$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9ab0c80-713e-4c08-a740-97ba0f9d766c.roa File: c9ab0c80-713e-4c08-a740-97ba0f9d766c.roa (raw, json) Hash identifier: Op24yjzCUJwu5yxTWeCk935Yl0iSeQS1GDoEo99kUY4= Subject key identifier: D3:04:AB:80:18:48:88:96:D6:7D:17:3A:01:21:AD:75:0F:45:9F:D0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3000B6B532BE4B1E9D68C718E8A870CCBDA5AF36 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9ab0c80-713e-4c08-a740-97ba0f9d766c.roa Signing time: Tue 24 Feb 2026 01:31:32 +0000 ROA not before: Tue 24 Feb 2026 01:31:32 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:00:b6:b5:32:be:4b:1e:9d:68:c7:18:e8:a8:70:cc:bd:a5:af:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 01:31:32 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=e5ede10683e221ea1e02f73d8b70a991f59e5210c870895c349aa7c0402ebfd8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cc:f2:a3:a4:ff:74:4a:1b:0a:af:d6:1f:de: 6f:9f:9d:4d:89:bf:37:d5:f5:eb:54:19:5d:df:7b: 2a:25:94:3c:5e:ab:a8:5d:e7:df:b8:99:83:b4:e7: 3d:63:c5:87:d4:d3:9f:0d:c0:0d:82:a9:ef:ce:ce: f9:3c:30:7b:8b:fe:c2:cc:8c:82:89:be:1f:1a:10: af:11:f5:d2:65:a4:86:59:ac:7f:9e:7c:cc:70:4f: f9:4e:d7:b2:1e:b0:bc:78:e7:cd:12:15:40:47:b1: 76:7e:7b:f2:2e:2c:ca:39:2a:e9:9c:4e:ff:7f:ac: c9:66:05:45:d1:6b:d3:cc:1a:3d:11:9e:bd:e1:d4: 00:f3:39:ed:17:c1:f2:2d:5f:9d:5b:3b:e1:f0:2f: 3c:fc:7b:01:5e:93:c9:0c:8e:ac:99:e8:d8:54:b3: 1b:d5:b6:7e:ba:8a:86:7e:e2:62:72:52:d3:ef:ff: 17:47:a3:35:ae:ed:ad:81:cc:5a:30:c9:93:53:4b: eb:c9:3f:d8:37:35:7c:de:94:93:c1:f8:e2:ff:17: 5e:6b:1c:a5:1b:c0:6e:3e:8c:b8:7c:54:de:60:a8: b5:ea:06:71:8c:f1:24:85:37:77:fe:36:f0:f6:2d: 7b:f4:8e:cd:36:f3:d7:6f:db:46:40:62:52:69:b8: 21:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:04:AB:80:18:48:88:96:D6:7D:17:3A:01:21:AD:75:0F:45:9F:D0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9ab0c80-713e-4c08-a740-97ba0f9d766c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:1040::/48 Signature Algorithm: sha256WithRSAEncryption 77:64:72:e4:31:1c:fb:4c:e3:94:80:c7:79:5b:ef:ac:a1:9a: e5:c1:3e:e4:15:a0:85:0c:ba:9a:dc:55:24:7d:23:e9:98:12: 16:8d:75:c6:00:2e:7f:68:75:6b:ed:01:4c:43:8e:66:11:d5: 4f:a2:0e:9b:ba:06:8f:b3:87:cd:8f:fb:82:aa:b1:94:63:79: 77:4e:9a:9d:e6:c3:8c:a5:2d:07:d8:6b:ba:fe:64:69:71:97: c0:03:35:37:89:ae:2e:52:41:35:42:3c:94:3f:03:83:49:5f: 19:55:da:9a:9f:f1:93:b6:24:ef:63:59:de:57:bd:c1:15:3c: 1d:94:59:1b:cf:2c:fb:56:f6:34:03:38:14:25:f7:67:5c:56: f5:e4:c3:b1:89:23:1e:b8:1e:fb:ab:43:53:3f:ed:02:6b:bd: 2c:dd:68:9d:da:1b:1f:3e:1d:d9:a4:fe:6e:35:ac:96:2c:3d: 41:f8:bc:42:01:a4:1b:c7:63:21:6c:b2:88:e2:32:ae:a8:71: 55:19:40:b5:bc:95:bb:43:b6:a8:1a:bb:cd:ce:54:08:94:ce: 24:04:3f:40:cc:80:07:8e:aa:f5:33:eb:7d:c5:bc:e2:1d:07: a4:ee:b8:22:84:74:95:f5:e2:1f:b5:64:2f:b6:52:6f:b2:cc: 1f:8f:ba:07 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMAC2tTK+Sx6daMcY6KhwzL2lrzYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDEzMTMyWhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNWVkZTEwNjgzZTIyMWVhMWUwMmY3M2Q4YjcwYTk5MWY1 OWU1MjEwYzg3MDg5NWMzNDlhYTdjMDQwMmViZmQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGzPKjpP90ShsKr9Yf3m+fnU2JvzfV9etUGV3feyollDxe q6hd59+4mYO05z1jxYfU058NwA2Cqe/Ozvk8MHuL/sLMjIKJvh8aEK8R9dJlpIZZ rH+efMxwT/lO17IesLx4580SFUBHsXZ+e/IuLMo5KumcTv9/rMlmBUXRa9PMGj0R nr3h1ADzOe0XwfItX51bO+HwLzz8ewFek8kMjqyZ6NhUsxvVtn66ioZ+4mJyUtPv /xdHozWu7a2BzFowyZNTS+vJP9g3NXzelJPB+OL/F15rHKUbwG4+jLh8VN5gqLXq BnGM8SSFN3f+NvD2LXv0js0289dv20ZAYlJpuCFtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0wSrgBhIiJbWfRc6ASGtdQ9Fn9AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M5YWIwYzgwLTcxM2UtNGMwOC1hNzQwLTk3YmEwZjlkNzY2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9hEEAwDQYJKoZIhvcNAQELBQADggEBAHdkcuQxHPtM45SAx3lb76yh muXBPuQVoIUMuprcVSR9I+mYEhaNdcYALn9odWvtAUxDjmYR1U+iDpu6Bo+zh82P +4KqsZRjeXdOmp3mw4ylLQfYa7r+ZGlxl8ADNTeJri5SQTVCPJQ/A4NJXxlV2pqf 8ZO2JO9jWd5XvcEVPB2UWRvPLPtW9jQDOBQl92dcVvXkw7GJIx64HvurQ1M/7QJr vSzdaJ3aGx8+Hdmk/m41rJYsPUH4vEIBpBvHYyFssojiMq6ocVUZQLW8lbtDtqga u83OVAiUziQEP0DMgAeOqvUz633FvOIdB6TuuCKEdJX14h+1ZC+2Um+yzB+Pugc= -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:34 2026 by rpki-client