$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92431c82-e9e8-4864-9d9e-0753a13505e5.roa File: 92431c82-e9e8-4864-9d9e-0753a13505e5.roa (raw, json) Hash identifier: 9mE/7UHxQ9939v21kHgdjqrpnFHNCadm3fQiePQe4yw= Subject key identifier: 04:81:3E:BD:46:55:46:91:4E:97:8B:37:C5:0C:77:06:25:6D:D8:A8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 22ED04393CF4C9D07D4413CCDC26D8EB2B14EEEB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92431c82-e9e8-4864-9d9e-0753a13505e5.roa Signing time: Thu 12 Mar 2026 16:11:26 +0000 ROA not before: Thu 12 Mar 2026 16:11:26 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fba:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ed:04:39:3c:f4:c9:d0:7d:44:13:cc:dc:26:d8:eb:2b:14:ee:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:11:26 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=7b8845e640d3503a53d40e214e9b251b6a49caaf52ab0cea737215809bab48bf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:91:46:a4:1f:fd:2f:64:e1:af:f7:b8:db:26: 93:6e:8d:c1:6d:f8:0d:30:82:f8:48:f2:96:a4:23: 79:ab:c1:b5:dd:3f:38:51:7a:db:2d:94:98:72:26: 6f:45:53:c2:c1:ee:5d:c1:a1:5b:9b:d1:9a:33:41: 6f:f6:58:00:c0:3b:d1:f9:b5:67:bf:7f:13:90:4c: 02:b1:32:59:34:bf:e1:cc:04:f2:ea:f9:70:e3:45: f4:84:00:90:0b:4a:46:48:56:ca:9a:66:e9:30:f9: d3:5b:5a:84:16:4c:7d:7e:1d:90:49:4d:7c:fa:5a: 9f:cf:53:fc:56:2b:49:5b:fb:40:5c:cb:7d:ce:60: b5:49:2d:fc:7d:d0:e4:e7:1a:14:8f:0d:4d:54:51: d9:88:0c:d4:27:c4:c5:c9:61:dd:64:d3:a1:24:8e: 23:66:3b:30:00:92:8c:ac:90:00:c7:47:65:19:ab: 5f:7b:e2:6b:7a:6b:9c:06:21:5d:6c:3e:83:a2:db: e8:1c:4f:51:37:57:66:3b:f0:3a:50:ea:bb:e8:39: 39:0f:5e:0d:19:a2:3b:ed:43:fc:cb:86:21:d6:8b: da:8f:5e:8f:77:28:e1:12:4f:a6:13:25:e8:f2:f6: 30:be:5f:88:f3:08:86:be:bd:90:ed:49:46:2c:9e: d0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:81:3E:BD:46:55:46:91:4E:97:8B:37:C5:0C:77:06:25:6D:D8:A8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92431c82-e9e8-4864-9d9e-0753a13505e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fba:2000::/40 Signature Algorithm: sha256WithRSAEncryption 36:cd:5f:c6:a6:86:96:74:0f:9d:19:b3:4a:a4:6a:03:c6:7b: b6:d1:20:58:5b:78:f6:c6:73:0e:01:f9:10:db:58:24:77:01: b6:62:a1:6b:79:84:65:30:47:9d:2f:94:53:e8:34:ff:02:fd: bf:f6:e4:6c:aa:04:db:43:0a:9d:cc:ec:9c:31:01:d5:3e:89: 62:60:d6:11:0a:c3:d5:07:b4:11:f8:e8:71:4e:b4:87:ba:e6: fd:3a:d4:38:13:6a:4c:ac:da:54:16:27:d4:97:e7:76:b4:ff: 2e:21:c7:b6:97:af:8a:44:e0:bc:cf:20:f7:93:73:ef:58:8d: fb:71:c2:7c:d6:6b:05:78:46:46:50:a3:15:70:c5:a0:50:81: 6c:85:67:80:bd:2b:b3:c8:37:29:db:c8:58:c6:de:43:b1:6c: e2:ec:e6:7d:33:33:a5:12:39:cd:95:92:fd:26:e1:f9:46:2d: ad:7b:2a:68:6d:ff:8a:eb:9b:06:06:da:c4:9f:ba:40:74:c9: 5e:22:24:fb:80:18:41:87:ff:c9:e7:7e:ea:f8:98:76:8a:d7: fd:23:87:b3:27:bb:3c:19:a0:32:53:c4:82:9d:97:48:c8:39: 6b:b6:31:c5:3f:00:01:c8:6c:11:ba:91:92:1c:ba:96:a8:96: 76:94:48:f8 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUIu0EOTz0ydB9RBPM3CbY6ysU7uswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYxMTI2WhcNMjYwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3Yjg4NDVlNjQwZDM1MDNhNTNkNDBlMjE0ZTliMjUxYjZh NDljYWFmNTJhYjBjZWE3MzcyMTU4MDliYWI0OGJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmkUakH/0vZOGv97jbJpNujcFt+A0wgvhI8pakI3mrwbXd PzhRetstlJhyJm9FU8LB7l3BoVub0ZozQW/2WADAO9H5tWe/fxOQTAKxMlk0v+HM BPLq+XDjRfSEAJALSkZIVsqaZukw+dNbWoQWTH1+HZBJTXz6Wp/PU/xWK0lb+0Bc y33OYLVJLfx90OTnGhSPDU1UUdmIDNQnxMXJYd1k06EkjiNmOzAAkoyskADHR2UZ q1974mt6a5wGIV1sPoOi2+gcT1E3V2Y78DpQ6rvoOTkPXg0ZojvtQ/zLhiHWi9qP Xo93KOEST6YTJejy9jC+X4jzCIa+vZDtSUYsntDhAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUBIE+vUZVRpFOl4s3xQx3BiVt2KgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkyNDMxYzgyLWU5ZTgtNDg2NC05ZDllLTA3NTNhMTM1MDVlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+6IDANBgkqhkiG9w0BAQsFAAOCAQEANs1fxqaGlnQPnRmzSqRqA8Z7 ttEgWFt49sZzDgH5ENtYJHcBtmKha3mEZTBHnS+UU+g0/wL9v/bkbKoE20MKnczs nDEB1T6JYmDWEQrD1Qe0EfjocU60h7rm/TrUOBNqTKzaVBYn1JfndrT/LiHHtpev ikTgvM8g95Nz71iN+3HCfNZrBXhGRlCjFXDFoFCBbIVngL0rs8g3KdvIWMbeQ7Fs 4uzmfTMzpRI5zZWS/Sbh+UYtrXsqaG3/iuubBgbaxJ+6QHTJXiIk+4AYQYf/yed+ 6viYdorX/SOHsye7PBmgMlPEgp2XSMg5a7YxxT8AAchsEbqRkhy6lqiWdpRI+A== -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:14 2026 by rpki-client