$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3efefa5d-616c-4514-92e6-548868c43ca1.roa File: 3efefa5d-616c-4514-92e6-548868c43ca1.roa (raw, json) Hash identifier: aSWUptBdVCkmh1RpP4mH8dgZ9Jthr+SbwRNRieR8DwU= Subject key identifier: C7:9A:0C:60:1B:D9:8F:33:52:06:8D:27:80:59:77:94:52:50:DD:EB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 05084510B2262DDF99B539770F2B19579CD1705F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3efefa5d-616c-4514-92e6-548868c43ca1.roa Signing time: Thu 12 Mar 2026 16:09:53 +0000 ROA not before: Thu 12 Mar 2026 16:09:53 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fe9:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:08:45:10:b2:26:2d:df:99:b5:39:77:0f:2b:19:57:9c:d1:70:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:09:53 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=115b69532f8179a973ffd12a17a059c044a5ec5413bdde9b9ea62975dc992768, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:7d:cb:bc:d2:a3:aa:b4:60:85:4e:63:39: 33:fe:38:c6:ec:8c:1b:3c:a6:a0:c1:a3:c1:3c:41: 99:cd:ed:25:0c:ad:78:46:e2:c8:89:48:eb:72:97: 4a:c5:21:8f:d9:27:ad:c6:8b:72:90:16:da:7b:6c: 31:48:13:01:20:bf:3b:10:cd:6c:27:81:1e:a7:63: d1:c2:47:60:2d:b6:44:78:cc:82:26:9c:a5:36:4d: a7:6b:eb:f6:22:29:e8:86:27:51:9c:ba:e6:20:d8: 62:98:b4:7f:c2:f4:f5:6c:86:63:8f:1c:9d:ee:76: 59:98:78:9f:42:70:b8:da:63:cb:51:45:41:f0:ad: 86:00:a6:85:3b:a4:4b:61:dc:90:db:da:18:db:76: 0d:83:37:98:33:48:3c:19:15:ac:a5:c1:10:f5:84: c9:58:7d:cf:f5:a4:a1:06:bc:55:bf:65:f9:6b:64: ce:00:5e:7a:36:2d:a8:dd:cb:0c:c1:69:32:bb:ec: 36:57:16:62:bf:0b:05:29:6a:80:1d:96:de:cb:1e: 57:04:41:54:28:7a:b1:5e:70:e8:3e:5e:e0:5a:4e: 90:e3:03:cd:bc:6f:42:83:d3:6e:a6:d0:af:57:5c: a9:72:ae:8b:a1:dd:c7:a1:2c:8a:57:e8:13:d6:00: 01:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9A:0C:60:1B:D9:8F:33:52:06:8D:27:80:59:77:94:52:50:DD:EB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3efefa5d-616c-4514-92e6-548868c43ca1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe9:8040::/48 Signature Algorithm: sha256WithRSAEncryption 3f:37:15:8b:3b:34:4c:d7:1f:3f:10:d4:93:9e:3b:48:5c:3a: 62:48:27:03:5c:71:36:da:0d:2b:6c:d0:7f:c6:f4:69:53:4e: 8a:93:2e:a4:49:54:42:de:e0:b3:92:38:f7:80:40:45:0c:47: da:c5:91:66:c7:f5:4a:86:5f:1b:0d:1f:9c:5c:27:a0:96:95: 35:a2:46:00:2d:97:af:ba:ae:d9:95:48:65:20:27:bf:b8:f5: 78:b3:84:13:d7:31:ca:48:fa:f2:83:e8:c2:95:27:dc:50:8e: b8:b5:d8:f4:56:6e:e5:b3:c6:49:69:4b:3f:98:49:40:56:4d: bf:7c:c6:13:e2:50:a3:45:cc:68:82:8d:04:74:b8:3a:6b:36: 17:0a:a6:47:79:4b:4c:db:91:48:d2:8d:21:b1:e1:18:73:c5: 55:29:14:80:9f:a4:95:8b:54:15:06:5d:fa:cc:43:ac:bb:dd: 43:b5:04:de:b9:b3:68:f7:2c:00:20:58:27:be:e9:f6:7a:af: d2:68:c2:6e:68:e3:ca:19:fd:5f:ac:c4:6a:6a:4d:02:87:5f: bb:b3:07:44:fa:65:2b:8d:96:5e:87:d3:6e:b9:26:d7:2b:b4: e4:51:28:c3:0f:f2:22:c9:2c:43:61:e6:d3:32:c8:2a:8f:87: db:fa:a9:e7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBQhFELImLd+ZtTl3DysZV5zRcF8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYwOTUzWhcNMjYwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTViNjk1MzJmODE3OWE5NzNmZmQxMmExN2EwNTljMDQ0 YTVlYzU0MTNiZGRlOWI5ZWE2Mjk3NWRjOTkyNzY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4UH3LvNKjqrRghU5jOTP+OMbsjBs8pqDBo8E8QZnN7SUM rXhG4siJSOtyl0rFIY/ZJ63Gi3KQFtp7bDFIEwEgvzsQzWwngR6nY9HCR2AttkR4 zIImnKU2Tadr6/YiKeiGJ1GcuuYg2GKYtH/C9PVshmOPHJ3udlmYeJ9CcLjaY8tR RUHwrYYApoU7pEth3JDb2hjbdg2DN5gzSDwZFaylwRD1hMlYfc/1pKEGvFW/Zflr ZM4AXno2LajdywzBaTK77DZXFmK/CwUpaoAdlt7LHlcEQVQoerFecOg+XuBaTpDj A828b0KD026m0K9XXKlyrouh3cehLIpX6BPWAAEFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUx5oMYBvZjzNSBo0ngFl3lFJQ3eswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNlZmVmYTVkLTYxNmMtNDUxNC05MmU2LTU0ODg2OGM0M2NhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/pgEAwDQYJKoZIhvcNAQELBQADggEBAD83FYs7NEzXHz8Q1JOeO0hc OmJIJwNccTbaDSts0H/G9GlTToqTLqRJVELe4LOSOPeAQEUMR9rFkWbH9UqGXxsN H5xcJ6CWlTWiRgAtl6+6rtmVSGUgJ7+49XizhBPXMcpI+vKD6MKVJ9xQjri12PRW buWzxklpSz+YSUBWTb98xhPiUKNFzGiCjQR0uDprNhcKpkd5S0zbkUjSjSGx4Rhz xVUpFICfpJWLVBUGXfrMQ6y73UO1BN65s2j3LAAgWCe+6fZ6r9Jowm5o48oZ/V+s xGpqTQKHX7uzB0T6ZSuNll6H0265JtcrtORRKMMP8iLJLENh5tMyyCqPh9v6qec= -----END CERTIFICATE-----Generated at Fri Mar 20 17:04:07 2026 by rpki-client