$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03ae4e74-5acd-4e00-b992-05190479b91d.roa File: 03ae4e74-5acd-4e00-b992-05190479b91d.roa (raw, json) Hash identifier: xIbhjWq/D6kLCMIA62FRR6Yuvf4hjHBwV0sVTowqkCw= Subject key identifier: A7:7C:20:7D:26:EC:3A:A2:7D:41:B3:FA:F1:5C:9F:50:7D:17:A9:F2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 63A04B0BA1A91C30176A6765338E64E08DFA5B4D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03ae4e74-5acd-4e00-b992-05190479b91d.roa Signing time: Sun 08 Feb 2026 00:10:32 +0000 ROA not before: Sun 08 Feb 2026 00:10:32 +0000 ROA not after: Sat 09 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f12:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a0:4b:0b:a1:a9:1c:30:17:6a:67:65:33:8e:64:e0:8d:fa:5b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 8 00:10:32 2026 GMT Not After : May 9 23:59:59 2026 GMT Subject: serialNumber=fa5fb7aaa6bac75bf44c051896d1d5a6560363447b4d0954ddf43af4dee19110, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2f:ba:99:d8:4d:bc:ac:ce:08:72:04:54:76: e6:4f:22:a0:3d:23:2e:0a:71:50:fc:65:7c:fd:2e: f5:3d:c7:8c:38:4c:a8:91:17:4f:fe:ea:e3:d0:4d: f1:8b:d6:b0:e1:5a:20:be:44:40:2f:6b:7e:dc:37: d5:3d:03:b1:3e:ff:87:0a:5f:62:af:4c:3a:b6:d6: 88:96:b4:65:75:9a:07:9c:b5:61:c0:1c:c9:70:6a: 85:55:26:f8:62:cc:f1:db:ec:51:8c:f7:c6:7e:e5: b1:b9:ed:8e:af:c3:7b:78:1b:55:66:6f:43:a7:a1: 01:a7:ce:d2:3c:4d:e3:58:85:17:93:63:db:c6:11: 6c:ae:65:c3:f1:2c:49:45:b3:6a:26:92:67:62:b6: 16:ab:9f:a4:70:3d:cd:9f:3f:4b:48:9d:a6:94:ba: 03:2b:32:73:76:43:19:87:8e:07:fd:13:67:56:46: 14:2f:43:c0:ad:6e:d6:67:5b:a0:c4:48:1d:78:63: 15:3b:38:c2:2b:5b:58:36:ac:0a:43:12:13:54:d3: e1:ff:1d:0d:1c:4c:0d:a1:25:93:18:da:1d:8a:14: 59:53:67:fc:a7:78:22:5e:ca:59:ea:f3:dd:1d:94: fe:1a:04:78:3c:5d:0a:a9:ed:24:a6:2e:75:81:37: 77:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7C:20:7D:26:EC:3A:A2:7D:41:B3:FA:F1:5C:9F:50:7D:17:A9:F2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03ae4e74-5acd-4e00-b992-05190479b91d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f12:8000::/36 Signature Algorithm: sha256WithRSAEncryption 74:9b:27:6f:ef:6d:57:bb:9c:45:ce:c6:78:cc:78:cd:60:74: 96:97:f0:a1:5a:cb:81:6c:8d:a8:4f:83:16:93:9e:78:69:9d: 32:73:0b:42:69:48:b2:49:9f:7b:9d:b1:82:a6:53:8b:80:6d: a7:24:8d:36:0e:2d:6c:46:e9:ea:ca:74:3b:dd:f3:8f:4c:3d: 55:a2:bc:e3:56:ca:b0:58:51:61:d6:23:5a:cc:e0:c8:94:1d: ee:05:f0:ee:1b:63:64:c4:8d:cc:41:21:6f:c1:54:77:6f:26: 1b:ee:3f:9d:97:e8:16:d4:c3:f0:09:c3:2f:84:ef:78:d0:5f: 9c:b0:c1:9b:4c:15:8b:8b:2a:05:be:43:e9:a4:e7:c0:b0:5d: 3d:6d:f4:8d:30:28:92:c1:9b:25:e7:ee:70:7d:2a:62:96:08: 2b:b5:f5:26:f1:1e:b1:12:99:a4:2d:8a:10:de:48:dc:08:41: ce:4b:64:2e:04:b6:d7:1b:83:a3:32:01:5f:d3:b3:55:0b:5b: e3:2d:23:49:81:33:c8:15:43:69:1e:14:66:e3:bc:9a:d3:db: 97:89:81:bc:6f:b7:7e:3e:88:c7:ba:9d:39:0f:de:ed:7a:c7: d8:5e:9e:56:3c:dd:1d:3a:c6:16:e5:ff:4c:7c:b7:ba:91:8c: 53:b6:88:b3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUY6BLC6GpHDAXamdlM45k4I36W00wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA4MDAxMDMyWhcNMjYwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTVmYjdhYWE2YmFjNzViZjQ0YzA1MTg5NmQxZDVhNjU2 MDM2MzQ0N2I0ZDA5NTRkZGY0M2FmNGRlZTE5MTEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbL7qZ2E28rM4IcgRUduZPIqA9Iy4KcVD8ZXz9LvU9x4w4 TKiRF0/+6uPQTfGL1rDhWiC+REAva37cN9U9A7E+/4cKX2KvTDq21oiWtGV1mgec tWHAHMlwaoVVJvhizPHb7FGM98Z+5bG57Y6vw3t4G1Vmb0OnoQGnztI8TeNYhReT Y9vGEWyuZcPxLElFs2omkmditharn6RwPc2fP0tInaaUugMrMnN2QxmHjgf9E2dW RhQvQ8CtbtZnW6DESB14YxU7OMIrW1g2rApDEhNU0+H/HQ0cTA2hJZMY2h2KFFlT Z/yneCJeylnq890dlP4aBHg8XQqp7SSmLnWBN3dxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUp3wgfSbsOqJ9QbP68VyfUH0XqfIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzYWU0ZTc0LTVhY2QtNGUwMC1iOTkyLTA1MTkwNDc5YjkxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8SgDANBgkqhkiG9w0BAQsFAAOCAQEAdJsnb+9tV7ucRc7GeMx4zWB0 lpfwoVrLgWyNqE+DFpOeeGmdMnMLQmlIskmfe52xgqZTi4BtpySNNg4tbEbp6sp0 O93zj0w9VaK841bKsFhRYdYjWszgyJQd7gXw7htjZMSNzEEhb8FUd28mG+4/nZfo FtTD8AnDL4TveNBfnLDBm0wVi4sqBb5D6aTnwLBdPW30jTAoksGbJefucH0qYpYI K7X1JvEesRKZpC2KEN5I3AhBzktkLgS21xuDozIBX9OzVQtb4y0jSYEzyBVDaR4U ZuO8mtPbl4mBvG+3fj6Ix7qdOQ/e7XrH2F6eVjzdHTrGFuX/THy3upGMU7aIsw== -----END CERTIFICATE-----Generated at Sun Mar 1 22:16:42 2026 by rpki-client