$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0bfd803-ff17-4146-a35b-8824d41bfca6.roa File: f0bfd803-ff17-4146-a35b-8824d41bfca6.roa (raw, json) Hash identifier: ZopNrDylu3GLKX3BImOd5ABi7dyocEaeao1NfvhF07I= Subject key identifier: E4:5F:55:61:47:41:93:BC:65:C4:A9:2B:97:6C:9D:C6:0B:46:65:5C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 28401F153DE674AA8E08EDEB3C557B6F3BF59A90 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0bfd803-ff17-4146-a35b-8824d41bfca6.roa Signing time: Wed 25 Feb 2026 00:40:38 +0000 ROA not before: Wed 25 Feb 2026 00:40:38 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:6040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:40:1f:15:3d:e6:74:aa:8e:08:ed:eb:3c:55:7b:6f:3b:f5:9a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 00:40:38 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=bb79b99342eab0596c0b555e92bdb4d4aa3bb6e2ee9134aeeb5f6a9f915a77e3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4d:1f:72:06:c7:16:69:47:37:1a:01:4f:b1: 47:4a:7d:8c:89:ee:3d:7a:f7:5a:74:a4:7d:4b:12: 2c:1d:ff:6e:df:4c:42:52:b2:d8:2f:60:79:35:53: e3:d7:a6:63:d9:ad:c5:60:df:90:87:08:43:c0:84: 6c:14:b7:9e:4a:f1:02:a9:fc:25:98:46:62:e8:bd: 6d:14:06:ae:b8:ed:00:9f:40:ba:2a:d9:ae:e5:83: 69:31:08:74:af:f0:aa:73:a9:81:c8:d9:a0:dd:38: 1b:f3:7a:02:0d:07:6b:ab:ea:a5:ef:d9:af:06:47: 53:57:4e:f2:22:e8:8a:08:f7:43:ae:ac:41:2b:bb: ec:e5:c6:5a:4a:cd:60:0f:6c:52:20:2e:0d:72:a4: 1d:a1:b3:3a:78:9b:cc:b0:c8:46:ff:f4:e2:96:67: 64:91:8f:17:e4:c6:bd:19:c9:bf:41:bb:4e:10:4f: cf:64:2d:66:ff:c0:80:35:1d:71:bb:ff:dd:b3:f4: 6a:13:30:0c:8f:2f:01:1f:df:81:b8:a5:bf:5d:38: 3f:27:3e:a1:37:a1:fe:0f:e8:89:36:d2:6b:44:91: b7:8d:94:37:b3:33:9a:ae:23:9a:56:ea:1d:21:0c: f9:28:8b:38:16:e8:cd:a6:26:dd:4a:e7:41:13:a5: 1e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5F:55:61:47:41:93:BC:65:C4:A9:2B:97:6C:9D:C6:0B:46:65:5C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0bfd803-ff17-4146-a35b-8824d41bfca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:6040::/46 Signature Algorithm: sha256WithRSAEncryption 78:00:cc:31:33:f9:5b:98:5f:a7:a8:dc:cd:3f:99:2b:6e:82: 10:8d:bd:d2:48:78:ad:21:e5:1c:09:e0:79:88:6f:e5:7a:61: 94:28:10:f8:75:17:5a:9c:bc:d1:8d:5a:24:13:4f:65:ec:82: 60:2b:8e:33:47:40:51:53:42:ed:db:ba:a2:82:0f:3a:68:97: 9b:5b:94:4a:15:9f:00:86:d9:23:84:3a:ea:36:ba:68:18:c0: 09:2a:e2:fc:0a:5b:1c:7f:74:9c:e0:06:df:86:6e:e1:a1:8d: 02:5d:71:7f:1a:52:a5:f8:1b:d5:18:ea:b7:5f:f5:d0:e1:8f: 39:f0:12:7d:88:4c:31:87:df:ef:d7:a5:6e:36:aa:b6:55:eb: 67:eb:89:34:94:03:bf:c5:0e:9b:40:eb:e2:17:2a:33:98:f0: e4:f7:12:4e:7e:c7:cd:5e:ee:4f:ec:b4:0b:54:08:ac:1c:5b: 79:d3:2d:c4:88:a3:9e:3a:26:19:bb:97:67:4d:b3:98:ec:7b: 84:8f:00:39:83:d9:f2:71:02:32:1b:05:20:e1:a7:5c:70:49: bc:95:f5:5a:1e:9e:d2:13:43:ad:43:b3:c3:1c:a6:35:74:ae: 74:02:69:5d:42:71:01:6b:0c:9c:d7:f2:27:91:b4:b3:0b:f3: 71:1a:75:a7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKEAfFT3mdKqOCO3rPFV7bzv1mpAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDA0MDM4WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjc5Yjk5MzQyZWFiMDU5NmMwYjU1NWU5MmJkYjRkNGFh M2JiNmUyZWU5MTM0YWVlYjVmNmE5ZjkxNWE3N2UzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNTR9yBscWaUc3GgFPsUdKfYyJ7j1691p0pH1LEiwd/27f TEJSstgvYHk1U+PXpmPZrcVg35CHCEPAhGwUt55K8QKp/CWYRmLovW0UBq647QCf QLoq2a7lg2kxCHSv8KpzqYHI2aDdOBvzegINB2ur6qXv2a8GR1NXTvIi6IoI90Ou rEEru+zlxlpKzWAPbFIgLg1ypB2hszp4m8ywyEb/9OKWZ2SRjxfkxr0Zyb9Bu04Q T89kLWb/wIA1HXG7/92z9GoTMAyPLwEf34G4pb9dOD8nPqE3of4P6Ik20mtEkbeN lDezM5quI5pW6h0hDPkoizgW6M2mJt1K50ETpR7pAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5F9VYUdBk7xlxKkrl2ydxgtGZVwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YwYmZkODAzLWZmMTctNDE0Ni1hMzViLTg4MjRkNDFiZmNhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9pYEAwDQYJKoZIhvcNAQELBQADggEBAHgAzDEz+VuYX6eo3M0/mStu ghCNvdJIeK0h5RwJ4HmIb+V6YZQoEPh1F1qcvNGNWiQTT2XsgmArjjNHQFFTQu3b uqKCDzpol5tblEoVnwCG2SOEOuo2umgYwAkq4vwKWxx/dJzgBt+GbuGhjQJdcX8a UqX4G9UY6rdf9dDhjznwEn2ITDGH3+/XpW42qrZV62friTSUA7/FDptA6+IXKjOY 8OT3Ek5+x81e7k/stAtUCKwcW3nTLcSIo546Jhm7l2dNs5jse4SPADmD2fJxAjIb BSDhp1xwSbyV9VoentITQ61Ds8McpjV0rnQCaV1CcQFrDJzX8ieRtLML83Eadac= -----END CERTIFICATE-----Generated at Mon Mar 2 00:08:09 2026 by rpki-client