$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfb6a751-8b09-416e-94a6-4be4b11aea26.roa File: dfb6a751-8b09-416e-94a6-4be4b11aea26.roa (raw, json) Hash identifier: 98Q3iuGjWWTOQ0rth0ER8KEywPaUILS6tPbUIKD9uf0= Subject key identifier: 74:68:A4:F3:7D:F6:74:D4:B4:C2:48:70:CB:A9:01:84:CB:05:41:5A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7F194504E9BA5F74F1EA5C64353D9352C3376844 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfb6a751-8b09-416e-94a6-4be4b11aea26.roa Signing time: Sun 01 Mar 2026 00:20:37 +0000 ROA not before: Sun 01 Mar 2026 00:20:37 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:4400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:19:45:04:e9:ba:5f:74:f1:ea:5c:64:35:3d:93:52:c3:37:68:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 1 00:20:37 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=9d115f87372460a1a43dd21a79633db186f6554149abc177356a970a808266ee, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:81:c0:d7:5f:a8:5f:b5:7e:b4:17:d5:8d:69: 42:7f:32:80:c7:77:4a:77:5f:6c:8f:4f:c0:02:f2: 6b:c5:d8:b1:99:7a:b9:24:ef:47:64:1d:43:d3:c5: ad:56:97:c2:6a:63:bd:ce:24:d3:88:71:50:3c:5b: a0:7f:12:a6:9b:e4:94:a7:f5:c5:8c:9c:47:60:56: f1:26:e2:42:38:50:97:42:c4:d2:d4:88:cd:b2:7d: b7:c0:29:ee:46:d8:da:9d:af:72:68:4a:c3:2d:4b: 51:db:97:06:5e:4c:d8:ef:26:f4:ff:f9:03:ed:d9: ae:75:26:ac:c4:6e:5f:02:76:72:96:db:ac:c2:64: 79:f6:56:38:26:ee:98:17:24:35:84:68:07:30:7d: b2:b4:25:41:aa:78:0f:f7:ef:af:5f:32:29:e7:00: a0:bb:e8:bb:55:42:d6:93:a7:b2:e4:56:4b:bb:93: b5:41:bc:6c:8f:23:46:7a:92:04:0e:34:32:7e:a4: 89:c5:31:4d:c5:cc:a6:41:f6:64:95:98:4d:9c:11: 53:c7:c6:d7:d5:d9:bd:c5:9b:22:57:61:91:fa:ee: 0d:c1:29:1b:52:05:c9:80:87:aa:3c:fc:05:c3:18: 48:d6:72:67:58:8d:d2:e1:ff:6c:c5:b3:b2:ba:83: 20:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:68:A4:F3:7D:F6:74:D4:B4:C2:48:70:CB:A9:01:84:CB:05:41:5A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfb6a751-8b09-416e-94a6-4be4b11aea26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:4400::/48 Signature Algorithm: sha256WithRSAEncryption 40:9e:fb:b6:cd:2e:af:f1:e8:5e:d0:f1:13:ca:4d:4f:c9:32: c5:2a:d1:fc:59:fb:74:5b:db:60:19:5d:59:5a:ea:00:14:47: a2:24:87:82:b0:19:6d:98:b7:54:20:a9:3b:c2:e7:87:4e:29: 88:f0:41:45:17:49:b9:1d:1a:65:47:97:1b:72:68:63:50:20: f5:e7:7d:f2:47:3d:bc:8e:45:97:a4:2f:25:9e:78:50:4b:09: 85:e9:64:fe:c4:ec:2b:43:e1:13:4c:7b:16:1d:2d:a1:4b:e1: 30:c8:9d:e6:9b:3e:74:23:28:19:38:e6:26:f4:81:f9:3b:ed: b6:86:ec:0f:c9:9b:12:86:9f:d5:71:17:1d:ca:48:46:bd:f9: dc:f6:ef:53:42:bf:b0:b9:9a:96:87:9f:8e:fb:43:a5:97:9a: 25:52:99:21:25:82:97:ef:c8:42:18:68:a8:1f:bd:16:7e:94: 82:3c:ac:a6:ed:41:ec:fe:26:42:e8:1b:54:c6:0e:a7:67:6a: aa:34:ee:c4:b1:2a:ea:a7:39:94:14:8a:72:b9:0b:b6:8c:72: 6d:1f:cf:57:9d:f6:81:9f:9f:70:66:81:5e:15:9f:33:b2:7c: 8d:b2:66:f2:c0:dc:1e:de:05:5b:fe:aa:bc:55:0e:62:27:08: 86:80:af:17 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfxlFBOm6X3Tx6lxkNT2TUsM3aEQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzAxMDAyMDM3WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZDExNWY4NzM3MjQ2MGExYTQzZGQyMWE3OTYzM2RiMTg2 ZjY1NTQxNDlhYmMxNzczNTZhOTcwYTgwODI2NmVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQgcDXX6hftX60F9WNaUJ/MoDHd0p3X2yPT8AC8mvF2LGZ erkk70dkHUPTxa1Wl8JqY73OJNOIcVA8W6B/Eqab5JSn9cWMnEdgVvEm4kI4UJdC xNLUiM2yfbfAKe5G2Nqdr3JoSsMtS1HblwZeTNjvJvT/+QPt2a51JqzEbl8CdnKW 26zCZHn2Vjgm7pgXJDWEaAcwfbK0JUGqeA/3769fMinnAKC76LtVQtaTp7LkVku7 k7VBvGyPI0Z6kgQONDJ+pInFMU3FzKZB9mSVmE2cEVPHxtfV2b3FmyJXYZH67g3B KRtSBcmAh6o8/AXDGEjWcmdYjdLh/2zFs7K6gyBPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdGik8332dNS0wkhwy6kBhMsFQVowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RmYjZhNzUxLThiMDktNDE2ZS05NGE2LTRiZTRiMTFhZWEyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sRAAwDQYJKoZIhvcNAQELBQADggEBAECe+7bNLq/x6F7Q8RPKTU/J MsUq0fxZ+3Rb22AZXVla6gAUR6Ikh4KwGW2Yt1QgqTvC54dOKYjwQUUXSbkdGmVH lxtyaGNQIPXnffJHPbyORZekLyWeeFBLCYXpZP7E7CtD4RNMexYdLaFL4TDIneab PnQjKBk45ib0gfk77baG7A/JmxKGn9VxFx3KSEa9+dz271NCv7C5mpaHn477Q6WX miVSmSElgpfvyEIYaKgfvRZ+lII8rKbtQez+JkLoG1TGDqdnaqo07sSxKuqnOZQU inK5C7aMcm0fz1ed9oGfn3BmgV4VnzOyfI2yZvLA3B7eBVv+qrxVDmInCIaArxc= -----END CERTIFICATE-----Generated at Sun Mar 1 22:21:58 2026 by rpki-client