$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e867a4f3-7521-4397-9b70-b2828d71f600.roa File: e867a4f3-7521-4397-9b70-b2828d71f600.roa (raw, json) Hash identifier: xg9K4zV6jx/Yw3cNc5+C4gYFEW8IgRaU66A+0RElJPM= Subject key identifier: 12:8D:E8:4D:15:D5:51:BA:CA:77:A5:44:09:91:1A:C9:55:A7:0D:52 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 686814989D20CF7F3E4A71ED9B207222359134DF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e867a4f3-7521-4397-9b70-b2828d71f600.roa Signing time: Sat 28 Feb 2026 00:20:32 +0000 ROA not before: Sat 28 Feb 2026 00:20:32 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f26:c800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:68:14:98:9d:20:cf:7f:3e:4a:71:ed:9b:20:72:22:35:91:34:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 28 00:20:32 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=e232a6bb9f787555439bffc4234cdad1f771c87ab1055c28e11d1b92a6f5dcf0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d0:db:87:59:c9:29:c4:d8:8a:1e:32:54:ea: 51:0a:9e:eb:c5:c6:10:35:c0:3f:67:ab:60:72:ea: 72:a7:13:4f:ec:8b:8b:78:e9:60:d4:2c:37:46:20: 70:3b:1d:31:0a:46:ad:a5:99:3e:47:82:1b:88:a5: 5d:88:4a:06:7a:6b:d9:9a:fe:72:d5:94:b9:aa:d3: 14:33:65:59:c0:0d:0f:17:c0:5f:5e:78:7a:84:78: 65:79:92:71:7a:cf:aa:f3:88:0f:8c:6c:b3:01:66: fc:7a:c3:49:b9:32:b9:96:5e:74:a6:b5:7b:2a:d3: 70:c6:af:d6:cc:48:cb:1d:08:3b:3d:9c:13:f5:fb: 1e:0b:80:b6:be:4d:1e:b6:33:82:76:bb:3d:f0:35: 12:36:fe:f7:4d:5b:94:87:18:dd:fd:4f:6f:22:59: 37:1b:51:5c:5b:1c:c0:71:9f:6b:1c:3d:e6:5d:8c: b3:fa:e8:28:95:11:7e:22:ec:85:9d:f4:58:f6:f8: 8b:71:d6:01:71:0f:42:a9:ab:c3:0c:bc:84:13:e3: 0b:42:0e:9e:ef:cf:43:5d:ce:76:e1:57:5f:5c:2f: 27:54:c8:d3:2c:85:26:3a:44:51:43:e1:9c:62:19: 7d:be:6b:71:7a:96:13:9b:26:9d:27:d8:b7:82:d8: 99:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8D:E8:4D:15:D5:51:BA:CA:77:A5:44:09:91:1A:C9:55:A7:0D:52 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e867a4f3-7521-4397-9b70-b2828d71f600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f26:c800::/37 Signature Algorithm: sha256WithRSAEncryption 0f:58:d2:1e:46:65:ad:e0:22:eb:36:62:c6:62:69:29:cc:14: 74:ec:8d:0e:86:db:47:93:ed:bd:2a:f1:fe:79:41:25:e6:84: 97:a3:5d:52:1e:d7:32:e2:02:61:7f:08:3d:49:fa:85:b3:b2: c4:28:ca:ec:d0:17:66:f5:d7:61:fe:e8:dd:e8:c2:8a:84:1a: 97:c1:02:57:06:95:05:59:fd:bb:3a:71:f6:1c:0b:b7:86:d4: 91:71:9b:a7:bc:b8:29:72:b9:90:43:23:43:bc:80:dd:82:71: ba:02:dd:1a:dd:e7:59:5d:e3:27:1b:7e:3a:2b:cf:7f:e9:d8: 8d:d9:9e:6e:d1:bc:78:98:14:75:72:54:f2:c7:d1:30:e1:46: 92:a2:8e:10:64:f0:9e:41:cc:7e:c6:26:6c:b4:f7:9d:4f:ac: 71:7c:b5:2f:e2:7f:24:25:7d:2a:32:24:91:73:0c:79:46:6d: 5d:6d:ee:6f:28:ee:57:1e:b5:10:fd:bb:06:0e:a1:06:c4:08: a2:6f:f8:6b:e4:73:91:84:af:79:7f:b2:42:d3:d5:af:18:a5: ed:9d:b3:51:9b:a0:ad:fc:9f:7c:a6:ee:35:ab:78:b2:0c:46: 40:82:78:a3:eb:c4:ed:c3:c3:33:16:75:e8:e5:fa:fa:77:42: 23:30:2b:74 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaGgUmJ0gz38+SnHtmyByIjWRNN8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI4MDAyMDMyWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMjMyYTZiYjlmNzg3NTU1NDM5YmZmYzQyMzRjZGFkMWY3 NzFjODdhYjEwNTVjMjhlMTFkMWI5MmE2ZjVkY2YwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDl0NuHWckpxNiKHjJU6lEKnuvFxhA1wD9nq2By6nKnE0/s i4t46WDULDdGIHA7HTEKRq2lmT5HghuIpV2ISgZ6a9ma/nLVlLmq0xQzZVnADQ8X wF9eeHqEeGV5knF6z6rziA+MbLMBZvx6w0m5MrmWXnSmtXsq03DGr9bMSMsdCDs9 nBP1+x4LgLa+TR62M4J2uz3wNRI2/vdNW5SHGN39T28iWTcbUVxbHMBxn2scPeZd jLP66CiVEX4i7IWd9Fj2+Itx1gFxD0Kpq8MMvIQT4wtCDp7vz0NdznbhV19cLydU yNMshSY6RFFD4ZxiGX2+a3F6lhObJp0n2LeC2Jl5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUEo3oTRXVUbrKd6VECZEayVWnDVIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U4NjdhNGYzLTc1MjEtNDM5Ny05YjcwLWIyODI4ZDcxZjYwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8myDANBgkqhkiG9w0BAQsFAAOCAQEAD1jSHkZlreAi6zZixmJpKcwU dOyNDobbR5PtvSrx/nlBJeaEl6NdUh7XMuICYX8IPUn6hbOyxCjK7NAXZvXXYf7o 3ejCioQal8ECVwaVBVn9uzpx9hwLt4bUkXGbp7y4KXK5kEMjQ7yA3YJxugLdGt3n WV3jJxt+OivPf+nYjdmebtG8eJgUdXJU8sfRMOFGkqKOEGTwnkHMfsYmbLT3nU+s cXy1L+J/JCV9KjIkkXMMeUZtXW3ubyjuVx61EP27Bg6hBsQIom/4a+RzkYSveX+y QtPVrxil7Z2zUZugrfyffKbuNat4sgxGQIJ4o+vE7cPDMxZ16OX6+ndCIzArdA== -----END CERTIFICATE-----Generated at Mon Mar 2 00:14:42 2026 by rpki-client