$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95e7b59c-3ae3-47c6-98c3-8036559830dd.roa File: 95e7b59c-3ae3-47c6-98c3-8036559830dd.roa (raw, json) Hash identifier: 9d2CWasplJxQf/IdKVjtNPl0Ybsq7UrS3VAZlfw3+rE= Subject key identifier: A2:64:42:E0:57:82:72:57:8F:41:98:9E:05:18:77:4B:2C:36:6F:45 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2B4F8C4BE1F4FEE5668BF115B15683063714D6C3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95e7b59c-3ae3-47c6-98c3-8036559830dd.roa Signing time: Thu 12 Mar 2026 16:08:33 +0000 ROA not before: Thu 12 Mar 2026 16:08:33 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe9:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:4f:8c:4b:e1:f4:fe:e5:66:8b:f1:15:b1:56:83:06:37:14:d6:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:08:33 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=3a273550a2eed3697e7972aac4942fd66cd6d8918ddce0773e6576ad3a050e8c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:02:57:e9:c1:5a:be:7c:4d:ca:47:a7:c5:15: 18:ab:0f:9a:41:c6:be:69:1d:39:b3:d6:c2:10:75: b9:a7:89:0d:f8:3d:29:97:86:6e:1e:29:67:18:11: 17:54:40:3e:7f:54:3a:5b:9b:f6:cc:dd:ad:c7:d6: ad:50:d6:0e:fb:a9:cf:8b:98:71:51:54:7e:80:22: 60:56:cf:cc:ba:39:a5:e5:eb:58:b1:6e:6f:ae:1e: bc:10:65:b9:52:fb:aa:d9:28:a3:bb:30:ae:7b:7f: 83:2c:a9:75:45:14:19:b5:e6:26:96:d2:0f:d5:df: 69:c7:a2:19:30:c5:82:5a:25:29:00:db:8d:aa:c7: e1:e3:fe:cf:47:75:77:2a:a7:09:b5:02:50:cd:d9: bf:1b:51:01:7c:00:47:e7:66:a5:0a:92:13:06:7e: b4:b4:0a:ba:ba:b0:90:47:81:0c:82:6b:fb:86:33: ac:7b:cb:35:64:1e:12:93:61:fc:a1:ad:46:d2:39: 05:5e:ff:d6:e0:c3:1c:8b:d9:86:a8:fe:29:35:45: b3:3a:6b:82:1a:c4:33:f8:1f:6d:c1:40:c0:19:fc: ff:a8:08:e9:14:8d:c1:ad:55:73:d4:1c:4b:ab:26: e0:47:ae:13:3d:8d:d6:03:ea:b1:bc:61:8d:dd:0d: 26:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:64:42:E0:57:82:72:57:8F:41:98:9E:05:18:77:4B:2C:36:6F:45 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95e7b59c-3ae3-47c6-98c3-8036559830dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe9:20c0::/48 Signature Algorithm: sha256WithRSAEncryption 6d:92:bb:ff:41:7a:8a:06:93:8f:c5:ae:87:a8:61:41:3d:4c: 42:a1:d3:08:ae:88:48:70:7b:8a:bf:39:d9:1b:ee:b5:3b:da: 2d:9d:44:18:9d:6e:d1:7c:19:00:64:96:fe:c6:23:2c:dc:da: 85:58:ff:5c:45:be:86:e0:f2:60:56:30:5a:9e:3e:b3:6b:e3: ad:93:f7:82:02:5a:dd:91:e2:8b:4b:c6:26:1c:13:5b:b8:7e: d0:99:0e:e2:74:ae:e8:99:21:3a:0b:9c:10:92:b3:9f:08:ea: 79:c1:05:90:c5:52:3a:d9:45:59:25:a1:29:2a:36:fb:9c:85: 12:c8:fc:02:3f:ff:5c:87:e8:ac:d7:74:65:fa:95:0c:85:fd: 20:0f:a0:12:7b:d0:98:24:d9:5b:c6:90:2d:0d:d1:4d:fd:89: 67:c6:30:8e:32:4f:6c:4e:b2:79:cb:6b:38:9d:04:92:27:b5: d1:7a:eb:57:de:77:85:3f:27:c5:b5:25:ae:2a:01:8d:8f:da: b7:33:11:e4:ea:8a:1f:cc:89:50:70:01:29:7b:59:a6:e2:4d: 6a:3a:c6:c4:cc:b3:07:e8:44:7a:dd:8b:47:a7:d5:d4:28:a8: 6a:c5:c8:4b:1d:b3:df:e6:66:1f:a6:c0:70:c2:7a:5b:f8:4a: 56:c1:de:c2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUK0+MS+H0/uVmi/EVsVaDBjcU1sMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYwODMzWhcNMjYwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTI3MzU1MGEyZWVkMzY5N2U3OTcyYWFjNDk0MmZkNjZj ZDZkODkxOGRkY2UwNzczZTY1NzZhZDNhMDUwZThjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+AlfpwVq+fE3KR6fFFRirD5pBxr5pHTmz1sIQdbmniQ34 PSmXhm4eKWcYERdUQD5/VDpbm/bM3a3H1q1Q1g77qc+LmHFRVH6AImBWz8y6OaXl 61ixbm+uHrwQZblS+6rZKKO7MK57f4MsqXVFFBm15iaW0g/V32nHohkwxYJaJSkA 242qx+Hj/s9HdXcqpwm1AlDN2b8bUQF8AEfnZqUKkhMGfrS0Crq6sJBHgQyCa/uG M6x7yzVkHhKTYfyhrUbSOQVe/9bgwxyL2Yao/ik1RbM6a4IaxDP4H23BQMAZ/P+o COkUjcGtVXPUHEurJuBHrhM9jdYD6rG8YY3dDSadAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUomRC4FeCclePQZieBRh3Syw2b0UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk1ZTdiNTljLTNhZTMtNDdjNi05OGMzLTgwMzY1NTk4MzBkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/pIMAwDQYJKoZIhvcNAQELBQADggEBAG2Su/9BeooGk4/FroeoYUE9 TEKh0wiuiEhwe4q/Odkb7rU72i2dRBidbtF8GQBklv7GIyzc2oVY/1xFvobg8mBW MFqePrNr462T94ICWt2R4otLxiYcE1u4ftCZDuJ0ruiZIToLnBCSs58I6nnBBZDF UjrZRVkloSkqNvuchRLI/AI//1yH6KzXdGX6lQyF/SAPoBJ70Jgk2VvGkC0N0U39 iWfGMI4yT2xOsnnLazidBJIntdF661fed4U/J8W1Ja4qAY2P2rczEeTqih/MiVBw ASl7WabiTWo6xsTMswfoRHrdi0en1dQoqGrFyEsds9/mZh+mwHDCelv4SlbB3sI= -----END CERTIFICATE-----Generated at Thu Mar 19 12:22:45 2026 by rpki-client