$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b84769-08e8-4a64-b1e7-450075bdfbea.roa File: 24b84769-08e8-4a64-b1e7-450075bdfbea.roa (raw, json) Hash identifier: FNdp8nHxiOv4ysD52d5xP1liRkKZ+W8DKExJcRGSI3c= Subject key identifier: BC:B5:FA:7C:B0:39:34:01:99:57:62:D1:0C:AB:0F:9F:C2:EE:CF:0A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7BA29485403B17A52F623E96E56ECC53BD401A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b84769-08e8-4a64-b1e7-450075bdfbea.roa Signing time: Wed 25 Feb 2026 01:40:33 +0000 ROA not before: Wed 25 Feb 2026 01:40:33 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:a400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a2:94:85:40:3b:17:a5:2f:62:3e:96:e5:6e:cc:53:bd:40:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 01:40:33 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=5738484673e8b5b65f141ab999fbf7cd71bc1c3675c2ba61c36a2737847f487e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:38:cb:24:ca:29:6a:6e:fd:8c:19:f8:cf:46: 7d:0e:74:9e:7b:1b:1e:6e:32:31:fe:3d:67:c2:1f: d9:5d:d1:f7:7e:27:09:01:0e:0c:17:05:3d:f7:b5: a6:99:50:02:8f:60:e3:76:0c:a8:7b:f3:96:6a:67: 5b:c8:b6:ae:77:e1:8e:72:52:59:c7:82:48:a8:16: 65:c2:db:35:17:80:c7:9e:58:05:da:a6:af:1b:ae: a8:b9:cb:da:cd:d0:e2:20:9b:e7:b4:11:28:f9:f8: 49:5b:34:2c:12:be:9e:ab:d8:d0:9f:e7:37:e0:71: 01:ee:db:98:eb:41:37:f3:b2:e3:f3:67:d6:88:4d: d0:0e:62:51:87:52:46:96:e1:80:f8:44:7e:53:5e: 7b:cd:40:0c:61:58:87:2e:c9:9e:d5:ab:9f:46:71: b4:aa:b3:ef:db:4f:5b:0f:cc:95:16:73:56:7c:62: 6c:d4:58:17:45:aa:fa:c3:4a:f0:54:c6:a5:6f:d4: be:be:ef:41:42:bd:11:41:f0:9e:8e:c9:38:b4:78: 96:4a:fa:95:80:d3:a8:1c:14:9e:84:47:65:1e:b7: c9:5d:11:6b:3f:a4:de:74:8b:74:aa:e4:af:77:86: 4d:50:3a:0e:3b:d1:cd:d3:07:eb:b0:1f:40:84:95: 60:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B5:FA:7C:B0:39:34:01:99:57:62:D1:0C:AB:0F:9F:C2:EE:CF:0A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b84769-08e8-4a64-b1e7-450075bdfbea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:a400::/40 Signature Algorithm: sha256WithRSAEncryption 76:2b:9a:2f:12:54:91:42:15:1a:62:96:d4:6e:3d:18:83:3d: d4:a3:d3:1f:b1:26:1d:81:44:4a:e7:3d:49:e7:eb:e6:aa:b7: cd:4d:6b:d7:c3:15:9b:ea:18:fe:24:f9:46:c9:f2:88:87:e4: 41:2c:de:fa:d7:4e:f2:34:bf:da:31:6d:d1:92:8a:6a:44:08: a5:1f:34:b9:49:c1:42:b6:60:02:74:da:9c:88:00:b8:f4:2d: 31:5b:f9:88:af:88:51:9b:7a:6e:6f:87:6d:ec:26:10:4f:00: af:21:ac:c0:ab:12:b6:f2:aa:16:95:cf:70:b4:12:2c:e3:94: 08:e7:0b:7f:ec:b3:b9:63:85:e2:e2:2b:49:3a:03:8d:ce:e1: 7e:bd:04:9d:16:88:35:fe:02:8d:64:c0:90:5f:fb:79:be:71: 55:82:72:b4:34:7e:ba:b4:17:fa:cb:98:81:2b:1e:71:e6:bb: 2f:e5:d9:74:e4:1c:b9:df:f2:75:83:07:aa:34:72:cf:42:84: 3e:ea:96:96:7a:69:7b:6a:88:41:a0:cb:47:f0:de:ba:d1:f2: 5b:6c:63:ff:01:e3:72:12:d4:83:b7:fb:8c:84:1e:d3:56:87: ef:78:9b:cc:24:0f:a8:2c:12:39:d9:0c:e2:78:20:83:52:58: a3:71:9e:eb -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgITe6KUhUA7F6UvYj6W5W7MU71AGjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjAyMjUwMTQwMzNaFw0yNjA1MjYyMzU5NTla MHoxSTBHBgNVBAUTQDU3Mzg0ODQ2NzNlOGI1YjY1ZjE0MWFiOTk5ZmJmN2NkNzFi YzFjMzY3NWMyYmE2MWMzNmEyNzM3ODQ3ZjQ4N2UxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANY4yyTKKWpu/YwZ+M9GfQ50nnsbHm4yMf49Z8If2V3R934n CQEODBcFPfe1pplQAo9g43YMqHvzlmpnW8i2rnfhjnJSWceCSKgWZcLbNReAx55Y BdqmrxuuqLnL2s3Q4iCb57QRKPn4SVs0LBK+nqvY0J/nN+BxAe7bmOtBN/Oy4/Nn 1ohN0A5iUYdSRpbhgPhEflNee81ADGFYhy7JntWrn0ZxtKqz79tPWw/MlRZzVnxi bNRYF0Wq+sNK8FTGpW/Uvr7vQUK9EUHwno7JOLR4lkr6lYDTqBwUnoRHZR63yV0R az+k3nSLdKrkr3eGTVA6DjvRzdMH67AfQISVYBUCAwEAAaOCArMwggKvMB0GA1Ud DgQWBBS8tfp8sDk0AZlXYtEMqw+fwu7PCjAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvMjRiODQ3NjktMDhlOC00YTY0LWIxZTctNDUwMDc1YmRmYmVhLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGACYAHzikMA0GCSqGSIb3DQEBCwUAA4IBAQB2K5ovElSRQhUaYpbUbj0Ygz3U o9MfsSYdgURK5z1J5+vmqrfNTWvXwxWb6hj+JPlGyfKIh+RBLN76107yNL/aMW3R kopqRAilHzS5ScFCtmACdNqciAC49C0xW/mIr4hRm3pub4dt7CYQTwCvIazAqxK2 8qoWlc9wtBIs45QI5wt/7LO5Y4Xi4itJOgONzuF+vQSdFog1/gKNZMCQX/t5vnFV gnK0NH66tBf6y5iBKx5x5rsv5dl05By53/J1gweqNHLPQoQ+6paWeml7aohBoMtH 8N660fJbbGP/AeNyEtSDt/uMhB7TVofveJvMJA+oLBI52QzieCCDUlijcZ7r -----END CERTIFICATE-----Generated at Mon Mar 2 00:08:00 2026 by rpki-client