$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8f71b7e-9974-4779-8c24-e352d24c707e.roa File: c8f71b7e-9974-4779-8c24-e352d24c707e.roa (raw, json) Hash identifier: vkDXpa2zoDlXckUrejM+tUhIr5INlVF3goWhNITX5bc= Subject key identifier: 5B:6A:17:78:D2:E4:96:BF:ED:4F:B6:17:FB:EE:8D:38:1A:F5:4D:F2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B65A29E6AD9E65589EDE2513588CE7A6EFE538A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8f71b7e-9974-4779-8c24-e352d24c707e.roa Signing time: Sun 08 Feb 2026 00:20:08 +0000 ROA not before: Sun 08 Feb 2026 00:20:08 +0000 ROA not after: Sat 09 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff8:5000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:65:a2:9e:6a:d9:e6:55:89:ed:e2:51:35:88:ce:7a:6e:fe:53:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 8 00:20:08 2026 GMT Not After : May 9 23:59:59 2026 GMT Subject: serialNumber=1cf6e77f9d8ed9964f5e9d7372aabf7255524a8965cd953f292933f886d47ac0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:34:2d:1d:76:6d:88:e5:ce:b1:47:53:90:7d: 93:9a:99:0d:f9:0d:41:8c:96:c4:60:95:fe:b7:20: d0:ce:a0:22:2e:f6:32:bd:56:6c:25:07:c4:d8:e2: 19:87:6d:2c:30:2f:58:d3:5c:c2:59:b3:1e:8d:b7: a4:73:eb:27:36:95:0d:ba:8b:b4:1f:1d:c9:d4:a5: e9:59:33:15:d4:26:63:56:89:1f:eb:fd:41:67:42: 87:e3:a9:94:bd:d8:e9:f6:14:de:06:dd:66:f1:15: 24:48:67:0d:b7:80:d3:44:65:56:ef:65:b7:2a:eb: 3c:2d:4b:e7:41:b1:e1:c1:77:94:5b:69:ed:e1:04: 86:8a:de:7a:dc:c7:e6:70:ab:df:dd:b8:07:a6:92: 86:a6:15:93:35:2e:18:d4:9b:c3:eb:a9:fe:1e:77: c5:58:8c:90:41:11:53:50:4a:5b:0a:dc:8f:d4:fc: 57:a2:b4:1c:ec:ae:a9:96:5d:3e:68:ae:16:9b:7b: 2e:e7:2e:ee:c7:d4:e6:79:39:03:d6:ae:93:81:24: d7:bb:fa:c7:71:de:86:0e:b7:db:fc:a5:3d:21:22: de:28:6a:9c:a3:7f:35:6e:d5:7f:62:fc:65:c8:05: 0c:7b:0c:52:9b:42:c7:9e:82:55:41:da:d4:73:bc: 0b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6A:17:78:D2:E4:96:BF:ED:4F:B6:17:FB:EE:8D:38:1A:F5:4D:F2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8f71b7e-9974-4779-8c24-e352d24c707e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff8:5000::/36 Signature Algorithm: sha256WithRSAEncryption 72:75:92:11:7a:70:35:94:8f:fa:33:7a:1b:41:ed:63:00:8a: 1a:7c:af:67:a6:ac:b1:77:c0:2b:72:9f:ca:67:c2:47:9b:a0: 63:db:d7:65:59:11:b5:98:ec:a8:8d:d6:ac:57:57:5d:51:99: 15:8c:e1:1d:c2:f4:33:34:25:f7:2c:fa:93:00:d5:15:a5:fa: c1:b5:8e:35:4a:5a:1c:81:0c:50:4b:0e:e1:6b:ee:a2:d2:fc: f1:ef:bc:b3:15:17:c3:e6:40:a3:53:07:56:15:f5:b9:2f:c2: 04:3a:bf:df:23:28:da:dc:a3:78:67:da:01:6b:e9:ce:d3:fe: 0a:41:0c:33:25:b8:b3:28:78:84:14:10:c9:4e:24:b3:ed:c3: 5a:2e:10:ab:a4:fc:60:8e:c9:c0:70:99:cd:2f:ec:73:6a:e6: 3a:58:c1:72:23:48:32:ac:88:23:c6:bb:21:a4:c3:5b:86:eb: f6:e6:87:10:9d:2d:e7:b6:69:82:59:ff:34:94:71:7e:0b:99: 98:4e:8d:13:c1:fd:35:05:db:b6:46:f6:ab:d4:79:6b:9b:71: e4:06:89:8c:1a:fc:80:43:cf:8a:3d:98:e3:69:c4:83:b3:83: 57:08:54:0e:2b:f7:39:fb:30:4a:a9:56:65:79:4f:93:d0:c9: a4:ec:6c:cf -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUW2WinmrZ5lWJ7eJRNYjOem7+U4owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA4MDAyMDA4WhcNMjYwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxY2Y2ZTc3ZjlkOGVkOTk2NGY1ZTlkNzM3MmFhYmY3MjU1 NTI0YTg5NjVjZDk1M2YyOTI5MzNmODg2ZDQ3YWMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcNC0ddm2I5c6xR1OQfZOamQ35DUGMlsRglf63INDOoCIu 9jK9VmwlB8TY4hmHbSwwL1jTXMJZsx6Nt6Rz6yc2lQ26i7QfHcnUpelZMxXUJmNW iR/r/UFnQofjqZS92On2FN4G3WbxFSRIZw23gNNEZVbvZbcq6zwtS+dBseHBd5Rb ae3hBIaK3nrcx+Zwq9/duAemkoamFZM1LhjUm8Prqf4ed8VYjJBBEVNQSlsK3I/U /FeitBzsrqmWXT5orhabey7nLu7H1OZ5OQPWrpOBJNe7+sdx3oYOt9v8pT0hIt4o apyjfzVu1X9i/GXIBQx7DFKbQseeglVB2tRzvAtjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUW2oXeNLklr/tT7YX++6NOBr1TfIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4ZjcxYjdlLTk5NzQtNDc3OS04YzI0LWUzNTJkMjRjNzA3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB/4UDANBgkqhkiG9w0BAQsFAAOCAQEAcnWSEXpwNZSP+jN6G0HtYwCK GnyvZ6assXfAK3KfymfCR5ugY9vXZVkRtZjsqI3WrFdXXVGZFYzhHcL0MzQl9yz6 kwDVFaX6wbWONUpaHIEMUEsO4WvuotL88e+8sxUXw+ZAo1MHVhX1uS/CBDq/3yMo 2tyjeGfaAWvpztP+CkEMMyW4syh4hBQQyU4ks+3DWi4Qq6T8YI7JwHCZzS/sc2rm OljBciNIMqyII8a7IaTDW4br9uaHEJ0t57Zpgln/NJRxfguZmE6NE8H9NQXbtkb2 q9R5a5tx5AaJjBr8gEPPij2Y42nEg7ODVwhUDiv3OfswSqlWZXlPk9DJpOxszw== -----END CERTIFICATE-----Generated at Sun Mar 1 22:11:46 2026 by rpki-client