$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa9a86fd-c53a-4ac7-931e-0093677ffdf9.roa File: fa9a86fd-c53a-4ac7-931e-0093677ffdf9.roa (raw, json) Hash identifier: biVtRHoWdmf8qH0rEtRrV5VrirebzjCC4+VKxRSCfVg= Subject key identifier: C0:2C:25:2D:16:72:C9:D5:6D:B1:04:FB:34:D6:D3:F5:90:10:B5:31 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 588A59164437343011A25591BE26997CF468C557 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa9a86fd-c53a-4ac7-931e-0093677ffdf9.roa Signing time: Fri 13 Feb 2026 00:30:32 +0000 ROA not before: Fri 13 Feb 2026 00:30:32 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff5:a400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:8a:59:16:44:37:34:30:11:a2:55:91:be:26:99:7c:f4:68:c5:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 13 00:30:32 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=4615a7d75e6ea44464639006bd217816cb4c297af39b9a70c3e0f47c6005fa10, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4d:23:6d:e7:d5:d3:3f:09:be:39:7f:57:5a: 18:a0:91:9f:cc:ad:f2:f9:13:55:ba:4f:69:68:af: 59:4c:b1:15:71:17:96:93:4f:81:23:9c:df:fa:7e: 92:e1:3a:0d:fb:a5:9b:ed:e1:02:20:9c:c5:26:2f: f5:f4:3b:dd:94:d3:a0:ee:43:42:d0:8b:cb:f7:d7: c9:21:c3:e8:b8:b6:4d:29:85:a3:d9:f5:f5:4f:af: b3:f4:20:2c:bd:08:65:c0:bb:ce:69:1c:b9:0c:e2: 35:25:f0:96:70:8b:d7:6c:f0:c8:70:25:cf:a4:e2: 39:c6:74:20:51:1b:5e:79:b3:4d:ae:ec:a5:40:e4: 91:c7:78:f9:0f:64:59:b2:fc:0a:6e:42:73:01:bd: 8b:26:a2:90:0b:2b:3f:35:85:a8:bb:7c:c2:b7:26: 67:14:77:64:48:1a:5f:25:8c:d8:ba:89:71:b5:1f: aa:4d:ee:48:e8:e9:44:fc:ee:c1:28:20:1f:83:9c: fe:14:6e:e5:36:75:8c:72:85:63:be:bc:9f:43:61: 8c:e6:ca:2a:5a:94:a2:52:20:33:38:27:c9:7e:d7: 25:8d:4e:39:a9:41:70:8e:5e:e5:47:71:ce:95:76: 51:65:73:eb:cf:e0:82:11:8b:a7:86:37:7d:72:ab: e2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2C:25:2D:16:72:C9:D5:6D:B1:04:FB:34:D6:D3:F5:90:10:B5:31 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa9a86fd-c53a-4ac7-931e-0093677ffdf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff5:a400::/40 Signature Algorithm: sha256WithRSAEncryption d9:72:a7:5b:d9:a9:d6:13:84:4a:23:22:af:48:4c:5a:86:d1: 62:53:54:1f:cb:87:d5:f4:16:f9:03:96:61:b3:0c:0f:c8:b2: ef:d7:c5:4d:3e:7b:37:b0:3a:bb:9e:2a:10:8b:1d:c6:8e:ba: e4:ac:72:0c:eb:00:1c:af:5d:18:84:95:87:ea:72:69:df:11: c7:0f:30:7a:04:59:ba:54:48:13:40:6a:f7:75:72:6b:99:93: b9:1f:bb:13:5d:a2:60:9c:79:0a:b5:ce:aa:aa:64:91:3d:cf: 5c:33:b7:36:22:c9:3b:06:d1:c2:45:13:82:b3:dd:d4:65:b0: 79:e3:92:b5:ed:12:9d:64:e1:c5:3a:da:51:e2:3b:d6:f4:2f: 03:57:bf:a3:97:25:4b:e7:d2:fb:46:b8:66:ca:63:ab:d7:28: 66:4b:00:25:e8:74:32:8c:ed:2c:c3:51:75:d9:5c:16:32:c2: c6:04:9c:32:a4:a6:10:52:87:86:9c:d3:c2:36:f4:22:d8:9b: 32:68:b6:2e:3e:e3:d9:75:04:50:59:a1:71:a4:71:59:61:35: 98:d1:6c:73:75:78:03:ba:6c:df:8d:1c:df:23:97:9b:37:50: c2:11:3d:00:39:97:05:a9:6f:97:c0:b7:3c:b0:3b:30:59:4e: dc:2d:eb:39 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWIpZFkQ3NDARolWRviaZfPRoxVcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEzMDAzMDMyWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NjE1YTdkNzVlNmVhNDQ0NjQ2MzkwMDZiZDIxNzgxNmNi NGMyOTdhZjM5YjlhNzBjM2UwZjQ3YzYwMDVmYTEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgTSNt59XTPwm+OX9XWhigkZ/MrfL5E1W6T2lor1lMsRVx F5aTT4EjnN/6fpLhOg37pZvt4QIgnMUmL/X0O92U06DuQ0LQi8v318khw+i4tk0p haPZ9fVPr7P0ICy9CGXAu85pHLkM4jUl8JZwi9ds8MhwJc+k4jnGdCBRG155s02u 7KVA5JHHePkPZFmy/ApuQnMBvYsmopALKz81hai7fMK3JmcUd2RIGl8ljNi6iXG1 H6pN7kjo6UT87sEoIB+DnP4UbuU2dYxyhWO+vJ9DYYzmyipalKJSIDM4J8l+1yWN TjmpQXCOXuVHcc6VdlFlc+vP4IIRi6eGN31yq+LFAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUwCwlLRZyydVtsQT7NNbT9ZAQtTEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZhOWE4NmZkLWM1M2EtNGFjNy05MzFlLTAwOTM2NzdmZmRmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/1pDANBgkqhkiG9w0BAQsFAAOCAQEA2XKnW9mp1hOESiMir0hMWobR YlNUH8uH1fQW+QOWYbMMD8iy79fFTT57N7A6u54qEIsdxo665KxyDOsAHK9dGISV h+pyad8Rxw8wegRZulRIE0Bq93Vya5mTuR+7E12iYJx5CrXOqqpkkT3PXDO3NiLJ OwbRwkUTgrPd1GWweeOSte0SnWThxTraUeI71vQvA1e/o5clS+fS+0a4Zspjq9co ZksAJeh0MoztLMNRddlcFjLCxgScMqSmEFKHhpzTwjb0ItibMmi2Lj7j2XUEUFmh caRxWWE1mNFsc3V4A7ps340c3yOXmzdQwhE9ADmXBalvl8C3PLA7MFlO3C3rOQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:19:44 2026 by rpki-client