$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da3f53ad-0bc5-4ac4-9563-1fb6defa0a5d.roa File: da3f53ad-0bc5-4ac4-9563-1fb6defa0a5d.roa (raw, json) Hash identifier: 7BSo9o7qENDIfVjMeVdnAAhmXhPCXSkjon3Uyfevdm8= Subject key identifier: 4F:D1:89:F3:DF:84:31:6C:4F:FE:51:9D:46:FD:01:6A:EA:67:C2:26 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 75E08C3B4BA6210C0C805B1E899DF25044FE7344 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da3f53ad-0bc5-4ac4-9563-1fb6defa0a5d.roa Signing time: Thu 12 Mar 2026 16:08:16 +0000 ROA not before: Thu 12 Mar 2026 16:08:16 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fba:8090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e0:8c:3b:4b:a6:21:0c:0c:80:5b:1e:89:9d:f2:50:44:fe:73:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:08:16 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=d3274627791e3869809202b1e769d1a09ae134a4264a358585164647a65b329e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b6:34:c1:f4:85:32:66:a1:d8:79:e8:c3:e2: c7:b7:8a:dd:fa:1a:26:08:42:29:ed:f1:5d:fa:47: 65:c8:d8:90:3a:66:25:c2:df:c2:89:bf:76:07:57: bf:ec:99:da:73:07:a6:e7:54:24:f9:fb:82:03:ae: a5:fb:91:bf:fa:ef:4d:d2:1e:63:a5:1f:22:55:11: 4f:4e:a1:f0:26:75:23:8c:41:ea:21:ee:3a:66:60: a9:44:85:86:13:30:02:49:01:1d:b0:9d:2d:2f:4b: df:d8:e4:29:56:7e:e2:5c:ba:9c:34:de:5e:aa:02: f3:54:de:2f:84:c4:5b:66:c5:4b:d0:07:ce:2f:af: cc:86:43:a0:27:f4:2c:cc:b3:b4:f6:50:dc:af:8e: 12:ce:aa:e5:32:c1:de:4d:fa:25:d3:80:d3:31:5a: dd:b6:89:aa:23:c8:7b:0e:74:65:b5:e6:96:aa:45: 2c:af:d5:43:18:96:fc:b6:7d:ec:42:74:c0:8e:27: ca:e9:c1:ec:35:6b:4d:a2:50:91:88:cb:b9:51:cb: 8e:b5:78:a2:8c:0e:a2:b2:c5:a9:8d:51:7f:cb:65: 4e:cf:c6:a8:d2:b9:b4:fa:21:2d:6b:58:3a:aa:c7: 51:4a:1d:69:00:67:84:c8:15:1c:99:b0:99:cd:56: 88:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D1:89:F3:DF:84:31:6C:4F:FE:51:9D:46:FD:01:6A:EA:67:C2:26 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da3f53ad-0bc5-4ac4-9563-1fb6defa0a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fba:8090::/48 Signature Algorithm: sha256WithRSAEncryption 2b:85:27:75:84:a4:b9:70:4b:4a:28:28:bd:b5:c2:ab:53:76: 77:f1:6c:fe:67:cd:04:a5:91:bc:a1:e8:20:73:a6:fa:55:64: 0c:3d:bc:ae:d7:a1:5f:87:74:4a:10:10:79:b6:b0:0c:09:94: 38:70:c9:d7:06:4a:2e:95:97:00:8b:69:27:19:1c:ef:16:f3: e1:af:db:19:13:b2:a5:78:a8:2e:5e:36:b0:48:7b:60:a9:cf: 90:60:e5:9d:4c:8b:d6:61:63:fa:c0:21:e8:a7:46:17:5b:3d: b7:fb:53:da:b1:3b:d9:44:9c:4a:76:fb:c4:5d:49:83:63:03: 47:23:45:f2:af:4c:6d:1a:5b:a7:a7:54:f1:61:22:0a:79:26: d0:86:28:40:52:a3:ff:d0:3b:05:95:a0:d9:d2:3a:60:78:69: 69:77:a5:1a:1d:86:1e:98:09:6e:7f:06:bb:79:48:c6:e5:c7: 55:a9:86:e0:54:3b:d2:c4:81:07:e9:d3:0a:08:bc:b4:bb:7c: f7:51:1e:80:d8:a0:41:84:02:68:88:81:68:0c:2f:ed:25:4b: 75:ea:63:56:f6:25:bd:5b:74:04:a3:d7:68:a1:7c:d9:64:69: 81:72:ba:df:bb:26:2c:66:d6:fb:74:4f:2e:ac:bb:34:01:6e: 6e:26:c8:09 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdeCMO0umIQwMgFseiZ3yUET+c0QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYwODE2WhcNMjYwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzI3NDYyNzc5MWUzODY5ODA5MjAyYjFlNzY5ZDFhMDlh ZTEzNGE0MjY0YTM1ODU4NTE2NDY0N2E2NWIzMjllMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCftjTB9IUyZqHYeejD4se3it36GiYIQint8V36R2XI2JA6 ZiXC38KJv3YHV7/smdpzB6bnVCT5+4IDrqX7kb/6703SHmOlHyJVEU9OofAmdSOM Qeoh7jpmYKlEhYYTMAJJAR2wnS0vS9/Y5ClWfuJcupw03l6qAvNU3i+ExFtmxUvQ B84vr8yGQ6An9CzMs7T2UNyvjhLOquUywd5N+iXTgNMxWt22iaojyHsOdGW15paq RSyv1UMYlvy2fexCdMCOJ8rpwew1a02iUJGIy7lRy461eKKMDqKyxamNUX/LZU7P xqjSubT6IS1rWDqqx1FKHWkAZ4TIFRyZsJnNVoirAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUT9GJ89+EMWxP/lGdRv0BaupnwiYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RhM2Y1M2FkLTBiYzUtNGFjNC05NTYzLTFmYjZkZWZhMGE1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB+6gJAwDQYJKoZIhvcNAQELBQADggEBACuFJ3WEpLlwS0ooKL21wqtT dnfxbP5nzQSlkbyh6CBzpvpVZAw9vK7XoV+HdEoQEHm2sAwJlDhwydcGSi6VlwCL aScZHO8W8+Gv2xkTsqV4qC5eNrBIe2Cpz5Bg5Z1Mi9ZhY/rAIeinRhdbPbf7U9qx O9lEnEp2+8RdSYNjA0cjRfKvTG0aW6enVPFhIgp5JtCGKEBSo//QOwWVoNnSOmB4 aWl3pRodhh6YCW5/Brt5SMblx1WphuBUO9LEgQfp0woIvLS7fPdRHoDYoEGEAmiI gWgML+0lS3XqY1b2Jb1bdASj12ihfNlkaYFyut+7Jixm1vt0Ty6suzQBbm4myAk= -----END CERTIFICATE-----Generated at Fri Mar 20 17:04:08 2026 by rpki-client