$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e204a0b-8cbe-4a1f-81f6-d8a388364e64.roa File: 3e204a0b-8cbe-4a1f-81f6-d8a388364e64.roa (raw, json) Hash identifier: qlkQ2T4gmf2qBPVeK/0BC3OzAwZyyAA95aTRXKk20Ag= Subject key identifier: 40:F0:51:67:A1:C0:38:7F:58:77:47:4C:B7:95:C7:B2:1D:65:76:CA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7D1D354418A31BABFF1A8063DABF27748A325771 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e204a0b-8cbe-4a1f-81f6-d8a388364e64.roa Signing time: Wed 25 Feb 2026 00:41:10 +0000 ROA not before: Wed 25 Feb 2026 00:41:10 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2a:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:1d:35:44:18:a3:1b:ab:ff:1a:80:63:da:bf:27:74:8a:32:57:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 00:41:10 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=80ea6513916440ff2b3faf501009bfaf499d649ac1fcbab7d3290c55aaff120d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1f:a6:9a:b2:0b:9b:43:f3:72:d8:87:13:9c: eb:91:ac:2b:1c:4d:e7:7d:7a:b7:65:b1:16:58:3c: b7:c5:49:64:db:2c:25:2f:ba:4b:74:aa:4b:df:65: 03:57:35:cf:83:74:df:73:38:fc:bb:41:16:c0:09: 42:f0:5e:bb:88:05:91:c5:d6:d2:55:98:8d:1d:11: dc:11:f2:2f:ab:4c:20:80:e2:7f:9f:68:0e:43:83: ed:78:79:e6:45:67:6a:2b:35:d6:49:04:91:17:fa: cc:37:ff:0f:77:7c:68:69:93:34:42:b6:af:26:b2: 9a:4d:59:ce:18:a0:34:de:53:ae:e4:65:39:5c:d5: 92:91:ed:ff:0a:03:cb:a4:23:ea:bb:b7:21:b5:7d: 90:09:74:85:10:0c:a1:f7:8f:2e:83:d4:5c:6a:fd: 6b:9a:2c:6c:41:f6:cf:18:03:7c:cd:93:ef:f9:a5: 40:f0:25:fb:a2:8d:7b:7b:e9:4e:8c:e7:f1:eb:9d: 0f:b0:6c:fd:90:6e:f4:9e:81:b7:4a:0a:c1:c5:dc: 48:9d:7e:68:80:3e:4c:24:22:22:0f:f8:33:4d:03: eb:f4:35:aa:ec:86:7f:7c:1e:40:9e:ad:89:a7:fe: 6d:ab:d8:82:7b:2b:d0:f9:10:1f:07:f3:4c:7f:8d: 92:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F0:51:67:A1:C0:38:7F:58:77:47:4C:B7:95:C7:B2:1D:65:76:CA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e204a0b-8cbe-4a1f-81f6-d8a388364e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2a:8000::/36 Signature Algorithm: sha256WithRSAEncryption 1d:b8:50:7c:fb:62:da:44:7a:60:4a:fd:14:e4:45:b5:ea:ac: 17:f1:e7:28:89:92:b9:58:0e:a4:62:a3:c4:ee:05:01:d8:09: cc:43:ba:74:5a:96:3c:28:ef:41:29:14:50:18:a8:d7:b7:d5: 78:bc:b2:8b:36:d1:fc:c9:92:fa:57:8a:e6:23:3e:23:79:72: ff:07:18:30:d9:56:d2:3c:1a:89:bf:48:fb:9f:e5:a0:5f:b3: 31:45:3b:07:d6:e3:3b:7d:cd:4a:7a:aa:bf:76:f8:1e:fa:ab: a3:3a:00:68:61:a7:79:99:24:36:1e:bb:5c:76:f1:02:e0:8d: 07:c1:4f:f9:0d:cc:09:d7:8c:be:c1:d0:04:e7:6f:b0:97:b6: 35:12:42:7d:db:5d:f2:89:ae:02:bf:0b:7e:6e:72:3e:8e:37: 1c:db:87:b8:dc:ec:69:2e:71:34:d3:24:5c:88:9b:1c:a5:3e: 20:e3:d6:90:aa:e2:18:34:79:22:d5:fa:b8:12:ee:51:9e:d9: 92:a9:7e:e1:e5:f7:43:f2:79:c1:27:ed:77:ad:70:5a:bb:30: 79:bb:8f:76:c0:f9:5e:f6:82:c0:c5:48:c6:0e:44:f7:9b:53: 4b:94:09:66:ba:31:0e:ce:51:53:52:71:21:01:3e:2f:18:99: 14:70:12:d3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfR01RBijG6v/GoBj2r8ndIoyV3EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDA0MTEwWhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MGVhNjUxMzkxNjQ0MGZmMmIzZmFmNTAxMDA5YmZhZjQ5 OWQ2NDlhYzFmY2JhYjdkMzI5MGM1NWFhZmYxMjBkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTH6aasgubQ/Ny2IcTnOuRrCscTed9erdlsRZYPLfFSWTb LCUvukt0qkvfZQNXNc+DdN9zOPy7QRbACULwXruIBZHF1tJVmI0dEdwR8i+rTCCA 4n+faA5Dg+14eeZFZ2orNdZJBJEX+sw3/w93fGhpkzRCtq8msppNWc4YoDTeU67k ZTlc1ZKR7f8KA8ukI+q7tyG1fZAJdIUQDKH3jy6D1Fxq/WuaLGxB9s8YA3zNk+/5 pUDwJfuijXt76U6M5/HrnQ+wbP2QbvSegbdKCsHF3EidfmiAPkwkIiIP+DNNA+v0 Narshn98HkCerYmn/m2r2IJ7K9D5EB8H80x/jZKFAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUQPBRZ6HAOH9Yd0dMt5XHsh1ldsowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNlMjA0YTBiLThjYmUtNGExZi04MWY2LWQ4YTM4ODM2NGU2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8qgDANBgkqhkiG9w0BAQsFAAOCAQEAHbhQfPti2kR6YEr9FORFteqs F/HnKImSuVgOpGKjxO4FAdgJzEO6dFqWPCjvQSkUUBio17fVeLyyizbR/MmS+leK 5iM+I3ly/wcYMNlW0jwaib9I+5/loF+zMUU7B9bjO33NSnqqv3b4HvqrozoAaGGn eZkkNh67XHbxAuCNB8FP+Q3MCdeMvsHQBOdvsJe2NRJCfdtd8omuAr8Lfm5yPo43 HNuHuNzsaS5xNNMkXIibHKU+IOPWkKriGDR5ItX6uBLuUZ7Zkql+4eX3Q/J5wSft d61wWrswebuPdsD5XvaCwMVIxg5E95tTS5QJZroxDs5RU1JxIQE+LxiZFHAS0w== -----END CERTIFICATE-----Generated at Mon Mar 2 00:06:39 2026 by rpki-client