$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9feffd0d-e576-4cbf-b7df-313288e2c8e2.roa File: 9feffd0d-e576-4cbf-b7df-313288e2c8e2.roa (raw, json) Hash identifier: 23EcQHDWwV+QHF92DN2d0T1Ttd73l4l+kM+ULti8sP4= Subject key identifier: EB:2F:0A:7E:ED:2D:8A:1B:6A:A2:B5:81:F7:84:E1:1F:C5:D6:C3:8E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D810B950A1C02F19CE85B4DE2FD9F6C07457909 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9feffd0d-e576-4cbf-b7df-313288e2c8e2.roa Signing time: Thu 12 Mar 2026 16:06:47 +0000 ROA not before: Thu 12 Mar 2026 16:06:47 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fba:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:81:0b:95:0a:1c:02:f1:9c:e8:5b:4d:e2:fd:9f:6c:07:45:79:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:06:47 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=dbd7b18712de909e401ef8c55a97abcfb2d038af26f92905d7bb7c353a17bd9f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1c:22:21:8b:d4:d9:b4:8d:77:f6:64:f2:f8: 1d:66:e4:ef:a5:c8:a8:1c:e2:53:7b:b1:8d:b7:78: 68:58:9e:49:05:bd:56:f9:f1:93:5a:ae:a5:2c:4d: d4:e1:f4:7d:0d:cc:ae:48:65:fc:d4:e6:dd:f5:9f: 33:74:d6:c1:50:77:26:e2:b7:38:9e:d4:92:b2:d2: 64:b8:c8:1f:0f:9f:b2:d1:7a:6b:da:b3:8f:b8:89: 55:ce:59:0e:8b:85:2a:dc:f4:16:9c:c9:b2:59:5f: 41:6e:f1:c6:8c:9e:c1:d1:e9:0f:c3:16:20:93:0b: d5:59:7b:e1:73:b5:d4:f8:72:13:bd:ad:4c:d4:6c: 8a:de:07:c4:f8:13:98:83:9e:fb:f1:8d:c7:22:64: 2e:ed:a6:d4:3d:b5:ac:e2:97:a1:58:48:f0:e4:11: b9:22:ea:27:9c:dc:c4:49:b5:28:e2:67:01:12:cd: 25:54:84:47:e0:38:b7:bd:8b:ed:ea:28:06:1c:07: 2b:7e:32:72:1b:68:75:30:3a:8d:db:0b:2b:d9:9e: f9:df:92:fc:da:fc:fb:89:66:f6:19:15:5e:a4:4a: 6d:76:21:2b:09:99:f5:50:9d:96:51:d5:c5:3e:f4: 30:4f:61:b5:ae:41:c3:ef:b7:61:10:8a:bf:d9:9b: 8c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2F:0A:7E:ED:2D:8A:1B:6A:A2:B5:81:F7:84:E1:1F:C5:D6:C3:8E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9feffd0d-e576-4cbf-b7df-313288e2c8e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fba:4080::/48 Signature Algorithm: sha256WithRSAEncryption cf:ac:34:42:a2:1c:d7:80:e1:1c:45:a5:29:ba:11:56:5c:ce: 31:61:a2:eb:97:a7:96:15:81:1c:62:2b:6d:35:6e:fa:22:83: 8d:16:3d:05:77:3d:cc:6f:9b:03:53:ac:9a:a6:0f:47:53:fe: 0d:05:89:10:f1:8e:13:7b:66:7c:9a:16:31:af:28:16:dc:9e: 7b:b7:6f:32:14:9c:a8:f8:a5:50:45:ae:fc:ec:72:2c:31:20: 8c:65:90:8e:f0:20:52:a1:23:d8:27:e6:c2:87:09:c0:5e:49: da:2e:81:c8:96:9a:e2:30:41:e4:ca:74:1c:23:f1:45:a5:a0: e1:af:c0:47:9f:dd:3f:db:36:99:b7:c8:a1:0d:e5:2b:3d:f3: 98:eb:ef:6a:d2:fa:fe:6a:b2:1b:ef:01:af:05:2f:6b:4b:f5: de:9e:d9:e6:42:80:f3:d3:f1:2a:28:ab:a3:4d:6f:6c:f7:19: 2a:b5:85:d5:47:7c:f9:77:f9:11:a6:0f:fe:c2:33:74:64:22: 83:3b:9a:26:fa:30:77:97:e0:bd:81:49:37:07:f7:93:73:87: 87:0c:78:de:f6:1b:ac:cf:02:37:b9:bb:24:de:82:0f:ef:e4: 70:f7:95:59:33:3e:c6:a5:a5:c0:60:1f:0c:33:1f:37:06:0f: 2f:b2:ed:79 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPYELlQocAvGc6FtN4v2fbAdFeQkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYwNjQ3WhcNMjYwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYmQ3YjE4NzEyZGU5MDllNDAxZWY4YzU1YTk3YWJjZmIy ZDAzOGFmMjZmOTI5MDVkN2JiN2MzNTNhMTdiZDlmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsHCIhi9TZtI139mTy+B1m5O+lyKgc4lN7sY23eGhYnkkF vVb58ZNarqUsTdTh9H0NzK5IZfzU5t31nzN01sFQdybitzie1JKy0mS4yB8Pn7LR emvas4+4iVXOWQ6LhSrc9BacybJZX0Fu8caMnsHR6Q/DFiCTC9VZe+FztdT4chO9 rUzUbIreB8T4E5iDnvvxjcciZC7tptQ9tazil6FYSPDkEbki6iec3MRJtSjiZwES zSVUhEfgOLe9i+3qKAYcByt+MnIbaHUwOo3bCyvZnvnfkvza/PuJZvYZFV6kSm12 ISsJmfVQnZZR1cU+9DBPYbWuQcPvt2EQir/Zm4z7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6y8Kfu0tihtqorWB94ThH8XWw44wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlmZWZmZDBkLWU1NzYtNGNiZi1iN2RmLTMxMzI4OGUyYzhlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB+6QIAwDQYJKoZIhvcNAQELBQADggEBAM+sNEKiHNeA4RxFpSm6EVZc zjFhouuXp5YVgRxiK201bvoig40WPQV3PcxvmwNTrJqmD0dT/g0FiRDxjhN7Znya FjGvKBbcnnu3bzIUnKj4pVBFrvzsciwxIIxlkI7wIFKhI9gn5sKHCcBeSdougciW muIwQeTKdBwj8UWloOGvwEef3T/bNpm3yKEN5Ss985jr72rS+v5qshvvAa8FL2tL 9d6e2eZCgPPT8Sooq6NNb2z3GSq1hdVHfPl3+RGmD/7CM3RkIoM7mib6MHeX4L2B STcH95Nzh4cMeN72G6zPAje5uyTegg/v5HD3lVkzPsalpcBgHwwzHzcGDy+y7Xk= -----END CERTIFICATE-----Generated at Thu Mar 19 12:28:07 2026 by rpki-client