$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f16b923-96f5-4070-b07e-8883a22a8290.roa File: 8f16b923-96f5-4070-b07e-8883a22a8290.roa (raw, json) Hash identifier: 2RarAID9WxFNUo2IkclYyLCZAODdRV1zNKsqeu2CrUI= Subject key identifier: B4:96:CA:AA:F3:CF:6B:E0:75:D6:36:E1:5D:66:22:4E:41:44:60:AC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 38D4387763A3F8545843BD6741F8AB36116EF079 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f16b923-96f5-4070-b07e-8883a22a8290.roa Signing time: Wed 25 Feb 2026 01:41:00 +0000 ROA not before: Wed 25 Feb 2026 01:41:00 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f18::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d4:38:77:63:a3:f8:54:58:43:bd:67:41:f8:ab:36:11:6e:f0:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 01:41:00 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=856167afd4b8390b5eed48b31388ec02f07dd2bf34e3c57a24755c110355da7e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d1:57:88:85:9e:2b:de:d8:0c:71:42:66:f6: cb:0c:6a:f8:5c:d1:e9:af:d7:00:71:13:2e:1f:d8: 19:2d:9f:22:a8:02:4e:f9:f5:4e:73:0e:75:ef:c8: 30:a0:4a:b7:4a:6d:5b:19:5c:5d:a3:f1:ec:3f:87: 12:96:76:ce:00:33:12:4e:0a:7a:df:af:32:fc:99: 54:c1:55:5f:d6:82:63:6c:8e:17:37:eb:73:cd:91: 4f:42:11:ec:27:33:0b:0c:1a:4f:ed:d8:1b:be:b5: 7b:75:71:f9:c8:16:ee:f8:3e:07:ea:6f:72:91:fb: 90:3a:a6:4c:78:3b:c2:94:7c:b0:91:ea:f0:27:ce: 18:13:db:25:b7:7c:ce:15:4b:2d:bd:8e:d0:35:34: ca:bf:e4:fc:47:4f:51:e3:af:0e:c4:50:d0:0b:c4: e1:f1:1a:0a:e4:1c:8c:96:eb:37:1a:cf:54:3e:38: 5e:7b:d2:3f:72:31:df:00:59:8d:1a:a0:f1:e9:b3: c8:c7:1e:60:4b:91:7f:81:67:ac:cf:76:3a:9e:b1: db:22:a0:c0:9e:31:52:7e:c7:b2:ae:ba:1a:2d:1d: 7d:48:ef:73:2d:57:1b:06:c3:cd:a1:74:0a:1a:0f: 4e:56:b2:66:a4:31:52:4c:ca:c8:0e:a2:c7:87:aa: 72:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:96:CA:AA:F3:CF:6B:E0:75:D6:36:E1:5D:66:22:4E:41:44:60:AC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f16b923-96f5-4070-b07e-8883a22a8290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f18::/35 Signature Algorithm: sha256WithRSAEncryption 3c:d8:89:f0:de:e0:0f:56:9e:31:70:16:d7:29:cf:79:14:86: 52:41:0c:aa:44:af:15:f5:71:99:e3:72:51:d2:d8:7e:78:bb: d0:36:c2:15:c4:09:4b:3c:9e:bd:48:7f:ae:f5:e3:d3:02:3d: 99:b5:54:f0:59:68:f7:29:c9:11:5c:1b:ca:5c:ef:5f:10:94: ff:2f:03:6b:b1:e6:47:6f:8c:13:87:43:7f:09:1f:2b:f9:eb: 79:97:15:8a:5b:9b:29:a0:f8:74:4a:55:2b:35:f0:77:90:c1: 15:7b:27:2c:d4:b6:e8:36:c5:d8:cc:55:ca:c8:b5:d6:4c:6f: 2e:37:1d:2f:13:34:39:5d:6b:5e:b4:9b:7a:1b:18:e5:6f:bb: ff:91:72:21:36:44:2a:2b:41:8f:07:a9:f1:c2:b7:3e:1e:57: 8f:cc:99:e5:93:aa:8f:cc:f2:45:60:e4:71:fe:77:79:e4:94: ce:d2:75:e2:1c:c4:74:f5:58:e1:17:53:98:4b:9d:1f:3d:24: b1:cd:4c:dc:ff:7e:d9:73:ff:0c:a7:8e:41:2e:08:25:42:b0: 50:67:67:2a:97:fb:cd:24:75:5f:1a:51:a1:c9:e2:23:9d:95: 41:43:ae:06:57:c7:f5:ee:e7:2c:47:cf:ea:dc:81:6d:67:6b: c7:c0:5f:70 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUONQ4d2Oj+FRYQ71nQfirNhFu8HkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDE0MTAwWhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NTYxNjdhZmQ0YjgzOTBiNWVlZDQ4YjMxMzg4ZWMwMmYw N2RkMmJmMzRlM2M1N2EyNDc1NWMxMTAzNTVkYTdlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDU0VeIhZ4r3tgMcUJm9ssMavhc0emv1wBxEy4f2BktnyKo Ak759U5zDnXvyDCgSrdKbVsZXF2j8ew/hxKWds4AMxJOCnrfrzL8mVTBVV/WgmNs jhc363PNkU9CEewnMwsMGk/t2Bu+tXt1cfnIFu74Pgfqb3KR+5A6pkx4O8KUfLCR 6vAnzhgT2yW3fM4VSy29jtA1NMq/5PxHT1Hjrw7EUNALxOHxGgrkHIyW6zcaz1Q+ OF570j9yMd8AWY0aoPHps8jHHmBLkX+BZ6zPdjqesdsioMCeMVJ+x7KuuhotHX1I 73MtVxsGw82hdAoaD05WsmakMVJMysgOoseHqnJzAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUtJbKqvPPa+B11jbhXWYiTkFEYKwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhmMTZiOTIzLTk2ZjUtNDA3MC1iMDdlLTg4ODNhMjJhODI5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgUmAB8YADANBgkqhkiG9w0BAQsFAAOCAQEAPNiJ8N7gD1aeMXAW1ynPeRSG UkEMqkSvFfVxmeNyUdLYfni70DbCFcQJSzyevUh/rvXj0wI9mbVU8Flo9ynJEVwb ylzvXxCU/y8Da7HmR2+ME4dDfwkfK/nreZcVilubKaD4dEpVKzXwd5DBFXsnLNS2 6DbF2MxVysi11kxvLjcdLxM0OV1rXrSbehsY5W+7/5FyITZEKitBjwep8cK3Ph5X j8yZ5ZOqj8zyRWDkcf53eeSUztJ14hzEdPVY4RdTmEudHz0ksc1M3P9+2XP/DKeO QS4IJUKwUGdnKpf7zSR1XxpRocniI52VQUOuBlfH9e7nLEfP6tyBbWdrx8BfcA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:04:52 2026 by rpki-client