$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/941ec99a-6e61-4eca-abd4-c326d04d12ba.roa File: 941ec99a-6e61-4eca-abd4-c326d04d12ba.roa (raw, json) Hash identifier: DEu++VJQAOpzVFOJRtX3jy4I5uIGhHxkwjUiSKKNKEI= Subject key identifier: 09:2A:A8:B3:B4:F8:26:C3:49:45:94:EC:73:7F:DD:E6:DA:C3:26:96 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5EA82975F6EE38356D65D980513FBCCB4F1392FB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/941ec99a-6e61-4eca-abd4-c326d04d12ba.roa Signing time: Mon 22 Jun 2026 00:21:10 +0000 ROA not before: Mon 22 Jun 2026 00:21:10 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1feb:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a8:29:75:f6:ee:38:35:6d:65:d9:80:51:3f:bc:cb:4f:13:92:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 22 00:21:10 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=02c8f0d5f7520d19af42a97786d6fe8168e7727a0c5bb86dc8058f7d200433c6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3d:15:06:3a:7a:ab:95:4a:ef:cf:3d:15:76: ac:96:dd:98:43:a8:d6:65:02:ac:74:c9:33:1c:3f: 84:97:0d:11:a4:c0:30:c3:25:14:83:b2:3f:79:50: e2:04:a9:c2:24:55:f4:70:ad:2c:5e:8e:f4:db:64: 49:78:24:a6:78:01:8e:30:ae:dc:82:0c:98:94:75: f8:be:3d:92:06:76:86:3e:99:5a:31:29:2c:a2:43: ad:8e:5f:8c:21:68:30:06:c5:8f:89:24:7d:7f:31: 55:01:5b:ba:13:da:1f:bd:f0:0d:9e:54:e9:eb:6b: 5d:80:5f:55:2b:52:9e:54:58:ed:ed:a4:87:df:35: 11:72:1f:bc:03:02:fa:49:76:26:7e:5a:74:5e:a3: 3c:ed:7f:d6:3d:70:fd:8c:d8:1d:3e:a2:03:47:b0: 94:79:72:cc:40:35:b3:42:f2:8f:ff:4c:4f:fd:9a: 80:e3:b2:69:d2:19:72:dc:17:af:f0:39:19:68:7d: 82:b0:e2:92:cb:b2:34:f3:b7:f5:b5:08:4e:ef:47: 28:53:ee:93:f2:aa:f5:53:8d:22:5b:28:9b:52:15: 54:69:3e:41:a0:59:ae:1b:67:fa:51:08:c7:96:80: 55:c0:ae:45:61:19:77:ac:35:e7:e9:bb:fd:cd:9b: 5c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2A:A8:B3:B4:F8:26:C3:49:45:94:EC:73:7F:DD:E6:DA:C3:26:96 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/941ec99a-6e61-4eca-abd4-c326d04d12ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1feb:2080::/48 Signature Algorithm: sha256WithRSAEncryption 6e:50:aa:29:6d:3f:35:52:13:79:ad:24:91:82:ef:9c:8c:6d: 07:22:56:bf:98:6d:27:59:ea:83:45:5d:c9:7f:ed:7e:3e:3b: 79:31:e9:ca:a4:78:4f:61:25:ba:a7:a7:7b:3e:ba:cb:aa:70: b7:85:f6:e8:9b:77:24:95:65:4f:5a:77:2a:48:19:c9:2e:a1: f9:79:e1:a8:c8:fd:63:e6:67:87:46:c4:40:3a:3f:b5:24:08: 7b:7f:ee:eb:e0:79:5a:7a:74:6e:fe:6b:71:46:fc:1a:e9:84: f6:15:d4:90:49:79:72:6c:98:04:3a:54:9b:09:51:ce:de:f9: f1:b8:be:63:f1:3e:72:26:d7:6b:d8:d8:b6:b4:56:72:86:2f: a2:13:d4:ae:1b:59:7d:74:5b:b4:c3:8a:e2:97:a2:4e:89:6a: f8:db:f4:74:0e:85:bc:81:38:24:ed:97:46:72:12:0e:16:5c: 5f:b7:bf:5b:28:8b:e3:aa:be:05:5b:fc:6d:4e:d6:b2:c5:5f: 3f:89:d8:cb:6a:49:17:f5:a2:8a:c1:45:71:86:68:62:dd:ba: 9f:0a:d0:18:72:06:5b:70:e4:42:1a:34:23:e1:01:2c:f1:47: 31:ed:42:3e:3e:ce:38:70:3c:7f:9a:2b:88:99:65:63:37:64: 96:25:33:1e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXqgpdfbuODVtZdmAUT+8y08TkvswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNjIyMDAyMTEwWhcNMjYwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMmM4ZjBkNWY3NTIwZDE5YWY0MmE5Nzc4NmQ2ZmU4MTY4 ZTc3MjdhMGM1YmI4NmRjODA1OGY3ZDIwMDQzM2M2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChPRUGOnqrlUrvzz0VdqyW3ZhDqNZlAqx0yTMcP4SXDRGk wDDDJRSDsj95UOIEqcIkVfRwrSxejvTbZEl4JKZ4AY4wrtyCDJiUdfi+PZIGdoY+ mVoxKSyiQ62OX4whaDAGxY+JJH1/MVUBW7oT2h+98A2eVOnra12AX1UrUp5UWO3t pIffNRFyH7wDAvpJdiZ+WnReozztf9Y9cP2M2B0+ogNHsJR5csxANbNC8o//TE/9 moDjsmnSGXLcF6/wORlofYKw4pLLsjTzt/W1CE7vRyhT7pPyqvVTjSJbKJtSFVRp PkGgWa4bZ/pRCMeWgFXArkVhGXesNefpu/3Nm1wLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCSqos7T4JsNJRZTsc3/d5trDJpYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk0MWVjOTlhLTZlNjEtNGVjYS1hYmQ0LWMzMjZkMDRkMTJiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/rIIAwDQYJKoZIhvcNAQELBQADggEBAG5QqiltPzVSE3mtJJGC75yM bQciVr+YbSdZ6oNFXcl/7X4+O3kx6cqkeE9hJbqnp3s+usuqcLeF9uibdySVZU9a dypIGckuofl54ajI/WPmZ4dGxEA6P7UkCHt/7uvgeVp6dG7+a3FG/BrphPYV1JBJ eXJsmAQ6VJsJUc7e+fG4vmPxPnIm12vY2La0VnKGL6IT1K4bWX10W7TDiuKXok6J avjb9HQOhbyBOCTtl0ZyEg4WXF+3v1soi+OqvgVb/G1O1rLFXz+J2MtqSRf1oorB RXGGaGLdup8K0BhyBltw5EIaNCPhASzxRzHtQj4+zjhwPH+aK4iZZWM3ZJYlMx4= -----END CERTIFICATE-----Generated at Fri Jul 24 01:23:31 2026 by rpki-client