$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10f48290-4894-4ec3-b396-acc342d42d33.roa File: 10f48290-4894-4ec3-b396-acc342d42d33.roa (raw, json) Hash identifier: vDPaFECT/XbniiLXPmKgnrPtwhHoIUe/qwGFbqkXCO4= Subject key identifier: 69:44:14:B7:B5:13:AD:99:EA:22:1E:2E:9D:79:A8:8A:A1:8C:85:D7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6223C81E8E785BF87FC76DF4583B33199C7B4942 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10f48290-4894-4ec3-b396-acc342d42d33.roa Signing time: Thu 12 Mar 2026 16:11:31 +0000 ROA not before: Thu 12 Mar 2026 16:11:31 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe9:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:23:c8:1e:8e:78:5b:f8:7f:c7:6d:f4:58:3b:33:19:9c:7b:49:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:11:31 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=2e35594fd5f6a533ca5cdd1b11e0c2d2b053d29bb569e37417f1ca960152564f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:01:82:2f:5d:9f:6a:89:66:79:da:1b:db:40: cb:ea:23:24:64:da:f9:97:70:20:fd:b9:0d:5f:5e: e2:07:3e:46:49:88:32:f1:f1:30:cb:7b:f1:2b:58: 76:82:a9:4a:07:10:ac:ce:14:34:c7:f3:4f:46:e3: 88:c0:e8:01:f9:a9:70:1d:bd:86:aa:df:53:14:c6: d2:f5:c4:3c:65:a2:0c:20:b6:1e:31:66:6d:fb:1c: 36:09:b7:56:45:c1:55:27:1a:15:a2:2d:c7:0e:f2: 6e:70:90:b3:0d:27:e2:a0:ef:a5:ff:04:20:39:a3: ed:c5:ea:b4:88:14:3c:30:df:c3:9d:5a:f5:b7:6a: 6e:c9:62:45:60:02:a2:c8:8c:e5:c7:28:a8:56:86: 2f:83:a0:14:cc:ff:14:3a:e0:0a:af:c5:59:dd:0c: 2e:4b:a4:aa:c3:97:3e:3e:dd:e4:7a:d5:95:51:85: 7a:4f:ce:2c:60:81:1a:ca:c0:3b:98:cf:32:56:07: ca:0d:b9:64:0d:ee:20:bd:c6:1f:c3:88:92:28:af: 0e:25:51:87:b0:b1:41:3a:cd:85:bd:0f:fd:c4:b2: 6e:59:4e:46:27:4c:27:1e:0c:33:45:98:c2:99:78: 53:ff:fe:a2:81:2c:6c:84:8f:47:7b:10:c8:57:c8: 12:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:44:14:B7:B5:13:AD:99:EA:22:1E:2E:9D:79:A8:8A:A1:8C:85:D7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10f48290-4894-4ec3-b396-acc342d42d33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe9:2000::/40 Signature Algorithm: sha256WithRSAEncryption 11:51:c6:f2:81:a2:75:7e:1a:cf:c0:af:a7:b2:7b:d9:3f:74: b0:ba:fe:95:7f:ea:8e:97:04:37:5c:f5:b9:6d:1a:0e:ce:f1: f4:84:19:e4:64:35:1e:2c:79:61:ab:b8:78:fd:4b:a4:31:a6: 67:49:8a:9c:7c:7a:42:3b:7e:d0:65:d0:48:41:88:c5:fe:b3: 43:93:55:0c:29:1c:92:ab:74:64:1d:f4:ed:85:8a:3a:87:f5: 9e:67:7e:7f:7e:32:43:84:33:b5:33:a9:23:6b:60:4a:e5:48: 93:42:71:33:12:84:e5:3a:ab:7d:cd:2a:a5:be:41:69:b6:03: 91:e0:b9:1f:08:00:72:a9:48:8d:15:32:3d:d6:f3:7e:71:c6: 75:75:06:f1:f8:ca:51:d2:bb:c2:b7:3d:69:e2:36:fb:40:05: fe:bb:b8:c4:18:3b:6e:2e:66:8a:9a:62:77:47:88:67:5d:38: ff:84:05:bb:b1:44:d7:e4:33:30:45:c9:7e:ea:4c:dd:07:9a: 12:26:68:b4:1d:f9:b8:5a:45:ab:57:04:27:ca:76:7f:aa:4c: bf:8d:dc:86:f1:17:4f:1a:72:b8:25:52:87:61:57:92:f1:8a: 0a:fa:97:33:b2:87:c6:00:84:b8:a5:41:27:d2:d0:32:8e:b2: f9:91:bf:60 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYiPIHo54W/h/x230WDszGZx7SUIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYxMTMxWhcNMjYwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTM1NTk0ZmQ1ZjZhNTMzY2E1Y2RkMWIxMWUwYzJkMmIw NTNkMjliYjU2OWUzNzQxN2YxY2E5NjAxNTI1NjRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNAYIvXZ9qiWZ52hvbQMvqIyRk2vmXcCD9uQ1fXuIHPkZJ iDLx8TDLe/ErWHaCqUoHEKzOFDTH809G44jA6AH5qXAdvYaq31MUxtL1xDxlogwg th4xZm37HDYJt1ZFwVUnGhWiLccO8m5wkLMNJ+Kg76X/BCA5o+3F6rSIFDww38Od WvW3am7JYkVgAqLIjOXHKKhWhi+DoBTM/xQ64AqvxVndDC5LpKrDlz4+3eR61ZVR hXpPzixggRrKwDuYzzJWB8oNuWQN7iC9xh/DiJIorw4lUYewsUE6zYW9D/3Esm5Z TkYnTCceDDNFmMKZeFP//qKBLGyEj0d7EMhXyBJbAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUaUQUt7UTrZnqIh4unXmoiqGMhdcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEwZjQ4MjkwLTQ4OTQtNGVjMy1iMzk2LWFjYzM0MmQ0MmQzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/pIDANBgkqhkiG9w0BAQsFAAOCAQEAEVHG8oGidX4az8Cvp7J72T90 sLr+lX/qjpcEN1z1uW0aDs7x9IQZ5GQ1Hix5Yau4eP1LpDGmZ0mKnHx6Qjt+0GXQ SEGIxf6zQ5NVDCkckqt0ZB307YWKOof1nmd+f34yQ4QztTOpI2tgSuVIk0JxMxKE 5Tqrfc0qpb5BabYDkeC5HwgAcqlIjRUyPdbzfnHGdXUG8fjKUdK7wrc9aeI2+0AF /ru4xBg7bi5mippid0eIZ104/4QFu7FE1+QzMEXJfupM3QeaEiZotB35uFpFq1cE J8p2f6pMv43chvEXTxpyuCVSh2FXkvGKCvqXM7KHxgCEuKVBJ9LQMo6y+ZG/YA== -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:03 2026 by rpki-client