$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e939efc4-d8f5-4928-ba32-812ff0149e01.roa File: e939efc4-d8f5-4928-ba32-812ff0149e01.roa (raw, json) Hash identifier: XjqUSkjGZGNGeECKWQEfkNOchf9hzqoReD/SAHzCmn8= Subject key identifier: C3:CA:A9:22:F3:2B:97:B6:DF:CF:92:48:9C:21:26:23:BF:61:C2:BC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 38D31C6A6484ED0B523882FB00C9AB34C6FAB1A9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e939efc4-d8f5-4928-ba32-812ff0149e01.roa Signing time: Wed 18 Mar 2026 22:06:52 +0000 ROA not before: Wed 18 Mar 2026 22:06:52 +0000 ROA not after: Tue 16 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe9:4050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d3:1c:6a:64:84:ed:0b:52:38:82:fb:00:c9:ab:34:c6:fa:b1:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 18 22:06:52 2026 GMT Not After : Jun 16 23:59:59 2026 GMT Subject: serialNumber=4efb2e193760de347f32c9ac1270c53d15fe36a501d9aa690a6707a757758acc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:44:1d:1a:85:ed:af:57:e2:02:54:58:ac:28: af:db:4b:fc:7b:bf:69:bd:03:45:da:32:6e:b4:9b: 35:8e:8a:2a:2a:d8:75:c2:9b:27:a6:3f:e1:6d:59: 45:65:a7:7a:7d:2f:9c:35:0d:61:48:54:98:b8:5a: 83:10:c1:16:19:d5:90:9d:d0:4f:05:5b:86:18:f4: b4:08:a7:0f:41:f5:8c:8d:6a:7c:be:2f:07:67:3f: 24:7b:45:48:75:10:e1:29:5b:bf:7a:91:c5:ec:15: 3c:12:27:28:e2:fb:43:64:03:e7:29:b0:ce:a9:8d: f2:f5:fd:12:94:18:38:02:14:88:ec:d9:ce:38:18: 3d:d2:60:c1:3b:39:8d:37:6c:60:b7:d2:ba:89:91: 44:53:3d:56:1d:fc:2b:74:52:c5:fb:49:37:fb:10: 7f:75:ea:15:91:f7:db:90:9e:5d:52:4c:63:8c:87: 26:35:1d:e8:6b:8c:97:6c:6e:14:22:de:1d:a4:08: d4:fe:a0:3f:6b:d2:c3:4b:d5:ec:36:14:90:42:f8: b3:5d:30:bd:5b:d0:8d:1e:ca:a7:02:2a:23:93:0d: 06:6d:f6:93:28:b4:da:69:d7:fb:4a:5f:bc:9e:03: eb:7d:03:a1:1e:c3:ca:27:12:a7:81:3a:15:46:00: ad:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CA:A9:22:F3:2B:97:B6:DF:CF:92:48:9C:21:26:23:BF:61:C2:BC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e939efc4-d8f5-4928-ba32-812ff0149e01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe9:4050::/48 Signature Algorithm: sha256WithRSAEncryption 11:b5:bb:65:0e:21:c0:05:ad:7c:db:16:7c:75:de:f0:d9:b2: 56:cc:a4:47:13:19:90:47:1f:fa:f4:c8:b9:3f:0a:46:64:f1: 5f:6f:15:0d:fb:ec:35:78:df:37:73:37:bd:f3:c4:94:98:df: fd:95:ad:3e:cb:f3:77:2e:b2:e0:4f:b9:10:87:c0:f8:66:c7: 16:cf:e9:08:c5:0e:e3:a2:6c:d0:dc:32:fb:0c:27:30:03:96: 6c:2f:25:b0:9c:10:f7:4b:10:90:ed:33:71:d8:8e:bc:8e:77: 0e:20:09:d8:88:9a:64:bb:b7:a3:0a:05:04:55:4a:84:1e:01: a5:32:b5:eb:7d:a1:fa:96:41:ca:59:7e:3c:f5:ae:c5:9a:b8: c6:8a:41:c1:ae:b8:2c:76:52:82:eb:36:b4:39:ba:42:6b:a7: 89:57:27:dc:4e:c4:04:69:ca:f5:6a:a5:53:98:e8:19:9d:8b: 52:ce:54:1c:aa:2a:9e:4c:11:c9:e6:d4:81:fa:45:36:7d:5d: 3f:9b:b1:7a:32:6b:13:63:bd:2b:1b:68:65:80:04:36:42:01: d1:4c:7a:b7:f0:f1:d3:78:ba:2b:fe:39:ed:9f:89:9b:95:84: ea:1e:ee:bb:3b:f6:13:c5:99:15:9b:cf:4f:ea:46:fb:a7:14: 03:dc:13:0e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUONMcamSE7QtSOIL7AMmrNMb6sakwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzE4MjIwNjUyWhcNMjYwNjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZWZiMmUxOTM3NjBkZTM0N2YzMmM5YWMxMjcwYzUzZDE1 ZmUzNmE1MDFkOWFhNjkwYTY3MDdhNzU3NzU4YWNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGRB0ahe2vV+ICVFisKK/bS/x7v2m9A0XaMm60mzWOiioq 2HXCmyemP+FtWUVlp3p9L5w1DWFIVJi4WoMQwRYZ1ZCd0E8FW4YY9LQIpw9B9YyN any+LwdnPyR7RUh1EOEpW796kcXsFTwSJyji+0NkA+cpsM6pjfL1/RKUGDgCFIjs 2c44GD3SYME7OY03bGC30rqJkURTPVYd/Ct0UsX7STf7EH916hWR99uQnl1STGOM hyY1HehrjJdsbhQi3h2kCNT+oD9r0sNL1ew2FJBC+LNdML1b0I0eyqcCKiOTDQZt 9pMotNpp1/tKX7yeA+t9A6Eew8onEqeBOhVGAK3xAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUw8qpIvMrl7bfz5JInCEmI79hwrwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U5MzllZmM0LWQ4ZjUtNDkyOC1iYTMyLTgxMmZmMDE0OWUwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/pQFAwDQYJKoZIhvcNAQELBQADggEBABG1u2UOIcAFrXzbFnx13vDZ slbMpEcTGZBHH/r0yLk/CkZk8V9vFQ377DV43zdzN73zxJSY3/2VrT7L83cusuBP uRCHwPhmxxbP6QjFDuOibNDcMvsMJzADlmwvJbCcEPdLEJDtM3HYjryOdw4gCdiI mmS7t6MKBQRVSoQeAaUytet9ofqWQcpZfjz1rsWauMaKQcGuuCx2UoLrNrQ5ukJr p4lXJ9xOxARpyvVqpVOY6Bmdi1LOVByqKp5MEcnm1IH6RTZ9XT+bsXoyaxNjvSsb aGWABDZCAdFMerfw8dN4uiv+Oe2fiZuVhOoe7rs79hPFmRWbz0/qRvunFAPcEw4= -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:16 2026 by rpki-client