$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dacd7120-216c-4fe9-b36c-04025c1e0df5.roa File: dacd7120-216c-4fe9-b36c-04025c1e0df5.roa (raw, json) Hash identifier: zeTC29RgWmvzx+zk5+xaIiQsY0Qb+HWbXrnzRn8jBcI= Subject key identifier: 62:6D:10:D1:FE:47:DC:DD:39:9C:C2:6D:26:1C:32:48:F9:8E:48:7E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2529545D9CEC39AF5C688F674E14784F567AC156 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dacd7120-216c-4fe9-b36c-04025c1e0df5.roa Signing time: Fri 13 Feb 2026 01:20:09 +0000 ROA not before: Fri 13 Feb 2026 01:20:09 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff8:ec00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:29:54:5d:9c:ec:39:af:5c:68:8f:67:4e:14:78:4f:56:7a:c1:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 13 01:20:09 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=b87c4b8c056555ad6d86f6a1b376b3e2d84ddf525e8b781061a1a246c95cf713, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b3:32:fe:a6:88:47:9b:71:cd:2c:e8:4b:2a: c9:2e:c3:c0:4f:c3:66:28:4c:35:72:61:59:1b:83: e3:23:36:f3:76:bf:1b:1b:a8:a4:c7:96:b3:50:63: 5d:ae:97:a8:cd:05:dc:bc:fc:47:98:6c:2d:17:4e: ef:fc:76:c4:8f:d9:9f:2e:ef:b1:a1:d0:aa:b4:af: 30:3a:5e:0a:56:e4:aa:d8:da:09:8d:c4:22:d5:7c: f0:7f:6a:9a:7f:01:c6:79:ff:95:ff:e9:40:0d:cb: 6a:bc:bb:c5:e8:da:79:6f:12:20:76:71:ac:72:ac: 90:36:dd:74:c5:ef:cc:b1:28:05:b3:36:e2:25:b4: 81:d7:54:d1:ce:a6:33:04:b6:47:13:39:2a:ea:e3: 13:be:44:2c:02:7c:a7:76:f6:0c:f7:c8:51:d0:18: 97:e0:14:69:29:8b:a3:fa:c8:a0:b4:8d:c2:40:c4: 53:8b:96:e0:33:52:1e:dd:77:28:bc:0e:1f:17:d7: 5c:e4:80:45:24:65:3b:b4:68:2d:05:a9:bf:38:e3: ce:d6:b4:2a:da:98:80:4b:5c:29:54:6d:b3:4e:1b: 6e:a8:0d:c8:6b:5c:30:95:94:1f:48:c2:76:5b:97: 04:4c:3f:96:31:42:ee:b5:2d:62:16:8f:88:69:87: 11:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6D:10:D1:FE:47:DC:DD:39:9C:C2:6D:26:1C:32:48:F9:8E:48:7E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dacd7120-216c-4fe9-b36c-04025c1e0df5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff8:ec00::/40 Signature Algorithm: sha256WithRSAEncryption 8a:78:5c:01:8f:c3:c0:48:61:ca:ef:c0:5c:4c:dd:36:e9:4f: 58:e6:1f:f2:f0:81:53:b6:1d:b0:6a:63:e4:b8:40:be:01:39: 42:a5:87:e8:5c:ed:da:b4:fd:aa:25:80:bd:43:7f:50:23:3b: 5c:ef:45:b1:5a:ab:4f:73:21:ee:24:4e:92:42:93:e1:9b:b7: db:3d:02:5a:42:0b:38:ed:61:8e:22:d1:1b:d2:4c:e2:23:98: 26:a6:78:9c:56:71:e9:c9:a3:41:7b:22:1b:e7:9c:1e:cf:3d: ac:1b:c9:07:e5:cd:a7:df:c7:70:93:ab:b8:31:08:4a:94:35: f9:ef:4e:26:71:34:b1:65:4a:a4:87:e0:33:3b:12:9a:64:5e: f7:18:84:60:aa:78:1d:f9:e9:ac:1a:0d:be:b1:f9:46:7d:f4: 04:66:a6:10:98:50:c8:05:53:cb:dc:a3:47:60:a8:c3:47:9b: bd:f9:79:54:d6:37:a1:ad:64:12:3f:c6:d2:f5:1f:6c:0b:b6: 35:f2:32:80:04:04:94:b2:b5:d7:81:71:cc:b5:5f:f1:59:e0: ea:1a:bd:fe:22:4c:1b:5b:ac:6b:c9:c5:80:54:4f:c5:72:08: fb:69:90:01:28:9b:b9:78:df:ca:9d:d3:b8:ec:79:8a:20:d2: 55:a8:21:c3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJSlUXZzsOa9caI9nThR4T1Z6wVYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEzMDEyMDA5WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiODdjNGI4YzA1NjU1NWFkNmQ4NmY2YTFiMzc2YjNlMmQ4 NGRkZjUyNWU4Yjc4MTA2MWExYTI0NmM5NWNmNzEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3szL+pohHm3HNLOhLKskuw8BPw2YoTDVyYVkbg+MjNvN2 vxsbqKTHlrNQY12ul6jNBdy8/EeYbC0XTu/8dsSP2Z8u77Gh0Kq0rzA6XgpW5KrY 2gmNxCLVfPB/app/AcZ5/5X/6UANy2q8u8Xo2nlvEiB2caxyrJA23XTF78yxKAWz NuIltIHXVNHOpjMEtkcTOSrq4xO+RCwCfKd29gz3yFHQGJfgFGkpi6P6yKC0jcJA xFOLluAzUh7ddyi8Dh8X11zkgEUkZTu0aC0Fqb84487WtCramIBLXClUbbNOG26o DchrXDCVlB9IwnZblwRMP5YxQu61LWIWj4hphxHNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUYm0Q0f5H3N05nMJtJhwySPmOSH4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RhY2Q3MTIwLTIxNmMtNGZlOS1iMzZjLTA0MDI1YzFlMGRmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/47DANBgkqhkiG9w0BAQsFAAOCAQEAinhcAY/DwEhhyu/AXEzdNulP WOYf8vCBU7YdsGpj5LhAvgE5QqWH6Fzt2rT9qiWAvUN/UCM7XO9FsVqrT3Mh7iRO kkKT4Zu32z0CWkILOO1hjiLRG9JM4iOYJqZ4nFZx6cmjQXsiG+ecHs89rBvJB+XN p9/HcJOruDEISpQ1+e9OJnE0sWVKpIfgMzsSmmRe9xiEYKp4HfnprBoNvrH5Rn30 BGamEJhQyAVTy9yjR2Cow0ebvfl5VNY3oa1kEj/G0vUfbAu2NfIygAQElLK114Fx zLVf8Vng6hq9/iJMG1usa8nFgFRPxXII+2mQASibuXjfyp3TuOx5iiDSVaghww== -----END CERTIFICATE-----Generated at Mon Mar 2 01:59:30 2026 by rpki-client