$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d7c3df5-ea22-4796-876a-5f7bb889f262.roa File: 7d7c3df5-ea22-4796-876a-5f7bb889f262.roa (raw, json) Hash identifier: Az/xRkAhYZr00Fa8WR47cqLvvbEwc0VQTk4F33C8ZJ4= Subject key identifier: C8:A5:13:A1:E5:A5:64:49:93:55:A2:5A:87:BC:F6:18:BE:97:67:8B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 04F3D910D70DF9E8C59865254E45B24A8B325976 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d7c3df5-ea22-4796-876a-5f7bb889f262.roa Signing time: Thu 12 Mar 2026 16:09:56 +0000 ROA not before: Thu 12 Mar 2026 16:09:56 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fe9:8090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f3:d9:10:d7:0d:f9:e8:c5:98:65:25:4e:45:b2:4a:8b:32:59:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:09:56 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=d34c83555c107936f6f0899d7208c83ae118ca3b9e218d0a383e67e824a3f562, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:71:ad:20:bd:44:5b:13:64:bf:d3:54:7f:47: a5:c0:ba:6d:45:f3:a9:3c:e5:0f:a9:5b:73:bc:37: 66:70:d5:2f:f4:bc:5e:16:dc:fc:c0:75:04:e5:7d: a3:80:20:02:41:7e:cb:53:dc:1f:7f:89:16:c2:25: f3:5f:96:8c:bd:03:68:d1:59:ce:85:ed:6e:d7:79: 2f:4f:19:1b:1e:91:1e:36:58:42:b3:1c:1a:af:03: b8:7d:2a:0d:53:76:8f:12:23:7e:b2:17:c7:60:e6: 23:12:e1:e4:35:1d:43:f6:72:d3:b4:8a:79:c0:3d: 59:10:e0:0d:66:b9:e6:1e:6c:5e:90:8e:d8:7f:65: d6:50:6a:18:b7:06:2b:b0:37:9e:b7:44:f8:70:00: d9:32:4a:6c:2f:b1:e7:c1:c7:f1:31:54:ec:b1:ff: f2:53:a4:94:b8:8c:3d:44:e0:28:6d:c6:34:74:0e: 1f:6a:50:b7:93:46:db:57:1d:b9:dd:58:8a:ac:28: 20:c9:4f:dc:38:93:75:b9:71:e7:04:42:11:4a:aa: 74:fd:6c:08:2b:29:8d:06:4f:05:6f:33:e0:5a:f6: 1a:75:df:f3:da:0c:7c:96:bc:b2:f8:d1:b9:a4:3f: 06:03:21:b5:30:eb:91:8b:bf:3f:be:dc:98:1e:24: ae:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A5:13:A1:E5:A5:64:49:93:55:A2:5A:87:BC:F6:18:BE:97:67:8B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d7c3df5-ea22-4796-876a-5f7bb889f262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe9:8090::/48 Signature Algorithm: sha256WithRSAEncryption cb:ae:63:b9:da:9a:fb:7e:c0:46:d9:94:5d:1d:c9:91:ab:df: 09:d6:d2:d5:bd:1c:28:4a:3f:18:e7:8b:06:1d:41:69:8e:5a: 58:8a:4d:9a:22:30:04:2b:31:23:57:14:35:39:72:a2:21:b7: 16:22:37:86:31:8b:26:ec:82:da:41:9d:5a:d2:79:81:36:19: 95:e9:40:59:18:35:7a:96:10:a2:5d:1a:0d:03:07:9f:ec:a1: 5f:dc:17:44:f8:4f:57:a4:a7:cf:ad:e7:34:cc:4a:a7:d4:89: 9e:e0:44:eb:63:bd:df:7c:3f:0d:10:15:9e:c4:0e:32:b9:9a: bb:3e:a2:ae:b1:6a:a6:e2:c1:8b:c6:d6:8b:30:e0:ab:4b:c5: f8:04:e3:ce:1e:89:2b:82:2c:e2:1b:9e:07:16:5a:8f:f2:df: 5b:95:f8:36:53:e1:a7:2e:0e:f6:29:f3:31:03:00:fc:43:0b: 6b:20:4e:bd:79:01:8a:e3:87:8c:2d:8a:f4:bd:eb:99:1f:af: 92:32:5f:ce:27:64:f9:8b:04:8f:6f:57:f7:43:98:07:a7:f5: 59:8b:71:72:78:20:71:0d:ad:04:39:e3:14:64:cc:ff:52:72: 7f:51:42:72:45:c1:2f:16:db:21:c0:44:de:06:1d:09:82:09: e5:c3:4d:dd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBPPZENcN+ejFmGUlTkWySosyWXYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYwOTU2WhcNMjYwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzRjODM1NTVjMTA3OTM2ZjZmMDg5OWQ3MjA4YzgzYWUx MThjYTNiOWUyMThkMGEzODNlNjdlODI0YTNmNTYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2ca0gvURbE2S/01R/R6XAum1F86k85Q+pW3O8N2Zw1S/0 vF4W3PzAdQTlfaOAIAJBfstT3B9/iRbCJfNfloy9A2jRWc6F7W7XeS9PGRsekR42 WEKzHBqvA7h9Kg1Tdo8SI36yF8dg5iMS4eQ1HUP2ctO0innAPVkQ4A1mueYebF6Q jth/ZdZQahi3BiuwN563RPhwANkySmwvsefBx/ExVOyx//JTpJS4jD1E4ChtxjR0 Dh9qULeTRttXHbndWIqsKCDJT9w4k3W5cecEQhFKqnT9bAgrKY0GTwVvM+Ba9hp1 3/PaDHyWvLL40bmkPwYDIbUw65GLvz++3JgeJK5/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyKUToeWlZEmTVaJah7z2GL6XZ4swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkN2MzZGY1LWVhMjItNDc5Ni04NzZhLTVmN2JiODg5ZjI2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/pgJAwDQYJKoZIhvcNAQELBQADggEBAMuuY7namvt+wEbZlF0dyZGr 3wnW0tW9HChKPxjniwYdQWmOWliKTZoiMAQrMSNXFDU5cqIhtxYiN4YxiybsgtpB nVrSeYE2GZXpQFkYNXqWEKJdGg0DB5/soV/cF0T4T1ekp8+t5zTMSqfUiZ7gROtj vd98Pw0QFZ7EDjK5mrs+oq6xaqbiwYvG1osw4KtLxfgE484eiSuCLOIbngcWWo/y 31uV+DZT4acuDvYp8zEDAPxDC2sgTr15AYrjh4wtivS965kfr5IyX84nZPmLBI9v V/dDmAen9VmLcXJ4IHENrQQ54xRkzP9Scn9RQnJFwS8W2yHARN4GHQmCCeXDTd0= -----END CERTIFICATE-----Generated at Fri Mar 20 17:04:08 2026 by rpki-client