$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21ea5057-7011-40bb-9827-ccb6dac59d81.roa File: 21ea5057-7011-40bb-9827-ccb6dac59d81.roa (raw, json) Hash identifier: QD9PsELvKoIThTHoIknlfx1kbkAni8rkPTzT3COQdhY= Subject key identifier: 3A:78:60:06:57:CB:DA:85:F7:5E:90:04:F7:DE:E0:3A:B2:61:F7:7B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1921C22C6AD11468D4BAD3FF751E0D3D6487F39E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21ea5057-7011-40bb-9827-ccb6dac59d81.roa Signing time: Thu 12 Mar 2026 16:09:59 +0000 ROA not before: Thu 12 Mar 2026 16:09:59 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe9:a480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:21:c2:2c:6a:d1:14:68:d4:ba:d3:ff:75:1e:0d:3d:64:87:f3:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:09:59 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=23241ae52854a33c4edc371d76dd4aa8c248b4cf235c58f86286d93836d76c03, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:00:4f:15:63:4e:0c:c4:0a:cb:40:2d:68:2b: 89:f4:42:b1:c1:6c:6a:51:35:ca:a7:10:40:21:bd: b0:50:7e:47:44:60:86:9b:28:bd:77:57:98:37:f1: f7:4c:c6:08:56:85:30:68:c6:b0:54:55:49:a9:ff: 47:b3:2b:5e:3e:5a:95:fd:66:db:2c:da:d9:0b:24: b8:90:f9:ac:c0:c9:fe:fb:76:ab:55:4c:74:44:9e: 4c:48:0e:af:89:40:89:d5:0a:de:71:1a:09:06:f7: ab:87:e1:e4:4d:7f:09:8d:75:e0:29:b7:05:50:2b: 78:cf:ab:05:71:35:35:7b:74:6f:50:02:e9:3b:5b: dc:73:58:03:56:79:41:9e:9f:ce:66:56:28:74:a7: c4:dd:bb:85:ca:3c:28:de:e7:40:2d:bc:79:74:3c: 26:53:f2:4e:ca:77:1f:ff:58:2b:68:be:0c:d8:6e: a6:b7:dc:4b:05:28:e0:c1:7b:bd:f9:50:1a:30:b7: d5:f0:62:a2:0d:ea:e2:6f:b6:80:84:27:96:06:24: 20:35:17:23:93:ac:a5:0c:65:2c:b0:c0:03:78:83: ed:b7:59:18:b4:43:68:da:38:fc:d2:53:e7:63:31: 2f:8a:31:87:32:18:ae:7e:eb:13:46:b5:78:3d:16: 10:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:78:60:06:57:CB:DA:85:F7:5E:90:04:F7:DE:E0:3A:B2:61:F7:7B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21ea5057-7011-40bb-9827-ccb6dac59d81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe9:a480::/48 Signature Algorithm: sha256WithRSAEncryption 49:41:f3:28:3f:96:d4:72:1d:50:9e:2e:a2:38:ca:53:bd:d9: 42:d1:2e:22:57:5e:32:f3:71:2c:15:ed:10:27:69:5c:e6:73: 0e:91:63:09:c1:03:ba:dd:3a:c7:c1:7e:ef:4c:fb:cc:54:34: a9:c7:3f:08:31:5f:c4:01:9d:3a:0b:77:97:43:f8:de:aa:db: 4b:ce:9b:3c:ab:d9:d4:5a:6a:7c:c9:89:a2:a4:54:1f:b7:0a: 2c:f1:f3:51:3b:2d:03:5e:1b:1f:52:fe:c1:c8:4c:48:3d:dd: 35:cb:e0:f0:81:7a:11:08:95:23:f8:3a:53:1c:58:e6:32:89: 02:e4:23:63:94:04:63:d5:07:c5:b5:91:cd:5a:8f:5d:9e:ab: 22:76:3d:77:29:c8:99:45:38:a5:d7:73:2d:cd:d4:8a:d7:38: bc:97:98:cf:5e:06:ac:19:60:37:11:01:b2:31:fd:44:0c:fe: 0a:46:5c:17:ad:af:23:61:0b:5c:f5:d4:a7:e0:ac:3d:5b:1e: e5:a1:73:80:74:e2:f6:16:63:f4:85:a1:9b:6a:c7:a9:b9:01: 53:23:a9:ed:91:d3:ac:65:6f:c3:f5:d1:8f:55:48:6f:34:70: 23:72:d6:51:60:3f:bb:8d:59:d8:80:45:96:e6:2e:66:83:a9: fe:84:6e:7c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGSHCLGrRFGjUutP/dR4NPWSH854wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYwOTU5WhcNMjYwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzI0MWFlNTI4NTRhMzNjNGVkYzM3MWQ3NmRkNGFhOGMy NDhiNGNmMjM1YzU4Zjg2Mjg2ZDkzODM2ZDc2YzAzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaAE8VY04MxArLQC1oK4n0QrHBbGpRNcqnEEAhvbBQfkdE YIabKL13V5g38fdMxghWhTBoxrBUVUmp/0ezK14+WpX9Ztss2tkLJLiQ+azAyf77 dqtVTHREnkxIDq+JQInVCt5xGgkG96uH4eRNfwmNdeAptwVQK3jPqwVxNTV7dG9Q Auk7W9xzWANWeUGen85mVih0p8Tdu4XKPCje50AtvHl0PCZT8k7Kdx//WCtovgzY bqa33EsFKODBe735UBowt9XwYqIN6uJvtoCEJ5YGJCA1FyOTrKUMZSywwAN4g+23 WRi0Q2jaOPzSU+djMS+KMYcyGK5+6xNGtXg9FhDtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOnhgBlfL2oX3XpAE997gOrJh93swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIxZWE1MDU3LTcwMTEtNDBiYi05ODI3LWNjYjZkYWM1OWQ4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/ppIAwDQYJKoZIhvcNAQELBQADggEBAElB8yg/ltRyHVCeLqI4ylO9 2ULRLiJXXjLzcSwV7RAnaVzmcw6RYwnBA7rdOsfBfu9M+8xUNKnHPwgxX8QBnToL d5dD+N6q20vOmzyr2dRaanzJiaKkVB+3Cizx81E7LQNeGx9S/sHITEg93TXL4PCB ehEIlSP4OlMcWOYyiQLkI2OUBGPVB8W1kc1aj12eqyJ2PXcpyJlFOKXXcy3N1IrX OLyXmM9eBqwZYDcRAbIx/UQM/gpGXBetryNhC1z11KfgrD1bHuWhc4B04vYWY/SF oZtqx6m5AVMjqe2R06xlb8P10Y9VSG80cCNy1lFgP7uNWdiARZbmLmaDqf6Ebnw= -----END CERTIFICATE-----Generated at Thu Mar 19 12:22:44 2026 by rpki-client