$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2a12573-e976-412c-9ab9-c7f02c2ce294.roa File: f2a12573-e976-412c-9ab9-c7f02c2ce294.roa (raw, json) Hash identifier: 2iZ6xWZeJF1BBfzYzkKhDN4dnRUtjoHUFFF8rva58/M= Subject key identifier: 6B:81:51:DE:91:DC:08:DF:7C:3A:DB:E3:FC:02:B2:E1:13:A9:49:6A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 75F260DED431D46E357A1D629D0FD0BF61EB4794 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2a12573-e976-412c-9ab9-c7f02c2ce294.roa Signing time: Wed 25 Feb 2026 00:30:47 +0000 ROA not before: Wed 25 Feb 2026 00:30:47 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fb9:4000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f2:60:de:d4:31:d4:6e:35:7a:1d:62:9d:0f:d0:bf:61:eb:47:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 00:30:47 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=17ea4523c5166d2e6db88bac9b3f2cdb3b89a87a04a82ffbfd70d607b1c1523f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ce:9e:7b:78:21:d8:54:e2:c9:62:1c:f5:0b: 61:be:70:e2:af:8a:43:79:73:a9:20:34:41:30:a0: bc:cc:e5:a6:c9:5b:8e:b6:a8:b7:41:ca:c1:3f:4c: e3:05:86:5f:93:f4:d1:c1:57:6c:72:82:a2:44:bc: d3:7f:18:8b:87:03:e0:a5:bf:5a:0f:13:a8:ec:47: 31:d4:a6:a0:23:32:fe:ff:57:b0:78:15:27:9b:26: 80:0d:40:2f:34:58:cc:2e:f1:22:c0:70:1b:f6:31: 5d:2e:63:6b:13:cd:4d:16:1e:e0:06:63:30:79:0e: 10:d4:e4:cd:6b:51:97:a6:23:cf:39:dc:61:00:2c: cb:23:60:3e:02:72:6c:f1:1b:42:08:8d:97:63:0d: ae:e6:a8:83:52:0e:48:6f:33:6a:bb:12:ae:8a:cb: 06:ed:e2:80:35:ca:ff:22:8b:de:1f:5e:40:d5:4d: f3:64:28:d1:56:61:8f:79:ae:47:f4:4c:4e:b4:33: ee:ec:cb:19:cb:09:84:6f:02:3f:09:f7:76:65:b2: b3:b9:48:24:50:7d:89:ca:c2:2e:3a:cd:a0:6e:b6: d1:09:1c:33:b8:d7:02:da:ee:af:e3:31:a1:4b:03: d2:70:d2:d3:62:07:7a:d3:a6:db:a6:67:ee:8b:33: c8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:81:51:DE:91:DC:08:DF:7C:3A:DB:E3:FC:02:B2:E1:13:A9:49:6A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2a12573-e976-412c-9ab9-c7f02c2ce294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb9:4000::/39 Signature Algorithm: sha256WithRSAEncryption 4f:e5:79:9a:33:27:f0:d9:f5:2f:0c:05:74:0f:e0:b2:95:04: 00:c9:bc:95:1a:c8:1f:be:b6:58:3d:26:91:ba:bf:f0:45:59: 9e:db:e5:bf:b5:86:b5:ad:cb:e6:4d:cf:f6:32:6d:cf:2c:4e: 7b:bf:f9:49:88:2f:00:21:49:ef:2a:b4:6f:cc:0e:38:6d:53: 92:7d:56:b6:7c:84:1d:9a:61:e4:81:84:bb:dc:b6:8f:d2:42: 71:ca:94:02:20:70:b0:bc:d5:3e:e7:8f:91:20:17:a1:6a:ae: 3d:76:e4:a3:51:e4:f9:21:c6:d0:67:1d:92:26:d7:0b:16:a8: b5:96:1d:af:13:89:47:6b:dd:f1:53:0c:db:d6:11:c3:cd:54: 84:70:c9:ff:88:78:ff:77:99:da:76:24:7b:e5:bc:de:06:bd: 75:ec:c7:00:7e:65:f2:a7:12:6e:8b:0e:45:6d:91:be:4d:81: de:a7:37:af:a8:b0:16:0a:e7:e9:d9:b8:ec:e8:a5:1f:95:06: c5:1c:f2:9c:c1:4d:98:65:cb:4f:69:98:48:28:46:07:d4:29: 64:01:f1:c6:df:24:07:83:99:9f:2d:8a:e5:b9:d0:91:9e:47: 3e:d8:9f:af:6a:f2:cc:e5:19:04:80:56:12:44:56:5d:e5:aa: 11:d3:c3:c8 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUdfJg3tQx1G41eh1inQ/Qv2HrR5QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDAzMDQ3WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxN2VhNDUyM2M1MTY2ZDJlNmRiODhiYWM5YjNmMmNkYjNi ODlhODdhMDRhODJmZmJmZDcwZDYwN2IxYzE1MjNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYzp57eCHYVOLJYhz1C2G+cOKvikN5c6kgNEEwoLzM5abJ W462qLdBysE/TOMFhl+T9NHBV2xygqJEvNN/GIuHA+Clv1oPE6jsRzHUpqAjMv7/ V7B4FSebJoANQC80WMwu8SLAcBv2MV0uY2sTzU0WHuAGYzB5DhDU5M1rUZemI885 3GEALMsjYD4CcmzxG0IIjZdjDa7mqINSDkhvM2q7Eq6Kywbt4oA1yv8ii94fXkDV TfNkKNFWYY95rkf0TE60M+7syxnLCYRvAj8J93ZlsrO5SCRQfYnKwi46zaButtEJ HDO41wLa7q/jMaFLA9Jw0tNiB3rTptumZ+6LM8j/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUa4FR3pHcCN98Otvj/AKy4ROpSWowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyYTEyNTczLWU5NzYtNDEyYy05YWI5LWM3ZjAyYzJjZTI5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB+5QDANBgkqhkiG9w0BAQsFAAOCAQEAT+V5mjMn8Nn1LwwFdA/gspUE AMm8lRrIH762WD0mkbq/8EVZntvlv7WGta3L5k3P9jJtzyxOe7/5SYgvACFJ7yq0 b8wOOG1Tkn1WtnyEHZph5IGEu9y2j9JCccqUAiBwsLzVPuePkSAXoWquPXbko1Hk +SHG0GcdkibXCxaotZYdrxOJR2vd8VMM29YRw81UhHDJ/4h4/3eZ2nYke+W83ga9 dezHAH5l8qcSbosORW2Rvk2B3qc3r6iwFgrn6dm47OilH5UGxRzynMFNmGXLT2mY SChGB9QpZAHxxt8kB4OZny2K5bnQkZ5HPtifr2ryzOUZBIBWEkRWXeWqEdPDyA== -----END CERTIFICATE-----Generated at Mon Mar 2 04:51:44 2026 by rpki-client