$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb7dd045-a966-4ee9-9545-308026b51a14.roa File: cb7dd045-a966-4ee9-9545-308026b51a14.roa (raw, json) Hash identifier: zxMbLi6wHq/cRzZ5uzlm/3TvHwtzogzxRvyMS6mH1xc= Subject key identifier: 84:F4:8C:15:6A:39:77:29:3A:DB:2F:54:3C:27:7E:78:31:4E:B1:04 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 01CC246B6FD4671AE73F4D49F46293B71E75356D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb7dd045-a966-4ee9-9545-308026b51a14.roa Signing time: Thu 26 Feb 2026 00:51:09 +0000 ROA not before: Thu 26 Feb 2026 00:51:09 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff3:8000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:cc:24:6b:6f:d4:67:1a:e7:3f:4d:49:f4:62:93:b7:1e:75:35:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 26 00:51:09 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=4a13e8eb9ab029c6f1e142f3288d3954a13f1fc14f10e32dd7f854bde609c8bd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:91:39:ff:01:15:8f:fb:7b:39:0b:80:da:1d: 0e:ba:db:2e:86:e5:d7:85:4d:2d:35:be:31:d7:2e: f1:78:e0:e7:2d:05:a3:4b:f9:e7:ac:8a:74:cd:8d: a5:23:10:97:c1:15:6f:6e:8b:f5:89:55:bc:50:44: 6f:13:9b:f0:8b:85:7f:10:28:c9:84:0f:bb:3e:50: dc:76:09:4a:53:18:f3:50:79:e3:72:58:c7:07:2d: 18:8e:65:16:76:0a:97:f7:e2:88:66:c9:b8:3d:a5: b6:e9:f8:92:52:47:97:3e:2b:9f:aa:0e:28:7a:58: 7c:af:12:cc:dd:be:6f:67:cf:ff:7a:9b:83:4f:79: 0e:4e:bc:26:08:35:b7:d4:c7:03:aa:7c:9b:da:ec: 74:28:c5:fd:40:19:73:3f:de:11:aa:d2:c1:fc:a6: d8:eb:aa:e0:3a:d8:71:03:56:0c:74:cc:53:be:05: 05:77:e6:7d:03:b5:41:d1:6e:be:ee:3c:e3:ae:54: a3:2c:70:1d:5c:84:1e:bc:c3:bd:87:56:71:a9:6c: cd:59:d9:c2:47:95:c6:1a:00:90:05:52:9f:1b:b5: d9:b1:47:15:a1:7e:bb:a4:05:11:a3:61:e6:ff:4b: 66:9a:2b:16:06:a3:85:ff:88:96:62:92:7a:86:8f: 0d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F4:8C:15:6A:39:77:29:3A:DB:2F:54:3C:27:7E:78:31:4E:B1:04 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb7dd045-a966-4ee9-9545-308026b51a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:8000::/39 Signature Algorithm: sha256WithRSAEncryption 99:80:a4:ac:3d:84:86:f2:a4:34:eb:4c:42:1e:1a:e1:75:9a: 07:3b:17:30:81:5a:c6:73:37:c1:0b:02:98:1b:80:13:51:fb: 02:f8:89:5c:b5:eb:67:da:6d:11:ff:01:0a:59:9a:24:f1:91: 5e:c5:be:4b:f3:97:80:d0:50:b6:c1:3c:4b:97:98:18:08:46: c7:95:31:f4:a7:fc:30:b1:2e:e7:74:65:67:39:0d:57:26:77: 5a:52:bb:0e:7e:f9:ef:55:b5:03:9d:9d:a0:ff:75:8c:20:1a: 8a:af:eb:6a:92:64:5a:35:58:ea:e1:2a:ef:57:61:d7:89:4b: 40:78:5d:25:f9:66:39:f0:c1:a5:98:ff:3e:cc:2a:0a:15:d6: cb:bb:76:cf:d0:02:16:c2:c2:b7:87:d8:c5:39:bf:00:cf:01: 8c:3a:06:3d:3d:d4:11:94:2a:ae:1e:aa:5f:02:fc:05:e1:af: c7:d4:f8:5a:58:98:3f:ae:f6:2a:aa:55:d3:0c:63:cd:b3:ae: dd:8a:69:f4:7c:a5:af:5f:cc:ca:c8:73:b5:8a:5e:05:2b:b9: 11:5f:15:74:28:fb:41:30:8e:5b:50:fe:70:2b:f1:95:92:b0: 1f:55:19:60:3d:19:a1:a0:9b:a3:39:72:c2:68:e7:3e:62:a5: a4:7c:20:d9 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUAcwka2/UZxrnP01J9GKTtx51NW0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI2MDA1MTA5WhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTEzZThlYjlhYjAyOWM2ZjFlMTQyZjMyODhkMzk1NGEx M2YxZmMxNGYxMGUzMmRkN2Y4NTRiZGU2MDljOGJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLkTn/ARWP+3s5C4DaHQ662y6G5deFTS01vjHXLvF44Oct BaNL+eesinTNjaUjEJfBFW9ui/WJVbxQRG8Tm/CLhX8QKMmED7s+UNx2CUpTGPNQ eeNyWMcHLRiOZRZ2Cpf34ohmybg9pbbp+JJSR5c+K5+qDih6WHyvEszdvm9nz/96 m4NPeQ5OvCYINbfUxwOqfJva7HQoxf1AGXM/3hGq0sH8ptjrquA62HEDVgx0zFO+ BQV35n0DtUHRbr7uPOOuVKMscB1chB68w72HVnGpbM1Z2cJHlcYaAJAFUp8btdmx RxWhfrukBRGjYeb/S2aaKxYGo4X/iJZiknqGjw0TAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUhPSMFWo5dyk62y9UPCd+eDFOsQQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiN2RkMDQ1LWE5NjYtNGVlOS05NTQ1LTMwODAyNmI1MWExNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/zgDANBgkqhkiG9w0BAQsFAAOCAQEAmYCkrD2EhvKkNOtMQh4a4XWa BzsXMIFaxnM3wQsCmBuAE1H7AviJXLXrZ9ptEf8BClmaJPGRXsW+S/OXgNBQtsE8 S5eYGAhGx5Ux9Kf8MLEu53RlZzkNVyZ3WlK7Dn7571W1A52doP91jCAaiq/rapJk WjVY6uEq71dh14lLQHhdJflmOfDBpZj/PswqChXWy7t2z9ACFsLCt4fYxTm/AM8B jDoGPT3UEZQqrh6qXwL8BeGvx9T4WliYP672KqpV0wxjzbOu3Ypp9Hylr1/Myshz tYpeBSu5EV8VdCj7QTCOW1D+cCvxlZKwH1UZYD0ZoaCbozlywmjnPmKlpHwg2Q== -----END CERTIFICATE-----Generated at Sun Mar 1 22:30:21 2026 by rpki-client