$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd2cec64-e5aa-45f7-a471-251687765f42.roa File: dd2cec64-e5aa-45f7-a471-251687765f42.roa (raw, json) Hash identifier: HEfFb85ehcWjd4MEFn2tTWL0xQIxcL8pbgZdZL4PxJk= Subject key identifier: 78:E3:86:3D:84:CE:EA:41:B5:1B:30:61:0C:CF:D1:3A:74:AE:9F:43 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 326FB3857A6A56B67E5A16C7C8D8D2B8E6779999 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd2cec64-e5aa-45f7-a471-251687765f42.roa Signing time: Tue 24 Feb 2026 01:11:18 +0000 ROA not before: Tue 24 Feb 2026 01:11:18 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:8140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:6f:b3:85:7a:6a:56:b6:7e:5a:16:c7:c8:d8:d2:b8:e6:77:99:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 01:11:18 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=778ab8c510e157997057fc2d107d77920818e86eee19a5ed41197b9a3454abf3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:42:b4:27:65:de:3c:4b:1f:1c:97:d2:fe:9f: f2:d3:83:d7:c4:0c:95:3c:47:e2:3c:0d:1c:d2:72: 13:4c:1a:8c:76:d6:73:5a:77:cc:a6:34:d3:75:77: a2:81:cb:45:d8:07:6d:01:ff:1f:55:42:aa:35:72: 4b:b8:89:93:f4:74:58:54:c9:96:94:28:32:aa:ba: 1d:5e:d8:ff:92:42:74:f0:1a:f1:4e:22:f6:40:29: 47:1a:89:0a:a0:2c:a6:39:7e:ff:f7:d6:23:e4:be: dc:cb:a8:67:28:12:33:46:86:47:2d:0c:58:1e:4d: 70:01:3f:74:e7:6d:78:73:eb:a9:07:66:47:6d:9a: 8d:03:c0:4d:9d:81:eb:08:cf:bf:01:98:9b:69:f4: 22:ef:e7:bc:3f:44:52:57:b3:56:f5:31:7d:5b:78: dd:a5:5d:22:e8:ee:ab:aa:de:84:4e:30:b7:cb:59: 3c:da:cb:ec:3e:ff:58:0c:99:bb:43:ad:9f:9b:d2: c6:34:cc:56:a2:f9:48:c1:d6:92:67:37:a4:31:a0: 06:7a:df:2f:88:65:d1:f0:ac:79:54:e8:4a:a5:29: b2:70:b6:e8:09:e0:a4:c9:ad:94:0f:0b:aa:e4:c3: 51:39:06:f9:76:56:a0:78:0e:4b:ce:0f:22:11:2c: e4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E3:86:3D:84:CE:EA:41:B5:1B:30:61:0C:CF:D1:3A:74:AE:9F:43 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd2cec64-e5aa-45f7-a471-251687765f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8140::/48 Signature Algorithm: sha256WithRSAEncryption 89:0b:64:03:e7:de:a0:d7:b3:83:d8:1a:ae:98:73:0e:09:65: 59:d9:63:ee:fb:70:41:06:5c:96:2d:5c:70:8b:7c:fc:52:b3: 75:be:b3:9d:d8:22:40:69:bd:d3:ab:0f:23:29:69:ca:a9:f5: 61:61:03:b9:0e:ed:9a:86:b8:59:20:52:75:e8:f0:a2:f3:43: 75:57:0e:f3:25:e2:1c:fa:3a:fd:b9:02:ad:e8:e7:c2:69:83: f4:a7:fd:9b:4f:6c:b5:a0:25:09:a6:08:84:9c:be:55:59:1c: 01:41:8d:e9:e1:e0:46:09:4d:e2:d1:83:12:95:ba:d8:6d:70: 9f:a0:65:81:33:40:a5:3b:ca:f0:5c:4a:03:b2:4d:3b:ab:54: 8d:06:69:9f:c5:b5:d3:6b:5d:27:9b:ac:d5:37:32:26:e8:dc: 52:c2:04:b6:45:df:a1:81:2f:b2:22:b9:b1:2f:cb:ec:08:73: 56:85:ed:d9:94:30:fc:7d:bd:47:c0:14:df:44:14:e9:d4:6b: 35:a2:b7:36:f6:e7:46:33:cc:6a:c5:9e:00:e2:1d:5e:de:d0: 0f:bc:24:8a:13:8c:58:cc:6f:e0:4b:08:1a:a9:ce:ad:ce:2a: cd:b7:47:75:50:41:9e:a1:de:6e:e6:7a:56:11:41:a4:06:12: 22:1b:55:c6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMm+zhXpqVrZ+WhbHyNjSuOZ3mZkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDExMTE4WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NzhhYjhjNTEwZTE1Nzk5NzA1N2ZjMmQxMDdkNzc5MjA4 MThlODZlZWUxOWE1ZWQ0MTE5N2I5YTM0NTRhYmYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoQrQnZd48Sx8cl9L+n/LTg9fEDJU8R+I8DRzSchNMGox2 1nNad8ymNNN1d6KBy0XYB20B/x9VQqo1cku4iZP0dFhUyZaUKDKquh1e2P+SQnTw GvFOIvZAKUcaiQqgLKY5fv/31iPkvtzLqGcoEjNGhkctDFgeTXABP3TnbXhz66kH Zkdtmo0DwE2dgesIz78BmJtp9CLv57w/RFJXs1b1MX1beN2lXSLo7quq3oROMLfL WTzay+w+/1gMmbtDrZ+b0sY0zFai+UjB1pJnN6QxoAZ63y+IZdHwrHlU6EqlKbJw tugJ4KTJrZQPC6rkw1E5Bvl2VqB4DkvODyIRLORJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUeOOGPYTO6kG1GzBhDM/ROnSun0MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RkMmNlYzY0LWU1YWEtNDVmNy1hNDcxLTI1MTY4Nzc2NWY0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgUAwDQYJKoZIhvcNAQELBQADggEBAIkLZAPn3qDXs4PYGq6Ycw4J ZVnZY+77cEEGXJYtXHCLfPxSs3W+s53YIkBpvdOrDyMpacqp9WFhA7kO7ZqGuFkg UnXo8KLzQ3VXDvMl4hz6Ov25Aq3o58Jpg/Sn/ZtPbLWgJQmmCIScvlVZHAFBjenh 4EYJTeLRgxKVuthtcJ+gZYEzQKU7yvBcSgOyTTurVI0GaZ/FtdNrXSebrNU3Mibo 3FLCBLZF36GBL7IiubEvy+wIc1aF7dmUMPx9vUfAFN9EFOnUazWitzb250YzzGrF ngDiHV7e0A+8JIoTjFjMb+BLCBqpzq3OKs23R3VQQZ6h3m7melYRQaQGEiIbVcY= -----END CERTIFICATE-----Generated at Sun Mar 1 22:12:28 2026 by rpki-client