$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ef3b84b-fac6-462e-b9cf-b68fec255730.roa File: 3ef3b84b-fac6-462e-b9cf-b68fec255730.roa (raw, json) Hash identifier: DR7sxoZbMyQG5LTnTSTAESnsLp9QHkW4NUjg8w+YGfU= Subject key identifier: E9:32:57:2D:4B:4D:1F:C0:DE:AC:60:F1:7D:D8:CA:6D:FE:84:E7:43 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 05684F36FBFD427D1BD33007260C1DCEA85AE211 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ef3b84b-fac6-462e-b9cf-b68fec255730.roa Signing time: Mon 09 Mar 2026 13:22:52 +0000 ROA not before: Mon 09 Mar 2026 13:22:52 +0000 ROA not after: Sun 07 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:68:4f:36:fb:fd:42:7d:1b:d3:30:07:26:0c:1d:ce:a8:5a:e2:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 9 13:22:52 2026 GMT Not After : Jun 7 23:59:59 2026 GMT Subject: serialNumber=9c17f1be001d283273998855fe51ac010506af34f851747f9d882278163cc081, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a5:03:63:73:7d:84:82:f5:cc:b7:d5:2b:b0: 5b:19:75:f0:d1:d2:94:2a:3e:52:56:ff:98:e9:5c: 52:72:27:33:eb:27:5e:e9:9e:e2:16:fe:af:da:ae: ce:76:27:40:1a:3a:9d:2e:68:6c:4f:14:b6:7a:66: 1e:8f:46:46:9b:53:b4:58:f4:ac:45:c3:ec:57:54: 0a:09:8e:a5:fe:18:5c:b6:ba:3e:a2:77:98:4a:98: 62:61:24:98:d0:1f:88:88:64:40:89:a1:90:88:bb: e7:47:c8:b2:3a:e1:c9:25:7b:f1:17:f9:a6:97:82: 41:dc:d9:aa:1a:56:0e:e1:b0:78:10:ae:ae:6b:52: 59:7c:db:3a:75:ea:63:c0:48:45:5c:52:de:7b:38: 7b:32:89:9e:56:4d:4a:65:c1:73:34:77:42:c6:d4: b6:ed:2b:13:72:de:9e:6a:e8:b6:1c:65:f4:a8:5b: 07:0e:47:b3:62:22:a7:49:18:91:cc:6c:fb:e3:04: a3:4f:a1:d9:aa:de:7c:42:37:0e:bb:84:cf:92:16: 8a:18:cd:bb:47:1e:d0:0b:fa:64:8e:49:38:7c:d9: 4d:58:0d:f9:5e:c5:ba:80:83:2f:92:83:c6:03:c4: b4:3a:71:ec:b4:94:2f:37:35:f8:6b:3c:9c:8d:25: 2e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:32:57:2D:4B:4D:1F:C0:DE:AC:60:F1:7D:D8:CA:6D:FE:84:E7:43 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ef3b84b-fac6-462e-b9cf-b68fec255730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff::/32 Signature Algorithm: sha256WithRSAEncryption d3:06:4a:48:78:3a:77:85:e9:cb:cc:15:42:60:a8:49:44:61: a0:03:c8:79:7b:a2:92:dd:9f:96:2e:ff:f3:b8:64:0f:c9:e1: 1f:52:63:bc:73:dc:56:eb:11:5a:c8:cc:a8:6b:f0:66:d3:d0: 66:0a:76:7b:73:53:e1:93:f4:86:22:34:4f:57:66:35:9e:ca: 3f:8b:ab:6a:68:ca:28:86:54:8e:15:21:21:20:e2:b2:96:20: 56:ff:af:d1:79:15:b6:04:9a:0a:9f:58:51:75:89:9c:59:31: 97:32:55:9e:7d:d8:ae:8d:f2:4e:67:28:17:91:af:6e:06:3e: 94:cb:bb:ae:53:08:f4:57:ca:f6:34:d1:0d:b5:ee:ab:71:42: 3a:82:92:a1:f1:43:47:f0:00:66:c2:1c:d2:3e:f5:f3:0e:17: 6d:7f:75:c4:77:d2:19:69:54:0c:b2:5a:8a:0f:36:ea:51:dc: 3a:84:62:af:d7:a5:eb:a9:75:56:ab:96:86:4d:79:3b:27:1b: 0c:a6:c7:a7:5a:5b:bd:f2:95:3a:c7:bd:91:c8:67:b3:31:f2: d2:8d:3a:43:2a:2e:e6:e3:eb:b3:5f:7d:a4:94:ab:09:e5:f5: 5c:ee:70:9b:d5:14:9a:95:0e:5e:d9:d2:d7:a7:5d:d2:46:6b: 13:60:e0:8d -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUBWhPNvv9Qn0b0zAHJgwdzqha4hEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzA5MTMyMjUyWhcNMjYwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YzE3ZjFiZTAwMWQyODMyNzM5OTg4NTVmZTUxYWMwMTA1 MDZhZjM0Zjg1MTc0N2Y5ZDg4MjI3ODE2M2NjMDgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3pQNjc32EgvXMt9UrsFsZdfDR0pQqPlJW/5jpXFJyJzPr J17pnuIW/q/ars52J0AaOp0uaGxPFLZ6Zh6PRkabU7RY9KxFw+xXVAoJjqX+GFy2 uj6id5hKmGJhJJjQH4iIZECJoZCIu+dHyLI64ckle/EX+aaXgkHc2aoaVg7hsHgQ rq5rUll82zp16mPASEVcUt57OHsyiZ5WTUplwXM0d0LG1LbtKxNy3p5q6LYcZfSo WwcOR7NiIqdJGJHMbPvjBKNPodmq3nxCNw67hM+SFooYzbtHHtAL+mSOSTh82U1Y DflexbqAgy+Sg8YDxLQ6cey0lC83NfhrPJyNJS4BAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQU6TJXLUtNH8DerGDxfdjKbf6E50MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNlZjNiODRiLWZhYzYtNDYyZS1iOWNmLWI2OGZlYzI1NTczMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB//MA0GCSqGSIb3DQEBCwUAA4IBAQDTBkpIeDp3henLzBVCYKhJRGGg A8h5e6KS3Z+WLv/zuGQPyeEfUmO8c9xW6xFayMyoa/Bm09BmCnZ7c1Phk/SGIjRP V2Y1nso/i6tqaMoohlSOFSEhIOKyliBW/6/ReRW2BJoKn1hRdYmcWTGXMlWefdiu jfJOZygXka9uBj6Uy7uuUwj0V8r2NNENte6rcUI6gpKh8UNH8ABmwhzSPvXzDhdt f3XEd9IZaVQMslqKDzbqUdw6hGKv16XrqXVWq5aGTXk7JxsMpsenWlu98pU6x72R yGezMfLSjTpDKi7m4+uzX32klKsJ5fVc7nCb1RSalQ5e2dLXp13SRmsTYOCN -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:23 2026 by rpki-client