$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dba8b97a-e0cc-4271-b548-455e23ac43f0.roa File: dba8b97a-e0cc-4271-b548-455e23ac43f0.roa (raw, json) Hash identifier: DX6H2F5B/wWm148cIsto4zAyzsh6JowAbX8kY3jCfPQ= Subject key identifier: 92:47:B8:58:CD:AB:C6:E7:FF:7F:DF:A6:D0:4F:CA:F6:AF:CB:88:6F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 32F2482B4A4C4037AC5D5CC808D9FE2818D774D6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dba8b97a-e0cc-4271-b548-455e23ac43f0.roa Signing time: Sat 28 Feb 2026 00:40:05 +0000 ROA not before: Sat 28 Feb 2026 00:40:05 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fef:7400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f2:48:2b:4a:4c:40:37:ac:5d:5c:c8:08:d9:fe:28:18:d7:74:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 28 00:40:05 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=577f323a0df22910f0ef59599d1889894e8fb1c740a73330df12a06b5c69845f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7c:1c:b0:9a:17:71:7c:08:aa:a3:df:b5:b2: 38:ba:ba:1e:de:3d:8a:3a:84:f6:e5:21:09:74:80: 18:23:f5:4b:2a:7c:25:e9:5b:2c:3a:89:53:46:32: 4d:4d:55:40:24:b0:35:f4:00:31:9d:3d:7c:d7:ee: 15:d0:49:52:51:9a:e2:88:f3:8a:c0:70:39:6a:2e: e1:99:9c:c4:72:78:7e:49:56:0b:37:35:3c:8e:22: 20:03:04:14:03:11:1d:37:73:c2:34:6f:96:51:74: 4b:08:9f:d9:ca:f1:c5:3a:47:12:37:9c:9d:a0:8d: c9:2f:66:43:23:9d:83:3b:31:69:d4:0e:73:8e:77: b5:3c:7d:7c:54:79:df:cf:06:b4:2d:b4:f1:0d:33: e5:81:68:80:24:8c:d4:0e:8a:98:04:74:bd:14:cd: e9:a2:bb:cc:a6:ca:d8:99:cf:53:35:29:2a:97:7e: 3c:7d:b0:96:e2:6e:bb:55:b7:2a:aa:f8:ac:2e:95: 38:8a:5c:4c:cb:72:fa:90:f8:76:fd:c0:af:e8:ae: 9f:29:ec:8f:cc:37:df:7a:51:a8:cb:2d:3b:ba:a6: d9:4d:cc:2b:43:c0:92:44:5e:a1:12:84:bc:84:c7: 51:0d:4e:13:f4:7c:68:da:43:94:67:80:f3:e1:5d: f6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:47:B8:58:CD:AB:C6:E7:FF:7F:DF:A6:D0:4F:CA:F6:AF:CB:88:6F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dba8b97a-e0cc-4271-b548-455e23ac43f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:7400::/40 Signature Algorithm: sha256WithRSAEncryption 0f:28:37:b4:4c:08:65:21:46:a8:05:9e:a6:7d:9b:ed:bf:c5: bf:ed:e6:a8:07:d0:7a:8d:9c:23:84:b2:3d:ac:8e:18:a8:95: bb:1f:56:22:46:a3:ee:45:10:a1:20:5d:c0:c6:8b:b9:fe:ea: 5b:2e:8b:68:f2:03:05:13:40:1e:92:85:40:9f:b8:c4:14:6c: 7e:ac:55:4e:30:e0:91:8a:56:3f:6a:b9:ac:da:2d:2b:d0:f5: 67:10:4c:7a:af:5a:fe:08:fc:3a:32:1b:db:b4:37:3e:87:29: 8b:3e:85:8d:21:07:e2:5d:8e:d5:7f:e0:4b:a2:c1:9c:33:72: e0:fa:eb:c1:fa:db:c0:97:b1:19:fc:c7:fe:ff:23:e7:3b:b6: c2:d4:bf:16:4a:93:fb:77:63:cd:e7:83:0e:e0:ad:4d:be:03: 1b:8f:f5:b2:23:85:21:64:4e:df:99:d5:c9:47:cf:2b:48:3e: 5f:2f:cb:86:e2:29:58:e1:f9:7f:cc:68:58:40:08:d4:48:5a: 3f:f0:c2:22:41:60:6f:40:d2:48:f9:9f:77:c7:0c:40:ec:18: e6:63:c8:8e:ac:f3:e8:86:a5:fc:d3:7d:5e:37:54:36:9e:85: a9:d4:44:db:e3:97:85:35:d3:ca:45:cf:80:3c:81:cf:85:83: 64:d2:4b:9a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUMvJIK0pMQDesXVzICNn+KBjXdNYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI4MDA0MDA1WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NzdmMzIzYTBkZjIyOTEwZjBlZjU5NTk5ZDE4ODk4OTRl OGZiMWM3NDBhNzMzMzBkZjEyYTA2YjVjNjk4NDVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcfBywmhdxfAiqo9+1sji6uh7ePYo6hPblIQl0gBgj9Usq fCXpWyw6iVNGMk1NVUAksDX0ADGdPXzX7hXQSVJRmuKI84rAcDlqLuGZnMRyeH5J Vgs3NTyOIiADBBQDER03c8I0b5ZRdEsIn9nK8cU6RxI3nJ2gjckvZkMjnYM7MWnU DnOOd7U8fXxUed/PBrQttPENM+WBaIAkjNQOipgEdL0Uzemiu8ymytiZz1M1KSqX fjx9sJbibrtVtyqq+KwulTiKXEzLcvqQ+Hb9wK/orp8p7I/MN996UajLLTu6ptlN zCtDwJJEXqEShLyEx1ENThP0fGjaQ5RngPPhXfZxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUkke4WM2rxuf/f9+m0E/K9q/LiG8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RiYThiOTdhLWUwY2MtNDI3MS1iNTQ4LTQ1NWUyM2FjNDNmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/vdDANBgkqhkiG9w0BAQsFAAOCAQEADyg3tEwIZSFGqAWepn2b7b/F v+3mqAfQeo2cI4SyPayOGKiVux9WIkaj7kUQoSBdwMaLuf7qWy6LaPIDBRNAHpKF QJ+4xBRsfqxVTjDgkYpWP2q5rNotK9D1ZxBMeq9a/gj8OjIb27Q3Pocpiz6FjSEH 4l2O1X/gS6LBnDNy4PrrwfrbwJexGfzH/v8j5zu2wtS/FkqT+3djzeeDDuCtTb4D G4/1siOFIWRO35nVyUfPK0g+Xy/LhuIpWOH5f8xoWEAI1EhaP/DCIkFgb0DSSPmf d8cMQOwY5mPIjqzz6Ial/NN9XjdUNp6FqdRE2+OXhTXTykXPgDyBz4WDZNJLmg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:10:48 2026 by rpki-client