$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fdb6b464-65c2-426c-9c6a-25dd7aed9749.roa File: fdb6b464-65c2-426c-9c6a-25dd7aed9749.roa (raw, json) Hash identifier: TuNyPCjEk7s3W3wszawd1o5u+WkZr/Tkecxbkw19zbQ= Subject key identifier: B2:09:2E:FF:E2:7A:FD:A3:81:A8:83:A5:D6:2A:A3:72:21:28:EE:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 02F89BD289912DE69D294A3B9AFD865790AC409C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fdb6b464-65c2-426c-9c6a-25dd7aed9749.roa Signing time: Thu 12 Mar 2026 16:08:33 +0000 ROA not before: Thu 12 Mar 2026 16:08:33 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe9:3440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f8:9b:d2:89:91:2d:e6:9d:29:4a:3b:9a:fd:86:57:90:ac:40:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:08:33 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=57def0373588e0a1fd57edceac96a852940f0e42aae7740dc9e55936f85533d0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5c:0b:41:69:bf:ab:41:65:0c:24:b2:15:82: 07:f9:f2:56:13:0c:be:6f:9a:7a:dd:7f:ff:ac:52: aa:fa:1f:76:11:7b:c2:d2:a4:c7:ba:eb:37:09:45: 43:8b:ed:3c:a5:9f:ae:5e:8a:1a:cc:e8:38:5e:ee: ed:d5:68:81:99:1a:46:7a:35:5f:df:c1:38:6f:4e: bd:60:60:30:1d:be:85:23:88:b3:a8:9f:8a:b0:90: c1:56:cc:2e:0c:59:09:8c:f0:05:8a:80:94:33:87: 4f:06:f4:cc:67:1b:5a:68:45:4e:5d:8f:84:0d:c5: 96:dd:4a:cf:f9:d2:21:3a:4b:e6:b4:d5:64:ce:23: 6d:9b:e0:f6:d2:c9:fe:97:67:0e:a3:14:37:a2:ab: 31:22:10:25:cb:59:b4:a7:60:f2:24:45:96:15:00: 18:69:9a:98:98:64:14:12:9c:17:29:e7:c7:7e:29: 81:5f:35:59:33:bb:e3:b9:ab:00:ac:29:88:e1:95: 12:68:b2:c4:4f:53:b9:0a:7a:9c:a2:f0:9f:b5:ca: 41:32:1f:91:dc:f8:55:39:2d:ea:83:83:a6:a1:60: 83:b6:c9:2f:76:f7:2b:eb:35:cb:f7:f9:3c:de:34: 04:8a:9b:77:92:1a:a1:3d:b4:14:f8:b8:35:04:a5: d6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:09:2E:FF:E2:7A:FD:A3:81:A8:83:A5:D6:2A:A3:72:21:28:EE:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fdb6b464-65c2-426c-9c6a-25dd7aed9749.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe9:3440::/48 Signature Algorithm: sha256WithRSAEncryption 6b:3d:e6:a1:0a:a3:37:77:8f:be:b7:1b:ef:87:10:9e:ea:e0: fe:e5:c3:99:c3:e2:ab:9a:a2:a6:4d:25:54:c1:58:40:5e:53: 63:b5:ea:36:2f:a4:77:d7:da:39:e1:34:57:d6:3c:3d:fa:3a: f7:68:0c:97:36:9b:fa:fa:46:2e:9a:00:be:ff:f3:40:1e:e0: e4:90:a8:0a:e6:7d:d8:bc:97:9b:de:70:fb:2b:c1:08:fb:b0: 9f:74:21:a6:f1:0d:38:02:27:04:17:1b:f9:1e:63:6e:aa:a1: 3c:2a:61:7c:4c:ab:f8:48:4c:fd:88:8b:1d:14:ad:89:da:61: d3:9d:d0:26:c4:3c:28:48:4b:54:a0:b0:9d:8f:c7:d8:f4:e1: 22:4f:cf:cc:d5:eb:70:5f:1f:a7:b0:f0:67:9a:93:72:ae:90: 02:ac:1f:38:d0:bd:47:76:ab:6b:f5:ab:90:45:1b:16:84:cf: 73:c6:a2:b3:b3:15:d7:78:de:8a:4e:eb:c4:bf:16:7a:78:09: 9e:3b:f0:d8:bf:95:1c:cc:2e:de:ec:fa:5a:c4:a8:25:12:e5: 21:1b:94:a6:2f:a2:cd:dd:f0:dd:c4:18:da:f8:c5:98:fb:9d: 55:49:ba:64:b0:0c:0b:68:11:3d:ac:1e:6c:d1:06:82:a4:7f: 94:0e:45:b3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAvib0omRLeadKUo7mv2GV5CsQJwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYwODMzWhcNMjYwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1N2RlZjAzNzM1ODhlMGExZmQ1N2VkY2VhYzk2YTg1Mjk0 MGYwZTQyYWFlNzc0MGRjOWU1NTkzNmY4NTUzM2QwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoXAtBab+rQWUMJLIVggf58lYTDL5vmnrdf/+sUqr6H3YR e8LSpMe66zcJRUOL7Tyln65eihrM6Dhe7u3VaIGZGkZ6NV/fwThvTr1gYDAdvoUj iLOon4qwkMFWzC4MWQmM8AWKgJQzh08G9MxnG1poRU5dj4QNxZbdSs/50iE6S+a0 1WTOI22b4PbSyf6XZw6jFDeiqzEiECXLWbSnYPIkRZYVABhpmpiYZBQSnBcp58d+ KYFfNVkzu+O5qwCsKYjhlRJossRPU7kKepyi8J+1ykEyH5Hc+FU5LeqDg6ahYIO2 yS929yvrNcv3+TzeNASKm3eSGqE9tBT4uDUEpdbDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUsgku/+J6/aOBqIOl1iqjciEo7lMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZkYjZiNDY0LTY1YzItNDI2Yy05YzZhLTI1ZGQ3YWVkOTc0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/pNEAwDQYJKoZIhvcNAQELBQADggEBAGs95qEKozd3j763G++HEJ7q 4P7lw5nD4quaoqZNJVTBWEBeU2O16jYvpHfX2jnhNFfWPD36OvdoDJc2m/r6Ri6a AL7/80Ae4OSQqArmfdi8l5vecPsrwQj7sJ90IabxDTgCJwQXG/keY26qoTwqYXxM q/hITP2Iix0UrYnaYdOd0CbEPChIS1SgsJ2Px9j04SJPz8zV63BfH6ew8Geak3Ku kAKsHzjQvUd2q2v1q5BFGxaEz3PGorOzFdd43opO68S/Fnp4CZ478Ni/lRzMLt7s +lrEqCUS5SEblKYvos3d8N3EGNr4xZj7nVVJumSwDAtoET2sHmzRBoKkf5QORbM= -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:16 2026 by rpki-client