$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aefe6c81-632c-40a2-8e1a-da305750174d.roa File: aefe6c81-632c-40a2-8e1a-da305750174d.roa (raw, json) Hash identifier: 76bj5R67Rkrjl2tNkGiDcoVs1U4JmFqGpX1AlUVw8vE= Subject key identifier: 98:4B:F1:50:DA:D9:FE:AB:4F:FE:50:A7:61:96:54:1B:8B:4E:21:F7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6388CB9C0C6387A6D304A0D9879582D576BF62EF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aefe6c81-632c-40a2-8e1a-da305750174d.roa Signing time: Tue 24 Feb 2026 02:10:46 +0000 ROA not before: Tue 24 Feb 2026 02:10:46 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:4090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:88:cb:9c:0c:63:87:a6:d3:04:a0:d9:87:95:82:d5:76:bf:62:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 02:10:46 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=cc72712374ff4405203ad62479cee6997db650dac8a71ae6c84a20d27213cc10, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a3:3e:77:7e:af:c4:c6:7d:54:a1:ba:53:6b: 77:86:0c:0f:a0:ee:6d:c6:1c:11:18:9a:44:17:60: f0:af:f2:64:43:b1:e4:ce:0b:32:89:b8:4c:f8:75: 86:84:ed:d9:e5:d9:4f:dd:2e:aa:c6:dd:3e:f0:b4: 62:d0:b1:37:cb:fe:63:04:5f:92:69:fb:c8:70:6b: dc:1d:18:8a:78:b2:ba:01:55:9c:98:18:54:f3:1b: ee:41:17:a1:60:54:18:d9:eb:90:a0:88:49:d9:81: 70:b7:cb:8a:d0:71:58:f1:97:00:5c:91:a8:c0:b2: 0c:92:44:df:8b:a2:c5:c0:94:bf:d2:ba:63:00:8c: 76:77:de:f3:58:32:dc:23:92:0a:92:db:63:04:56: 14:4f:51:f2:46:7b:af:73:20:6b:b9:09:e2:5c:06: 75:0e:e3:ee:3a:23:d4:a4:d9:2a:e6:aa:c9:e9:cd: c8:f8:22:39:1f:e5:e5:0d:92:5e:53:f4:80:14:bc: db:8b:a6:81:96:f8:e6:e3:ae:5a:33:93:e3:86:b0: 59:5e:3f:2e:0f:88:9b:b9:3c:c5:e6:a2:e6:4e:29: ae:98:ed:05:bc:36:92:95:8f:e8:86:41:1e:f2:ac: 83:59:bc:84:1f:a8:46:2f:22:03:c4:19:81:de:b3: 45:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4B:F1:50:DA:D9:FE:AB:4F:FE:50:A7:61:96:54:1B:8B:4E:21:F7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aefe6c81-632c-40a2-8e1a-da305750174d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:4090::/48 Signature Algorithm: sha256WithRSAEncryption 66:30:85:e9:e3:8b:9a:e9:96:23:74:17:51:25:53:61:22:da: 5d:71:4d:3a:25:39:59:f7:db:43:5b:a3:4e:71:63:7a:b1:01: d3:20:36:ca:84:51:85:0e:1e:b8:ba:62:66:80:4e:fa:32:f5: 82:7d:0e:05:af:7c:61:73:10:6e:da:af:42:08:3b:bb:f1:47: a7:f0:8f:3e:d7:74:bc:6b:a0:b3:58:fe:27:96:79:3c:8b:96: 57:02:4e:8b:be:da:28:61:c1:25:14:a7:e5:bf:89:fc:04:cf: 9e:dd:51:e5:4b:08:d4:87:82:c1:31:37:84:9f:79:5b:14:c4: d5:5b:65:df:42:1e:df:d5:d5:e6:ba:b0:7a:d8:8d:98:37:19: 69:b1:12:c0:ad:3d:75:f6:d7:2e:da:de:6d:ec:d2:47:db:77: b2:3a:c1:d3:74:c6:bf:3c:da:a7:52:8d:fd:4b:17:a4:75:b1: 14:12:ee:4e:44:ef:76:ee:de:ee:a9:0b:1b:0f:c2:8d:0a:28: 6e:a2:4e:99:c3:81:74:bf:9d:10:c6:6d:85:66:af:b6:7d:69: 86:40:cb:50:e7:33:ad:69:1a:9c:89:5b:68:0b:03:e5:00:88: 6b:86:19:af:b7:c5:35:89:b3:85:09:47:f5:c4:e6:57:9b:5f: 93:4e:4c:55 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUY4jLnAxjh6bTBKDZh5WC1Xa/Yu8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDIxMDQ2WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzcyNzEyMzc0ZmY0NDA1MjAzYWQ2MjQ3OWNlZTY5OTdk YjY1MGRhYzhhNzFhZTZjODRhMjBkMjcyMTNjYzEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjoz53fq/Exn1UobpTa3eGDA+g7m3GHBEYmkQXYPCv8mRD seTOCzKJuEz4dYaE7dnl2U/dLqrG3T7wtGLQsTfL/mMEX5Jp+8hwa9wdGIp4sroB VZyYGFTzG+5BF6FgVBjZ65CgiEnZgXC3y4rQcVjxlwBckajAsgySRN+LosXAlL/S umMAjHZ33vNYMtwjkgqS22MEVhRPUfJGe69zIGu5CeJcBnUO4+46I9Sk2Srmqsnp zcj4Ijkf5eUNkl5T9IAUvNuLpoGW+Objrlozk+OGsFlePy4PiJu5PMXmouZOKa6Y 7QW8NpKVj+iGQR7yrINZvIQfqEYvIgPEGYHes0UbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmEvxUNrZ/qtP/lCnYZZUG4tOIfcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlZmU2YzgxLTYzMmMtNDBhMi04ZTFhLWRhMzA1NzUwMTc0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//QJAwDQYJKoZIhvcNAQELBQADggEBAGYwhenji5rpliN0F1ElU2Ei 2l1xTTolOVn320Nbo05xY3qxAdMgNsqEUYUOHri6YmaATvoy9YJ9DgWvfGFzEG7a r0IIO7vxR6fwjz7XdLxroLNY/ieWeTyLllcCTou+2ihhwSUUp+W/ifwEz57dUeVL CNSHgsExN4SfeVsUxNVbZd9CHt/V1ea6sHrYjZg3GWmxEsCtPXX21y7a3m3s0kfb d7I6wdN0xr882qdSjf1LF6R1sRQS7k5E73bu3u6pCxsPwo0KKG6iTpnDgXS/nRDG bYVmr7Z9aYZAy1DnM61pGpyJW2gLA+UAiGuGGa+3xTWJs4UJR/XE5lebX5NOTFU= -----END CERTIFICATE-----Generated at Sun Mar 1 22:23:40 2026 by rpki-client