$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aecb2898-1ea4-4169-a334-e907e8dc483a.roa File: aecb2898-1ea4-4169-a334-e907e8dc483a.roa (raw, json) Hash identifier: Q02qrKl2lk0p1+SKxmz8QlgLvxX/9wip31GiXbaZfJo= Subject key identifier: 92:CC:95:A3:41:EC:E3:1E:9A:2B:AA:B9:4D:E7:F2:A3:41:D1:04:DC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7609BFD05D7CDB9604168D55A8928EFC5B0BB446 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aecb2898-1ea4-4169-a334-e907e8dc483a.roa Signing time: Wed 25 Feb 2026 02:10:09 +0000 ROA not before: Wed 25 Feb 2026 02:10:09 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f17:4000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:09:bf:d0:5d:7c:db:96:04:16:8d:55:a8:92:8e:fc:5b:0b:b4:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 02:10:09 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=51fe84341e778adb4968709ec7b679ca49fc95f8d3c5285cf9bdca4fa64e1c2b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:80:04:6a:2c:4b:8f:49:3b:f2:c1:70:2c:66: 00:94:e9:9d:68:4f:82:83:ab:87:b4:e6:8f:e7:32: 97:19:54:b9:89:ce:84:8b:51:7f:d4:28:ac:fe:dd: 96:5a:a3:bc:9a:1e:d2:19:51:f2:6d:35:fc:51:70: 9d:74:0b:0b:5a:84:4c:c8:11:ab:c4:b7:ed:51:04: d9:3f:57:8a:98:02:02:09:47:08:58:6c:64:56:c9: 7b:8a:98:29:58:a1:70:2d:c1:66:fa:c7:b5:62:4b: bb:f2:27:69:43:64:eb:34:31:09:5d:d5:a7:1c:c5: 44:74:7a:2c:b6:c9:28:36:9e:35:ed:12:f0:e5:c8: e9:42:86:02:fd:bf:20:e8:9e:20:61:74:cb:70:af: 1f:c6:9b:99:06:fb:0e:12:60:7e:26:4a:04:aa:6e: bf:6c:39:82:b9:62:a7:f1:4d:46:3a:4d:0b:42:db: c5:95:bc:73:2f:a8:1a:c1:d6:75:42:b7:56:bf:c9: fe:29:db:f5:8c:13:2a:63:c7:e6:79:27:a3:9f:86: 53:48:dd:53:00:3d:a7:4f:1a:4b:70:3e:a1:27:78: eb:09:3d:6d:99:92:eb:87:3b:09:8f:3a:22:a4:fd: 9b:54:75:16:2d:74:1f:98:6b:c3:e9:ca:07:7f:bc: 1f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CC:95:A3:41:EC:E3:1E:9A:2B:AA:B9:4D:E7:F2:A3:41:D1:04:DC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aecb2898-1ea4-4169-a334-e907e8dc483a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f17:4000::/38 Signature Algorithm: sha256WithRSAEncryption b5:1f:c8:46:34:83:8c:a8:ce:b5:e3:7a:ba:7e:6f:dc:44:ed: 45:38:c8:c7:02:a2:8e:e2:b1:43:74:84:f8:76:38:06:f4:f8: 67:4d:de:8b:e1:63:6a:ea:07:d2:01:83:37:f7:67:83:c7:d7: 95:cb:58:54:3c:da:8f:8b:48:fa:ef:da:49:cd:b5:2c:bf:4e: ce:60:d9:98:5b:99:d7:7b:69:3d:41:a7:8a:6b:61:90:4f:59: a0:67:65:06:63:51:84:83:d1:a9:85:71:c9:7f:c8:e0:94:e5: df:d9:cb:ae:f3:84:29:e3:1d:2d:7f:c7:da:96:82:4b:05:a2: d9:b0:78:c6:6a:d4:05:d0:59:48:e2:0e:e1:5a:94:26:fc:54: e8:9b:ae:0d:20:ca:b2:80:57:8d:ce:4f:da:e7:26:ba:12:cb: 3d:b4:b3:e0:33:b5:4f:de:62:f0:df:78:7f:f2:05:63:09:65: 7a:4d:9f:70:d0:2d:31:0e:9d:70:75:3f:bd:2a:a6:c3:ba:01: 30:e5:8f:74:4b:f6:d0:b1:c8:ca:cb:29:c9:e0:96:31:52:5e: 06:cf:3c:09:3f:13:7f:c6:85:c7:3c:03:25:a1:ef:81:e2:ec: 0e:45:04:10:41:f7:7f:2e:37:0b:58:2b:0e:6e:01:50:54:e1: 94:48:14:cc -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUdgm/0F1825YEFo1VqJKO/FsLtEYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDIxMDA5WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MWZlODQzNDFlNzc4YWRiNDk2ODcwOWVjN2I2NzljYTQ5 ZmM5NWY4ZDNjNTI4NWNmOWJkY2E0ZmE2NGUxYzJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsgARqLEuPSTvywXAsZgCU6Z1oT4KDq4e05o/nMpcZVLmJ zoSLUX/UKKz+3ZZao7yaHtIZUfJtNfxRcJ10CwtahEzIEavEt+1RBNk/V4qYAgIJ RwhYbGRWyXuKmClYoXAtwWb6x7ViS7vyJ2lDZOs0MQld1accxUR0eiy2ySg2njXt EvDlyOlChgL9vyDoniBhdMtwrx/Gm5kG+w4SYH4mSgSqbr9sOYK5YqfxTUY6TQtC 28WVvHMvqBrB1nVCt1a/yf4p2/WMEypjx+Z5J6OfhlNI3VMAPadPGktwPqEneOsJ PW2ZkuuHOwmPOiKk/ZtUdRYtdB+Ya8Ppygd/vB+ZAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUksyVo0Hs4x6aK6q5Tefyo0HRBNwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlY2IyODk4LTFlYTQtNDE2OS1hMzM0LWU5MDdlOGRjNDgzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8XQDANBgkqhkiG9w0BAQsFAAOCAQEAtR/IRjSDjKjOteN6un5v3ETt RTjIxwKijuKxQ3SE+HY4BvT4Z03ei+FjauoH0gGDN/dng8fXlctYVDzaj4tI+u/a Sc21LL9OzmDZmFuZ13tpPUGnimthkE9ZoGdlBmNRhIPRqYVxyX/I4JTl39nLrvOE KeMdLX/H2paCSwWi2bB4xmrUBdBZSOIO4VqUJvxU6JuuDSDKsoBXjc5P2ucmuhLL PbSz4DO1T95i8N94f/IFYwllek2fcNAtMQ6dcHU/vSqmw7oBMOWPdEv20LHIyssp yeCWMVJeBs88CT8Tf8aFxzwDJaHvgeLsDkUEEEH3fy43C1grDm4BUFThlEgUzA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:09:25 2026 by rpki-client