$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33b8210c-6930-4f2c-891b-541891aa197a.roa File: 33b8210c-6930-4f2c-891b-541891aa197a.roa (raw, json) Hash identifier: 2cbmsTMqvPrbveg3FJjvr6M1m62GUlAZLo/tMUyhuac= Subject key identifier: 69:05:5C:3B:BD:3D:01:56:06:9B:D0:57:CA:D0:B6:6B:1A:12:E8:51 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 36FCCB47142AE7E13B3E2C7C473ADCF146B4C733 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33b8210c-6930-4f2c-891b-541891aa197a.roa Signing time: Sat 21 Feb 2026 00:31:26 +0000 ROA not before: Sat 21 Feb 2026 00:31:26 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:fc:cb:47:14:2a:e7:e1:3b:3e:2c:7c:47:3a:dc:f1:46:b4:c7:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:31:26 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=f53a6f5f279ed43958323addad2e4099a477894f5bbe15380884d103e6824eb8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:70:e3:55:8a:b4:1f:c3:d6:fb:0a:7a:f7:0a: c5:de:2b:a9:bc:ba:4c:99:3b:48:dc:ef:d9:be:53: ab:2e:71:4d:44:1a:af:c8:a9:b0:30:d1:df:aa:2e: 54:45:96:27:72:de:f6:98:1b:16:d2:d1:c7:d0:07: 0f:98:39:75:bf:dd:d4:9a:c0:c6:d2:c4:e0:9f:86: 4b:85:23:4e:b6:b2:e8:50:d9:ba:1a:9f:51:25:74: 90:67:8d:82:43:3f:17:31:f3:d6:fb:4b:5a:4a:5b: a7:ac:9c:88:01:11:8d:cd:f1:34:6e:0e:e7:c7:35: e6:58:f9:f0:ed:53:95:3a:66:65:a5:c8:e2:c2:4d: 96:b9:bd:c2:38:0d:bd:55:87:dc:54:44:91:1d:9a: 5b:da:8d:34:05:2d:94:93:db:2a:0c:e1:a0:17:02: 8e:8b:ed:e1:87:6e:d5:65:aa:36:c0:41:7b:24:76: f5:b6:e0:a5:e9:87:35:28:34:d0:95:9a:5b:13:07: 43:93:50:1e:13:75:be:b7:e5:a8:a1:cd:13:f6:01: 73:d8:58:fa:fa:34:2d:51:d2:19:30:fd:68:ce:0f: bd:e3:8e:41:31:7c:ad:1a:02:be:f8:ba:d5:8c:70: 7b:05:0e:c2:43:a0:0e:d2:ef:1a:2e:7d:28:f9:bf: 00:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:05:5C:3B:BD:3D:01:56:06:9B:D0:57:CA:D0:B6:6B:1A:12:E8:51 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33b8210c-6930-4f2c-891b-541891aa197a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:800::/48 Signature Algorithm: sha256WithRSAEncryption 1e:f7:50:99:68:12:12:34:50:12:97:2d:e1:51:54:db:6c:98: d9:c1:13:8d:ab:18:22:97:30:d2:b0:9d:4e:36:73:87:a3:b5: 3c:75:83:26:8c:dd:3b:34:6f:f7:75:6e:66:f6:7b:af:29:34: 95:09:65:20:97:ca:ec:fb:9b:8e:be:27:ef:9f:ea:77:b4:da: 1d:0a:7b:cd:dc:1c:7f:bb:5a:ff:87:73:f5:2b:df:6c:8b:78: 1a:33:17:d8:82:56:73:a1:41:1f:1a:2b:1f:5e:1f:01:c4:7d: cd:48:27:c5:ad:e2:04:84:e0:c2:50:05:e7:f9:ef:62:6e:65: 52:bc:0b:70:80:3f:c8:62:53:45:34:a5:aa:73:99:29:8f:4f: dd:2f:8b:7c:1b:53:f9:4f:2c:ee:ec:5f:6f:ff:04:00:df:c9: 4c:7b:7f:50:87:f1:34:76:7f:1e:66:36:e4:e6:f9:88:33:a3: 5f:f0:3e:d0:c8:b8:9b:52:3f:87:c3:65:09:e4:1b:cd:3b:dd: 26:b3:b4:5f:85:09:d4:54:a9:22:42:77:64:bf:cc:ba:f9:f9: 8f:71:19:dd:c2:57:d6:b1:fb:d7:7d:9f:c4:89:3e:6a:95:e7: 4b:a1:0d:db:85:3f:3c:6d:8c:4d:67:b9:2d:aa:46:89:04:db: 7c:2e:3e:5f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNvzLRxQq5+E7Pix8Rzrc8Ua0xzMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDAzMTI2WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTNhNmY1ZjI3OWVkNDM5NTgzMjNhZGRhZDJlNDA5OWE0 Nzc4OTRmNWJiZTE1MzgwODg0ZDEwM2U2ODI0ZWI4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNcONVirQfw9b7Cnr3CsXeK6m8ukyZO0jc79m+U6sucU1E Gq/IqbAw0d+qLlRFlidy3vaYGxbS0cfQBw+YOXW/3dSawMbSxOCfhkuFI062suhQ 2boan1EldJBnjYJDPxcx89b7S1pKW6esnIgBEY3N8TRuDufHNeZY+fDtU5U6ZmWl yOLCTZa5vcI4Db1Vh9xURJEdmlvajTQFLZST2yoM4aAXAo6L7eGHbtVlqjbAQXsk dvW24KXphzUoNNCVmlsTB0OTUB4Tdb635aihzRP2AXPYWPr6NC1R0hkw/WjOD73j jkExfK0aAr74utWMcHsFDsJDoA7S7xoufSj5vwAJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUaQVcO709AVYGm9BXytC2axoS6FEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMzYjgyMTBjLTY5MzAtNGYyYy04OTFiLTU0MTg5MWFhMTk3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sCAAwDQYJKoZIhvcNAQELBQADggEBAB73UJloEhI0UBKXLeFRVNts mNnBE42rGCKXMNKwnU42c4ejtTx1gyaM3Ts0b/d1bmb2e68pNJUJZSCXyuz7m46+ J++f6ne02h0Ke83cHH+7Wv+Hc/Ur32yLeBozF9iCVnOhQR8aKx9eHwHEfc1IJ8Wt 4gSE4MJQBef572JuZVK8C3CAP8hiU0U0papzmSmPT90vi3wbU/lPLO7sX2//BADf yUx7f1CH8TR2fx5mNuTm+Ygzo1/wPtDIuJtSP4fDZQnkG8073SaztF+FCdRUqSJC d2S/zLr5+Y9xGd3CV9ax+9d9n8SJPmqV50uhDduFPzxtjE1nuS2qRokE23wuPl8= -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:07 2026 by rpki-client