$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/538d0377-3611-4c1a-a172-2e35b6509d3f.roa File: 538d0377-3611-4c1a-a172-2e35b6509d3f.roa (raw, json) Hash identifier: EA4uSaWl6DNBOW8GPUkAzjninR58WtG7pS1xRlVlK/M= Subject key identifier: 60:5C:F2:74:07:7B:65:66:EA:C5:BD:16:C8:49:00:52:61:95:40:24 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 435DE68AE6B26BEC4359D615FD11F92279D6BC98 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/538d0377-3611-4c1a-a172-2e35b6509d3f.roa Signing time: Tue 24 Feb 2026 00:30:36 +0000 ROA not before: Tue 24 Feb 2026 00:30:36 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:80a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:5d:e6:8a:e6:b2:6b:ec:43:59:d6:15:fd:11:f9:22:79:d6:bc:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 00:30:36 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=a13025e6d1c9ed5c78226613d4de31900d2ed92195e0909539e39a7bc34622dc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f8:ff:f9:ba:55:6d:38:5d:c8:08:cb:95:8b: 5f:d1:c8:80:65:a9:b7:7f:fa:dc:19:e5:54:71:6e: a9:51:e0:98:08:6b:61:a7:b0:0f:c0:51:32:f8:ba: d5:f8:b7:83:54:15:8d:c0:af:8c:42:45:ed:e7:67: 24:7d:ef:2d:13:00:f5:66:da:66:19:89:a0:77:72: 8c:60:f3:e5:0d:4a:f0:ff:73:9f:4c:03:30:b9:b7: 3e:ff:35:77:ac:77:a3:60:9d:56:db:2c:e7:87:95: a5:ed:c5:c3:95:41:33:81:ce:a9:d6:9c:75:57:b3: ed:40:16:64:5a:47:8a:55:2b:a0:26:32:57:50:93: 94:7a:73:00:6e:af:e8:18:9e:42:80:87:7d:7c:03: 8b:8d:37:52:d6:45:ab:78:01:c7:4a:c8:87:5e:06: 76:58:80:7e:76:fb:b8:c6:a1:9c:71:70:61:a4:76: b5:60:27:da:5e:a4:e5:65:fc:3b:a9:f7:50:33:28: 6e:46:93:92:42:b6:64:5e:ba:b9:72:16:58:0b:b8: 36:ec:fb:a5:19:95:d5:ce:33:af:47:db:42:9b:e7: b3:f6:a0:8b:45:f2:07:32:93:67:b4:c5:a3:71:31: a9:2d:b0:0d:a3:80:7b:e7:54:65:38:9c:46:87:d7: 2c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5C:F2:74:07:7B:65:66:EA:C5:BD:16:C8:49:00:52:61:95:40:24 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/538d0377-3611-4c1a-a172-2e35b6509d3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:80a0::/48 Signature Algorithm: sha256WithRSAEncryption 35:d3:e6:71:8a:86:b4:97:5b:16:af:e9:e0:1c:3e:c5:4e:48: 9b:c6:87:d3:53:6e:ec:c6:78:64:d7:d1:14:84:35:7f:be:69: 27:a9:e4:15:80:a4:85:0c:3e:bb:bc:b8:3b:3d:11:bf:d7:d5: 61:87:96:96:0f:79:ee:ad:49:22:2f:24:e0:b7:07:c0:af:5c: 93:5b:56:08:d3:40:e6:96:11:aa:72:e3:26:a7:8e:2d:b0:d8: 73:04:39:3e:b4:b5:5e:6e:33:9d:0a:97:e3:88:1a:0e:ee:90: 0f:b1:bc:3b:9d:6c:4d:40:89:1f:2b:43:8d:c3:05:fd:a1:b8: 0b:26:c1:a3:1e:cd:27:2b:01:31:2d:3e:3f:3e:ef:d7:a0:cc: bd:1f:96:3e:d7:af:b5:fe:bb:39:6a:88:b5:59:97:63:f4:a2: fb:8c:1d:1a:88:1c:43:6b:28:bc:10:93:b2:2e:f0:cb:a2:da: ca:04:ca:56:82:74:a9:83:be:44:98:0e:fb:63:07:3a:45:10: 02:9d:36:6b:ba:cd:95:50:96:1c:dd:81:db:6c:f6:3f:1f:a6: 6d:bc:de:a8:7b:ea:5d:98:89:e0:7a:fa:91:86:97:69:8c:bc: 7e:8e:59:b2:0e:46:55:73:db:4e:70:06:55:00:de:68:f5:34: 63:45:72:49 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQ13miuaya+xDWdYV/RH5InnWvJgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDAzMDM2WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTMwMjVlNmQxYzllZDVjNzgyMjY2MTNkNGRlMzE5MDBk MmVkOTIxOTVlMDkwOTUzOWUzOWE3YmMzNDYyMmRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDD+P/5ulVtOF3ICMuVi1/RyIBlqbd/+twZ5VRxbqlR4JgI a2GnsA/AUTL4utX4t4NUFY3Ar4xCRe3nZyR97y0TAPVm2mYZiaB3coxg8+UNSvD/ c59MAzC5tz7/NXesd6NgnVbbLOeHlaXtxcOVQTOBzqnWnHVXs+1AFmRaR4pVK6Am MldQk5R6cwBur+gYnkKAh318A4uNN1LWRat4AcdKyIdeBnZYgH52+7jGoZxxcGGk drVgJ9pepOVl/Dup91AzKG5Gk5JCtmReurlyFlgLuDbs+6UZldXOM69H20Kb57P2 oItF8gcyk2e0xaNxMaktsA2jgHvnVGU4nEaH1ywbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYFzydAd7ZWbqxb0WyEkAUmGVQCQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUzOGQwMzc3LTM2MTEtNGMxYS1hMTcyLTJlMzViNjUwOWQzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gKAwDQYJKoZIhvcNAQELBQADggEBADXT5nGKhrSXWxav6eAcPsVO SJvGh9NTbuzGeGTX0RSENX++aSep5BWApIUMPru8uDs9Eb/X1WGHlpYPee6tSSIv JOC3B8CvXJNbVgjTQOaWEapy4yanji2w2HMEOT60tV5uM50Kl+OIGg7ukA+xvDud bE1AiR8rQ43DBf2huAsmwaMezScrATEtPj8+79egzL0flj7Xr7X+uzlqiLVZl2P0 ovuMHRqIHENrKLwQk7Iu8Mui2soEylaCdKmDvkSYDvtjBzpFEAKdNmu6zZVQlhzd gdts9j8fpm283qh76l2YieB6+pGGl2mMvH6OWbIORlVz205wBlUA3mj1NGNFckk= -----END CERTIFICATE-----Generated at Sun Mar 1 22:26:08 2026 by rpki-client