$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f89554b9-b6ae-4a2e-b141-281d3ff873d3.roa File: f89554b9-b6ae-4a2e-b141-281d3ff873d3.roa (raw, json) Hash identifier: +wxap66OpGrp26Qr/afvfPBJVlr9vT0C7JYnV/6zSks= Subject key identifier: 0D:1C:14:B8:A3:8A:41:8E:83:93:19:F8:3C:9E:EB:3F:FF:51:14:E9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3E63E34458D636A505F31A7607F5D21A175F78E4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f89554b9-b6ae-4a2e-b141-281d3ff873d3.roa Signing time: Tue 24 Feb 2026 01:11:19 +0000 ROA not before: Tue 24 Feb 2026 01:11:19 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:c040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:63:e3:44:58:d6:36:a5:05:f3:1a:76:07:f5:d2:1a:17:5f:78:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 01:11:19 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=9ddf3db2ab1045169a37fb085d5ff2d5e04b09cce130f4708f84586bd4c47f96, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c2:77:82:9e:10:9e:ba:19:29:fe:79:f4:11: 37:ce:7f:bb:ab:b3:e1:8d:68:6d:b3:09:da:c8:93: 44:af:36:53:c0:0f:17:04:89:bf:8b:0e:67:c3:fe: 09:0f:e0:b1:a9:f5:5a:ac:40:1e:e8:eb:94:13:59: 86:07:c0:63:4f:b1:78:82:41:91:62:78:c8:fc:79: 87:81:ae:6a:33:06:be:85:86:b3:cb:1d:9d:9f:16: 31:11:e5:e5:6b:33:d2:57:04:84:30:bc:21:87:97: 74:73:0b:e0:63:c2:42:ca:aa:35:0d:54:d4:ce:e6: f3:75:7f:7f:59:6b:ac:96:50:89:f7:40:9b:f9:0e: bd:30:3b:f6:44:94:25:2b:3f:20:63:08:59:ff:48: 56:bd:a5:89:df:82:2e:8e:f6:93:9d:bb:c4:a5:98: 99:e9:fc:0b:3a:73:ad:7a:cb:4b:6c:44:e6:1e:6f: a4:89:92:54:e2:d2:22:1d:f2:db:c1:ae:de:b4:b5: ac:8d:d3:48:e4:f6:cb:81:f3:03:e7:c5:b5:4c:5b: e7:d7:69:ba:37:80:db:3c:39:cd:42:88:06:9d:b9: c3:af:7d:c5:89:cb:8d:a1:9a:76:10:fa:92:ac:26: 98:6a:be:70:5c:8a:4c:64:b3:e0:ef:f6:21:c4:f9: c9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1C:14:B8:A3:8A:41:8E:83:93:19:F8:3C:9E:EB:3F:FF:51:14:E9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f89554b9-b6ae-4a2e-b141-281d3ff873d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:c040::/48 Signature Algorithm: sha256WithRSAEncryption 10:41:ae:f5:36:bd:41:f4:96:6f:6e:df:9c:de:7a:94:de:73: 8d:55:e6:fe:a5:ec:73:cd:cd:a1:3c:44:f4:e4:56:92:18:f7: 16:7b:87:26:87:2a:21:17:87:28:da:ee:e4:86:13:a4:c3:46: 43:52:71:da:c0:cc:d7:0c:1a:3a:a0:d0:1a:a7:e3:11:e8:b9: 08:cc:9a:c8:dd:7e:15:fd:9b:9f:25:9e:43:36:64:14:3b:80: f6:2e:89:95:0a:ac:84:35:59:12:23:57:26:03:ba:14:7d:84: c1:12:2e:21:f8:00:d8:61:15:bf:c3:4c:09:5e:0a:ce:3b:6a: 90:7f:d6:a6:16:2a:f1:15:5e:dc:5a:1a:83:d0:11:05:ca:f3: 85:33:e5:4f:4e:6c:99:be:9b:a1:b1:01:0b:c0:1f:d7:f2:35: db:3f:ae:cd:48:5c:78:a3:9c:9c:24:64:22:9f:d2:e0:31:cd: 6e:5c:9a:15:d2:7f:33:d1:04:49:f6:fc:56:12:4f:b6:a9:31: 58:cd:f3:b1:53:3f:e3:f1:49:ff:62:f5:1a:7c:2c:c6:50:56: 24:54:74:59:ec:a7:99:c3:94:f9:60:51:46:79:6f:f0:ab:52: ef:64:3e:e5:c4:92:4e:0b:92:b5:be:b4:61:33:c8:a4:2f:2e: a5:0c:25:83 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPmPjRFjWNqUF8xp2B/XSGhdfeOQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDExMTE5WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZGRmM2RiMmFiMTA0NTE2OWEzN2ZiMDg1ZDVmZjJkNWUw NGIwOWNjZTEzMGY0NzA4Zjg0NTg2YmQ0YzQ3Zjk2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCewneCnhCeuhkp/nn0ETfOf7urs+GNaG2zCdrIk0SvNlPA DxcEib+LDmfD/gkP4LGp9VqsQB7o65QTWYYHwGNPsXiCQZFieMj8eYeBrmozBr6F hrPLHZ2fFjER5eVrM9JXBIQwvCGHl3RzC+BjwkLKqjUNVNTO5vN1f39Za6yWUIn3 QJv5Dr0wO/ZElCUrPyBjCFn/SFa9pYnfgi6O9pOdu8SlmJnp/As6c616y0tsROYe b6SJklTi0iId8tvBrt60tayN00jk9suB8wPnxbVMW+fXabo3gNs8Oc1CiAaducOv fcWJy42hmnYQ+pKsJphqvnBcikxks+Dv9iHE+cnpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDRwUuKOKQY6Dkxn4PJ7rP/9RFOkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y4OTU1NGI5LWI2YWUtNGEyZS1iMTQxLTI4MWQzZmY4NzNkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9hwEAwDQYJKoZIhvcNAQELBQADggEBABBBrvU2vUH0lm9u35zeepTe c41V5v6l7HPNzaE8RPTkVpIY9xZ7hyaHKiEXhyja7uSGE6TDRkNScdrAzNcMGjqg 0Bqn4xHouQjMmsjdfhX9m58lnkM2ZBQ7gPYuiZUKrIQ1WRIjVyYDuhR9hMESLiH4 ANhhFb/DTAleCs47apB/1qYWKvEVXtxaGoPQEQXK84Uz5U9ObJm+m6GxAQvAH9fy Nds/rs1IXHijnJwkZCKf0uAxzW5cmhXSfzPRBEn2/FYST7apMVjN87FTP+PxSf9i 9Rp8LMZQViRUdFnsp5nDlPlgUUZ5b/CrUu9kPuXEkk4LkrW+tGEzyKQvLqUMJYM= -----END CERTIFICATE-----Generated at Mon Mar 2 03:07:45 2026 by rpki-client