$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28202c82-9b27-4586-a52d-f8a456705b37.roa File: 28202c82-9b27-4586-a52d-f8a456705b37.roa (raw, json) Hash identifier: ZWjCnhlBvRhqSiSTgaWRNIWUV3pGo0Ycwl8QT4OHjCI= Subject key identifier: 36:0B:20:73:AD:A8:65:49:46:80:C2:8C:9A:71:63:6F:3B:71:D3:77 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1A889670C9BC44ED91878C3CCAD03DAB8BB7DC82 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28202c82-9b27-4586-a52d-f8a456705b37.roa Signing time: Thu 12 Mar 2026 16:11:30 +0000 ROA not before: Thu 12 Mar 2026 16:11:30 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe9:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:88:96:70:c9:bc:44:ed:91:87:8c:3c:ca:d0:3d:ab:8b:b7:dc:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:11:30 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=f388293fb34e32f71b1997ad1ba58f152bdbd70308309b648a69ee046ab3dd05, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b7:cd:03:0b:2b:87:dd:5a:55:15:54:93:d2: 72:2d:28:9d:55:00:be:20:19:93:39:7c:88:d8:d6: 29:73:9d:e3:40:14:cc:c3:db:e4:f4:81:aa:96:e7: 55:91:79:b7:d6:83:44:d0:a2:48:61:a9:b9:2a:fa: 42:0d:36:78:9c:c4:a5:a6:93:ca:5f:ba:d3:6a:ec: a6:56:be:b1:c0:ed:f2:ab:2a:52:07:30:4c:32:c6: 59:90:bb:61:4b:dc:d4:8b:51:7f:50:0c:6a:22:8d: fd:ed:9e:d6:b1:80:a2:68:25:cd:4a:a0:82:e4:d2: 63:dd:16:04:22:0f:13:90:ca:f3:a7:88:62:6e:ef: 63:0b:95:49:ee:0c:6c:68:57:b4:88:01:81:98:5c: 1d:e2:30:a9:48:0b:05:5d:4c:43:84:2c:a0:4f:f3: e5:7d:d8:ad:1f:22:9a:1c:17:57:44:b4:14:30:1d: a6:77:dc:c1:e5:d9:e9:f0:4f:42:f7:ac:98:2a:9b: f8:6f:f2:b2:5d:a2:00:2b:27:f6:04:04:22:1e:f1: 01:cd:8f:2d:f5:4a:db:a5:05:10:a3:17:d9:a2:84: 38:55:ad:cb:da:8c:90:43:11:44:9d:5c:60:68:27: ff:2f:e6:6e:6d:03:10:74:e6:37:dd:14:58:d1:ec: 40:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0B:20:73:AD:A8:65:49:46:80:C2:8C:9A:71:63:6F:3B:71:D3:77 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28202c82-9b27-4586-a52d-f8a456705b37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe9:1000::/40 Signature Algorithm: sha256WithRSAEncryption 16:27:8b:60:6f:90:22:cc:01:ac:2f:dc:16:bd:84:d8:3c:3f: 26:e8:ff:34:b2:64:5b:91:fe:07:be:32:be:67:1b:18:e9:49: e3:ae:9b:3d:28:2e:72:63:2d:05:59:3f:b5:17:17:2a:cd:9c: 98:7c:40:17:43:ed:01:b0:69:76:8b:93:c4:29:8c:c1:ef:aa: 1c:6c:15:f3:e5:f8:34:3d:94:99:10:4a:f6:e9:37:75:ad:fe: 67:32:6c:c9:81:d2:22:b1:58:93:d1:f2:a2:af:ec:a0:04:2e: ab:e5:c0:4b:e0:46:56:f2:0d:b5:cc:f3:1a:43:11:52:ea:f1: 55:aa:2e:c3:74:9c:1f:d1:89:a7:41:7d:99:ab:1f:60:7d:53: da:a6:f3:09:10:27:b5:f9:c5:90:e5:66:5a:a4:d2:93:03:0d: 61:73:01:95:db:17:3a:14:d0:30:3a:b6:d6:ca:7b:ea:f0:0e: c8:d4:b0:cf:53:39:3b:8d:4f:44:5f:c5:b6:89:d8:d9:f5:8e: 6e:a9:db:6e:33:6b:cc:f3:33:c8:32:19:5d:38:bb:4f:5a:e7: e1:d6:cd:67:69:97:43:58:1b:ef:1b:ee:2d:65:2e:e6:09:ce: cb:24:b6:96:92:16:1b:67:36:7e:30:25:25:3a:45:46:f2:f8: 63:08:35:be -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUGoiWcMm8RO2Rh4w8ytA9q4u33IIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYxMTMwWhcNMjYwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzg4MjkzZmIzNGUzMmY3MWIxOTk3YWQxYmE1OGYxNTJi ZGJkNzAzMDgzMDliNjQ4YTY5ZWUwNDZhYjNkZDA1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJt80DCyuH3VpVFVST0nItKJ1VAL4gGZM5fIjY1ilzneNA FMzD2+T0gaqW51WRebfWg0TQokhhqbkq+kINNnicxKWmk8pfutNq7KZWvrHA7fKr KlIHMEwyxlmQu2FL3NSLUX9QDGoijf3tntaxgKJoJc1KoILk0mPdFgQiDxOQyvOn iGJu72MLlUnuDGxoV7SIAYGYXB3iMKlICwVdTEOELKBP8+V92K0fIpocF1dEtBQw HaZ33MHl2enwT0L3rJgqm/hv8rJdogArJ/YEBCIe8QHNjy31StulBRCjF9mihDhV rcvajJBDEUSdXGBoJ/8v5m5tAxB05jfdFFjR7EC7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUNgsgc62oZUlGgMKMmnFjbztx03cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI4MjAyYzgyLTliMjctNDU4Ni1hNTJkLWY4YTQ1NjcwNWIzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/pEDANBgkqhkiG9w0BAQsFAAOCAQEAFieLYG+QIswBrC/cFr2E2Dw/ Juj/NLJkW5H+B74yvmcbGOlJ466bPSgucmMtBVk/tRcXKs2cmHxAF0PtAbBpdouT xCmMwe+qHGwV8+X4ND2UmRBK9uk3da3+ZzJsyYHSIrFYk9Hyoq/soAQuq+XAS+BG VvINtczzGkMRUurxVaouw3ScH9GJp0F9masfYH1T2qbzCRAntfnFkOVmWqTSkwMN YXMBldsXOhTQMDq21sp76vAOyNSwz1M5O41PRF/FtonY2fWObqnbbjNrzPMzyDIZ XTi7T1rn4dbNZ2mXQ1gb7xvuLWUu5gnOyyS2lpIWG2c2fjAlJTpFRvL4Ywg1vg== -----END CERTIFICATE-----Generated at Thu Mar 19 12:22:44 2026 by rpki-client