$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f72c868e-09c6-45bf-b69f-5299536cb0fc.roa File: f72c868e-09c6-45bf-b69f-5299536cb0fc.roa (raw, json) Hash identifier: 7GvzZnbZJ5ghis0TQGEJ3xJR5cufOcES76dliGYQZWw= Subject key identifier: 7B:66:82:17:AF:74:F2:26:F5:94:8C:0D:FE:6C:E5:A3:27:90:7C:45 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3DB2D0B08B4729976EF939CE598987D25F1EC857 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f72c868e-09c6-45bf-b69f-5299536cb0fc.roa Signing time: Wed 11 Feb 2026 00:50:47 +0000 ROA not before: Wed 11 Feb 2026 00:50:47 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff3:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b2:d0:b0:8b:47:29:97:6e:f9:39:ce:59:89:87:d2:5f:1e:c8:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 11 00:50:47 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=639465a421f0b09776dc6079f3505de06f786070933ef3883eca9db5a9fe2e68, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:d8:81:79:cf:24:95:84:27:37:73:1b:60: 53:46:ba:18:57:41:51:04:6a:bc:b8:78:89:d2:e8: 1b:de:91:c9:34:61:b6:39:f4:27:fb:3f:4e:c7:70: 5e:40:63:4d:b4:c6:3e:48:d8:d3:75:cd:69:13:8c: 0d:38:40:b2:3b:f7:0b:bd:01:34:95:eb:cb:c1:f1: 3d:a4:d9:c0:e6:9c:76:55:1f:9d:f3:7a:fb:5f:d7: 49:51:5e:c8:c7:d4:40:46:0b:d6:43:29:d6:0d:a3: e8:4b:b7:ac:ea:d9:be:bd:6f:ff:cd:d0:14:6b:20: c3:b0:ee:cd:5d:1a:45:9b:bf:04:63:64:73:ab:c5: 90:c7:91:40:95:04:14:32:27:02:6f:89:d7:49:19: 02:53:35:4b:51:72:00:49:1a:af:93:c5:9d:12:d4: ee:20:cc:d5:5b:12:cb:4a:eb:fa:cf:f5:6c:cd:36: 3f:c6:db:a8:27:f7:b9:84:cf:f2:f1:ad:34:a0:79: a8:40:08:76:3b:59:1c:83:db:8a:ab:93:3b:c0:6e: 4a:d8:0a:ec:18:1b:76:e8:69:33:9a:43:13:05:9f: c0:33:94:59:73:73:f3:d3:c7:c9:45:97:73:68:b5: 37:14:6a:48:46:cd:b0:4d:f4:7e:f2:ea:30:91:1e: bc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:66:82:17:AF:74:F2:26:F5:94:8C:0D:FE:6C:E5:A3:27:90:7C:45 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f72c868e-09c6-45bf-b69f-5299536cb0fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:2000::/40 Signature Algorithm: sha256WithRSAEncryption 8e:5d:60:6c:17:3e:a4:70:df:16:e2:69:d9:bf:d2:68:5a:b3: 0d:6e:53:cd:9c:91:be:12:04:3b:93:fa:c6:85:c9:41:8b:12: 6d:5d:80:4c:52:84:48:90:61:3f:c0:e9:f8:4c:80:16:ff:4d: 3a:92:ef:22:3e:bf:4c:2e:ee:13:3f:a2:73:4d:e8:06:5f:28: 3b:58:bb:43:36:61:15:ed:5b:ff:30:4b:7f:09:26:ca:c2:9f: 39:50:7f:98:fb:7f:fa:89:45:d2:b8:c9:d3:d3:ae:86:ef:9b: e5:9c:4b:a8:29:38:40:81:36:26:c7:16:70:bf:53:6e:5d:96: 02:91:62:e1:0f:49:f5:be:44:73:0b:a6:5b:ec:24:98:e9:6f: af:e6:4f:cb:38:44:ad:a8:c3:e6:86:67:bb:9d:5c:20:8f:83: 28:4b:9e:be:ad:ad:b3:6a:8b:49:1f:ce:73:5d:23:b8:91:45: d5:1f:eb:03:9b:fc:19:24:d6:29:a5:7a:b9:22:8f:70:48:0d: 34:e0:b6:e2:0d:d5:9d:85:39:ad:f4:87:c3:43:d7:1e:2a:f6: b4:3e:53:02:81:85:bc:0d:55:1a:c9:14:3d:7a:ca:b3:97:9a: 8d:03:48:b1:7b:e2:f5:64:a9:d4:96:dc:e5:ea:31:16:e9:f0: fd:64:34:ff -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPbLQsItHKZdu+TnOWYmH0l8eyFcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjExMDA1MDQ3WhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2Mzk0NjVhNDIxZjBiMDk3NzZkYzYwNzlmMzUwNWRlMDZm Nzg2MDcwOTMzZWYzODgzZWNhOWRiNWE5ZmUyZTY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8NdiBec8klYQnN3MbYFNGuhhXQVEEary4eInS6Bvekck0 YbY59Cf7P07HcF5AY020xj5I2NN1zWkTjA04QLI79wu9ATSV68vB8T2k2cDmnHZV H53zevtf10lRXsjH1EBGC9ZDKdYNo+hLt6zq2b69b//N0BRrIMOw7s1dGkWbvwRj ZHOrxZDHkUCVBBQyJwJviddJGQJTNUtRcgBJGq+TxZ0S1O4gzNVbEstK6/rP9WzN Nj/G26gn97mEz/LxrTSgeahACHY7WRyD24qrkzvAbkrYCuwYG3boaTOaQxMFn8Az lFlzc/PTx8lFl3NotTcUakhGzbBN9H7y6jCRHryXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUe2aCF6908ib1lIwN/mzloyeQfEUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y3MmM4NjhlLTA5YzYtNDViZi1iNjlmLTUyOTk1MzZjYjBmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/zIDANBgkqhkiG9w0BAQsFAAOCAQEAjl1gbBc+pHDfFuJp2b/SaFqz DW5TzZyRvhIEO5P6xoXJQYsSbV2ATFKESJBhP8Dp+EyAFv9NOpLvIj6/TC7uEz+i c03oBl8oO1i7QzZhFe1b/zBLfwkmysKfOVB/mPt/+olF0rjJ09Ouhu+b5ZxLqCk4 QIE2JscWcL9Tbl2WApFi4Q9J9b5EcwumW+wkmOlvr+ZPyzhErajD5oZnu51cII+D KEuevq2ts2qLSR/Oc10juJFF1R/rA5v8GSTWKaV6uSKPcEgNNOC24g3VnYU5rfSH w0PXHir2tD5TAoGFvA1VGskUPXrKs5eajQNIsXvi9WSp1Jbc5eoxFunw/WQ0/w== -----END CERTIFICATE-----Generated at Mon Mar 2 00:08:44 2026 by rpki-client