$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd1c8944-1621-4da7-9c93-1eab516bb822.roa File: fd1c8944-1621-4da7-9c93-1eab516bb822.roa (raw, json) Hash identifier: ikFWvJ88nf+aPBujCB6rERLKyYvQv915UEdE/06aFjQ= Subject key identifier: E8:C2:FB:D0:D2:59:62:11:0B:DE:AC:0F:81:05:F2:F5:E8:21:58:E0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52533D33F96B617A93DF0AE684507CD8AD0E0EB1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd1c8944-1621-4da7-9c93-1eab516bb822.roa Signing time: Wed 25 Feb 2026 00:50:41 +0000 ROA not before: Wed 25 Feb 2026 00:50:41 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f14:1000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:53:3d:33:f9:6b:61:7a:93:df:0a:e6:84:50:7c:d8:ad:0e:0e:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 00:50:41 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=f6fbb7bae47cbcccf1e0d84781eafbf115c2c8a568cecfb8d88349394175e476, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:91:26:42:3c:b4:f4:d6:80:d5:0e:b3:65: 67:45:c1:49:88:20:86:56:56:7f:cc:6d:6e:2a:8d: 92:7c:87:35:be:44:c1:c0:07:89:8f:ba:fe:fa:5e: 64:21:7b:59:6a:77:2a:a1:c8:ab:70:95:14:6e:6b: 2e:a6:5c:e8:dd:8a:c7:86:39:76:5f:1f:5c:fa:3e: de:25:c1:1d:6b:ea:3f:ea:35:be:26:09:3e:3a:f7: c3:83:79:23:cf:c7:0e:10:73:c6:7c:a1:bc:2e:32: e3:83:f9:50:1d:0f:36:62:63:17:52:1b:8f:31:96: 71:45:11:ba:ed:ea:53:8d:d7:b4:a0:ec:b4:4b:a5: f9:cf:40:4a:48:ab:f1:9a:ca:ed:b6:29:0d:43:d6: 8d:7a:e3:54:21:8e:b2:b2:02:27:98:4e:eb:88:b2: 43:19:e1:8b:61:b4:9c:d4:89:57:04:7c:5e:a4:1b: 9b:b1:f2:fb:e3:2d:e3:76:fa:20:bd:2d:8f:a2:b9: 5b:26:dd:6b:81:be:2e:9f:1f:ba:1e:8a:76:ce:ab: 70:04:9e:75:ca:7f:07:1c:6a:27:f4:eb:85:5e:3a: f5:1f:4a:f4:c4:1b:85:82:62:25:dd:e2:65:44:ff: 67:40:ca:a0:23:76:e8:3d:af:b8:06:02:57:e4:64: e0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C2:FB:D0:D2:59:62:11:0B:DE:AC:0F:81:05:F2:F5:E8:21:58:E0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd1c8944-1621-4da7-9c93-1eab516bb822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f14:1000::/37 Signature Algorithm: sha256WithRSAEncryption 15:07:a6:a4:e8:68:23:eb:00:4d:da:0c:2a:15:79:bc:9b:33: 56:5c:e4:82:31:5f:51:db:60:88:02:46:0e:3b:62:5d:0c:95: 14:69:ce:9a:aa:73:3b:1c:af:fb:b9:b7:af:dd:e7:04:21:42: 3e:e7:74:e3:ac:20:fb:de:fa:5b:5e:4c:c0:d9:98:5f:b2:50: 18:c6:79:e2:51:98:52:78:1e:66:9a:83:18:7c:bb:4b:b1:32: e9:68:c0:1e:cc:43:56:f1:80:9b:45:17:0c:3b:f5:55:62:73: 54:e1:c4:a2:5d:56:3b:43:33:44:a5:5d:ea:35:65:2a:f0:64: f3:94:9b:f1:bf:ea:a1:59:59:34:a6:0f:2c:42:4f:14:bc:6d: f0:b4:e4:72:73:da:14:00:5b:9f:be:c5:e6:db:10:88:ff:1f: a0:2c:e1:df:54:a0:8e:cc:d2:3b:fe:bf:be:e6:b9:5b:c4:ec: c7:73:db:84:a7:c2:de:06:32:90:d6:5c:bd:09:c8:8f:b5:2e: ee:43:02:d2:e1:61:c0:99:52:3d:32:5f:4a:19:71:b6:e6:1e: 97:13:2b:b5:0c:2a:e6:f7:fa:ec:9f:98:f4:85:b5:e6:92:5e: e8:a7:af:93:cc:ca:28:93:ad:42:86:bc:65:5f:84:2e:59:26: 8f:14:9c:e0 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUlM9M/lrYXqT3wrmhFB82K0ODrEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDA1MDQxWhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNmZiYjdiYWU0N2NiY2NjZjFlMGQ4NDc4MWVhZmJmMTE1 YzJjOGE1NjhjZWNmYjhkODgzNDkzOTQxNzVlNDc2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCob5EmQjy09NaA1Q6zZWdFwUmIIIZWVn/MbW4qjZJ8hzW+ RMHAB4mPuv76XmQhe1lqdyqhyKtwlRRuay6mXOjdiseGOXZfH1z6Pt4lwR1r6j/q Nb4mCT4698ODeSPPxw4Qc8Z8obwuMuOD+VAdDzZiYxdSG48xlnFFEbrt6lON17Sg 7LRLpfnPQEpIq/Gayu22KQ1D1o1641QhjrKyAieYTuuIskMZ4YthtJzUiVcEfF6k G5ux8vvjLeN2+iC9LY+iuVsm3WuBvi6fH7oeinbOq3AEnnXKfwccaif064VeOvUf SvTEG4WCYiXd4mVE/2dAyqAjdug9r7gGAlfkZODHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU6ML70NJZYhEL3qwPgQXy9eghWOAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZkMWM4OTQ0LTE2MjEtNGRhNy05YzkzLTFlYWI1MTZiYjgyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8UEDANBgkqhkiG9w0BAQsFAAOCAQEAFQempOhoI+sATdoMKhV5vJsz VlzkgjFfUdtgiAJGDjtiXQyVFGnOmqpzOxyv+7m3r93nBCFCPud046wg+976W15M wNmYX7JQGMZ54lGYUngeZpqDGHy7S7Ey6WjAHsxDVvGAm0UXDDv1VWJzVOHEol1W O0MzRKVd6jVlKvBk85Sb8b/qoVlZNKYPLEJPFLxt8LTkcnPaFABbn77F5tsQiP8f oCzh31SgjszSO/6/vua5W8Tsx3PbhKfC3gYykNZcvQnIj7Uu7kMC0uFhwJlSPTJf ShlxtuYelxMrtQwq5vf67J+Y9IW15pJe6Kevk8zKKJOtQoa8ZV+ELlkmjxSc4A== -----END CERTIFICATE-----Generated at Mon Mar 2 00:18:52 2026 by rpki-client