$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1fdcca5-f240-49aa-97c6-cc2821561223.roa File: c1fdcca5-f240-49aa-97c6-cc2821561223.roa (raw, json) Hash identifier: Bso2tGXGlQYh+1xo7K/76dLlfXmjhXy6btDH6S2YGWo= Subject key identifier: 7C:80:7F:0C:1B:0C:4E:90:F6:D4:80:DE:51:FF:AE:AE:A8:20:51:7D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45BC7A3584C1ED5E484952FBCBBFB486AAE842AB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1fdcca5-f240-49aa-97c6-cc2821561223.roa Signing time: Sat 21 Feb 2026 00:41:22 +0000 ROA not before: Sat 21 Feb 2026 00:41:22 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:3400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:bc:7a:35:84:c1:ed:5e:48:49:52:fb:cb:bf:b4:86:aa:e8:42:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:41:22 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=10f8dfbe9cb0dd8bf552575cfe39338cb5ed711e04da1d3a53ca428ed55b673a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:02:44:e2:83:74:27:8b:f5:62:ad:d0:89:4f: 9a:86:0b:b0:de:3a:e7:f5:2a:4f:a6:68:0d:94:7b: 9f:78:29:e9:03:c0:4d:a1:dc:20:ee:86:04:12:29: 33:57:75:e1:73:18:b9:59:c4:f8:b7:7c:11:22:a2: d5:dc:13:e1:fc:b3:99:5e:6b:04:29:a4:50:4c:86: 60:24:c5:ef:f5:df:14:f5:8f:83:44:70:99:96:ce: a0:21:90:16:7b:55:41:fd:7c:6e:e4:80:72:d6:8e: dc:c7:8f:b0:33:bb:d2:c7:63:b8:5f:1a:01:8e:d6: 6d:75:0d:fc:84:d5:b4:1f:24:56:43:48:ba:b0:47: a0:6a:b3:33:b5:99:24:90:a2:7f:79:fd:b6:9a:89: 08:ee:97:5c:70:76:85:ee:b6:56:18:ec:af:af:74: a2:49:ec:e0:e3:a0:42:03:7c:02:b6:f5:0c:ca:41: 56:e4:bb:d7:e7:ee:e3:5d:0b:3b:f9:b7:6b:ec:85: 48:79:e6:72:00:ca:1c:a1:78:59:30:62:3b:e2:04: 7a:ca:e5:cc:49:62:a2:18:7c:6e:1a:01:1e:d0:ba: 14:92:a1:17:54:00:34:57:b4:3a:9a:ef:8e:ae:30: 80:e2:e1:71:e6:ef:7c:64:28:46:0a:9e:f7:61:54: 28:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:80:7F:0C:1B:0C:4E:90:F6:D4:80:DE:51:FF:AE:AE:A8:20:51:7D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1fdcca5-f240-49aa-97c6-cc2821561223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:3400::/40 Signature Algorithm: sha256WithRSAEncryption 12:85:cd:42:76:ff:a5:60:ef:59:28:69:c4:18:e7:3a:31:79: 59:e3:5d:32:b4:cd:2b:9d:61:03:82:16:4d:fd:5e:20:6d:fc: 94:5b:c6:59:6f:4a:11:d5:c4:b5:f9:4b:2c:b7:92:9d:24:65: 32:9b:f4:0c:f7:68:a5:75:d0:e3:c9:71:dc:a2:4f:2e:c3:8a: 1a:aa:48:34:83:28:13:91:cf:d4:1f:ba:ca:75:e4:32:ee:19: 1f:54:fe:05:9c:3d:49:60:32:bb:c5:c6:e9:14:91:64:84:e2: 7b:ac:2b:6a:4d:72:af:d9:7b:79:a7:20:06:6a:bc:26:4b:e5: d2:e4:a3:e6:64:aa:de:f9:14:65:75:45:e7:73:63:92:c7:91: 07:65:2e:be:ab:a5:b2:44:33:e8:62:aa:93:51:a1:70:b3:26: c1:e3:6f:86:fc:9c:34:d9:67:0e:77:96:69:14:4b:95:2e:2e: fd:c9:70:08:e6:58:6a:16:ac:3c:be:3d:d4:ce:76:a9:ee:0b: e7:b8:cf:ce:39:94:38:f9:a6:e3:57:a9:b1:7d:b1:10:d9:e3: 49:f9:60:34:3f:f0:c2:3a:76:57:80:51:c5:84:97:15:c9:88: 2e:c0:91:78:5a:0e:e9:0b:cd:d6:df:99:92:7d:d1:a1:26:dc: d6:4b:a2:d1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURbx6NYTB7V5ISVL7y7+0hqroQqswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDA0MTIyWhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMGY4ZGZiZTljYjBkZDhiZjU1MjU3NWNmZTM5MzM4Y2I1 ZWQ3MTFlMDRkYTFkM2E1M2NhNDI4ZWQ1NWI2NzNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpAkTig3Qni/VirdCJT5qGC7DeOuf1Kk+maA2Ue594KekD wE2h3CDuhgQSKTNXdeFzGLlZxPi3fBEiotXcE+H8s5leawQppFBMhmAkxe/13xT1 j4NEcJmWzqAhkBZ7VUH9fG7kgHLWjtzHj7Azu9LHY7hfGgGO1m11DfyE1bQfJFZD SLqwR6BqszO1mSSQon95/baaiQjul1xwdoXutlYY7K+vdKJJ7ODjoEIDfAK29QzK QVbku9fn7uNdCzv5t2vshUh55nIAyhyheFkwYjviBHrK5cxJYqIYfG4aAR7QuhSS oRdUADRXtDqa746uMIDi4XHm73xkKEYKnvdhVCizAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUfIB/DBsMTpD21IDeUf+urqggUX0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MxZmRjY2E1LWYyNDAtNDlhYS05N2M2LWNjMjgyMTU2MTIyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9pNDANBgkqhkiG9w0BAQsFAAOCAQEAEoXNQnb/pWDvWShpxBjnOjF5 WeNdMrTNK51hA4IWTf1eIG38lFvGWW9KEdXEtflLLLeSnSRlMpv0DPdopXXQ48lx 3KJPLsOKGqpINIMoE5HP1B+6ynXkMu4ZH1T+BZw9SWAyu8XG6RSRZITie6wrak1y r9l7eacgBmq8Jkvl0uSj5mSq3vkUZXVF53NjkseRB2UuvqulskQz6GKqk1GhcLMm weNvhvycNNlnDneWaRRLlS4u/clwCOZYahasPL491M52qe4L57jPzjmUOPmm41ep sX2xENnjSflgND/wwjp2V4BRxYSXFcmILsCReFoO6QvN1t+Zkn3RoSbc1kui0Q== -----END CERTIFICATE-----Generated at Mon Mar 2 00:40:14 2026 by rpki-client