$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50f2f1cd-9e13-4145-9073-abe0169099f0.roa File: 50f2f1cd-9e13-4145-9073-abe0169099f0.roa (raw, json) Hash identifier: TVNnJwZyZD2weaZmJesqVqm08AtIcX8GK9lQxIA/Ysc= Subject key identifier: 25:4F:70:E3:CE:A3:20:B1:E3:79:69:65:B9:4C:8C:29:13:5C:7F:A5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 04042AA388925D1037C99585C0072056780F0528 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50f2f1cd-9e13-4145-9073-abe0169099f0.roa Signing time: Wed 25 Feb 2026 01:30:47 +0000 ROA not before: Wed 25 Feb 2026 01:30:47 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f20:4000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:04:2a:a3:88:92:5d:10:37:c9:95:85:c0:07:20:56:78:0f:05:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 01:30:47 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=3b47b45b912c93e4f413e36eaa87b8960838868e25131565e47d21575dcd3286, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:dd:33:1b:6d:de:ca:3b:71:da:2d:f0:9e:cf: 82:49:38:f1:cc:06:73:99:e9:cc:69:de:65:3a:71: 77:54:9c:25:64:4a:3e:be:5b:01:5b:ad:07:41:94: a4:50:09:e4:f2:c8:c3:7e:21:ae:87:16:8f:6c:ee: 64:a8:98:1b:20:5d:44:f9:f9:65:80:f2:e3:37:9f: 46:94:cf:2e:5d:a8:d7:09:fe:11:f6:d7:b5:dc:6f: 92:f4:f6:bf:ee:15:c2:44:e9:40:ce:ed:5d:0b:c6: aa:5e:cd:b8:58:8d:2b:f4:9c:b9:60:8a:3f:44:83: 5c:27:57:84:07:14:f6:7c:d4:59:a8:50:88:0b:03: 9a:a1:72:9b:38:8e:80:a6:84:f8:a2:73:4c:fe:6d: 17:a6:ca:88:44:9b:1b:48:d3:e4:35:c2:46:2b:8c: 61:8d:76:54:85:bf:74:34:69:6e:94:8e:e7:81:c0: c5:83:96:ec:fb:2a:3b:2b:e4:d9:f4:97:02:6e:2f: 08:1e:68:ad:aa:91:04:4e:7f:92:fd:30:07:0e:ec: 92:38:01:02:76:04:9d:fd:f0:81:f1:fd:29:08:29: 5f:18:66:86:66:92:32:49:00:75:7d:dc:bd:79:42: 88:00:ba:33:3d:98:da:1f:ac:f3:9b:b0:99:33:ad: c8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4F:70:E3:CE:A3:20:B1:E3:79:69:65:B9:4C:8C:29:13:5C:7F:A5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50f2f1cd-9e13-4145-9073-abe0169099f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f20:4000::/36 Signature Algorithm: sha256WithRSAEncryption 56:9b:ad:61:81:a9:e0:2e:1d:a5:0e:ff:69:ed:22:1a:bb:c0: a7:f8:32:4f:10:9c:32:66:b1:2c:95:37:55:a4:19:b6:57:7e: 1a:64:47:8e:a0:c7:39:12:4f:e0:de:0d:d5:25:f9:79:e9:32: 35:26:46:59:f9:13:69:31:24:6a:42:f3:98:f5:6e:a3:4c:1b: e7:22:70:75:5f:40:c6:d7:e4:f4:ed:35:a9:8e:02:0b:77:6f: 30:b2:47:7f:7f:42:f4:44:b5:73:ce:78:b2:fc:59:e9:2f:70: e5:fc:da:1a:24:4f:f0:4e:34:c5:9b:27:64:61:21:e9:f7:3c: 7f:0b:40:e1:c0:69:49:6f:e1:d1:97:6f:54:e4:c8:f0:17:eb: 31:e6:9b:48:1c:3a:d4:8c:fa:97:f5:aa:43:a0:b8:14:84:36: 84:04:eb:fa:cd:dc:9e:37:07:86:1f:55:47:0c:f0:1f:c8:3d: 06:80:16:f9:1d:b4:c2:e5:45:c2:ac:af:a0:a2:7b:df:59:dd: e6:6c:43:93:f3:97:78:73:ff:d9:f0:cb:61:fc:9d:d4:f1:9d: d9:2b:3a:21:23:50:90:09:30:85:a9:1b:31:35:86:8c:df:fc: 70:d4:73:dc:ae:34:43:ee:38:4e:d6:63:48:5d:06:97:fb:a2: a9:16:82:30 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBAQqo4iSXRA3yZWFwAcgVngPBSgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDEzMDQ3WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjQ3YjQ1YjkxMmM5M2U0ZjQxM2UzNmVhYTg3Yjg5NjA4 Mzg4NjhlMjUxMzE1NjVlNDdkMjE1NzVkY2QzMjg2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCa3TMbbd7KO3HaLfCez4JJOPHMBnOZ6cxp3mU6cXdUnCVk Sj6+WwFbrQdBlKRQCeTyyMN+Ia6HFo9s7mSomBsgXUT5+WWA8uM3n0aUzy5dqNcJ /hH217Xcb5L09r/uFcJE6UDO7V0LxqpezbhYjSv0nLlgij9Eg1wnV4QHFPZ81Fmo UIgLA5qhcps4joCmhPiic0z+bRemyohEmxtI0+Q1wkYrjGGNdlSFv3Q0aW6UjueB wMWDluz7Kjsr5Nn0lwJuLwgeaK2qkQROf5L9MAcO7JI4AQJ2BJ398IHx/SkIKV8Y ZoZmkjJJAHV93L15QogAujM9mNofrPObsJkzrciHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUJU9w486jILHjeWlluUyMKRNcf6UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUwZjJmMWNkLTllMTMtNDE0NS05MDczLWFiZTAxNjkwOTlmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8gQDANBgkqhkiG9w0BAQsFAAOCAQEAVputYYGp4C4dpQ7/ae0iGrvA p/gyTxCcMmaxLJU3VaQZtld+GmRHjqDHORJP4N4N1SX5eekyNSZGWfkTaTEkakLz mPVuo0wb5yJwdV9Axtfk9O01qY4CC3dvMLJHf39C9ES1c854svxZ6S9w5fzaGiRP 8E40xZsnZGEh6fc8fwtA4cBpSW/h0ZdvVOTI8BfrMeabSBw61Iz6l/WqQ6C4FIQ2 hATr+s3cnjcHhh9VRwzwH8g9BoAW+R20wuVFwqyvoKJ731nd5mxDk/OXeHP/2fDL Yfyd1PGd2Ss6ISNQkAkwhakbMTWGjN/8cNRz3K40Q+44TtZjSF0Gl/uiqRaCMA== -----END CERTIFICATE-----Generated at Mon Mar 2 00:16:32 2026 by rpki-client