$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2669e9f-7f52-4b0f-809f-1ffb924d6c37.roa File: c2669e9f-7f52-4b0f-809f-1ffb924d6c37.roa (raw, json) Hash identifier: jrYcnYxGHZb+B5UxeWjlVcSg1kzyfY+dM9CGkg4dbZc= Subject key identifier: 78:63:F5:00:85:6E:D1:12:BA:0B:78:F9:7F:C8:D5:B4:B1:3D:6F:FD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 446D9CAEB19C803A94B41B42EB93B466E05679A3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2669e9f-7f52-4b0f-809f-1ffb924d6c37.roa Signing time: Thu 12 Mar 2026 16:06:46 +0000 ROA not before: Thu 12 Mar 2026 16:06:46 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fba:34c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:6d:9c:ae:b1:9c:80:3a:94:b4:1b:42:eb:93:b4:66:e0:56:79:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:06:46 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=4372ac92f97009f9eb092026ef68381945eccdf4fa5ba528bd63dd365df7bd58, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:40:c5:4a:b0:bc:cd:8c:47:25:c7:87:59:8e: a5:34:58:7c:d5:77:7b:fb:4f:8d:cd:7a:c5:4b:08: 44:8e:92:9f:fb:25:e2:3a:44:31:d5:2a:55:f7:91: 00:ef:e7:59:50:9c:fc:ff:71:4c:ed:5f:64:60:68: 4d:0b:53:70:13:81:59:29:00:0a:6b:f1:cf:ad:b4: 5a:39:a8:ab:f5:f4:f3:ee:c2:c2:ee:0d:0d:d4:ba: 08:06:7e:4c:47:cd:54:0b:ef:86:e4:a7:14:f3:15: 05:fe:75:7d:c4:e7:cf:7a:30:77:ef:c9:36:75:f8: c9:1b:18:e3:73:85:9a:e5:d2:b0:cb:51:c4:12:5f: da:38:e6:70:06:84:32:4b:f7:d5:6a:22:2e:43:c9: f6:c3:62:43:74:0c:3a:e2:f8:68:a4:f1:9f:bf:0d: 99:8b:3c:8a:99:c4:b5:06:2b:68:5f:40:5b:cf:e4: 7e:aa:4a:53:2f:e3:b7:b7:77:28:33:24:03:63:19: 11:02:cb:dd:99:61:42:cd:89:f9:d8:07:67:92:ca: 9b:27:bc:40:2c:56:04:e4:0f:3d:c9:00:a6:61:f9: 94:86:9e:c1:4f:12:61:45:ce:23:32:31:de:7e:14: 21:a1:d8:2f:21:b9:9e:85:5a:7c:74:f0:49:1e:cd: 77:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:63:F5:00:85:6E:D1:12:BA:0B:78:F9:7F:C8:D5:B4:B1:3D:6F:FD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2669e9f-7f52-4b0f-809f-1ffb924d6c37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fba:34c0::/48 Signature Algorithm: sha256WithRSAEncryption 07:48:be:23:1f:b4:16:8c:65:da:0e:e8:51:7f:b0:d8:e9:d4: 6f:1f:94:9c:d7:06:3f:33:0c:22:c9:e0:b3:b4:35:86:33:f0: 1a:df:ad:87:16:5f:07:d6:3a:0a:5b:6d:3b:4c:fb:91:44:ed: 2d:b4:5d:85:23:7c:c7:f3:9f:7d:63:d1:3b:13:53:6f:a2:bc: 30:98:e9:82:08:bc:a6:a4:28:47:e5:51:3b:27:03:0c:f5:c6: 5f:d8:2d:fb:a9:81:a3:e0:5a:5f:b9:86:35:4e:fb:9c:00:ca: c6:10:67:67:ec:bd:27:53:30:ee:51:88:ae:d9:92:e0:cc:97: ec:c8:b5:58:af:cf:8a:87:43:65:4f:3b:fe:2f:84:30:f0:fb: 2b:b3:70:b6:9e:7b:15:9e:04:9e:a7:ac:2a:f3:b8:1f:21:6d: 31:54:e0:75:84:14:15:71:70:21:8c:b0:39:ea:c9:af:26:f7: 77:5b:62:8a:35:60:55:0b:75:72:14:60:43:c0:0b:d1:f1:38: e0:c8:23:c2:e5:c0:2b:ed:db:6c:b2:23:5e:f9:4c:df:18:d5: aa:4d:f6:c4:21:9d:df:6a:bc:f1:d2:0c:bd:ad:85:c6:26:57: 83:c5:c1:3f:69:ef:11:cd:27:3c:fa:cd:67:bc:22:37:10:0f: 50:ad:7f:e3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURG2crrGcgDqUtBtC65O0ZuBWeaMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYwNjQ2WhcNMjYwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MzcyYWM5MmY5NzAwOWY5ZWIwOTIwMjZlZjY4MzgxOTQ1 ZWNjZGY0ZmE1YmE1MjhiZDYzZGQzNjVkZjdiZDU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZQMVKsLzNjEclx4dZjqU0WHzVd3v7T43NesVLCESOkp/7 JeI6RDHVKlX3kQDv51lQnPz/cUztX2RgaE0LU3ATgVkpAApr8c+ttFo5qKv19PPu wsLuDQ3UuggGfkxHzVQL74bkpxTzFQX+dX3E5896MHfvyTZ1+MkbGONzhZrl0rDL UcQSX9o45nAGhDJL99VqIi5DyfbDYkN0DDri+Gik8Z+/DZmLPIqZxLUGK2hfQFvP 5H6qSlMv47e3dygzJANjGRECy92ZYULNifnYB2eSypsnvEAsVgTkDz3JAKZh+ZSG nsFPEmFFziMyMd5+FCGh2C8huZ6FWnx08EkezXdxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUeGP1AIVu0RK6C3j5f8jVtLE9b/0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MyNjY5ZTlmLTdmNTItNGIwZi04MDlmLTFmZmI5MjRkNmMzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB+6NMAwDQYJKoZIhvcNAQELBQADggEBAAdIviMftBaMZdoO6FF/sNjp 1G8flJzXBj8zDCLJ4LO0NYYz8BrfrYcWXwfWOgpbbTtM+5FE7S20XYUjfMfzn31j 0TsTU2+ivDCY6YIIvKakKEflUTsnAwz1xl/YLfupgaPgWl+5hjVO+5wAysYQZ2fs vSdTMO5RiK7ZkuDMl+zItVivz4qHQ2VPO/4vhDDw+yuzcLaeexWeBJ6nrCrzuB8h bTFU4HWEFBVxcCGMsDnqya8m93dbYoo1YFULdXIUYEPAC9HxOODII8LlwCvt22yy I175TN8Y1apN9sQhnd9qvPHSDL2thcYmV4PFwT9p7xHNJzz6zWe8IjcQD1Ctf+M= -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:13 2026 by rpki-client