$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad702a38-189a-4b35-9a97-7ce961164bf1.roa File: ad702a38-189a-4b35-9a97-7ce961164bf1.roa (raw, json) Hash identifier: mmJ7HLCtsxk7ihwuMN4l9SJDVC9ydYNNwt1YhtfTaaA= Subject key identifier: CE:E3:B8:CE:04:8A:23:65:7D:F5:E6:4C:1E:7E:E2:31:EA:6B:DC:BC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 319D39D35F082A8D2590A6C7007A70FA7C247C05 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad702a38-189a-4b35-9a97-7ce961164bf1.roa Signing time: Tue 24 Feb 2026 02:11:20 +0000 ROA not before: Tue 24 Feb 2026 02:11:20 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:9d:39:d3:5f:08:2a:8d:25:90:a6:c7:00:7a:70:fa:7c:24:7c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 02:11:20 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=e7676dce68183c0a509f90ebf62de1748c6af51b9ca3c017ec8b970841b1cd0f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e9:46:e4:36:4b:24:10:8d:b7:56:1b:34:ce: 8d:83:de:3b:95:ca:d8:a7:cc:38:07:dc:2a:70:c8: 41:70:2f:cf:ba:3d:a6:4c:02:53:04:9d:a4:65:45: be:51:69:af:23:19:23:83:5a:31:fd:a9:2d:13:f3: 79:b0:80:b1:05:3d:9a:47:5c:57:a9:12:5d:77:90: 93:ed:ce:74:00:d1:08:91:54:1e:78:6d:ac:d4:8a: 84:03:6b:d0:97:7e:2a:35:be:71:02:ef:80:c9:17: 27:c9:ce:88:54:84:0a:93:28:6e:4d:60:dd:55:53: 1c:a5:41:2f:d0:fe:79:75:8a:e2:19:c2:7c:a3:97: 16:1c:07:09:63:b8:cd:03:9d:02:1a:d5:23:de:57: ad:af:fa:dc:5e:87:f6:99:d6:b8:3f:38:90:3c:c0: a9:1e:68:31:c8:32:56:9f:0f:d7:87:59:dd:86:fe: 07:00:33:f7:e1:1d:21:f4:f1:d4:f1:9a:37:c9:4f: 80:eb:5a:1f:90:34:8b:5d:50:f9:e8:c3:15:45:52: 28:aa:82:df:3b:a8:43:01:b5:45:79:95:66:d7:50: 27:fd:aa:0b:28:6b:73:7f:71:e5:29:0e:ee:76:bb: 67:6e:75:4f:54:30:33:71:eb:7f:f6:0d:34:01:d6: cc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E3:B8:CE:04:8A:23:65:7D:F5:E6:4C:1E:7E:E2:31:EA:6B:DC:BC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad702a38-189a-4b35-9a97-7ce961164bf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:4040::/48 Signature Algorithm: sha256WithRSAEncryption d5:48:2c:53:79:66:8f:ac:48:b9:5b:f9:10:06:68:99:14:a4: 12:70:bc:9a:22:9c:6b:aa:90:ca:76:7e:63:e5:fb:c9:c7:d9: 76:70:b1:87:58:cc:c5:3d:c7:4c:e8:2c:0a:b1:f7:99:05:18: c4:a4:f3:f5:df:73:87:d6:9f:fa:64:73:53:58:f8:be:e7:eb: 44:fa:ff:1b:21:89:00:40:a8:54:45:00:e8:90:0b:a0:92:78: 58:43:3c:f4:70:27:a1:3b:dc:f9:6a:c2:42:a3:26:88:7f:6a: 60:1a:95:61:66:10:31:cc:b0:f3:e6:49:63:34:0b:98:a6:c8: 99:7a:5b:82:c5:25:2d:79:a9:af:d5:d2:1c:8e:fc:ab:87:a0: fc:3d:18:6d:ba:e2:d9:25:37:2d:13:dc:9b:f9:0d:ec:58:94: 54:61:8c:ae:d8:bd:6c:31:1a:41:79:13:cb:d2:6a:c9:ce:01: 78:2b:c6:00:3b:ee:58:d3:44:2d:2e:b7:3c:69:80:02:86:5e: e6:4e:1f:0c:22:d6:57:cf:da:92:64:94:08:57:b5:b6:d7:78: cb:6e:9a:87:d1:7d:00:f6:3e:b7:ca:97:a6:e4:11:98:37:1e: 29:06:0c:13:7c:16:8c:fb:b4:db:0c:a5:0b:2d:71:61:ab:91: 62:27:8e:85 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMZ05018IKo0lkKbHAHpw+nwkfAUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDIxMTIwWhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNzY3NmRjZTY4MTgzYzBhNTA5ZjkwZWJmNjJkZTE3NDhj NmFmNTFiOWNhM2MwMTdlYzhiOTcwODQxYjFjZDBmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw6UbkNkskEI23Vhs0zo2D3juVytinzDgH3CpwyEFwL8+6 PaZMAlMEnaRlRb5Raa8jGSODWjH9qS0T83mwgLEFPZpHXFepEl13kJPtznQA0QiR VB54bazUioQDa9CXfio1vnEC74DJFyfJzohUhAqTKG5NYN1VUxylQS/Q/nl1iuIZ wnyjlxYcBwljuM0DnQIa1SPeV62v+txeh/aZ1rg/OJA8wKkeaDHIMlafD9eHWd2G /gcAM/fhHSH08dTxmjfJT4DrWh+QNItdUPnowxVFUiiqgt87qEMBtUV5lWbXUCf9 qgsoa3N/ceUpDu52u2dudU9UMDNx63/2DTQB1sx7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzuO4zgSKI2V99eZMHn7iMepr3LwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FkNzAyYTM4LTE4OWEtNGIzNS05YTk3LTdjZTk2MTE2NGJmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AQEAwDQYJKoZIhvcNAQELBQADggEBANVILFN5Zo+sSLlb+RAGaJkU pBJwvJoinGuqkMp2fmPl+8nH2XZwsYdYzMU9x0zoLAqx95kFGMSk8/Xfc4fWn/pk c1NY+L7n60T6/xshiQBAqFRFAOiQC6CSeFhDPPRwJ6E73PlqwkKjJoh/amAalWFm EDHMsPPmSWM0C5imyJl6W4LFJS15qa/V0hyO/KuHoPw9GG264tklNy0T3Jv5DexY lFRhjK7YvWwxGkF5E8vSasnOAXgrxgA77ljTRC0utzxpgAKGXuZOHwwi1lfP2pJk lAhXtbbXeMtumofRfQD2PrfKl6bkEZg3HikGDBN8Foz7tNsMpQstcWGrkWInjoU= -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:54 2026 by rpki-client