$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d21d2b11-198a-4187-babe-5e898f2a1576.roa File: d21d2b11-198a-4187-babe-5e898f2a1576.roa (raw, json) Hash identifier: CLbjU94xfZk33qi4kRWKTD3RJa1Ck/g4Ef2vlhUtasQ= Subject key identifier: 23:5B:7B:8C:19:69:7A:95:1D:50:85:67:CE:52:5B:84:24:D8:D4:C2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 036DEE074339B7BD680D445292AA1DE4579FE966 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d21d2b11-198a-4187-babe-5e898f2a1576.roa Signing time: Tue 10 Feb 2026 00:21:22 +0000 ROA not before: Tue 10 Feb 2026 00:21:22 +0000 ROA not after: Mon 11 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fa0:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6d:ee:07:43:39:b7:bd:68:0d:44:52:92:aa:1d:e4:57:9f:e9:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 10 00:21:22 2026 GMT Not After : May 11 23:59:59 2026 GMT Subject: serialNumber=3e7f2d6d540ef0f85eb1e374cce715a71cd01d1e51f9277a80a265d9347cc9ef, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a7:11:05:53:af:79:d4:3a:9e:f7:1f:7f:a7: c7:b3:8d:fa:2a:8a:9a:93:68:ec:c3:b5:1b:42:89: ff:e5:17:6e:c1:54:78:1a:ae:1a:ad:82:68:30:71: 8a:15:23:16:b4:d2:a2:56:12:bd:ce:93:ca:7b:78: 07:38:90:5b:7a:54:c6:fc:a5:4d:c6:15:6c:59:ad: 2b:08:55:7e:0a:bc:ba:c6:bb:1e:f8:5c:2d:d8:fb: 48:b7:66:ab:12:da:86:e8:21:d6:d6:cb:97:51:98: 97:36:9c:92:18:d8:da:7f:e0:a1:16:6c:01:d4:73: 99:52:69:23:6b:a8:57:78:f8:49:2b:a0:f5:5a:9f: 41:13:1a:31:da:d2:3b:72:f9:74:87:e8:6e:8a:b3: 9b:fd:66:a5:0e:69:39:fa:ef:ec:69:d0:5a:21:08: 64:58:48:df:f8:12:86:b1:c5:70:02:14:c5:12:20: f3:84:b1:41:94:f3:48:fd:2a:2f:54:61:f0:82:e6: 4d:40:78:ec:87:8e:4f:54:a6:85:13:78:e9:cd:23: c7:4a:c7:d6:58:28:69:b9:e2:2f:38:3b:24:0b:b1: b9:a6:90:1e:4d:37:86:3a:ad:2f:f2:f1:3f:3f:b2: d2:0c:86:a4:5f:4d:d1:48:2d:4f:81:2b:78:c2:79: ae:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5B:7B:8C:19:69:7A:95:1D:50:85:67:CE:52:5B:84:24:D8:D4:C2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d21d2b11-198a-4187-babe-5e898f2a1576.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:8000::/39 Signature Algorithm: sha256WithRSAEncryption 3b:24:1e:a3:f8:8b:ec:6b:30:6c:30:2d:d9:c9:5b:9f:df:0e: c3:52:27:db:fb:6e:b6:5d:0f:87:84:5a:7c:f9:dc:94:6e:fa: ea:23:39:e7:7c:62:12:0b:db:67:00:73:c4:c0:a4:8c:b7:b3: ef:58:54:4f:73:d8:e6:f9:f9:d2:a3:3a:2a:02:4c:ea:ab:33: 84:6c:1b:78:7e:44:63:6d:6f:be:e5:1b:5d:32:b6:4c:a4:d1: 30:6a:b0:f5:9b:cc:f5:63:bc:9e:ab:c0:8d:b5:c4:f6:28:e1: 52:16:70:79:64:72:3e:61:ab:e0:e9:ed:4b:d8:64:56:d6:32: 9c:be:27:8f:9c:e4:ff:ae:25:2e:b8:a5:96:ec:24:eb:e9:62: 00:fc:eb:73:a9:56:cb:2a:2e:53:4d:31:9a:07:a1:20:dc:cf: b1:e9:5d:10:d0:ed:3f:9a:43:97:64:c6:74:d8:e1:95:31:02: a4:56:4c:c0:b2:a5:1d:15:ac:d5:08:51:70:d4:b9:73:f0:f7: 18:33:a4:a1:61:14:7d:1d:67:44:97:2d:0e:38:ed:c0:94:5a: 76:3e:f9:12:00:34:ee:fc:09:32:b3:ec:c4:35:65:3b:1f:de: 2c:ab:4b:0d:11:7e:6d:6d:8b:92:41:7c:0c:da:04:f9:fc:95: cf:fe:f6:52 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUA23uB0M5t71oDURSkqod5Fef6WYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDAyMTIyWhcNMjYwNTExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTdmMmQ2ZDU0MGVmMGY4NWViMWUzNzRjY2U3MTVhNzFj ZDAxZDFlNTFmOTI3N2E4MGEyNjVkOTM0N2NjOWVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdpxEFU6951Dqe9x9/p8ezjfoqipqTaOzDtRtCif/lF27B VHgarhqtgmgwcYoVIxa00qJWEr3Ok8p7eAc4kFt6VMb8pU3GFWxZrSsIVX4KvLrG ux74XC3Y+0i3ZqsS2oboIdbWy5dRmJc2nJIY2Np/4KEWbAHUc5lSaSNrqFd4+Ekr oPVan0ETGjHa0jty+XSH6G6Ks5v9ZqUOaTn67+xp0FohCGRYSN/4EoaxxXACFMUS IPOEsUGU80j9Ki9UYfCC5k1AeOyHjk9UpoUTeOnNI8dKx9ZYKGm54i84OyQLsbmm kB5NN4Y6rS/y8T8/stIMhqRfTdFILU+BK3jCea6NAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUI1t7jBlpepUdUIVnzlJbhCTY1MIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QyMWQyYjExLTE5OGEtNDE4Ny1iYWJlLTVlODk4ZjJhMTU3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB+ggDANBgkqhkiG9w0BAQsFAAOCAQEAOyQeo/iL7GswbDAt2clbn98O w1In2/tutl0Ph4RafPnclG766iM553xiEgvbZwBzxMCkjLez71hUT3PY5vn50qM6 KgJM6qszhGwbeH5EY21vvuUbXTK2TKTRMGqw9ZvM9WO8nqvAjbXE9ijhUhZweWRy PmGr4OntS9hkVtYynL4nj5zk/64lLrilluwk6+liAPzrc6lWyyouU00xmgehINzP seldENDtP5pDl2TGdNjhlTECpFZMwLKlHRWs1QhRcNS5c/D3GDOkoWEUfR1nRJct DjjtwJRadj75EgA07vwJMrPsxDVlOx/eLKtLDRF+bW2LkkF8DNoE+fyVz/72Ug== -----END CERTIFICATE-----Generated at Mon Mar 2 10:52:42 2026 by rpki-client