$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6514ce9-596d-4d54-9813-69d4702c8a11.roa File: f6514ce9-596d-4d54-9813-69d4702c8a11.roa (raw, json) Hash identifier: 1a/o5o9Ip1mDxIsYg1e2US9CVaQ1YhYidB5X+7/8uB8= Subject key identifier: AB:0C:FA:C8:8D:5F:52:1A:6C:1A:10:1A:95:B2:E1:A5:07:4D:88:95 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 58C7DF016ACB3AECB96592F29A9CCBBDC9B17558 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6514ce9-596d-4d54-9813-69d4702c8a11.roa Signing time: Sat 21 Feb 2026 01:21:35 +0000 ROA not before: Sat 21 Feb 2026 01:21:35 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:c7:df:01:6a:cb:3a:ec:b9:65:92:f2:9a:9c:cb:bd:c9:b1:75:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:21:35 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=f4d2e68d9472ff30c789dbf467815469fad07a0682c74c79420590e17dc787b7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:49:ea:fd:02:7c:f7:9c:83:dd:90:22:3a:19: 2d:83:7f:9f:b0:c4:96:9d:ae:b6:6a:c8:35:de:7c: ee:b8:7d:a5:78:4b:d3:2b:16:bb:fd:e3:4d:40:15: 23:a6:35:8a:bf:bd:bf:65:ae:14:58:12:b7:9d:ac: 5c:c9:9b:ec:79:6b:b6:44:b2:d1:e2:c7:dd:43:62: c5:7c:e3:33:1c:81:16:42:fc:bf:ee:b5:90:60:f1: eb:41:f6:88:e2:5c:2c:42:8d:00:84:d6:cc:00:39: ce:f3:ed:31:b2:bb:48:b5:04:42:86:5a:92:97:d5: 0f:1e:29:61:ad:15:9f:9b:df:2a:32:c4:c1:cc:3c: 73:8d:59:1a:9a:65:93:ca:b5:80:77:92:46:0a:40: bf:f3:16:9d:11:76:2c:3a:3d:2d:ef:ff:7f:be:f4: e6:cf:95:2b:65:81:c6:10:d1:d2:f6:a0:cb:b8:a9: 3e:0e:6f:93:c4:6e:6e:43:ea:42:71:f2:d5:4d:3f: fd:13:9b:a3:56:6b:7d:91:ce:56:ce:1a:8b:08:cb: 64:3d:2a:46:8d:21:d5:9e:f6:05:e2:2c:19:69:93: 44:f5:6a:41:03:fa:52:76:53:c8:57:dd:22:24:71: 47:3f:24:eb:16:79:22:40:a6:59:6e:d8:31:a8:b7: c1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0C:FA:C8:8D:5F:52:1A:6C:1A:10:1A:95:B2:E1:A5:07:4D:88:95 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6514ce9-596d-4d54-9813-69d4702c8a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:5000::/40 Signature Algorithm: sha256WithRSAEncryption 96:19:08:ab:ea:6d:6b:07:67:8a:75:e2:43:15:68:f3:68:29: be:c5:f6:4e:a5:3b:4b:5d:7b:d7:fe:fc:ba:99:63:70:48:4d: 61:14:59:9d:84:50:80:31:14:cf:c1:73:6e:d1:3b:41:20:42: c0:03:48:fd:46:c5:f1:6a:20:73:06:d6:3b:24:3c:c7:68:1d: eb:67:c5:9a:f2:22:76:1a:ad:fd:06:24:84:cd:84:79:53:35: d6:24:7b:2a:52:e3:93:78:2d:2f:6d:67:92:ba:c1:a6:9f:c2: 44:80:69:6d:f0:f9:0c:37:2d:a0:0a:e1:85:b1:de:30:05:9e: 6e:f7:2d:60:17:5f:d5:0d:87:df:5b:b8:cc:b7:25:cc:27:f9: 6d:55:da:32:f1:81:23:93:27:7c:b3:3e:91:27:17:fe:28:5b: c8:88:49:87:f5:82:8b:72:38:da:0c:2d:9b:23:35:fb:e8:71: 4c:4e:24:07:28:85:03:98:ea:38:c7:ed:76:3d:a5:85:e0:b4: 02:f0:24:d6:d0:2b:23:a2:aa:4f:f1:16:10:22:18:4d:b6:82: d7:65:e0:b2:e1:0d:31:1a:2a:8a:d4:eb:f9:49:cf:4a:d8:cf: 5d:6b:ac:91:77:62:43:18:c3:e7:2e:c5:eb:90:c5:91:4c:03: 0e:c1:9a:6d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWMffAWrLOuy5ZZLympzLvcmxdVgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDEyMTM1WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNGQyZTY4ZDk0NzJmZjMwYzc4OWRiZjQ2NzgxNTQ2OWZh ZDA3YTA2ODJjNzRjNzk0MjA1OTBlMTdkYzc4N2I3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4Ser9Anz3nIPdkCI6GS2Df5+wxJadrrZqyDXefO64faV4 S9MrFrv9401AFSOmNYq/vb9lrhRYEredrFzJm+x5a7ZEstHix91DYsV84zMcgRZC /L/utZBg8etB9ojiXCxCjQCE1swAOc7z7TGyu0i1BEKGWpKX1Q8eKWGtFZ+b3yoy xMHMPHONWRqaZZPKtYB3kkYKQL/zFp0Rdiw6PS3v/3++9ObPlStlgcYQ0dL2oMu4 qT4Ob5PEbm5D6kJx8tVNP/0Tm6NWa32RzlbOGosIy2Q9KkaNIdWe9gXiLBlpk0T1 akED+lJ2U8hX3SIkcUc/JOsWeSJApllu2DGot8EbAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUqwz6yI1fUhpsGhAalbLhpQdNiJUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y2NTE0Y2U5LTU5NmQtNGQ1NC05ODEzLTY5ZDQ3MDJjOGExMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/3UDANBgkqhkiG9w0BAQsFAAOCAQEAlhkIq+ptawdninXiQxVo82gp vsX2TqU7S1171/78upljcEhNYRRZnYRQgDEUz8FzbtE7QSBCwANI/UbF8WogcwbW OyQ8x2gd62fFmvIidhqt/QYkhM2EeVM11iR7KlLjk3gtL21nkrrBpp/CRIBpbfD5 DDctoArhhbHeMAWebvctYBdf1Q2H31u4zLclzCf5bVXaMvGBI5MnfLM+kScX/ihb yIhJh/WCi3I42gwtmyM1++hxTE4kByiFA5jqOMftdj2lheC0AvAk1tArI6KqT/EW ECIYTbaC12XgsuENMRoqitTr+UnPStjPXWuskXdiQxjD5y7F65DFkUwDDsGabQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:19:19 2026 by rpki-client