$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d8ea93-1dc7-4f43-8179-8b6492e119a2.roa File: 46d8ea93-1dc7-4f43-8179-8b6492e119a2.roa (raw, json) Hash identifier: ACmO+MoYnhGStp0EsiI8g4jIj4ewbjxVT1vmczqMNjo= Subject key identifier: 5E:4F:98:7F:ED:E5:EF:27:D4:7E:AF:96:2F:1D:A1:DD:27:01:71:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45C4835FF2656DD2A5761069FF9B99BD1CAF3C00 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d8ea93-1dc7-4f43-8179-8b6492e119a2.roa Signing time: Wed 11 Feb 2026 00:50:43 +0000 ROA not before: Wed 11 Feb 2026 00:50:43 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fea:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c4:83:5f:f2:65:6d:d2:a5:76:10:69:ff:9b:99:bd:1c:af:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 11 00:50:43 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=0f27dce22be80b9283679499153b75753061ea8432704906c3fb117eed9cab96, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d8:0f:6e:bf:e5:34:96:c0:1a:90:54:e5:a9: f4:01:4a:39:89:14:2a:c6:0b:b3:0c:3f:2e:d0:ce: c5:99:97:80:97:e1:2f:51:d9:e1:ff:be:df:97:04: 4f:9f:43:93:91:86:0c:e0:b0:3e:05:ec:a1:20:b2: 12:05:68:bd:9f:2d:d9:a6:32:67:d2:b3:35:f5:df: 64:64:d0:7d:58:84:af:fa:17:58:aa:70:33:e3:7e: 92:29:10:fb:75:1d:ee:91:5a:72:52:55:4e:65:fc: 5f:82:fc:37:9d:10:02:03:3c:05:4d:f5:42:02:de: 70:13:a0:b8:37:f1:5c:70:f3:d3:11:54:e7:6f:8e: 69:7e:74:60:35:f3:5f:90:a7:d0:09:ac:af:83:70: f3:29:38:3c:6b:ff:34:20:93:5a:cc:d8:f5:e1:e1: 3a:c8:14:11:4f:e8:de:4c:2c:14:ce:d9:26:85:4d: ef:5c:92:7e:bb:1f:32:fd:df:20:c9:a2:5a:b4:c9: ba:1f:54:45:ba:0d:b5:aa:0b:6b:d7:8a:17:f2:d8: cf:ff:7a:a2:3d:44:f0:70:2a:d2:e0:14:5a:4b:da: 5f:bb:c2:c1:89:03:c4:97:f7:4f:18:00:7f:f1:fd: 4f:83:7b:5e:d3:08:b2:9d:de:e9:41:cb:17:1d:6f: 0f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4F:98:7F:ED:E5:EF:27:D4:7E:AF:96:2F:1D:A1:DD:27:01:71:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d8ea93-1dc7-4f43-8179-8b6492e119a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea:2040::/48 Signature Algorithm: sha256WithRSAEncryption 79:d5:2e:ba:08:5b:66:ea:67:88:a6:47:de:7c:18:6e:06:18: 22:f0:a2:bb:4d:94:2d:5e:87:39:e2:3d:b4:9a:5f:27:e8:49: 2c:99:66:e6:04:1d:04:61:a1:99:8e:c3:e8:4b:b9:a5:0b:b2: 97:f2:51:a0:a6:ac:7b:39:c9:61:aa:5e:0d:ab:de:30:28:cf: 31:38:85:1e:7f:25:be:72:1c:26:f6:8f:ea:08:58:49:a5:5c: 29:80:d3:01:0b:8c:6b:b9:f0:27:0c:44:11:a5:6d:7a:a4:01: 15:04:96:49:a3:82:3c:b9:10:4e:d5:a9:5f:5c:68:b7:dd:81: aa:09:11:c4:9b:1c:39:6b:dd:f1:cc:9b:cf:35:f7:ac:4f:92: b0:7e:56:a5:9c:73:20:e9:55:c4:67:77:94:38:2c:aa:b5:b4: 44:fa:32:9b:96:75:9e:95:94:62:77:ad:31:67:84:5b:14:d1: 14:be:97:70:78:02:a6:eb:7d:64:fc:28:9e:e9:1a:c4:74:2e: b6:67:82:65:91:a1:64:67:dd:79:9a:b4:ce:e9:54:93:5d:b3: 68:a9:31:13:00:50:00:e2:30:aa:93:bd:64:e7:9c:58:76:a9: 1b:e0:fa:bf:5c:aa:d3:4c:27:f2:c0:cb:2f:2d:ca:c6:dc:f5: aa:68:cd:a6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURcSDX/JlbdKldhBp/5uZvRyvPAAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjExMDA1MDQzWhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjI3ZGNlMjJiZTgwYjkyODM2Nzk0OTkxNTNiNzU3NTMw NjFlYTg0MzI3MDQ5MDZjM2ZiMTE3ZWVkOWNhYjk2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDt2A9uv+U0lsAakFTlqfQBSjmJFCrGC7MMPy7QzsWZl4CX 4S9R2eH/vt+XBE+fQ5ORhgzgsD4F7KEgshIFaL2fLdmmMmfSszX132Rk0H1YhK/6 F1iqcDPjfpIpEPt1He6RWnJSVU5l/F+C/DedEAIDPAVN9UIC3nAToLg38Vxw89MR VOdvjml+dGA181+Qp9AJrK+DcPMpODxr/zQgk1rM2PXh4TrIFBFP6N5MLBTO2SaF Te9ckn67HzL93yDJolq0ybofVEW6DbWqC2vXihfy2M//eqI9RPBwKtLgFFpL2l+7 wsGJA8SX908YAH/x/U+De17TCLKd3ulByxcdbw+BAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXk+Yf+3l7yfUfq+WLx2h3ScBcRcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2ZDhlYTkzLTFkYzctNGY0My04MTc5LThiNjQ5MmUxMTlhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/qIEAwDQYJKoZIhvcNAQELBQADggEBAHnVLroIW2bqZ4imR958GG4G GCLwortNlC1ehzniPbSaXyfoSSyZZuYEHQRhoZmOw+hLuaULspfyUaCmrHs5yWGq Xg2r3jAozzE4hR5/Jb5yHCb2j+oIWEmlXCmA0wELjGu58CcMRBGlbXqkARUElkmj gjy5EE7VqV9caLfdgaoJEcSbHDlr3fHMm88196xPkrB+VqWccyDpVcRnd5Q4LKq1 tET6MpuWdZ6VlGJ3rTFnhFsU0RS+l3B4AqbrfWT8KJ7pGsR0LrZngmWRoWRn3Xma tM7pVJNds2ipMRMAUADiMKqTvWTnnFh2qRvg+r9cqtNMJ/LAyy8tysbc9apozaY= -----END CERTIFICATE-----Generated at Mon Mar 2 05:36:46 2026 by rpki-client