$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/912d1f55-82ab-4641-9fec-98b39d1c0667.roa File: 912d1f55-82ab-4641-9fec-98b39d1c0667.roa (raw, json) Hash identifier: Qc3SKYKfbC4WV1p9yakrx0CZWIaK1b3NHCHBrFOI6IM= Subject key identifier: 8A:92:EE:FB:7A:5B:B5:BF:6B:4B:BB:42:84:CC:16:C9:6A:41:B3:90 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4148EA527568320D4BD348BC3CA61AAAF0EFE09C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/912d1f55-82ab-4641-9fec-98b39d1c0667.roa Signing time: Sat 28 Feb 2026 00:31:20 +0000 ROA not before: Sat 28 Feb 2026 00:31:20 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fef:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:48:ea:52:75:68:32:0d:4b:d3:48:bc:3c:a6:1a:aa:f0:ef:e0:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 28 00:31:20 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=cd40172e226a31a65d05755de084fe7884d780fb97eef25910d217635af8ca29, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ab:14:22:42:4c:cb:60:17:da:23:a3:28:4b: 8f:99:9e:48:d6:b9:3a:48:33:80:4d:63:22:85:25: 87:bb:3e:a0:86:bf:df:5c:2e:f1:b7:07:f4:65:c1: 87:cd:d7:67:38:9f:c5:78:5f:d7:52:81:45:cb:8d: bd:a8:60:6d:3f:e9:20:b8:0b:83:6b:68:1b:55:0a: f3:46:60:50:6b:eb:60:ee:0a:08:19:20:c4:b7:c8: f8:1a:85:af:04:78:87:23:03:39:05:a7:84:c8:0d: 3b:b7:e0:8d:00:3e:9f:97:ef:09:78:e5:a7:63:c8: cf:73:0b:0a:a1:37:73:b9:50:4f:3c:f0:f3:a9:e5: 70:2a:c0:54:b7:c1:98:c5:0e:ba:36:a8:61:cc:20: 11:18:72:7a:04:c1:18:79:02:2a:b5:ce:74:94:1a: bf:80:53:6e:25:7f:7d:a4:7f:31:92:a5:e5:b2:b4: 27:db:31:17:5e:df:30:df:be:e0:2f:e6:88:f9:0e: bc:f4:f3:14:a7:04:77:5b:9b:ad:80:d7:fe:14:9b: d2:9b:e3:c0:da:7a:c2:ee:1a:45:93:6b:21:44:40: dd:97:7d:6f:f2:88:a8:13:15:e8:b7:b8:a1:1f:c9: d1:77:a6:0d:ba:93:1a:f7:68:e8:55:a6:83:f6:f8: e8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:92:EE:FB:7A:5B:B5:BF:6B:4B:BB:42:84:CC:16:C9:6A:41:B3:90 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/912d1f55-82ab-4641-9fec-98b39d1c0667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:e000::/40 Signature Algorithm: sha256WithRSAEncryption d8:0f:66:bd:7c:6f:9e:7f:7a:e6:68:be:fc:c2:bc:99:dd:10: 25:3c:5f:94:20:ae:30:22:5c:0a:04:17:96:bd:2b:94:14:e8: 06:1d:74:14:a1:f8:df:f4:2f:3a:8d:bc:0a:1e:bc:b3:5b:84: be:e6:9e:38:34:98:e0:e3:e6:df:38:5f:29:e7:82:43:90:00: 40:6c:85:5f:e7:4d:e7:64:83:8b:6e:2b:22:ea:d3:9e:0d:3b: 30:18:68:6c:e4:43:d9:6e:9a:bc:39:2c:93:d2:e8:3b:3c:fe: c9:1b:ec:0a:b3:2a:cb:34:d5:6d:9b:de:b6:cc:fa:48:e9:cf: d4:80:fa:98:7a:84:e7:4a:dc:da:a8:77:1b:4c:bb:8b:1a:07: 69:3f:c8:a9:e7:32:f4:97:86:8c:e6:ca:4b:e1:8c:59:d6:a1: ca:7d:b6:b8:34:85:2f:0a:0d:fa:1c:f6:f3:8c:10:d1:56:a3: 7f:2a:28:51:20:17:be:b8:1a:8d:c8:67:bf:35:7b:10:26:1a: a0:e6:d9:d8:f6:46:49:b8:c7:48:00:6c:e0:4b:6f:32:77:d0: 91:67:19:9d:48:38:d7:14:67:e2:dc:e5:bd:a5:0f:fe:47:0d: 47:8a:33:59:78:9e:12:05:70:46:0d:76:05:75:f6:30:ac:3f: da:f5:7c:ab -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQUjqUnVoMg1L00i8PKYaqvDv4JwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI4MDAzMTIwWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDQwMTcyZTIyNmEzMWE2NWQwNTc1NWRlMDg0ZmU3ODg0 ZDc4MGZiOTdlZWYyNTkxMGQyMTc2MzVhZjhjYTI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnqxQiQkzLYBfaI6MoS4+ZnkjWuTpIM4BNYyKFJYe7PqCG v99cLvG3B/RlwYfN12c4n8V4X9dSgUXLjb2oYG0/6SC4C4NraBtVCvNGYFBr62Du CggZIMS3yPgaha8EeIcjAzkFp4TIDTu34I0APp+X7wl45adjyM9zCwqhN3O5UE88 8POp5XAqwFS3wZjFDro2qGHMIBEYcnoEwRh5Aiq1znSUGr+AU24lf32kfzGSpeWy tCfbMRde3zDfvuAv5oj5Drz08xSnBHdbm62A1/4Um9Kb48DaesLuGkWTayFEQN2X fW/yiKgTFei3uKEfydF3pg26kxr3aOhVpoP2+OjbAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUipLu+3pbtb9rS7tChMwWyWpBs5AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkxMmQxZjU1LTgyYWItNDY0MS05ZmVjLTk4YjM5ZDFjMDY2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/v4DANBgkqhkiG9w0BAQsFAAOCAQEA2A9mvXxvnn965mi+/MK8md0Q JTxflCCuMCJcCgQXlr0rlBToBh10FKH43/QvOo28Ch68s1uEvuaeODSY4OPm3zhf KeeCQ5AAQGyFX+dN52SDi24rIurTng07MBhobORD2W6avDksk9LoOzz+yRvsCrMq yzTVbZvetsz6SOnP1ID6mHqE50rc2qh3G0y7ixoHaT/Iqecy9JeGjObKS+GMWdah yn22uDSFLwoN+hz284wQ0VajfyooUSAXvrgajchnvzV7ECYaoObZ2PZGSbjHSABs 4EtvMnfQkWcZnUg41xRn4tzlvaUP/kcNR4ozWXieEgVwRg12BXX2MKw/2vV8qw== -----END CERTIFICATE-----Generated at Mon Mar 2 00:15:43 2026 by rpki-client