$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac6ce25d-00d0-4203-a23a-8571ea619252.roa File: ac6ce25d-00d0-4203-a23a-8571ea619252.roa (raw, json) Hash identifier: TB+FzkKwEHjIlltbCWMYCxLZo+QRhn2cQQzZ0ELFGU4= Subject key identifier: F8:D4:CF:DA:64:3C:77:43:0D:89:31:95:50:90:E6:D8:3A:1F:68:A5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 49810DA12C08E22F8601FD45B6AAB46A8D452618 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac6ce25d-00d0-4203-a23a-8571ea619252.roa Signing time: Thu 12 Mar 2026 16:11:30 +0000 ROA not before: Thu 12 Mar 2026 16:11:30 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fba:ec00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:81:0d:a1:2c:08:e2:2f:86:01:fd:45:b6:aa:b4:6a:8d:45:26:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:11:30 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=926c811b904f8a9a92730dc246013af8c2c546ae1a903df1be5faf89d8752c27, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:65:d6:e4:6d:29:8e:85:08:92:b2:60:ea: dc:6f:2d:d0:34:28:27:7e:db:e8:74:33:25:bd:0b: cc:01:5f:d1:b4:31:38:e2:7c:0d:1a:4f:3c:69:eb: 83:fe:6f:eb:91:33:49:2c:6b:70:67:01:f1:e5:63: 32:9a:4f:4c:ab:3d:d6:5f:6b:92:8c:27:0d:0e:3d: aa:c0:ce:72:3b:64:cc:40:09:d6:12:45:c8:2d:4f: dd:ba:af:01:71:34:5a:de:f5:1e:14:b5:65:95:b5: 12:af:bc:6a:5f:5c:5f:dd:a7:a6:64:77:26:ee:e7: e0:31:57:da:4e:ca:b1:97:e0:73:50:d0:b7:08:a7: ae:e7:5d:ee:e4:af:9c:12:5d:52:85:a3:20:a1:f7: 27:d3:81:59:b9:6e:c9:bd:4c:0d:32:55:68:c6:3c: e0:a1:44:99:d6:c8:4e:e1:4f:c4:bc:10:10:e3:29: 20:a3:b4:50:05:f1:da:06:35:9d:67:1c:12:af:24: 38:42:dd:a1:66:09:5b:a6:ae:fa:84:f2:e0:80:3e: 89:3a:ac:3d:86:f2:aa:31:df:4e:b0:a1:52:59:5d: 5c:56:b9:3e:13:92:39:74:29:6c:38:d0:75:13:fb: a4:78:72:fb:84:23:a2:2c:af:02:af:64:a3:a5:47: b0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D4:CF:DA:64:3C:77:43:0D:89:31:95:50:90:E6:D8:3A:1F:68:A5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac6ce25d-00d0-4203-a23a-8571ea619252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fba:ec00::/40 Signature Algorithm: sha256WithRSAEncryption 05:18:09:07:a1:46:11:1b:9b:7e:2c:e0:8b:53:22:43:2a:0b: 77:4f:9c:af:aa:40:4d:24:56:06:45:a6:d9:6c:3f:e3:46:43: 0e:5b:ff:02:a8:33:fb:b0:84:c2:5f:bf:2f:ec:e3:6c:61:95: aa:49:69:50:ad:c9:e5:4d:ee:a2:e9:ea:e0:3b:fd:92:92:13: ae:43:8d:38:05:f8:61:57:14:63:b4:e0:c7:af:80:55:d0:9a: 5c:f9:96:26:49:a8:18:c0:49:4f:37:f9:ef:ee:cb:2f:8a:a4: ca:33:32:0e:cf:90:40:13:59:ed:0d:a8:6c:e5:5f:2b:40:ab: 10:e9:c2:7f:ab:af:8f:36:d6:2d:92:e3:4e:5d:68:fb:3b:c3: 33:61:f9:c4:f8:1d:ee:ad:c9:f7:78:78:5a:31:96:07:90:86: e3:c6:89:c5:49:5f:dc:54:4a:cf:03:09:fe:61:a5:dc:8a:b7: e1:f8:9c:5f:76:1c:f6:f1:51:3c:3d:f6:8a:7e:de:db:aa:cf: 1c:2f:68:bd:fd:13:3c:24:18:af:f2:ee:46:b6:fc:a5:01:68: 97:2b:3f:34:56:83:74:25:9e:28:ed:03:e7:3b:a1:4d:c6:42: bf:2e:96:94:6a:cf:ef:1c:b2:2f:4f:f5:1c:7c:94:84:55:b1: 93:54:03:e1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUSYENoSwI4i+GAf1Ftqq0ao1FJhgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYxMTMwWhcNMjYwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MjZjODExYjkwNGY4YTlhOTI3MzBkYzI0NjAxM2FmOGMy YzU0NmFlMWE5MDNkZjFiZTVmYWY4OWQ4NzUyYzI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChdWXW5G0pjoUIkrJg6txvLdA0KCd+2+h0MyW9C8wBX9G0 MTjifA0aTzxp64P+b+uRM0ksa3BnAfHlYzKaT0yrPdZfa5KMJw0OParAznI7ZMxA CdYSRcgtT926rwFxNFre9R4UtWWVtRKvvGpfXF/dp6Zkdybu5+AxV9pOyrGX4HNQ 0LcIp67nXe7kr5wSXVKFoyCh9yfTgVm5bsm9TA0yVWjGPOChRJnWyE7hT8S8EBDj KSCjtFAF8doGNZ1nHBKvJDhC3aFmCVumrvqE8uCAPok6rD2G8qox306woVJZXVxW uT4Tkjl0KWw40HUT+6R4cvuEI6IsrwKvZKOlR7CHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU+NTP2mQ8d0MNiTGVUJDm2DofaKUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FjNmNlMjVkLTAwZDAtNDIwMy1hMjNhLTg1NzFlYTYxOTI1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+67DANBgkqhkiG9w0BAQsFAAOCAQEABRgJB6FGERubfizgi1MiQyoL d0+cr6pATSRWBkWm2Ww/40ZDDlv/Aqgz+7CEwl+/L+zjbGGVqklpUK3J5U3uounq 4Dv9kpITrkONOAX4YVcUY7Tgx6+AVdCaXPmWJkmoGMBJTzf57+7LL4qkyjMyDs+Q QBNZ7Q2obOVfK0CrEOnCf6uvjzbWLZLjTl1o+zvDM2H5xPgd7q3J93h4WjGWB5CG 48aJxUlf3FRKzwMJ/mGl3Iq34ficX3Yc9vFRPD32in7e26rPHC9ovf0TPCQYr/Lu Rrb8pQFolys/NFaDdCWeKO0D5zuhTcZCvy6WlGrP7xyyL0/1HHyUhFWxk1QD4Q== -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:06 2026 by rpki-client