$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fa35563-1ccf-435c-8378-3881a27d4353.roa File: 2fa35563-1ccf-435c-8378-3881a27d4353.roa (raw, json) Hash identifier: AEaHiGoW4pChue4a4OlyFbHVylODMWLFlWdvF89cKYk= Subject key identifier: AA:C9:5B:1E:6B:E9:A3:6B:0B:AE:72:F0:06:39:80:54:C4:13:93:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2C9F4DBBBE11F1D4D49726EA092337682AB36E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fa35563-1ccf-435c-8378-3881a27d4353.roa Signing time: Thu 12 Mar 2026 16:08:31 +0000 ROA not before: Thu 12 Mar 2026 16:08:31 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe9:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:9f:4d:bb:be:11:f1:d4:d4:97:26:ea:09:23:37:68:2a:b3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:08:31 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=5405b7ff33f4bab87216f207b7dc2c63597841e7c049ba85cc8a69ae6f50be7b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:87:ce:ab:7c:b5:67:79:33:44:9e:5f:92:25: 51:be:b0:fc:7a:56:cb:e1:7f:a8:a6:b5:10:a7:a2: df:7b:c4:0c:c3:b9:bc:0a:e5:37:8e:d5:26:36:55: 1d:12:53:39:de:06:83:43:3c:5b:ad:6a:59:37:e0: 53:68:76:4e:52:f1:3b:19:45:07:05:66:d2:88:66: db:eb:52:b7:af:64:8d:f8:bd:ff:8c:a8:2f:f8:13: b0:93:76:85:0a:97:77:6d:14:1f:79:32:59:8e:eb: 19:9c:08:00:76:6f:5a:9e:4f:6a:d5:36:4a:45:00: ea:91:cb:87:82:0d:46:68:0b:92:44:b0:00:cb:ac: 58:20:80:4a:e2:6b:25:85:9a:88:12:2c:a7:0f:95: 52:81:b9:53:39:dd:29:06:cf:e5:90:f1:c9:7e:c9: a9:c9:b5:18:d9:8c:f1:61:d4:70:ec:bc:74:12:83: c7:26:29:47:03:fd:7d:8f:30:aa:15:10:7b:0a:ca: a9:40:88:10:35:58:df:de:b0:2e:aa:c4:74:34:1b: db:eb:8b:36:19:fc:ea:81:5a:3b:92:40:22:e8:19: af:93:46:48:d5:46:70:9f:13:ef:27:0e:c9:87:fb: b7:9e:3e:7a:50:7e:5a:61:ba:f1:6c:4f:ba:43:e2: 42:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C9:5B:1E:6B:E9:A3:6B:0B:AE:72:F0:06:39:80:54:C4:13:93:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fa35563-1ccf-435c-8378-3881a27d4353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe9:2040::/48 Signature Algorithm: sha256WithRSAEncryption 8c:01:c8:86:af:60:c2:a0:55:d8:2d:d1:8f:8d:c6:3b:9d:a4: 23:39:97:b7:73:c3:bc:fb:4f:9e:e9:37:40:62:4a:8d:02:4c: c9:a0:7a:6b:db:b3:89:de:1a:9c:ec:a6:9a:b5:78:1a:6c:7b: 1a:0f:11:2c:22:34:84:97:95:0f:76:6a:84:dd:68:b6:6e:0f: d3:01:db:b0:3a:8c:f1:6a:c3:c2:17:20:24:26:89:57:bc:31: 35:3a:d2:86:d7:0f:a9:ff:2a:f6:f4:3c:65:15:77:e8:fd:a7: 6f:f6:9c:d1:09:ed:7c:cf:8b:c2:cd:4f:fb:40:eb:8a:43:df: bf:a4:1e:fa:58:c7:67:1a:59:e4:7b:bb:b2:57:0c:39:6b:0a: be:45:f7:5a:4c:ed:88:12:cd:07:b0:da:40:73:3f:d6:1a:da: 48:d5:b4:83:87:89:a3:34:8c:e3:8d:80:7f:d3:db:e6:5f:32: e8:0f:39:3f:f3:90:a5:39:04:f2:8d:dd:42:92:6c:83:54:df: db:29:2c:8d:64:83:ef:09:4a:63:e7:bb:3a:6d:85:d8:0a:66: 91:3c:2b:58:c2:0b:fd:df:92:3c:b7:70:34:df:52:49:97:3d: 50:71:9e:31:0e:fe:b2:b3:6a:96:bb:fb:f4:a6:8f:c1:16:36: 14:17:ba:99 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITLJ9Nu74R8dTUlybqCSM3aCqzbjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjAzMTIxNjA4MzFaFw0yNjA2MTAyMzU5NTla MHoxSTBHBgNVBAUTQDU0MDViN2ZmMzNmNGJhYjg3MjE2ZjIwN2I3ZGMyYzYzNTk3 ODQxZTdjMDQ5YmE4NWNjOGE2OWFlNmY1MGJlN2IxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAK6Hzqt8tWd5M0SeX5IlUb6w/HpWy+F/qKa1EKei33vEDMO5 vArlN47VJjZVHRJTOd4Gg0M8W61qWTfgU2h2TlLxOxlFBwVm0ohm2+tSt69kjfi9 /4yoL/gTsJN2hQqXd20UH3kyWY7rGZwIAHZvWp5PatU2SkUA6pHLh4INRmgLkkSw AMusWCCASuJrJYWaiBIspw+VUoG5UzndKQbP5ZDxyX7Jqcm1GNmM8WHUcOy8dBKD xyYpRwP9fY8wqhUQewrKqUCIEDVY396wLqrEdDQb2+uLNhn86oFaO5JAIugZr5NG SNVGcJ8T7ycOyYf7t54+elB+WmG68WxPukPiQrMCAwEAAaOCArQwggKwMB0GA1Ud DgQWBBSqyVsea+mjawuucvAGOYBUxBOTkTAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvMmZhMzU1NjMtMWNjZi00MzVjLTgzNzgtMzg4MWEyN2Q0MzUzLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACYAH+kgQDANBgkqhkiG9w0BAQsFAAOCAQEAjAHIhq9gwqBV2C3Rj43GO52k IzmXt3PDvPtPnuk3QGJKjQJMyaB6a9uzid4anOymmrV4Gmx7Gg8RLCI0hJeVD3Zq hN1otm4P0wHbsDqM8WrDwhcgJCaJV7wxNTrShtcPqf8q9vQ8ZRV36P2nb/ac0Qnt fM+Lws1P+0DrikPfv6Qe+ljHZxpZ5Hu7slcMOWsKvkX3WkztiBLNB7DaQHM/1hra SNW0g4eJozSM442Af9Pb5l8y6A85P/OQpTkE8o3dQpJsg1Tf2yksjWSD7wlKY+e7 Om2F2ApmkTwrWMIL/d+SPLdwNN9SSZc9UHGeMQ7+srNqlrv79KaPwRY2FBe6mQ== -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:03 2026 by rpki-client