$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8298dd7c-88e6-4485-b44e-c5b7a7f06e21.roa File: 8298dd7c-88e6-4485-b44e-c5b7a7f06e21.roa (raw, json) Hash identifier: yl72LFATgmbjAiXm/04wN2KZy0PKievdJgx3DKnj/Ok= Subject key identifier: E4:5B:98:DD:18:92:B3:B5:50:ED:0E:B3:EC:33:BA:A6:CA:88:05:96 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 469CC666FF6A30A523AADCAB83EFD52CDAE01160 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8298dd7c-88e6-4485-b44e-c5b7a7f06e21.roa Signing time: Thu 12 Mar 2026 16:09:50 +0000 ROA not before: Thu 12 Mar 2026 16:09:50 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe9:7440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:9c:c6:66:ff:6a:30:a5:23:aa:dc:ab:83:ef:d5:2c:da:e0:11:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:09:50 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=049bb9109e5c31e83e781ffcc944ee5652d5c262d0f20327eae4cfdb1829d2a5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9d:1b:7e:b1:ff:ea:50:10:53:64:1a:8f:dd: 57:02:14:82:45:19:21:32:fd:3a:c0:7b:52:38:2c: d4:f5:01:3d:8b:d1:62:60:12:8c:b9:5b:7a:09:e3: 1e:59:66:b9:e2:09:bc:67:87:3b:77:49:45:80:1a: e7:fa:23:1e:c0:40:ce:ea:6f:95:f7:17:06:1d:21: eb:69:85:59:e0:19:41:b1:66:2a:99:2a:95:fc:5e: d9:28:b4:0b:11:64:dd:c0:a8:56:10:db:5c:c0:78: 79:c2:78:44:ef:ff:96:15:f9:1e:77:31:28:a6:5b: da:d4:c7:04:fe:9b:58:25:85:f6:fd:ac:b3:90:4a: 3c:0b:82:c8:da:a0:a0:6f:6f:de:8f:02:13:e9:70: 9d:87:3a:2f:58:6c:2a:a5:48:f3:8d:3c:ed:08:57: bd:51:ea:6e:42:bb:df:e1:ee:c5:cf:95:b2:d6:79: 68:7c:ae:8a:d5:e2:14:2f:3d:83:9a:94:80:c7:09: b0:11:23:5c:72:9a:26:ac:ef:30:53:f5:f6:16:0e: 2f:de:4f:b6:88:c6:93:8c:fe:90:e9:e5:25:b3:80: 8e:f6:94:bb:1e:73:f5:a5:20:67:7d:9f:0a:0a:a3: 23:e0:a8:52:e5:04:75:5b:2f:7d:2e:dc:06:81:da: 01:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5B:98:DD:18:92:B3:B5:50:ED:0E:B3:EC:33:BA:A6:CA:88:05:96 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8298dd7c-88e6-4485-b44e-c5b7a7f06e21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe9:7440::/48 Signature Algorithm: sha256WithRSAEncryption 8f:a9:58:3d:88:c5:8f:92:21:6a:88:f2:c5:62:11:a9:5d:04: 51:3a:ef:ee:5b:35:2c:a9:84:df:da:10:8b:fe:53:4c:be:17: dd:6e:a5:8f:c3:39:ab:7b:8c:ed:b3:44:10:5a:70:9b:59:6a: 10:07:72:11:79:c6:ec:79:2f:7e:af:b9:00:cf:b5:71:89:9a: d8:c2:ca:23:c1:67:d5:fe:4f:c0:a7:c6:7c:f2:d9:af:30:8e: 74:04:37:94:22:5d:22:ee:89:c5:4b:9a:cb:20:6e:10:f0:ff: 0c:bc:35:4c:d7:e0:49:be:7d:7e:17:07:2f:ec:98:be:be:12: 70:c4:fa:c3:3e:c1:9a:c3:59:19:07:42:a8:c5:69:6a:98:99: 28:ef:d4:0e:90:0a:2a:3f:22:67:0a:ff:b1:e2:dc:5f:5b:99: f8:f6:20:8b:40:70:2a:0a:44:ff:f8:3b:b6:ab:5c:c2:83:21: 14:ba:10:fc:1e:1d:5b:1c:c7:bc:bb:86:24:bb:1a:0b:f3:cc: a5:00:8f:1e:ea:49:c1:74:b5:13:a9:29:61:8e:30:3f:36:0a: 52:f1:e8:f6:2f:35:ad:ce:a4:44:81:33:8d:d0:5d:c4:2f:a3: c0:2a:57:32:09:83:36:b7:b2:82:2c:4a:77:50:83:43:87:73: 4a:99:93:9b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURpzGZv9qMKUjqtyrg+/VLNrgEWAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYwOTUwWhcNMjYwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDliYjkxMDllNWMzMWU4M2U3ODFmZmNjOTQ0ZWU1NjUy ZDVjMjYyZDBmMjAzMjdlYWU0Y2ZkYjE4MjlkMmE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUnRt+sf/qUBBTZBqP3VcCFIJFGSEy/TrAe1I4LNT1AT2L 0WJgEoy5W3oJ4x5ZZrniCbxnhzt3SUWAGuf6Ix7AQM7qb5X3FwYdIetphVngGUGx ZiqZKpX8XtkotAsRZN3AqFYQ21zAeHnCeETv/5YV+R53MSimW9rUxwT+m1glhfb9 rLOQSjwLgsjaoKBvb96PAhPpcJ2HOi9YbCqlSPONPO0IV71R6m5Cu9/h7sXPlbLW eWh8rorV4hQvPYOalIDHCbARI1xymias7zBT9fYWDi/eT7aIxpOM/pDp5SWzgI72 lLsec/WlIGd9nwoKoyPgqFLlBHVbL30u3AaB2gGTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5FuY3RiSs7VQ7Q6z7DO6psqIBZYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgyOThkZDdjLTg4ZTYtNDQ4NS1iNDRlLWM1YjdhN2YwNmUyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/pdEAwDQYJKoZIhvcNAQELBQADggEBAI+pWD2IxY+SIWqI8sViEald BFE67+5bNSyphN/aEIv+U0y+F91upY/DOat7jO2zRBBacJtZahAHchF5xux5L36v uQDPtXGJmtjCyiPBZ9X+T8Cnxnzy2a8wjnQEN5QiXSLuicVLmssgbhDw/wy8NUzX 4Em+fX4XBy/smL6+EnDE+sM+wZrDWRkHQqjFaWqYmSjv1A6QCio/ImcK/7Hi3F9b mfj2IItAcCoKRP/4O7arXMKDIRS6EPweHVscx7y7hiS7GgvzzKUAjx7qScF0tROp KWGOMD82ClLx6PYvNa3OpESBM43QXcQvo8AqVzIJgza3soIsSndQg0OHc0qZk5s= -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:11 2026 by rpki-client