$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba859a31-783a-420b-ab08-5a719cbe4d70.roa File: ba859a31-783a-420b-ab08-5a719cbe4d70.roa (raw, json) Hash identifier: 8sTPat/lCn7F+do1x36CMm3e764Zsrj8p4DGdz7l+nk= Subject key identifier: 04:C6:F8:76:24:AA:BF:28:B0:6F:9E:5E:4E:3B:43:19:56:AA:B5:55 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 18471304BD2FFBAC9FC48A4058A76C0FF01EB0E0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba859a31-783a-420b-ab08-5a719cbe4d70.roa Signing time: Sat 21 Feb 2026 00:50:41 +0000 ROA not before: Sat 21 Feb 2026 00:50:41 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fec:5800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:47:13:04:bd:2f:fb:ac:9f:c4:8a:40:58:a7:6c:0f:f0:1e:b0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:50:41 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=5003c06843eee005b09ec188236676d182d80e7ae6b9b4d53e36bac4cc006d76, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:b9:8e:84:fb:41:c4:7b:bf:47:34:b6:81: 76:ed:ca:49:d1:48:2b:c2:f0:19:0d:cd:98:e0:04: 49:4e:b2:e1:d3:7b:a9:5b:d6:84:84:b7:f9:15:6a: 4d:c5:e4:4a:d9:c9:57:e4:4b:df:c9:08:19:a6:60: a5:94:f3:41:4c:d8:b8:ea:be:4c:3f:0a:04:2f:1e: 76:cd:63:cb:14:5b:ba:15:95:49:f7:96:4f:ed:c7: fb:c7:a0:0f:04:36:af:45:6b:67:b8:20:71:09:c6: 3a:30:4b:68:fb:7b:f7:a9:5e:8d:3b:f5:9b:ea:aa: ec:39:4c:43:05:66:77:1a:b3:78:90:c4:e3:75:3d: 02:62:bc:09:29:91:18:d0:ef:0a:ce:25:9f:a7:e7: 7e:30:9a:a4:58:7f:fd:4e:27:58:02:3a:e5:ea:d7: ad:a7:d7:b3:aa:44:47:54:50:3a:95:99:32:b3:86: 4a:e1:36:ea:cc:cb:03:04:af:a3:9e:df:42:6e:8a: 2d:06:bc:9a:07:1d:79:4b:02:87:72:c1:1d:66:97: 8f:b8:c2:5a:5c:8d:a9:43:18:d0:14:de:3e:1d:73: c5:b9:75:bd:b3:1e:64:a0:33:82:74:1a:1d:e0:5e: 8c:1d:11:d9:3e:30:74:b3:62:f2:1e:e3:61:e3:27: 07:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C6:F8:76:24:AA:BF:28:B0:6F:9E:5E:4E:3B:43:19:56:AA:B5:55 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba859a31-783a-420b-ab08-5a719cbe4d70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:5800::/48 Signature Algorithm: sha256WithRSAEncryption 6a:3e:e9:4d:61:04:f3:f5:bb:71:6d:a2:e2:9f:53:f0:9e:f7: da:f2:93:69:ce:f4:8d:4a:df:2e:35:6a:80:be:85:db:19:78: 88:ba:e0:6c:d6:8e:35:c2:30:8b:c7:c1:b7:fa:19:9f:79:19: 46:1d:ef:46:bc:d4:db:76:0c:39:46:24:aa:3d:d5:18:8b:11: 6b:bd:0e:4a:84:0b:e1:e2:30:f2:cb:0c:53:28:98:e9:26:d3: e6:b3:71:9b:43:e9:f9:84:66:a8:97:f4:68:0d:97:e6:66:dc: fc:b4:2f:01:f0:46:70:d7:ea:86:44:b1:bd:06:ac:1e:e0:9d: 90:15:16:8f:60:ff:ac:2e:9b:60:b7:34:5d:a9:fa:99:87:b8: 3e:74:c4:f9:5f:82:2c:61:90:39:ce:dd:4c:f8:c9:b9:66:78: db:5f:8f:cc:c5:05:5d:00:b5:23:e8:b1:d7:02:6c:77:65:c2: 2f:cc:90:9a:77:5c:8a:8c:19:11:66:ad:9e:80:ef:4c:1a:00: e1:00:18:21:d6:82:8c:aa:02:0f:49:79:ff:78:d5:c1:d8:f0: f9:8b:4b:77:a3:4b:8c:1f:c6:5f:a8:ff:0d:1d:68:17:f4:3b: 29:a0:73:cb:93:6f:e9:88:ff:5e:ef:2a:96:ca:6a:e8:53:9d: 7e:26:e1:fa -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGEcTBL0v+6yfxIpAWKdsD/AesOAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDA1MDQxWhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MDAzYzA2ODQzZWVlMDA1YjA5ZWMxODgyMzY2NzZkMTgy ZDgwZTdhZTZiOWI0ZDUzZTM2YmFjNGNjMDA2ZDc2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBpLmOhPtBxHu/RzS2gXbtyknRSCvC8BkNzZjgBElOsuHT e6lb1oSEt/kVak3F5ErZyVfkS9/JCBmmYKWU80FM2Ljqvkw/CgQvHnbNY8sUW7oV lUn3lk/tx/vHoA8ENq9Fa2e4IHEJxjowS2j7e/epXo079Zvqquw5TEMFZncas3iQ xON1PQJivAkpkRjQ7wrOJZ+n534wmqRYf/1OJ1gCOuXq162n17OqREdUUDqVmTKz hkrhNurMywMEr6Oe30Juii0GvJoHHXlLAodywR1ml4+4wlpcjalDGNAU3j4dc8W5 db2zHmSgM4J0Gh3gXowdEdk+MHSzYvIe42HjJwerAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBMb4diSqvyiwb55eTjtDGVaqtVUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhODU5YTMxLTc4M2EtNDIwYi1hYjA4LTVhNzE5Y2JlNGQ3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sWAAwDQYJKoZIhvcNAQELBQADggEBAGo+6U1hBPP1u3FtouKfU/Ce 99ryk2nO9I1K3y41aoC+hdsZeIi64GzWjjXCMIvHwbf6GZ95GUYd70a81Nt2DDlG JKo91RiLEWu9DkqEC+HiMPLLDFMomOkm0+azcZtD6fmEZqiX9GgNl+Zm3Py0LwHw RnDX6oZEsb0GrB7gnZAVFo9g/6wum2C3NF2p+pmHuD50xPlfgixhkDnO3Uz4yblm eNtfj8zFBV0AtSPosdcCbHdlwi/MkJp3XIqMGRFmrZ6A70waAOEAGCHWgoyqAg9J ef941cHY8PmLS3ejS4wfxl+o/w0daBf0Oymgc8uTb+mI/17vKpbKauhTnX4m4fo= -----END CERTIFICATE-----Generated at Sun Mar 1 22:30:51 2026 by rpki-client