$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1447c4a-54c2-49ca-95b9-774a649e360c.roa File: a1447c4a-54c2-49ca-95b9-774a649e360c.roa (raw, json) Hash identifier: cUw4cqy1KHv/WhDjXlVXcl1GVwehbEKwbr7UFtzSX8A= Subject key identifier: 4A:FA:3F:D5:C9:C9:3A:4B:E1:20:23:BB:16:F0:F5:59:60:A5:65:EA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65FF90FE8FC323A8C0C75F2C8AE44089E0E49B8B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1447c4a-54c2-49ca-95b9-774a649e360c.roa Signing time: Wed 11 Feb 2026 00:41:42 +0000 ROA not before: Wed 11 Feb 2026 00:41:42 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fea:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ff:90:fe:8f:c3:23:a8:c0:c7:5f:2c:8a:e4:40:89:e0:e4:9b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 11 00:41:42 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=17fdfc8544a3f64dac9bb371dc848ac31512204edbdc07a5d805f81639263ad2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d1:2a:cf:eb:54:62:df:5b:86:3e:db:ca:3d: cf:47:c8:88:fe:05:19:36:73:84:22:ce:60:f8:9b: 98:1c:f2:e7:20:56:eb:ff:d5:d1:df:94:ea:c9:6d: 40:89:0d:9b:86:bf:d3:b9:a3:24:12:f6:dc:57:79: cb:1a:4c:9b:bc:25:83:f6:cb:d4:f6:be:7f:27:dc: 8c:51:53:1a:72:7b:37:83:f0:08:ea:2b:09:6f:79: 76:c1:53:8e:28:5c:82:cb:79:83:e3:9c:6b:70:70: 52:5f:12:4d:14:99:2a:13:73:fb:7b:e6:03:66:2a: 1f:eb:d0:3a:78:10:8d:7a:a8:6f:3d:41:86:d3:80: 3c:a9:d7:cb:5f:45:eb:e8:39:fe:aa:24:2f:91:9a: 3f:d2:16:2f:21:5f:a7:af:3f:d7:57:08:b9:89:08: 0d:08:53:01:4f:77:17:5e:05:ff:7a:98:39:f8:2b: 1d:65:6b:16:73:b8:f7:a0:1a:ea:01:6c:02:40:44: 96:32:1a:4b:4f:0d:43:7c:81:6a:cd:8a:9a:b0:25: d2:df:e5:67:6d:bc:cc:67:29:72:93:ce:8a:68:0d: e3:65:58:30:63:93:85:de:cd:d4:e6:12:1f:2f:e7: 4d:81:c9:69:24:70:c4:1b:dc:77:1b:03:9e:2f:42: c9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FA:3F:D5:C9:C9:3A:4B:E1:20:23:BB:16:F0:F5:59:60:A5:65:EA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1447c4a-54c2-49ca-95b9-774a649e360c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea:2080::/48 Signature Algorithm: sha256WithRSAEncryption 6f:94:01:14:73:7f:aa:bb:2b:20:20:46:e1:bf:f7:41:87:91: 2b:50:8e:ef:2a:37:34:b7:6b:a4:17:fc:e3:2a:b4:33:35:e8: 95:66:22:1f:a4:1d:04:d4:34:fb:73:a7:90:64:e6:d7:ed:c7: cd:69:e5:a3:4c:80:4b:2b:57:c3:65:88:e7:f3:3f:91:2e:85: a6:81:73:e3:ce:7f:5f:b3:21:2f:0d:9a:99:81:c4:62:78:54: 14:85:4a:43:23:89:6b:a2:e3:a0:40:e0:57:90:fc:ac:02:31: 5d:d9:10:87:03:4a:60:b1:37:d6:44:6e:06:1f:e5:5d:78:e2: 09:f6:68:ef:a0:dc:07:a8:c2:b3:0e:6e:4a:61:c9:1e:b6:fc: e1:b1:71:18:22:c3:20:dd:da:99:3b:bd:be:82:49:49:05:47: e9:aa:bd:99:7c:a6:0c:90:e7:bb:43:a3:0e:a4:b3:d9:6d:5f: 41:3b:ca:f2:3d:de:f3:03:d2:6a:48:95:c6:cb:98:2c:53:39: 6c:0a:22:4d:c3:f5:b4:a1:bb:66:4a:24:26:10:f3:36:d4:2b: e4:03:02:09:d5:87:c4:49:46:db:64:f5:df:2f:e4:a8:86:42: c9:c9:99:c3:74:db:89:58:4b:36:ba:fc:12:a1:05:78:34:69: 48:70:e2:fb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZf+Q/o/DI6jAx18siuRAieDkm4swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjExMDA0MTQyWhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxN2ZkZmM4NTQ0YTNmNjRkYWM5YmIzNzFkYzg0OGFjMzE1 MTIyMDRlZGJkYzA3YTVkODA1ZjgxNjM5MjYzYWQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCc0SrP61Ri31uGPtvKPc9HyIj+BRk2c4QizmD4m5gc8ucg Vuv/1dHflOrJbUCJDZuGv9O5oyQS9txXecsaTJu8JYP2y9T2vn8n3IxRUxpyezeD 8AjqKwlveXbBU44oXILLeYPjnGtwcFJfEk0UmSoTc/t75gNmKh/r0Dp4EI16qG89 QYbTgDyp18tfRevoOf6qJC+Rmj/SFi8hX6evP9dXCLmJCA0IUwFPdxdeBf96mDn4 Kx1laxZzuPegGuoBbAJARJYyGktPDUN8gWrNipqwJdLf5WdtvMxnKXKTzopoDeNl WDBjk4XezdTmEh8v502ByWkkcMQb3HcbA54vQskZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSvo/1cnJOkvhICO7FvD1WWClZeowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ExNDQ3YzRhLTU0YzItNDljYS05NWI5LTc3NGE2NDllMzYwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/qIIAwDQYJKoZIhvcNAQELBQADggEBAG+UARRzf6q7KyAgRuG/90GH kStQju8qNzS3a6QX/OMqtDM16JVmIh+kHQTUNPtzp5Bk5tftx81p5aNMgEsrV8Nl iOfzP5EuhaaBc+POf1+zIS8NmpmBxGJ4VBSFSkMjiWui46BA4FeQ/KwCMV3ZEIcD SmCxN9ZEbgYf5V144gn2aO+g3AeowrMObkphyR62/OGxcRgiwyDd2pk7vb6CSUkF R+mqvZl8pgyQ57tDow6ks9ltX0E7yvI93vMD0mpIlcbLmCxTOWwKIk3D9bShu2ZK JCYQ8zbUK+QDAgnVh8RJRttk9d8v5KiGQsnJmcN024lYSza6/BKhBXg0aUhw4vs= -----END CERTIFICATE-----Generated at Sun Mar 1 22:28:03 2026 by rpki-client