib9NMUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M1NmZmMjFkLWZhNTEtNDRkYS04ZDViLTgxYTM3YzgyNjMwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gdAwDQYJKoZIhvcNAQELBQADggEBAKNAohjhzaNd2R1OLsUe9MgO rqT0y1XgUE9nAFBM/W8ewd+Al0nw3L4wF/Kz4PUuQtUoKKvyaFWLMLIIMtFGRohm uCDNS5K8L+TmA8J5zOUI7XuvvOjzgZq4RVv2mqK2mB9Q423Urm2BIFhsQRuEsg0Y tdKSC7pCxuKTVI90zViC63/7nv/o4l6efhpjzFn+2vJWg6Hg0977x5L5G2e/MRgK bVQ+k/WoC7ffCkJuEDrL+3cKaPQDsDnptCQ6sMuvyttEA9VceBRJFxVh5tp5QXpE IczU31HG6e+PN0ZUbbQGdS3gopoYW5kyKQpWx7ypxjrm9hYHvWZlctDmesrhhW0= -----END CERTIFICATE-----Generated at Sun Mar 1 22:15:56 2026 by rpki-client