$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89e6356c-d13c-480e-a973-81f7a991a615.roa File: 89e6356c-d13c-480e-a973-81f7a991a615.roa (raw, json) Hash identifier: VJJZkHn5bGEynG7JDrZ9QKewpARh/IfcWGvWMSqE7Ww= Subject key identifier: 68:CA:CC:23:1C:84:F1:8F:49:64:65:AC:76:58:31:28:1A:26:80:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 463A087FA34034CBB79D3EEEA9D7CADB3BC89625 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89e6356c-d13c-480e-a973-81f7a991a615.roa Signing time: Wed 25 Feb 2026 01:00:59 +0000 ROA not before: Wed 25 Feb 2026 01:00:59 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f2f:4000::/37 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:3a:08:7f:a3:40:34:cb:b7:9d:3e:ee:a9:d7:ca:db:3b:c8:96:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 01:00:59 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=963d3d3676f9f6bb711ec3bb22c5b6a488570120f28f11dfc8308d5f51b3f2c6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:48:29:9e:1c:a5:a5:fa:22:8a:26:4f:68:05: 29:7e:5c:6e:7b:4a:11:64:f5:f2:23:54:20:22:86: a5:fa:b9:48:71:da:b3:bc:d5:e2:1b:2e:bb:6b:78: 69:d4:a1:c3:34:c5:58:ce:c3:dc:18:90:22:94:1d: 47:a4:d2:cd:55:d8:07:a9:0c:e7:ab:0a:70:f9:bb: c7:32:c1:7b:4c:eb:69:03:77:78:c3:3b:41:14:20: e3:c8:40:09:b5:43:cd:24:3b:9d:c2:89:f3:0d:b3: 82:68:f3:e0:6e:ae:40:41:ce:84:b8:fe:47:9c:8f: 75:7a:94:42:27:7f:09:cd:c0:ff:83:34:39:ef:68: b3:05:0f:60:d4:4b:2d:cc:02:99:4c:ce:2f:77:99: 18:b5:06:09:d9:de:5b:ba:81:16:15:46:6c:ac:e8: ba:f0:f7:24:98:46:46:80:fc:24:b5:9e:1a:b8:d3: 1c:32:bc:e5:c6:d6:a8:ee:03:e7:d9:cf:13:36:72: b1:fc:04:d8:85:5f:3c:f4:b8:e5:76:21:b5:5e:16: 2d:b3:63:ce:35:78:25:60:5f:00:e2:b5:ea:cd:67: 9b:b3:1e:e2:61:d2:e1:18:7f:74:a5:47:b1:45:4c: 94:58:41:11:41:d0:28:fa:9e:cd:50:7b:d1:c9:ad: 47:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CA:CC:23:1C:84:F1:8F:49:64:65:AC:76:58:31:28:1A:26:80:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89e6356c-d13c-480e-a973-81f7a991a615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2f:4000::/37 Signature Algorithm: sha256WithRSAEncryption 8c:4b:56:77:31:1d:22:13:cf:0d:e7:49:d1:7d:32:9d:91:b4: 94:8b:27:cd:25:34:ec:da:c9:fe:e3:9d:22:f6:c0:25:20:96: 39:b9:4e:a0:b5:75:31:98:90:fe:c3:3a:cd:5b:65:56:81:d2: f3:63:6b:9d:49:fb:7a:30:05:14:b3:c7:2f:21:d5:a9:87:79: fb:e8:9a:72:f6:74:c4:a1:77:d5:86:39:ff:6e:a1:70:3c:86: f4:09:92:56:15:14:a1:10:54:11:d9:b5:4c:10:24:84:61:a8: 29:04:9b:28:d0:b5:0f:55:a7:4b:7c:4a:f1:4e:cb:63:a9:ef: 3e:aa:1e:fc:a7:1c:d6:e3:30:fd:5e:1d:4d:61:d1:5d:61:90: 25:94:39:2a:42:fa:4d:e5:e5:4a:fb:c0:80:dc:15:e6:69:48: 91:f2:a1:1a:7c:cd:1b:fb:25:bd:1d:32:7e:73:15:53:c9:8a: 71:80:b1:fb:c7:35:e3:a6:73:59:7c:c0:bb:2f:b2:6f:80:b0: b2:50:f7:61:63:b7:bd:53:60:d6:12:53:6d:d2:b8:55:45:e6: fb:af:78:98:5f:5c:d0:31:3b:9c:65:ab:36:1a:5f:e0:da:bf: 63:4d:e4:3f:4f:a2:53:cb:47:fc:66:17:c2:fc:3e:aa:f0:db: f3:f9:aa:a2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURjoIf6NANMu3nT7uqdfK2zvIliUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDEwMDU5WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjNkM2QzNjc2ZjlmNmJiNzExZWMzYmIyMmM1YjZhNDg4 NTcwMTIwZjI4ZjExZGZjODMwOGQ1ZjUxYjNmMmM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHSCmeHKWl+iKKJk9oBSl+XG57ShFk9fIjVCAihqX6uUhx 2rO81eIbLrtreGnUocM0xVjOw9wYkCKUHUek0s1V2AepDOerCnD5u8cywXtM62kD d3jDO0EUIOPIQAm1Q80kO53CifMNs4Jo8+BurkBBzoS4/kecj3V6lEInfwnNwP+D NDnvaLMFD2DUSy3MAplMzi93mRi1BgnZ3lu6gRYVRmys6Lrw9ySYRkaA/CS1nhq4 0xwyvOXG1qjuA+fZzxM2crH8BNiFXzz0uOV2IbVeFi2zY841eCVgXwDiterNZ5uz HuJh0uEYf3SlR7FFTJRYQRFB0Cj6ns1Qe9HJrUcXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUaMrMIxyE8Y9JZGWsdlgxKBomgHAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5ZTYzNTZjLWQxM2MtNDgwZS1hOTczLTgxZjdhOTkxYTYxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8vQDANBgkqhkiG9w0BAQsFAAOCAQEAjEtWdzEdIhPPDedJ0X0ynZG0 lIsnzSU07NrJ/uOdIvbAJSCWOblOoLV1MZiQ/sM6zVtlVoHS82NrnUn7ejAFFLPH LyHVqYd5++iacvZ0xKF31YY5/26hcDyG9AmSVhUUoRBUEdm1TBAkhGGoKQSbKNC1 D1WnS3xK8U7LY6nvPqoe/Kcc1uMw/V4dTWHRXWGQJZQ5KkL6TeXlSvvAgNwV5mlI kfKhGnzNG/slvR0yfnMVU8mKcYCx+8c146ZzWXzAuy+yb4CwslD3YWO3vVNg1hJT bdK4VUXm+694mF9c0DE7nGWrNhpf4Nq/Y03kP0+iU8tH/GYXwvw+qvDb8/mqog== -----END CERTIFICATE-----Generated at Sun Mar 1 22:28:27 2026 by rpki-client