$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c94fe362-280f-4e34-9a80-031cdcf06de2.roa File: c94fe362-280f-4e34-9a80-031cdcf06de2.roa (raw, json) Hash identifier: FrmVoKq5kzntqbjZQ5117YKfXvVoVFDs4qGjMJY4KOc= Subject key identifier: 82:6D:5D:D4:FF:FD:86:08:7A:EB:C3:99:77:24:96:AC:06:87:24:96 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 13EE7E6665F0B18E97A3B6D2403DD50C06761D84 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c94fe362-280f-4e34-9a80-031cdcf06de2.roa Signing time: Wed 18 Mar 2026 23:21:52 +0000 ROA not before: Wed 18 Mar 2026 23:21:52 +0000 ROA not after: Tue 16 Jun 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fba:8030::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ee:7e:66:65:f0:b1:8e:97:a3:b6:d2:40:3d:d5:0c:06:76:1d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 18 23:21:52 2026 GMT Not After : Jun 16 23:59:59 2026 GMT Subject: serialNumber=acdd9ae9a2d9d6571886b58059d1ad0a13763d1cf37d429a1db28764e9535b34, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:c8:82:4a:8b:e0:62:41:cb:e0:5c:93:89: 26:d5:eb:d6:a7:79:44:ff:53:a3:14:fc:2f:24:cf: db:2f:51:95:d3:94:38:f1:50:2e:7a:96:70:58:c8: 98:3a:de:c9:bc:c4:78:a9:98:d6:64:2e:d9:58:7b: bf:b5:9d:b3:42:2d:d9:d8:d6:0e:1a:83:5b:a0:e3: 64:98:7e:9d:29:62:e6:36:d0:65:f6:f3:91:72:01: d7:4b:71:01:17:b7:26:15:31:1d:29:ee:7d:12:03: 26:4f:c9:bb:e8:f4:7c:cf:cd:26:d9:b1:f5:d2:94: f2:c1:2e:2c:44:9a:6c:1f:38:4a:9b:7c:36:a5:6b: 8d:ba:50:33:5d:96:77:7c:a6:70:a8:65:15:ae:95: c2:cb:6b:26:31:4a:80:8c:0d:42:21:14:94:d1:6b: 4e:42:51:60:b7:8e:02:23:1b:44:76:92:36:e2:bd: cd:88:61:ee:8a:62:33:0e:7d:24:4b:f2:99:ff:c0: 79:a8:3f:3e:a2:53:26:9b:de:6d:fe:25:3e:d1:56: 57:7b:02:c3:8a:ae:95:bc:e1:50:a9:56:7b:42:7e: 90:c0:f5:ee:d7:01:e9:e4:6e:b5:de:cc:76:ed:14: d3:20:ee:f8:a1:36:aa:ee:01:80:4f:a0:b8:33:e2: fc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:6D:5D:D4:FF:FD:86:08:7A:EB:C3:99:77:24:96:AC:06:87:24:96 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c94fe362-280f-4e34-9a80-031cdcf06de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fba:8030::/48 Signature Algorithm: sha256WithRSAEncryption 19:56:44:b8:13:72:fa:c9:13:85:74:b0:10:25:dc:6a:2f:9a: b4:3e:1e:9f:5a:91:1d:86:fa:c7:21:93:64:33:0e:d3:84:3b: 80:64:47:71:18:3a:93:7d:61:7e:18:1a:c9:3a:99:75:54:a9: 8d:29:7d:0d:b2:74:74:ec:c8:01:8e:89:c7:c4:d9:c0:d3:f2: e6:95:aa:74:4f:c4:80:85:4b:84:e3:9d:43:5b:5d:04:bf:43: ef:c8:70:8c:c2:a1:d9:64:16:c0:89:c5:44:c0:5b:bb:d1:de: 2c:cf:8d:7c:45:8e:4e:bd:99:77:b0:95:98:41:60:46:c0:3c: 21:ba:ad:63:08:5d:29:8a:70:41:17:28:40:74:b2:eb:4e:0e: fc:93:a8:fe:f8:fc:50:2e:ad:a9:84:73:f6:f6:1c:47:f5:c8: a0:d9:00:9b:15:07:69:41:2a:85:02:e6:c8:ef:b6:7b:a1:4d: e0:f6:7d:c7:26:4a:f1:22:d2:a5:d8:8b:34:f3:09:6a:31:9e: e2:c0:b2:ab:e7:a7:c7:a8:36:a1:24:98:2b:34:9f:c0:11:c6: a8:af:84:1f:ed:51:63:4e:89:de:cb:0f:d6:f9:39:38:a1:a4: f8:e2:db:8f:04:69:66:be:ee:ff:53:ea:f6:04:65:bd:ed:2f: 2e:90:c7:ce -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUE+5+ZmXwsY6Xo7bSQD3VDAZ2HYQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzE4MjMyMTUyWhcNMjYwNjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhY2RkOWFlOWEyZDlkNjU3MTg4NmI1ODA1OWQxYWQwYTEz NzYzZDFjZjM3ZDQyOWExZGIyODc2NGU5NTM1YjM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7u8iCSovgYkHL4FyTiSbV69aneUT/U6MU/C8kz9svUZXT lDjxUC56lnBYyJg63sm8xHipmNZkLtlYe7+1nbNCLdnY1g4ag1ug42SYfp0pYuY2 0GX285FyAddLcQEXtyYVMR0p7n0SAyZPybvo9HzPzSbZsfXSlPLBLixEmmwfOEqb fDala426UDNdlnd8pnCoZRWulcLLayYxSoCMDUIhFJTRa05CUWC3jgIjG0R2kjbi vc2IYe6KYjMOfSRL8pn/wHmoPz6iUyab3m3+JT7RVld7AsOKrpW84VCpVntCfpDA 9e7XAenkbrXezHbtFNMg7vihNqruAYBPoLgz4vzFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgm1d1P/9hgh668OZdySWrAaHJJYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M5NGZlMzYyLTI4MGYtNGUzNC05YTgwLTAzMWNkY2YwNmRlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB+6gDAwDQYJKoZIhvcNAQELBQADggEBABlWRLgTcvrJE4V0sBAl3Gov mrQ+Hp9akR2G+schk2QzDtOEO4BkR3EYOpN9YX4YGsk6mXVUqY0pfQ2ydHTsyAGO icfE2cDT8uaVqnRPxICFS4TjnUNbXQS/Q+/IcIzCodlkFsCJxUTAW7vR3izPjXxF jk69mXewlZhBYEbAPCG6rWMIXSmKcEEXKEB0sutODvyTqP74/FAuramEc/b2HEf1 yKDZAJsVB2lBKoUC5sjvtnuhTeD2fccmSvEi0qXYizTzCWoxnuLAsqvnp8eoNqEk mCs0n8ARxqivhB/tUWNOid7LD9b5OTihpPji248EaWa+7v9T6vYEZb3tLy6Qx84= -----END CERTIFICATE-----Generated at Fri Mar 20 17:04:10 2026 by rpki-client