$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9976213-3419-4bc1-b9d7-c7794ec649fb.roa File: b9976213-3419-4bc1-b9d7-c7794ec649fb.roa (raw, json) Hash identifier: dbplC9B6c+lqmjxG0aiQDql8p3KjYrewTLMwD25uQiI= Subject key identifier: A8:ED:FF:83:8D:78:C7:E6:AD:B2:05:91:9D:39:3C:B2:DE:E4:B1:59 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 42CE21FD80C86D913D25A9A6249520B44B712F89 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9976213-3419-4bc1-b9d7-c7794ec649fb.roa Signing time: Thu 12 Mar 2026 16:10:01 +0000 ROA not before: Thu 12 Mar 2026 16:10:01 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe9:e040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ce:21:fd:80:c8:6d:91:3d:25:a9:a6:24:95:20:b4:4b:71:2f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:10:01 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=d16b53d4ba8860535a20ec4439650f5b876b490952611bb3ed05752100f30467, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:87:63:0a:4c:67:64:c6:02:eb:20:a2:24:48: 53:cd:e1:58:57:8a:20:56:83:ba:2a:b2:39:5e:b4: 7e:a3:24:89:95:73:6a:f7:2c:87:de:d1:8c:fd:84: 79:30:47:7e:64:45:0e:d5:24:36:19:74:17:ca:03: 9a:9d:1b:5e:f5:2b:91:c2:54:a5:23:12:15:bc:6d: d0:b9:89:7d:40:e5:4f:da:e8:38:e9:71:43:48:88: eb:76:8b:39:71:31:cc:82:45:b0:b3:0c:67:9a:d8: ad:64:b2:67:79:1d:56:9b:6b:4a:a3:ea:e2:50:c7: 8a:3f:44:10:b1:87:95:e2:af:9b:78:41:1f:5a:12: 07:45:d6:de:ac:f6:ee:74:8b:22:84:14:e0:df:01: 11:57:a2:f0:10:ca:14:44:1b:4c:cc:3f:14:8d:43: 8e:f9:9b:94:82:c0:d5:ce:c6:b7:66:20:e9:da:c3: fc:93:be:a2:a3:36:e7:b4:7b:fb:23:61:fa:2e:e9: 99:56:49:3a:42:02:32:69:60:48:f6:bb:34:2f:57: 7c:92:04:a6:42:c5:c5:78:e4:2a:96:bc:b8:13:12: 74:1e:bb:70:ee:a1:c2:5d:af:a1:0f:1f:fb:03:6c: 15:ba:bf:8b:82:93:50:f7:c2:62:14:d1:57:14:5a: 53:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:ED:FF:83:8D:78:C7:E6:AD:B2:05:91:9D:39:3C:B2:DE:E4:B1:59 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9976213-3419-4bc1-b9d7-c7794ec649fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe9:e040::/48 Signature Algorithm: sha256WithRSAEncryption 08:58:08:8c:65:b4:a5:5a:98:84:36:43:6d:91:0a:ed:72:85: 7a:79:16:c9:d2:61:76:f5:1e:7b:90:cf:e9:ba:50:26:ea:60: a3:3c:9a:26:92:0f:ae:ff:3b:81:ca:3e:e9:28:4c:44:73:a2: 62:ab:0c:36:04:06:26:cc:ca:60:a5:a1:12:9e:53:cb:fc:2a: f9:6a:ed:41:89:c9:44:65:7e:e1:ed:55:84:29:dd:da:c3:d8: 28:20:51:98:d6:75:3c:0e:44:71:bc:8c:a3:33:97:9a:c7:84: f0:70:be:2d:d6:8b:5c:4c:cf:25:4d:1f:bb:3f:ad:3a:95:d8: 77:9d:06:05:bf:8b:b3:79:7e:2c:9f:64:7d:be:73:a0:cb:a1: 36:2f:5a:6c:20:2e:34:55:92:cf:f5:77:49:20:91:ee:af:b8: 48:a8:54:3c:50:01:5d:a2:f2:f6:17:4d:67:b5:d5:d4:0c:46: a4:26:33:64:e0:31:a6:d4:3f:8c:dd:b0:63:ea:fd:d5:5e:e3: 0a:6b:23:e7:dc:7c:5d:92:24:6f:90:33:f4:af:ff:b9:2f:1c: 04:17:25:9d:24:c2:f9:73:43:57:8e:14:a9:3a:4d:33:aa:e4: df:6e:8c:2c:8c:a3:c9:6e:5d:7b:87:00:b4:fd:9e:ef:d7:e7: ce:cd:52:87 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQs4h/YDIbZE9JammJJUgtEtxL4kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYxMDAxWhcNMjYwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTZiNTNkNGJhODg2MDUzNWEyMGVjNDQzOTY1MGY1Yjg3 NmI0OTA5NTI2MTFiYjNlZDA1NzUyMTAwZjMwNDY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9h2MKTGdkxgLrIKIkSFPN4VhXiiBWg7oqsjletH6jJImV c2r3LIfe0Yz9hHkwR35kRQ7VJDYZdBfKA5qdG171K5HCVKUjEhW8bdC5iX1A5U/a 6DjpcUNIiOt2izlxMcyCRbCzDGea2K1ksmd5HVaba0qj6uJQx4o/RBCxh5Xir5t4 QR9aEgdF1t6s9u50iyKEFODfARFXovAQyhREG0zMPxSNQ475m5SCwNXOxrdmIOna w/yTvqKjNue0e/sjYfou6ZlWSTpCAjJpYEj2uzQvV3ySBKZCxcV45CqWvLgTEnQe u3DuocJdr6EPH/sDbBW6v4uCk1D3wmIU0VcUWlNtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqO3/g414x+atsgWRnTk8st7ksVkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I5OTc2MjEzLTM0MTktNGJjMS1iOWQ3LWM3Nzk0ZWM2NDlmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/p4EAwDQYJKoZIhvcNAQELBQADggEBAAhYCIxltKVamIQ2Q22RCu1y hXp5FsnSYXb1HnuQz+m6UCbqYKM8miaSD67/O4HKPukoTERzomKrDDYEBibMymCl oRKeU8v8Kvlq7UGJyURlfuHtVYQp3drD2CggUZjWdTwORHG8jKMzl5rHhPBwvi3W i1xMzyVNH7s/rTqV2HedBgW/i7N5fiyfZH2+c6DLoTYvWmwgLjRVks/1d0kgke6v uEioVDxQAV2i8vYXTWe11dQMRqQmM2TgMabUP4zdsGPq/dVe4wprI+fcfF2SJG+Q M/Sv/7kvHAQXJZ0kwvlzQ1eOFKk6TTOq5N9ujCyMo8luXXuHALT9nu/X587NUoc= -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:11 2026 by rpki-client