$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1d9884a-839e-4fd0-8d88-1ce62a80b2e6.roa File: b1d9884a-839e-4fd0-8d88-1ce62a80b2e6.roa (raw, json) Hash identifier: 01ETOJpPbzTrNmr98UzHj1MlO+ZMNc2JtLtzYk9FRLQ= Subject key identifier: F4:9C:60:2F:B2:13:1A:EF:BA:0C:10:8F:5E:DB:7A:04:15:1E:D9:D8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B9DDF077653F53E78D03181AE5867AC8BBAC818 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1d9884a-839e-4fd0-8d88-1ce62a80b2e6.roa Signing time: Thu 12 Mar 2026 16:09:52 +0000 ROA not before: Thu 12 Mar 2026 16:09:52 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fe9:8020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9d:df:07:76:53:f5:3e:78:d0:31:81:ae:58:67:ac:8b:ba:c8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:09:52 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=716928fef165d169aae0a56e65bee26d33edcff7651e21ea2283b2519a6c269b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:84:34:25:3f:39:79:5a:41:f5:c9:51:c3:35: 43:de:68:72:4e:4f:69:96:14:d9:5f:96:5c:52:e0: a0:dc:f9:ce:e4:2c:64:83:90:51:27:27:e7:85:ce: 37:99:95:54:18:20:ed:49:db:af:47:bf:c7:66:eb: 9a:6e:79:d5:9a:de:c5:03:9a:df:51:c0:51:c8:97: 2e:bb:54:3e:5d:d9:f6:a5:31:a2:2a:42:b5:c0:9c: cd:06:fd:39:34:c5:67:3f:b3:96:f7:bd:05:ab:57: 90:a7:f5:f2:de:07:53:21:58:73:0c:0e:db:30:ca: 1b:f8:9d:f5:33:3e:35:18:06:fa:c2:26:b4:c6:24: 3b:23:71:93:bb:fc:85:05:60:a6:c3:7e:2a:61:a0: f8:77:25:b0:ea:27:ec:96:59:e1:3a:81:c4:57:bd: 3a:aa:0e:42:ae:20:3a:3b:09:d7:d4:07:fa:5e:fb: ff:6d:26:21:0f:9c:b0:b1:f6:b2:b8:99:90:36:d2: 49:80:26:d9:fe:fe:0c:aa:6d:c4:17:7b:c3:6d:2a: ba:7c:83:84:16:c0:9e:04:26:da:55:79:2e:0a:bd: 22:d4:c3:a2:ed:ed:06:75:fa:11:5d:8e:df:6c:3a: f5:af:fb:25:96:92:89:8f:38:8c:23:46:16:07:98: da:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9C:60:2F:B2:13:1A:EF:BA:0C:10:8F:5E:DB:7A:04:15:1E:D9:D8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1d9884a-839e-4fd0-8d88-1ce62a80b2e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe9:8020::/48 Signature Algorithm: sha256WithRSAEncryption bd:dc:88:3f:dc:a7:81:40:f3:6d:8b:eb:fa:79:87:c3:54:4e: 5f:70:54:26:09:5a:f5:9b:0a:42:26:97:f0:2b:3d:43:72:7b: 31:7f:84:45:07:63:d8:ed:df:4a:96:b8:9b:c3:f4:f5:0a:ee: 9f:fe:d7:c8:a2:b8:0f:67:01:07:f3:15:1e:86:0b:02:6f:31: a4:ed:cc:21:8b:c2:7b:a2:8d:9f:e0:49:f0:8e:f1:15:ca:bd: 29:38:d9:4c:44:ad:c9:11:05:a1:5b:95:ae:91:46:5e:af:d1: 49:37:33:5f:64:d4:74:ee:14:91:0b:da:e0:c9:b2:da:71:f6: 5c:8c:e9:b8:17:b0:f6:6c:17:ca:00:97:e4:61:45:91:e9:d1: 68:69:bc:1e:74:43:d4:fb:e3:76:c9:8c:61:d9:74:8b:b0:20: bc:63:f3:2c:3a:75:5a:76:01:1c:fb:de:b7:9b:1a:d6:17:87: ec:03:ca:37:d9:5f:e5:cc:15:6f:98:d3:40:96:3a:fe:c3:3f: 45:6d:a0:b5:ac:17:0b:e8:3f:07:ea:0f:7a:58:5b:2f:17:94: 69:52:2b:45:de:1a:b0:80:2d:f6:99:93:7e:41:e7:76:65:fd: 5d:30:c2:4e:42:2b:d2:8a:a9:91:35:1c:db:ee:af:79:41:d0: 33:2a:72:5e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUG53fB3ZT9T540DGBrlhnrIu6yBgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYwOTUyWhcNMjYwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTY5MjhmZWYxNjVkMTY5YWFlMGE1NmU2NWJlZTI2ZDMz ZWRjZmY3NjUxZTIxZWEyMjgzYjI1MTlhNmMyNjliMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfhDQlPzl5WkH1yVHDNUPeaHJOT2mWFNlfllxS4KDc+c7k LGSDkFEnJ+eFzjeZlVQYIO1J269Hv8dm65puedWa3sUDmt9RwFHIly67VD5d2fal MaIqQrXAnM0G/Tk0xWc/s5b3vQWrV5Cn9fLeB1MhWHMMDtswyhv4nfUzPjUYBvrC JrTGJDsjcZO7/IUFYKbDfiphoPh3JbDqJ+yWWeE6gcRXvTqqDkKuIDo7CdfUB/pe +/9tJiEPnLCx9rK4mZA20kmAJtn+/gyqbcQXe8NtKrp8g4QWwJ4EJtpVeS4KvSLU w6Lt7QZ1+hFdjt9sOvWv+yWWkomPOIwjRhYHmNrBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU9JxgL7ITGu+6DBCPXtt6BBUe2dgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IxZDk4ODRhLTgzOWUtNGZkMC04ZDg4LTFjZTYyYTgwYjJlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/pgCAwDQYJKoZIhvcNAQELBQADggEBAL3ciD/cp4FA822L6/p5h8NU Tl9wVCYJWvWbCkIml/ArPUNyezF/hEUHY9jt30qWuJvD9PUK7p/+18iiuA9nAQfz FR6GCwJvMaTtzCGLwnuijZ/gSfCO8RXKvSk42UxErckRBaFbla6RRl6v0Uk3M19k 1HTuFJEL2uDJstpx9lyM6bgXsPZsF8oAl+RhRZHp0WhpvB50Q9T743bJjGHZdIuw ILxj8yw6dVp2ARz73rebGtYXh+wDyjfZX+XMFW+Y00CWOv7DP0VtoLWsFwvoPwfq D3pYWy8XlGlSK0XeGrCALfaZk35B53Zl/V0wwk5CK9KKqZE1HNvur3lB0DMqcl4= -----END CERTIFICATE-----Generated at Fri Mar 20 17:04:08 2026 by rpki-client