$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd60be6-3a38-465c-9ba3-85685b519a11.roa File: acd60be6-3a38-465c-9ba3-85685b519a11.roa (raw, json) Hash identifier: LeL0q3jh4Ji8lnR8+OjVefslV0wuEyQPVPUWtDFfbIE= Subject key identifier: AE:CB:30:7D:26:9C:E9:24:08:40:92:DB:96:12:68:A6:2C:13:30:F7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2C89DD9CF5876FC25FACC1582ED55981DC5E9553 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd60be6-3a38-465c-9ba3-85685b519a11.roa Signing time: Thu 12 Mar 2026 16:09:51 +0000 ROA not before: Thu 12 Mar 2026 16:09:51 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe9:74c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:89:dd:9c:f5:87:6f:c2:5f:ac:c1:58:2e:d5:59:81:dc:5e:95:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:09:51 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=d55c707859ecdf73845371c672906c4507608509b909852520a355abe6851343, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2b:a9:99:8a:98:3c:2f:97:53:1d:1b:d9:82: 79:61:b7:c1:65:c8:39:b1:9b:5e:52:9d:37:99:f1: 6d:c0:af:a1:fa:b3:ee:5c:a9:ff:e6:6e:b0:69:a2: 63:41:25:e0:50:92:7b:5d:b7:a1:bb:ad:7b:e5:6a: 7d:4d:e0:22:16:0b:ce:71:ee:3e:12:72:9c:8e:7f: a4:78:a0:a1:12:0e:09:34:71:f5:20:48:07:6e:97: a6:42:3e:d1:d1:6d:41:fe:69:08:c5:4c:e7:c5:49: 51:1f:b0:fb:85:9e:d8:96:80:e9:7f:69:97:31:3d: f0:1d:e9:d8:0f:d1:01:0d:70:f2:19:cf:01:97:e1: c9:e6:bb:34:78:7d:70:19:d1:9b:85:02:aa:b1:19: 8d:f9:66:c1:58:a4:d6:7f:76:24:31:17:3b:f9:9a: e6:61:e8:8a:99:9e:15:1b:3b:17:1c:d8:f4:14:e7: 2d:6e:26:61:f9:ec:df:39:be:50:b8:2a:86:bc:cc: ce:d9:b6:69:c6:85:6b:c1:78:01:3b:86:5b:7b:58: df:1a:b1:06:d1:ae:ae:ab:63:ba:73:69:6b:f5:3e: b4:ac:b3:cb:cc:5a:bc:08:63:93:25:5c:5f:92:ce: dc:ef:1d:b1:95:96:a2:1a:61:5b:2b:c3:da:b8:13: 6c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CB:30:7D:26:9C:E9:24:08:40:92:DB:96:12:68:A6:2C:13:30:F7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd60be6-3a38-465c-9ba3-85685b519a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe9:74c0::/48 Signature Algorithm: sha256WithRSAEncryption 88:c2:ec:fd:65:1f:b8:e0:8b:9d:06:ca:a7:bc:26:ca:25:ef: 8e:6d:53:d4:7c:25:57:70:5c:bb:6c:50:ea:67:4c:fe:96:b3: 60:fd:dd:50:e2:e0:78:80:ad:ac:42:21:e3:a7:0e:42:8f:4e: d3:5c:e7:59:98:25:b3:06:f6:ed:78:34:cd:f2:11:04:79:a0: bc:9d:71:1b:e2:38:8d:17:75:fa:1f:bb:d8:95:63:af:1f:53: 6b:64:45:6b:3c:5c:cd:a6:68:fd:6b:e3:c6:72:6f:ab:8a:75: 51:6b:be:2e:56:e6:ce:41:35:f3:bc:7d:21:e4:fa:43:c9:b6: e2:b9:25:5f:4c:bc:ef:53:38:8e:18:0b:18:22:84:f4:cf:d0: 98:18:9f:c0:f6:05:31:51:80:78:0c:47:d1:2d:59:dd:93:9a: 8e:e9:39:77:64:aa:bf:7d:88:cd:72:12:ba:3f:28:6e:da:f7: 36:4b:19:77:f0:e7:d7:bc:8a:97:1e:70:06:c4:a6:89:e9:10: 2a:c6:f3:69:9b:85:9d:4f:e4:6c:bf:68:85:ea:b0:12:0d:6a: e3:59:e8:e3:88:cd:76:53:03:7f:4f:80:87:b5:95:91:65:42: b6:f6:e3:3d:3a:2f:51:84:41:33:1c:63:6e:ed:6a:7e:86:1e: 01:16:ae:f2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULIndnPWHb8JfrMFYLtVZgdxelVMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYwOTUxWhcNMjYwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTVjNzA3ODU5ZWNkZjczODQ1MzcxYzY3MjkwNmM0NTA3 NjA4NTA5YjkwOTg1MjUyMGEzNTVhYmU2ODUxMzQzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfK6mZipg8L5dTHRvZgnlht8FlyDmxm15SnTeZ8W3Ar6H6 s+5cqf/mbrBpomNBJeBQkntdt6G7rXvlan1N4CIWC85x7j4ScpyOf6R4oKESDgk0 cfUgSAdul6ZCPtHRbUH+aQjFTOfFSVEfsPuFntiWgOl/aZcxPfAd6dgP0QENcPIZ zwGX4cnmuzR4fXAZ0ZuFAqqxGY35ZsFYpNZ/diQxFzv5muZh6IqZnhUbOxcc2PQU 5y1uJmH57N85vlC4Koa8zM7ZtmnGhWvBeAE7hlt7WN8asQbRrq6rY7pzaWv1PrSs s8vMWrwIY5MlXF+SztzvHbGVlqIaYVsrw9q4E2xDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrsswfSac6SQIQJLblhJopiwTMPcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FjZDYwYmU2LTNhMzgtNDY1Yy05YmEzLTg1Njg1YjUxOWExMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/pdMAwDQYJKoZIhvcNAQELBQADggEBAIjC7P1lH7jgi50Gyqe8Jsol 745tU9R8JVdwXLtsUOpnTP6Ws2D93VDi4HiAraxCIeOnDkKPTtNc51mYJbMG9u14 NM3yEQR5oLydcRviOI0Xdfofu9iVY68fU2tkRWs8XM2maP1r48Zyb6uKdVFrvi5W 5s5BNfO8fSHk+kPJtuK5JV9MvO9TOI4YCxgihPTP0JgYn8D2BTFRgHgMR9EtWd2T mo7pOXdkqr99iM1yEro/KG7a9zZLGXfw59e8ipcecAbEponpECrG82mbhZ1P5Gy/ aIXqsBINauNZ6OOIzXZTA39PgIe1lZFlQrb24z06L1GEQTMcY27tan6GHgEWrvI= -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:07 2026 by rpki-client