$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cf50ad6-9442-4597-8c89-e5beb52d50eb.roa File: 0cf50ad6-9442-4597-8c89-e5beb52d50eb.roa (raw, json) Hash identifier: e11pw27/PJkcxKyGofP7tELyRT8/ZGLrVte0rU/8gTM= Subject key identifier: 29:2C:34:EF:0C:16:44:A2:39:11:22:F9:A4:AB:A1:DF:B5:8C:97:16 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5C08151AF4428F795483C86C24F005C613818438 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cf50ad6-9442-4597-8c89-e5beb52d50eb.roa Signing time: Sat 28 Feb 2026 00:30:55 +0000 ROA not before: Sat 28 Feb 2026 00:30:55 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f2a:c800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:08:15:1a:f4:42:8f:79:54:83:c8:6c:24:f0:05:c6:13:81:84:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 28 00:30:55 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=d5ae1556ee69b57ade817cea8b774785576c60ee88d05cedd5f70d6b098bb937, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:a5:0d:ce:87:20:f2:f5:3f:f7:f4:34:00: 02:e9:cb:8d:6c:ee:05:95:e5:05:f6:a5:a2:e9:66: 68:5a:19:71:ed:08:92:f8:99:a0:a3:ce:36:f2:5b: a5:5b:8a:87:fe:e1:70:d5:09:74:ba:ca:10:cc:54: 39:9b:49:01:23:7e:5e:86:74:23:38:51:0e:ec:5a: cd:64:0c:65:27:9b:1b:09:d9:ab:1b:a4:8a:e5:56: 81:0f:22:58:7b:15:9d:ff:ba:01:f7:aa:5a:c0:8f: 3b:f7:02:f8:bf:43:46:10:be:68:8b:b8:88:51:c0: 03:ea:f7:ca:88:54:e4:0a:0a:3f:5a:06:1d:33:97: f8:cb:6e:06:a2:86:18:15:20:99:50:64:6d:fa:5d: c9:9f:87:53:8d:45:8e:76:14:d3:30:e1:ab:0c:01: 05:19:62:1f:36:43:d5:5e:e4:48:14:4c:a6:29:f0: 7a:42:80:19:80:05:4d:78:37:29:24:df:c2:d7:db: be:ce:b8:3b:3a:ac:40:76:1a:8b:fc:0d:53:b2:ae: 8a:c1:30:e9:30:ee:23:e0:5f:0d:94:88:e9:7f:52: 43:eb:db:46:a4:ff:1c:d2:02:cf:cb:4d:4f:ff:c6: b1:f2:cd:12:e0:71:74:f5:8c:94:08:88:6f:6e:53: a8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2C:34:EF:0C:16:44:A2:39:11:22:F9:A4:AB:A1:DF:B5:8C:97:16 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cf50ad6-9442-4597-8c89-e5beb52d50eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2a:c800::/37 Signature Algorithm: sha256WithRSAEncryption 66:6a:d2:73:70:fe:7c:4d:d5:87:88:f0:37:ad:1a:2c:f1:af: 33:c6:67:1d:5b:e4:f1:b9:3e:b8:57:e5:ec:08:17:bf:89:38: a0:47:05:dd:58:06:9b:01:55:4f:25:fc:1c:92:5e:80:02:5e: 46:1a:a6:0c:b7:d7:f3:88:5c:fd:f3:e8:c1:d0:86:0b:7f:74: cc:a7:56:70:6e:e4:a3:4d:4c:d4:d0:03:87:49:66:85:29:0f: b7:77:f7:e0:85:14:3c:c4:d9:24:08:86:58:b6:52:62:52:d5: 32:5f:04:9d:0d:a3:b2:d6:0c:37:52:19:b2:40:37:ff:85:84: 29:3c:3c:72:97:7d:0d:1f:61:48:2c:a8:12:4e:0c:1e:26:37: 64:3f:17:ea:87:d7:45:ea:58:f5:e8:4b:52:5e:91:d8:a2:ca: 63:0f:67:46:a7:1e:fb:81:ff:8e:44:7d:9a:1f:1b:8b:22:a4: be:b2:56:51:be:03:99:b3:19:7a:31:03:c9:83:c2:2b:1b:c2: d6:a6:24:35:e6:3d:18:6d:3a:db:28:53:d2:e0:dc:50:c8:4c: 5b:00:19:df:c8:45:e0:a4:86:f3:5b:a6:65:77:6b:37:0a:4a: e0:87:f1:69:e3:f7:c1:41:9c:ad:49:d2:f2:6b:4e:89:3a:d1: 71:8e:02:ee -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXAgVGvRCj3lUg8hsJPAFxhOBhDgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI4MDAzMDU1WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNWFlMTU1NmVlNjliNTdhZGU4MTdjZWE4Yjc3NDc4NTU3 NmM2MGVlODhkMDVjZWRkNWY3MGQ2YjA5OGJiOTM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzL6UNzocg8vU/9/Q0AALpy41s7gWV5QX2paLpZmhaGXHt CJL4maCjzjbyW6Vbiof+4XDVCXS6yhDMVDmbSQEjfl6GdCM4UQ7sWs1kDGUnmxsJ 2asbpIrlVoEPIlh7FZ3/ugH3qlrAjzv3Avi/Q0YQvmiLuIhRwAPq98qIVOQKCj9a Bh0zl/jLbgaihhgVIJlQZG36Xcmfh1ONRY52FNMw4asMAQUZYh82Q9Ve5EgUTKYp 8HpCgBmABU14Nykk38LX277OuDs6rEB2Gov8DVOyrorBMOkw7iPgXw2UiOl/UkPr 20ak/xzSAs/LTU//xrHyzRLgcXT1jJQIiG9uU6g7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUKSw07wwWRKI5ESL5pKuh37WMlxYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBjZjUwYWQ2LTk0NDItNDU5Ny04Yzg5LWU1YmViNTJkNTBlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8qyDANBgkqhkiG9w0BAQsFAAOCAQEAZmrSc3D+fE3Vh4jwN60aLPGv M8ZnHVvk8bk+uFfl7AgXv4k4oEcF3VgGmwFVTyX8HJJegAJeRhqmDLfX84hc/fPo wdCGC390zKdWcG7ko01M1NADh0lmhSkPt3f34IUUPMTZJAiGWLZSYlLVMl8EnQ2j stYMN1IZskA3/4WEKTw8cpd9DR9hSCyoEk4MHiY3ZD8X6ofXRepY9ehLUl6R2KLK Yw9nRqce+4H/jkR9mh8biyKkvrJWUb4DmbMZejEDyYPCKxvC1qYkNeY9GG062yhT 0uDcUMhMWwAZ38hF4KSG81umZXdrNwpK4IfxaeP3wUGcrUnS8mtOiTrRcY4C7g== -----END CERTIFICATE-----Generated at Mon Mar 2 04:54:27 2026 by rpki-client