$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3001731e-9d84-4437-8a4f-0939c53fce5f.roa File: 3001731e-9d84-4437-8a4f-0939c53fce5f.roa (raw, json) Hash identifier: zVDCIv1ysYYafdlVWVN4xT9UcyolvgszLv9Nd3b2fr8= Subject key identifier: E8:3F:F1:6A:E7:E2:30:CB:61:2A:DC:49:A6:EA:47:39:A9:43:C1:4C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7805EF0B3811ED4702C4403F5641559643A5329E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3001731e-9d84-4437-8a4f-0939c53fce5f.roa Signing time: Wed 11 Feb 2026 00:40:10 +0000 ROA not before: Wed 11 Feb 2026 00:40:10 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fea:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:05:ef:0b:38:11:ed:47:02:c4:40:3f:56:41:55:96:43:a5:32:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 11 00:40:10 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=dbe73a3a394b199d9d138831019921aaeac116549ed7d1b44a5da53b61cccbc0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2e:20:21:5b:82:6a:41:10:e4:09:91:0b:c8: 26:b1:31:7f:44:91:d3:18:8a:46:25:ed:a1:43:86: 75:35:4a:02:97:46:f2:71:42:7d:58:76:00:33:02: 21:ba:78:f7:8a:dc:08:83:ce:b1:cb:c4:f3:ac:ef: d4:76:5b:42:91:c3:95:ea:2f:f4:27:29:30:93:87: 77:82:23:fb:9a:87:12:33:f2:db:af:89:ae:58:85: 24:79:44:17:27:e8:35:a8:fb:12:b0:28:1f:54:1f: d9:2b:51:fe:13:5e:35:4b:d3:ad:b4:9e:dd:0f:13: 66:26:5b:0f:b4:18:3d:ec:c7:3a:af:b1:c4:3c:3c: e9:4a:97:41:f9:8a:ea:fb:bb:2a:62:97:1d:28:66: 3f:b5:fc:b2:40:bc:ca:8a:e8:97:62:69:df:11:b6: d2:ed:22:d2:69:23:1c:66:a9:bd:b2:1e:02:b7:35: 81:22:b8:f6:44:15:a2:02:2e:04:1b:80:3e:79:6b: 87:73:ae:6e:3a:d2:b5:47:8b:be:6d:0e:26:27:8b: 29:98:4c:b4:89:d4:23:28:16:2f:41:e3:bf:af:a8: ef:e0:b0:d5:3c:f3:08:7a:98:09:e7:33:a5:11:cb: 62:66:a7:33:81:d7:03:7d:6c:87:bb:a8:43:29:de: 54:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3F:F1:6A:E7:E2:30:CB:61:2A:DC:49:A6:EA:47:39:A9:43:C1:4C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3001731e-9d84-4437-8a4f-0939c53fce5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea:1000::/40 Signature Algorithm: sha256WithRSAEncryption 57:aa:3a:d9:39:89:90:61:ac:e4:a0:54:f2:c7:0f:8a:e4:9e: 07:d3:59:a4:7a:ed:ef:60:93:52:18:ab:eb:08:5c:bf:bd:4f: 32:b0:79:e2:d4:e0:4d:d0:c6:5f:95:0e:f6:de:6d:5d:db:27: d0:04:65:98:b3:82:e6:0b:67:47:53:b4:f7:bc:b0:64:2b:b2: 2e:bd:f0:d4:78:c9:ae:6a:39:21:07:59:d7:a8:42:94:fd:74: f0:b9:b3:65:c6:06:89:50:4b:cc:89:23:da:ac:81:f4:25:27: 9f:13:11:fb:d1:40:ec:dc:55:53:38:f4:78:15:09:a5:ec:1a: 98:b8:32:f7:8d:33:3e:0d:86:53:b9:05:dd:f1:9c:ad:ac:15: 0e:a8:af:0d:02:e5:97:50:b1:8f:43:cb:91:1b:96:c7:dc:74: bd:c0:b6:f6:db:44:d1:1b:94:03:f0:3f:ab:9e:b8:60:f8:89: f0:0f:9a:c2:51:5b:2a:2f:7a:62:21:85:84:85:62:fb:b3:d2: 6e:68:9e:30:8b:26:3e:48:6b:de:6a:fd:cc:ba:79:83:08:8d: 73:42:3f:0d:ab:42:f5:76:4c:8e:cc:27:28:93:9e:59:66:00: 2e:fb:b9:93:ed:f8:cc:ea:66:12:10:1a:31:48:7c:8c:03:43: 63:9b:80:8c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUeAXvCzgR7UcCxEA/VkFVlkOlMp4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjExMDA0MDEwWhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYmU3M2EzYTM5NGIxOTlkOWQxMzg4MzEwMTk5MjFhYWVh YzExNjU0OWVkN2QxYjQ0YTVkYTUzYjYxY2NjYmMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjLiAhW4JqQRDkCZELyCaxMX9EkdMYikYl7aFDhnU1SgKX RvJxQn1YdgAzAiG6ePeK3AiDzrHLxPOs79R2W0KRw5XqL/QnKTCTh3eCI/uahxIz 8tuvia5YhSR5RBcn6DWo+xKwKB9UH9krUf4TXjVL0620nt0PE2YmWw+0GD3sxzqv scQ8POlKl0H5iur7uypilx0oZj+1/LJAvMqK6Jdiad8RttLtItJpIxxmqb2yHgK3 NYEiuPZEFaICLgQbgD55a4dzrm460rVHi75tDiYniymYTLSJ1CMoFi9B47+vqO/g sNU88wh6mAnnM6URy2JmpzOB1wN9bIe7qEMp3lSzAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU6D/xaufiMMthKtxJpupHOalDwUwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMwMDE3MzFlLTlkODQtNDQzNy04YTRmLTA5MzljNTNmY2U1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/qEDANBgkqhkiG9w0BAQsFAAOCAQEAV6o62TmJkGGs5KBU8scPiuSe B9NZpHrt72CTUhir6whcv71PMrB54tTgTdDGX5UO9t5tXdsn0ARlmLOC5gtnR1O0 97ywZCuyLr3w1HjJrmo5IQdZ16hClP108LmzZcYGiVBLzIkj2qyB9CUnnxMR+9FA 7NxVUzj0eBUJpewamLgy940zPg2GU7kF3fGcrawVDqivDQLll1Cxj0PLkRuWx9x0 vcC29ttE0RuUA/A/q564YPiJ8A+awlFbKi96YiGFhIVi+7PSbmieMIsmPkhr3mr9 zLp5gwiNc0I/DatC9XZMjswnKJOeWWYALvu5k+34zOpmEhAaMUh8jANDY5uAjA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:30:58 2026 by rpki-client