$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a98ec338-f305-4f44-a3ae-87d707061666.roa File: a98ec338-f305-4f44-a3ae-87d707061666.roa (raw, json) Hash identifier: yx2ykW2aSPe4J14XjOCsc+K9azEhoQhPBY1lomrmY0s= Subject key identifier: E7:67:E9:72:13:4A:66:EA:7C:FA:33:B6:D8:DF:A2:AD:0B:E9:A5:87 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5CD5CB2A2100F7CF69DC4304D0CF709394DEF5A2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a98ec338-f305-4f44-a3ae-87d707061666.roa Signing time: Thu 12 Mar 2026 16:11:26 +0000 ROA not before: Thu 12 Mar 2026 16:11:26 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fba:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d5:cb:2a:21:00:f7:cf:69:dc:43:04:d0:cf:70:93:94:de:f5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 12 16:11:26 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=5cf240cb3756bb1a1c9d14132b8fda951b85c415529755868b921fd5e3a811e5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:59:4f:3d:1c:01:85:c5:c0:60:8c:11:d8:03: d8:b2:40:3c:3c:4b:19:1c:c5:00:14:db:b4:c3:bd: fc:e9:65:39:21:47:1f:63:34:67:90:c6:a7:d3:e8: 53:a8:51:85:54:4e:2a:d1:d0:b4:f7:7b:51:bb:4a: 41:23:69:ed:7b:23:a9:ec:be:1e:48:86:7d:31:17: 96:d1:a5:12:24:f2:7f:5f:82:8c:69:8e:24:89:8d: b0:eb:5a:cf:c2:0a:22:0b:e0:a0:25:f1:6a:13:d8: 56:c2:44:70:a3:c3:cd:24:7c:9a:90:d4:6f:d5:00: 5b:6f:f4:cd:27:cf:58:97:24:60:e9:83:d7:1f:9b: 43:bb:25:f1:75:fd:ba:a6:59:98:ea:b5:d9:ea:28: d4:d7:66:d0:52:f4:eb:40:24:e5:d0:9d:a9:84:3d: ae:77:fb:01:f8:20:cc:c3:ab:f4:c0:d5:2a:01:56: ee:dc:d7:ad:51:04:34:99:25:ed:41:7b:08:91:f9: 17:3d:8e:0c:c8:d3:4e:dd:75:3e:09:54:6a:63:22: e9:8d:5c:44:fb:07:4b:18:33:66:03:f5:85:f4:6b: 40:5b:c1:0c:2a:c9:53:00:a5:3c:4f:fd:1b:93:3b: 37:0b:5b:4f:70:70:1e:5e:5a:0f:57:03:0e:d7:ed: a6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:67:E9:72:13:4A:66:EA:7C:FA:33:B6:D8:DF:A2:AD:0B:E9:A5:87 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a98ec338-f305-4f44-a3ae-87d707061666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fba:5000::/40 Signature Algorithm: sha256WithRSAEncryption c2:2d:af:74:bd:30:5f:67:7c:56:80:bd:de:3b:f4:25:bd:20: 2a:f5:99:e5:34:e4:a9:17:c9:c8:38:0b:ee:78:fc:78:d4:9f: 52:05:2f:95:c6:1b:16:4c:b2:7b:91:c6:d4:2b:38:d6:a5:36: 4d:9c:b3:98:ba:01:22:1a:50:b3:0a:de:d7:5e:8f:9a:5a:00: 31:84:67:29:6c:3a:a7:c0:96:8e:3d:ac:45:db:82:3e:db:0d: 5b:9d:21:52:95:6b:1b:54:de:d4:23:18:dd:93:02:e9:c0:54: b1:b5:dd:c4:ad:71:48:f5:cd:c9:05:7a:63:b8:c1:79:70:8c: 26:a2:32:14:7a:1b:ed:57:24:9d:dc:93:8f:46:50:99:84:dd: f1:47:ff:7f:5b:f9:86:a2:33:cf:6e:e2:ac:d2:4b:e6:10:cd: 2a:08:94:78:06:5a:74:bb:46:3a:27:92:90:ed:7a:a9:43:b5: 79:9d:ec:6f:66:b9:ce:2f:6e:10:52:f2:02:09:e6:f4:5f:dc: 79:65:d9:97:bf:1e:8c:58:8e:1d:a0:9d:b2:21:4f:8f:3d:65: 09:a5:87:3c:10:f6:d7:68:b0:39:c3:c0:1f:be:01:af:45:bf: d6:a7:88:4d:93:92:9c:f7:f5:51:2d:ce:28:d4:85:9e:50:fb: 77:52:1b:42 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXNXLKiEA989p3EME0M9wk5Te9aIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYxMTI2WhcNMjYwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1Y2YyNDBjYjM3NTZiYjFhMWM5ZDE0MTMyYjhmZGE5NTFi ODVjNDE1NTI5NzU1ODY4YjkyMWZkNWUzYTgxMWU1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGWU89HAGFxcBgjBHYA9iyQDw8SxkcxQAU27TDvfzpZTkh Rx9jNGeQxqfT6FOoUYVUTirR0LT3e1G7SkEjae17I6nsvh5Ihn0xF5bRpRIk8n9f goxpjiSJjbDrWs/CCiIL4KAl8WoT2FbCRHCjw80kfJqQ1G/VAFtv9M0nz1iXJGDp g9cfm0O7JfF1/bqmWZjqtdnqKNTXZtBS9OtAJOXQnamEPa53+wH4IMzDq/TA1SoB Vu7c161RBDSZJe1BewiR+Rc9jgzI007ddT4JVGpjIumNXET7B0sYM2YD9YX0a0Bb wQwqyVMApTxP/RuTOzcLW09wcB5eWg9XAw7X7aZdAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU52fpchNKZup8+jO22N+irQvppYcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E5OGVjMzM4LWYzMDUtNGY0NC1hM2FlLTg3ZDcwNzA2MTY2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+6UDANBgkqhkiG9w0BAQsFAAOCAQEAwi2vdL0wX2d8VoC93jv0Jb0g KvWZ5TTkqRfJyDgL7nj8eNSfUgUvlcYbFkyye5HG1Cs41qU2TZyzmLoBIhpQswre 116PmloAMYRnKWw6p8CWjj2sRduCPtsNW50hUpVrG1Te1CMY3ZMC6cBUsbXdxK1x SPXNyQV6Y7jBeXCMJqIyFHob7VckndyTj0ZQmYTd8Uf/f1v5hqIzz27irNJL5hDN KgiUeAZadLtGOieSkO16qUO1eZ3sb2a5zi9uEFLyAgnm9F/ceWXZl78ejFiOHaCd siFPjz1lCaWHPBD212iwOcPAH74Br0W/1qeITZOSnPf1US3OKNSFnlD7d1IbQg== -----END CERTIFICATE-----Generated at Fri Mar 20 17:04:03 2026 by rpki-client