$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc4b71fd-9963-4adb-be05-598fbf89dc31.roa File: dc4b71fd-9963-4adb-be05-598fbf89dc31.roa (raw, json) Hash identifier: boE/UrW74qbtgU+QZRCvVpKdo6iD6wjUud5XUOQDibg= Subject key identifier: 3E:C1:55:6A:3C:9D:B3:7F:61:15:AA:4F:73:F5:A3:EE:F9:09:48:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7DA741F5A511A835D77F137D653A2C6046165559 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc4b71fd-9963-4adb-be05-598fbf89dc31.roa Signing time: Sat 21 Feb 2026 01:31:34 +0000 ROA not before: Sat 21 Feb 2026 01:31:34 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:7800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a7:41:f5:a5:11:a8:35:d7:7f:13:7d:65:3a:2c:60:46:16:55:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:31:34 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=2234d70616dfbb1a400c8e85743b6d0e34f4afa2e4bbe95cdd6633a286a153f1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cb:2e:a0:db:c5:b8:6f:2f:aa:8e:b8:99:d0: 70:74:3d:ac:31:a2:e0:5a:73:55:31:fb:be:34:c4: 5a:92:8a:cd:02:7c:8e:f9:3a:0c:3d:7e:1f:11:76: 5e:6b:72:e4:ff:86:f9:bc:12:9d:b6:5d:8e:64:bc: ee:fb:a1:ed:fb:ac:da:d0:03:13:e7:20:69:76:90: 94:f7:65:8f:21:fc:a9:d9:1b:58:dc:20:a1:a8:0c: 3d:89:47:74:85:0c:88:3f:db:ec:f0:4d:dc:5a:3e: 29:48:fc:7a:50:f2:8d:cc:1f:15:3b:65:35:eb:89: ca:49:36:4a:fa:d4:8c:d2:77:64:5d:9a:6d:13:d1: c0:9c:d6:9a:8e:f5:ca:15:72:1e:22:ba:85:02:e6: 9c:e3:da:6f:cd:e0:fc:e0:fa:78:8a:3e:c7:73:af: fa:3d:cd:4d:71:b6:13:7b:78:12:75:60:95:9f:5f: 76:7c:dd:bd:db:01:e0:7a:0c:8a:1d:24:a9:9a:1a: 15:95:47:b6:27:27:09:69:2c:74:d4:e4:ce:df:e0: 92:52:37:d8:aa:32:d3:ab:b2:81:f7:ce:2a:0d:25: 63:74:38:e6:7c:2f:15:bf:f7:ef:e3:f5:61:f8:da: 1a:ec:63:bd:ab:81:ee:29:c6:08:e3:97:6d:a2:a0: 23:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C1:55:6A:3C:9D:B3:7F:61:15:AA:4F:73:F5:A3:EE:F9:09:48:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc4b71fd-9963-4adb-be05-598fbf89dc31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:7800::/48 Signature Algorithm: sha256WithRSAEncryption ab:ef:b2:24:19:b5:67:17:a8:06:35:fd:fd:dd:2d:81:85:de: 5b:d5:a2:07:3c:5a:fc:31:1c:3a:21:48:7c:e2:90:ea:78:d8: 41:81:b8:3d:b6:27:1a:46:cc:78:48:52:2b:5d:e0:46:14:0b: 8c:44:0f:67:05:14:0d:10:9c:79:b1:c7:74:75:82:c8:0b:4c: 4e:29:1b:bf:64:97:d0:ef:9c:ff:6d:ef:42:88:29:5f:01:e7: 80:f8:8e:4f:58:ef:8c:c5:2c:93:78:0e:3c:57:bf:03:ad:06: db:6f:5e:7f:b7:fa:d4:4e:e0:06:56:13:ce:03:a3:d9:1c:e1: 68:df:1e:74:d7:1b:cf:a4:8c:1f:5b:a1:24:9c:dd:7e:3d:d1: af:40:8d:1c:f6:b5:f7:ab:97:85:a1:31:ff:1e:05:15:72:b3: 6c:80:60:8b:b3:63:fd:de:15:d5:1e:57:c6:2e:5a:4f:04:ab: 30:df:67:3d:dc:2c:dc:d4:c8:7e:b7:33:00:64:29:11:09:5d: 00:60:55:34:c0:5e:d8:b3:83:6e:39:d0:dd:e2:f4:8a:df:40: fc:34:a8:53:e4:b9:ac:10:f9:11:2b:d5:d7:6b:83:82:9a:32: ff:24:e8:aa:6a:89:3b:9c:d1:c1:9d:3e:96:b6:a1:b7:bc:b3: 54:11:a1:1f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfadB9aURqDXXfxN9ZTosYEYWVVkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDEzMTM0WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMjM0ZDcwNjE2ZGZiYjFhNDAwYzhlODU3NDNiNmQwZTM0 ZjRhZmEyZTRiYmU5NWNkZDY2MzNhMjg2YTE1M2YxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbyy6g28W4by+qjriZ0HB0PawxouBac1Ux+740xFqSis0C fI75Ogw9fh8Rdl5rcuT/hvm8Ep22XY5kvO77oe37rNrQAxPnIGl2kJT3ZY8h/KnZ G1jcIKGoDD2JR3SFDIg/2+zwTdxaPilI/HpQ8o3MHxU7ZTXricpJNkr61IzSd2Rd mm0T0cCc1pqO9coVch4iuoUC5pzj2m/N4Pzg+niKPsdzr/o9zU1xthN7eBJ1YJWf X3Z83b3bAeB6DIodJKmaGhWVR7YnJwlpLHTU5M7f4JJSN9iqMtOrsoH3zioNJWN0 OOZ8LxW/9+/j9WH42hrsY72rge4pxgjjl22ioCPHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPsFVajyds39hFapPc/Wj7vkJSDswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RjNGI3MWZkLTk5NjMtNGFkYi1iZTA1LTU5OGZiZjg5ZGMzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/seAAwDQYJKoZIhvcNAQELBQADggEBAKvvsiQZtWcXqAY1/f3dLYGF 3lvVogc8WvwxHDohSHzikOp42EGBuD22JxpGzHhIUitd4EYUC4xED2cFFA0QnHmx x3R1gsgLTE4pG79kl9DvnP9t70KIKV8B54D4jk9Y74zFLJN4DjxXvwOtBttvXn+3 +tRO4AZWE84Do9kc4WjfHnTXG8+kjB9boSSc3X490a9AjRz2tferl4WhMf8eBRVy s2yAYIuzY/3eFdUeV8YuWk8EqzDfZz3cLNzUyH63MwBkKREJXQBgVTTAXtizg245 0N3i9IrfQPw0qFPkuawQ+REr1ddrg4KaMv8k6KpqiTuc0cGdPpa2obe8s1QRoR8= -----END CERTIFICATE-----Generated at Mon Mar 2 01:48:57 2026 by rpki-client