$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/110eaa0d-5df9-411f-a007-18240d1d0c3f.roa File: 110eaa0d-5df9-411f-a007-18240d1d0c3f.roa (raw, json) Hash identifier: cWMLLpRqjMTNh+ncHFTK9kPzcGT0UFLx7jeUUPMWUG0= Subject key identifier: C3:7E:11:C5:7E:F7:3A:BF:66:6B:17:F2:A3:C2:81:0B:78:AC:D0:AA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 12A23D77FC41E57792880C902DFE08A63EE07A2B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/110eaa0d-5df9-411f-a007-18240d1d0c3f.roa Signing time: Thu 12 Mar 2026 16:06:45 +0000 ROA not before: Thu 12 Mar 2026 16:06:45 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fba:3440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a2:3d:77:fc:41:e5:77:92:88:0c:90:2d:fe:08:a6:3e:e0:7a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:06:45 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=f6becaa7d5b4302d307d677c94766c2cfaa401698c073ac82a0998fd21bafdab, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:ab:c1:7f:7b:c9:b7:2e:22:8d:e1:08:7f: fd:76:b5:12:17:5d:5c:7c:ee:4d:91:40:3f:68:af: 68:e8:42:50:2c:d9:58:58:e4:db:38:42:ea:2f:0b: 3e:b5:98:58:6a:82:dd:67:91:68:a9:99:40:ee:42: cc:43:45:4c:12:02:13:b3:cf:e0:fd:73:3e:ba:71: 19:07:e7:2b:cb:b0:5e:d6:0c:3c:d7:86:0d:f8:5f: 86:0b:f4:d4:5c:5e:86:67:08:d7:13:0e:b1:bd:70: 28:cc:8b:e5:1c:89:c5:65:72:c8:68:b9:f4:b8:fa: 08:6a:79:3c:c5:00:0d:6b:64:20:6e:88:c0:fb:59: 18:0a:62:d1:cd:e8:10:6e:10:61:cf:00:07:e4:c9: 87:23:f8:6e:b9:9a:e8:57:cf:fe:88:1d:1e:a0:2f: b7:95:d1:88:56:d3:81:8f:a8:6b:6d:cc:a6:6f:1b: a2:28:f9:c4:ab:4d:b7:3d:26:be:31:88:54:15:95: a3:0f:d1:03:33:74:9e:13:79:ae:e8:b2:e3:45:59: 4c:14:ab:67:ad:a2:bc:97:ab:ee:b4:48:d0:58:fe: 5c:14:3c:6c:d1:9e:61:be:28:a6:b5:03:ff:19:d7: e4:21:ed:1e:71:8f:3a:b6:45:7b:26:50:b9:81:d3: c8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7E:11:C5:7E:F7:3A:BF:66:6B:17:F2:A3:C2:81:0B:78:AC:D0:AA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/110eaa0d-5df9-411f-a007-18240d1d0c3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fba:3440::/48 Signature Algorithm: sha256WithRSAEncryption cd:be:48:5a:41:a9:0b:52:0f:7d:d9:2e:9e:0f:51:8f:87:6f: 7a:4b:e3:ee:b0:08:ab:d0:e1:9f:be:9b:be:33:3e:88:d6:1f: d1:70:b4:2a:84:f9:96:08:11:e5:86:1f:7f:8b:03:5b:e3:35: 08:1c:37:37:cb:06:c1:0a:8c:c9:3b:eb:06:a5:1b:ee:74:ac: e0:d3:97:bd:77:22:04:f0:02:5e:97:19:ab:33:f2:43:7a:c1: 87:62:b1:b2:f5:44:78:de:63:73:8f:29:f0:06:78:96:5a:83: 05:76:0b:1c:2b:1b:f0:4f:f0:40:5f:f4:a3:fd:0a:7f:1c:3e: 05:6a:b4:ca:41:7a:aa:0c:be:78:20:bb:5c:3e:1e:93:13:45: 78:b9:b2:33:2c:88:43:c4:05:47:b6:ca:4e:fd:9c:22:34:10: 47:73:b8:95:f9:7d:ed:ab:4a:5a:27:61:d6:3e:7f:40:54:82: df:74:ef:c7:0d:aa:5a:7b:ee:cf:96:c7:12:ef:77:cd:bf:5c: a6:d4:42:21:d0:81:24:30:ab:2f:6e:09:ec:91:d4:fb:63:74: 42:37:34:31:75:66:4a:23:47:e2:8e:e1:b7:80:f8:3a:56:20: b8:27:05:97:00:0e:cf:53:a9:2a:09:a3:06:af:40:d7:a3:f0: b1:6e:c1:d4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEqI9d/xB5XeSiAyQLf4Ipj7geiswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYwNjQ1WhcNMjYwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNmJlY2FhN2Q1YjQzMDJkMzA3ZDY3N2M5NDc2NmMyY2Zh YTQwMTY5OGMwNzNhYzgyYTA5OThmZDIxYmFmZGFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGvqvBf3vJty4ijeEIf/12tRIXXVx87k2RQD9or2joQlAs 2VhY5Ns4QuovCz61mFhqgt1nkWipmUDuQsxDRUwSAhOzz+D9cz66cRkH5yvLsF7W DDzXhg34X4YL9NRcXoZnCNcTDrG9cCjMi+UcicVlcshoufS4+ghqeTzFAA1rZCBu iMD7WRgKYtHN6BBuEGHPAAfkyYcj+G65muhXz/6IHR6gL7eV0YhW04GPqGttzKZv G6Io+cSrTbc9Jr4xiFQVlaMP0QMzdJ4Tea7osuNFWUwUq2etoryXq+60SNBY/lwU PGzRnmG+KKa1A/8Z1+Qh7R5xjzq2RXsmULmB08jNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUw34RxX73Or9maxfyo8KBC3is0KowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzExMGVhYTBkLTVkZjktNDExZi1hMDA3LTE4MjQwZDFkMGMzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB+6NEAwDQYJKoZIhvcNAQELBQADggEBAM2+SFpBqQtSD33ZLp4PUY+H b3pL4+6wCKvQ4Z++m74zPojWH9FwtCqE+ZYIEeWGH3+LA1vjNQgcNzfLBsEKjMk7 6walG+50rODTl713IgTwAl6XGasz8kN6wYdisbL1RHjeY3OPKfAGeJZagwV2Cxwr G/BP8EBf9KP9Cn8cPgVqtMpBeqoMvnggu1w+HpMTRXi5sjMsiEPEBUe2yk79nCI0 EEdzuJX5fe2rSlonYdY+f0BUgt9078cNqlp77s+WxxLvd82/XKbUQiHQgSQwqy9u CeyR1PtjdEI3NDF1ZkojR+KO4beA+DpWILgnBZcADs9TqSoJowavQNej8LFuwdQ= -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:15 2026 by rpki-client