$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4c1fcb0-2d51-499e-8638-473e8e04c8ae.roa File: a4c1fcb0-2d51-499e-8638-473e8e04c8ae.roa (raw, json) Hash identifier: f78RhORH4ijONAeEjtAg3fZ3ZFa3nczsEaTU6C/yscM= Subject key identifier: 9A:47:C0:AF:DC:C1:9B:13:DA:96:A0:3A:0F:42:A3:74:36:76:3A:9E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 260DBB9FDAAE9A214C64EF3CC4C975C1856A09F5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4c1fcb0-2d51-499e-8638-473e8e04c8ae.roa Signing time: Sat 28 Feb 2026 00:20:08 +0000 ROA not before: Sat 28 Feb 2026 00:20:08 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fef:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:0d:bb:9f:da:ae:9a:21:4c:64:ef:3c:c4:c9:75:c1:85:6a:09:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 28 00:20:08 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=3c9b78f399489dbe6b1025a1a3507a3bec74625fab5fe3d6e7934650054dc42a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:dc:b4:a0:bb:15:f2:e2:2d:24:83:25:e6:17: 3f:58:b7:af:55:d6:46:ac:cc:3c:13:58:07:5a:ee: 40:37:e7:04:cd:d5:a9:28:b1:ef:85:55:b1:99:42: 12:e4:fa:5b:e1:0a:e5:13:be:78:0c:7b:5d:c1:6f: 88:97:92:25:9f:58:64:39:c6:2a:16:2a:40:a4:1d: 77:24:b1:04:39:99:89:53:ce:3c:9f:72:4d:d8:2f: c4:35:e7:03:0b:38:fb:5f:a1:3a:84:e7:40:84:cd: 36:52:fc:22:81:85:de:66:fd:c3:3e:45:7e:a1:77: 96:74:a2:86:1c:37:28:00:ef:eb:a9:74:92:fe:d2: e2:46:73:7b:09:a9:f7:4c:b4:16:1f:e2:42:78:73: 23:cb:28:0d:ec:b3:94:86:b0:9c:f0:79:e1:b8:60: 53:57:ee:85:d8:4e:1e:14:3f:e5:0c:a0:65:61:45: cc:ad:6d:91:d1:7e:c0:1e:48:be:63:dc:8f:92:17: 04:1f:42:73:fe:be:64:46:16:c9:60:ac:78:ee:42: b7:72:e8:4a:a9:b4:01:a6:76:16:a1:26:0c:08:48: 36:e3:39:6f:aa:18:2b:4f:c3:f8:1c:67:a9:c8:39: 5e:69:20:c3:24:21:d9:cb:cb:83:a0:c7:83:8d:04: f2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:47:C0:AF:DC:C1:9B:13:DA:96:A0:3A:0F:42:A3:74:36:76:3A:9E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4c1fcb0-2d51-499e-8638-473e8e04c8ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:2000::/40 Signature Algorithm: sha256WithRSAEncryption 24:ef:e9:44:d6:68:43:e3:36:ba:e9:74:be:0e:be:47:df:67: fc:08:46:1f:f4:a3:f9:6a:13:d5:48:0d:7b:b6:e6:fe:29:8c: ec:3f:4d:eb:ee:25:bd:06:fd:43:dd:db:7a:04:d7:6d:c8:97: 8b:37:dc:be:3c:c2:ed:bb:ce:8e:41:a0:30:c1:21:df:93:ca: 6b:76:a0:10:b6:5d:48:74:48:bd:44:ab:11:91:bf:b5:5e:9a: 8e:83:dc:52:8f:7d:a5:c5:be:b0:07:9b:a6:b9:c2:a3:70:56: b8:00:80:a6:51:98:41:17:03:35:61:ca:a9:d6:85:6d:33:fe: 38:8d:e7:ff:3e:ac:9e:6b:d9:84:ec:9f:d9:d7:d0:dc:5c:b1: 60:79:92:28:49:81:2e:5b:ca:2d:1c:a3:e3:fe:06:35:84:d4: 5a:3d:69:19:ba:42:c3:d8:4b:7a:d7:d1:58:14:12:db:a2:39: 58:c2:e1:d9:4d:fd:96:0e:d9:5b:58:7a:32:40:6c:90:d1:19: ab:ae:de:76:0c:27:82:ea:ac:4b:90:de:17:19:97:3b:b0:5f: 91:5f:bc:f1:91:af:f5:20:af:53:80:d7:ec:19:4e:41:7c:75: 18:f9:12:62:0b:84:ab:31:db:6d:1e:bf:34:16:94:78:06:4e: 42:b2:7a:07 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJg27n9qumiFMZO88xMl1wYVqCfUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI4MDAyMDA4WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzliNzhmMzk5NDg5ZGJlNmIxMDI1YTFhMzUwN2EzYmVj NzQ2MjVmYWI1ZmUzZDZlNzkzNDY1MDA1NGRjNDJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK3LSguxXy4i0kgyXmFz9Yt69V1kaszDwTWAda7kA35wTN 1akose+FVbGZQhLk+lvhCuUTvngMe13Bb4iXkiWfWGQ5xioWKkCkHXcksQQ5mYlT zjyfck3YL8Q15wMLOPtfoTqE50CEzTZS/CKBhd5m/cM+RX6hd5Z0ooYcNygA7+up dJL+0uJGc3sJqfdMtBYf4kJ4cyPLKA3ss5SGsJzweeG4YFNX7oXYTh4UP+UMoGVh RcytbZHRfsAeSL5j3I+SFwQfQnP+vmRGFslgrHjuQrdy6EqptAGmdhahJgwISDbj OW+qGCtPw/gcZ6nIOV5pIMMkIdnLy4Ogx4ONBPLPAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUmkfAr9zBmxPalqA6D0KjdDZ2Op4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E0YzFmY2IwLTJkNTEtNDk5ZS04NjM4LTQ3M2U4ZTA0YzhhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/vIDANBgkqhkiG9w0BAQsFAAOCAQEAJO/pRNZoQ+M2uul0vg6+R99n /AhGH/Sj+WoT1UgNe7bm/imM7D9N6+4lvQb9Q93begTXbciXizfcvjzC7bvOjkGg MMEh35PKa3agELZdSHRIvUSrEZG/tV6ajoPcUo99pcW+sAebprnCo3BWuACAplGY QRcDNWHKqdaFbTP+OI3n/z6snmvZhOyf2dfQ3FyxYHmSKEmBLlvKLRyj4/4GNYTU Wj1pGbpCw9hLetfRWBQS26I5WMLh2U39lg7ZW1h6MkBskNEZq67edgwnguqsS5De FxmXO7BfkV+88ZGv9SCvU4DX7BlOQXx1GPkSYguEqzHbbR6/NBaUeAZOQrJ6Bw== -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:09 2026 by rpki-client