$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c37cfee-ba64-4640-9fc9-6faaf619b439.roa File: 7c37cfee-ba64-4640-9fc9-6faaf619b439.roa (raw, json) Hash identifier: ZGS8xHXDuavDd/5vPrAG9d1a2G1hgo2sx2tHqEPQ1ks= Subject key identifier: CB:C5:D8:61:45:9B:F9:29:EA:36:3C:A0:52:84:67:97:CE:E5:50:A2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 02E4B15651FDCBB1D2B774F8B4764A37255210AE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c37cfee-ba64-4640-9fc9-6faaf619b439.roa Signing time: Thu 12 Mar 2026 16:11:17 +0000 ROA not before: Thu 12 Mar 2026 16:11:17 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fec:5c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e4:b1:56:51:fd:cb:b1:d2:b7:74:f8:b4:76:4a:37:25:52:10:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:11:17 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=ddd92a54672b27ac752f5f77ca27b0303a42206d58a030fedbfe28569043bc84, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f6:53:ef:cd:48:7e:cb:c3:de:48:47:97:b6: b6:18:0c:36:1b:15:4d:59:cd:ef:6d:fb:a9:68:8a: c6:cc:90:59:4f:b2:72:39:90:a3:40:7e:9e:47:03: 68:36:ef:32:9c:e6:73:c7:66:f3:09:ad:75:61:dc: 22:f3:9a:24:46:b8:d0:f0:99:11:be:e0:c0:0e:67: bc:18:c6:20:d9:c3:13:14:49:6c:2d:5d:f5:63:59: 8c:67:5d:57:00:b4:3f:c7:c0:f0:03:c3:ff:a5:09: c3:40:de:94:28:48:c4:77:da:1b:98:e7:3a:90:b8: 35:b8:28:7a:52:0c:e7:d5:ff:34:ac:96:d8:a8:bb: 41:3a:19:e4:85:01:47:e2:1f:08:dd:a2:7f:40:4d: 2f:5e:64:08:b8:46:38:50:4b:1b:40:a5:4d:52:18: 02:ef:dd:cc:f0:d2:0d:c0:17:64:a7:c4:6a:26:d6: b5:a0:ab:a6:25:03:f1:99:b1:67:2d:ef:f4:d7:23: a8:2a:2b:02:da:d3:5b:3b:de:6d:6a:34:c9:e4:4d: ec:98:8a:70:4b:d7:27:e5:06:29:b9:92:c4:fc:74: a5:86:f9:86:7b:7a:3a:da:7a:59:9e:4c:2f:53:a0: 38:4c:86:ed:87:8b:26:d9:5e:81:dc:87:87:02:d2: 5d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C5:D8:61:45:9B:F9:29:EA:36:3C:A0:52:84:67:97:CE:E5:50:A2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c37cfee-ba64-4640-9fc9-6faaf619b439.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:5c00::/48 Signature Algorithm: sha256WithRSAEncryption 1b:69:c2:9d:1d:f3:82:17:70:98:5f:6a:d6:5b:98:7c:9c:bf: 9a:ff:c2:42:fc:a9:4e:d4:99:02:46:48:13:64:e2:26:30:68: 23:4a:10:35:09:64:0a:4f:ba:15:7c:f2:5e:ab:f2:ae:5a:00: e0:b7:c2:0d:43:77:19:84:3f:82:8c:1f:77:49:6c:0c:d0:fc: 55:c4:0d:ed:44:76:80:97:f1:1d:85:85:b1:e0:0b:ef:d9:d6: 13:9b:37:b4:a2:e0:81:1e:6b:6d:3a:43:8f:08:11:8f:d0:92: 0c:7b:7b:48:dc:20:14:dc:1f:35:08:10:e3:6f:0d:b2:fc:59: 71:ea:87:30:e0:76:e0:65:99:26:d4:c8:d5:68:a2:6d:3c:ab: b5:dd:93:a9:bc:6a:7a:3a:0e:af:0e:ad:8e:cf:6d:ad:c5:15: ad:4b:45:8b:68:35:3e:12:cc:c9:8d:90:71:3d:b3:64:79:70: 10:23:5f:92:bf:2c:aa:74:e6:36:c1:9d:b6:9e:5a:f2:af:69: c4:dc:96:b9:ec:c4:9d:af:26:4f:ce:d8:74:bf:cd:d3:c5:ff: 30:da:bf:54:93:5c:14:c1:4e:76:ab:e6:f3:e2:38:f8:19:ab: 75:fe:cd:4f:5f:12:35:5c:c7:23:7d:77:61:f1:a5:05:9c:5e: c1:37:ac:b2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAuSxVlH9y7HSt3T4tHZKNyVSEK4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYxMTE3WhcNMjYwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGQ5MmE1NDY3MmIyN2FjNzUyZjVmNzdjYTI3YjAzMDNh NDIyMDZkNThhMDMwZmVkYmZlMjg1NjkwNDNiYzg0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDk9lPvzUh+y8PeSEeXtrYYDDYbFU1Zze9t+6loisbMkFlP snI5kKNAfp5HA2g27zKc5nPHZvMJrXVh3CLzmiRGuNDwmRG+4MAOZ7wYxiDZwxMU SWwtXfVjWYxnXVcAtD/HwPADw/+lCcNA3pQoSMR32huY5zqQuDW4KHpSDOfV/zSs ltiou0E6GeSFAUfiHwjdon9ATS9eZAi4RjhQSxtApU1SGALv3czw0g3AF2SnxGom 1rWgq6YlA/GZsWct7/TXI6gqKwLa01s73m1qNMnkTeyYinBL1yflBim5ksT8dKWG +YZ7ejraelmeTC9ToDhMhu2HiybZXoHch4cC0l0HAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUy8XYYUWb+SnqNjygUoRnl87lUKIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdjMzdjZmVlLWJhNjQtNDY0MC05ZmM5LTZmYWFmNjE5YjQzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sXAAwDQYJKoZIhvcNAQELBQADggEBABtpwp0d84IXcJhfatZbmHyc v5r/wkL8qU7UmQJGSBNk4iYwaCNKEDUJZApPuhV88l6r8q5aAOC3wg1DdxmEP4KM H3dJbAzQ/FXEDe1EdoCX8R2FhbHgC+/Z1hObN7Si4IEea206Q48IEY/Qkgx7e0jc IBTcHzUIEONvDbL8WXHqhzDgduBlmSbUyNVoom08q7Xdk6m8ano6Dq8OrY7Pba3F Fa1LRYtoNT4SzMmNkHE9s2R5cBAjX5K/LKp05jbBnbaeWvKvacTclrnsxJ2vJk/O 2HS/zdPF/zDav1STXBTBTnar5vPiOPgZq3X+zU9fEjVcxyN9d2HxpQWcXsE3rLI= -----END CERTIFICATE-----Generated at Fri Mar 20 17:04:08 2026 by rpki-client