$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ebb627b-d720-4375-b47a-2400c3db73e9.roa File: 8ebb627b-d720-4375-b47a-2400c3db73e9.roa (raw, json) Hash identifier: 7SVQnQSKViXmNlwZ/SEeQJ3k7vBSmxCYlQEhjwMIU5Q= Subject key identifier: 28:50:17:25:12:1D:B4:6B:E3:64:0F:F1:9B:03:BC:80:DB:6E:B6:89 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 680FE2A913304D6A68E5B5DCFA1DC52A48A6154C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ebb627b-d720-4375-b47a-2400c3db73e9.roa Signing time: Tue 24 Feb 2026 02:00:07 +0000 ROA not before: Tue 24 Feb 2026 02:00:07 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f11:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:0f:e2:a9:13:30:4d:6a:68:e5:b5:dc:fa:1d:c5:2a:48:a6:15:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 02:00:07 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=2cb6beee2f8c0e8e8f1764bb4a997176cc0d601e0593766196c20887db664630, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d6:20:e1:03:8b:00:34:98:c9:66:1b:06:f4: 4e:67:88:bc:f5:1b:bc:33:ab:9e:ee:56:e9:ae:68: 9d:03:56:be:85:a9:59:ba:cc:46:4d:96:85:bb:c9: 57:73:41:e4:ef:bf:b7:1b:c2:a7:62:f2:a3:53:40: 6c:69:c6:c5:a2:ef:2d:4d:e1:8b:70:a3:13:27:fe: 70:ca:ee:8e:0d:f6:d2:40:ad:9d:96:0e:3f:23:79: 67:6d:8e:c4:65:60:77:dd:a4:ac:4c:83:f4:53:f1: ec:1f:38:cc:73:c8:ff:98:4d:76:d2:05:05:94:82: 8d:26:11:54:5b:1a:6e:98:98:85:27:31:61:68:95: e6:b2:b5:b3:88:a2:c9:5a:f5:6f:33:32:d5:23:c3: 89:a8:4b:31:30:d7:0d:2c:3d:50:40:f5:18:16:e9: ad:12:ce:15:31:0c:2a:56:93:f0:b8:9c:89:f3:09: 6b:95:8c:86:fd:5e:cb:27:5c:7b:f4:a1:4b:1f:be: c4:fb:e4:27:94:d3:0d:b2:78:86:cd:48:6d:e1:3d: 4c:5c:e2:16:bd:76:6f:68:7b:96:81:cb:76:62:1d: 26:0f:01:54:8f:95:91:b8:8c:0c:c3:b7:14:54:4b: 93:96:df:5e:f8:fa:a8:b2:c0:1b:95:2a:77:ae:67: 80:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:50:17:25:12:1D:B4:6B:E3:64:0F:F1:9B:03:BC:80:DB:6E:B6:89 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ebb627b-d720-4375-b47a-2400c3db73e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f11:c000::/36 Signature Algorithm: sha256WithRSAEncryption 02:28:59:fa:06:06:e3:22:4a:b4:7f:5d:94:ad:ed:71:6f:1d: 07:78:72:be:d6:c8:06:fd:bc:fb:25:9d:a1:25:f8:fd:39:ac: 7f:0b:31:96:78:1d:be:4f:f1:75:cf:67:cc:a0:29:5a:cc:be: 67:b2:82:2c:22:3e:d2:38:fd:54:95:f9:b7:80:56:5f:2a:d3: 3e:99:cb:10:6a:ae:2f:fc:66:ab:4c:d2:fa:14:76:70:f2:ff: 61:eb:b7:65:7c:5b:f6:d7:0f:03:d3:8a:34:84:38:8c:61:a2: 7b:83:fc:5a:b9:f6:82:12:2d:0f:57:60:00:bf:33:95:9c:d6: a0:0d:1f:c3:50:69:d5:ba:bf:ba:06:18:15:e0:23:2c:d0:60: d9:8d:0e:2f:87:51:4b:69:e8:37:22:3f:73:09:51:23:89:0c: 23:87:f2:59:e9:22:42:d7:a0:15:df:84:94:53:67:d1:78:1e: 4c:c2:48:79:d6:7e:9f:25:a4:07:35:6e:80:36:38:34:e3:4d: 7a:03:82:8b:e2:c0:43:54:10:93:63:73:3e:2b:11:64:7c:1b: 26:9f:da:7a:d7:8a:83:f3:12:61:50:77:7a:eb:3b:c9:41:9d: de:41:fb:cf:8d:39:24:d1:91:27:64:dd:51:ac:25:f7:42:73: fb:44:9c:a5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaA/iqRMwTWpo5bXc+h3FKkimFUwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDIwMDA3WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyY2I2YmVlZTJmOGMwZThlOGYxNzY0YmI0YTk5NzE3NmNj MGQ2MDFlMDU5Mzc2NjE5NmMyMDg4N2RiNjY0NjMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDt1iDhA4sANJjJZhsG9E5niLz1G7wzq57uVumuaJ0DVr6F qVm6zEZNloW7yVdzQeTvv7cbwqdi8qNTQGxpxsWi7y1N4YtwoxMn/nDK7o4N9tJA rZ2WDj8jeWdtjsRlYHfdpKxMg/RT8ewfOMxzyP+YTXbSBQWUgo0mEVRbGm6YmIUn MWFoleaytbOIosla9W8zMtUjw4moSzEw1w0sPVBA9RgW6a0SzhUxDCpWk/C4nInz CWuVjIb9XssnXHv0oUsfvsT75CeU0w2yeIbNSG3hPUxc4ha9dm9oe5aBy3ZiHSYP AVSPlZG4jAzDtxRUS5OW3174+qiywBuVKneuZ4BxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUKFAXJRIdtGvjZA/xmwO8gNtutokwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhlYmI2MjdiLWQ3MjAtNDM3NS1iNDdhLTI0MDBjM2RiNzNlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8RwDANBgkqhkiG9w0BAQsFAAOCAQEAAihZ+gYG4yJKtH9dlK3tcW8d B3hyvtbIBv28+yWdoSX4/Tmsfwsxlngdvk/xdc9nzKApWsy+Z7KCLCI+0jj9VJX5 t4BWXyrTPpnLEGquL/xmq0zS+hR2cPL/Yeu3ZXxb9tcPA9OKNIQ4jGGie4P8Wrn2 ghItD1dgAL8zlZzWoA0fw1Bp1bq/ugYYFeAjLNBg2Y0OL4dRS2noNyI/cwlRI4kM I4fyWekiQtegFd+ElFNn0XgeTMJIedZ+nyWkBzVugDY4NONNegOCi+LAQ1QQk2Nz PisRZHwbJp/aeteKg/MSYVB3eus7yUGd3kH7z405JNGRJ2TdUawl90Jz+0ScpQ== -----END CERTIFICATE-----Generated at Mon Mar 2 03:07:27 2026 by rpki-client