$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf2879dc-a3c0-4fe8-91e9-164299bad956.roa File: cf2879dc-a3c0-4fe8-91e9-164299bad956.roa (raw, json) Hash identifier: vYc0zwDLMcI2KGCSrAJyT0K4S7THXgw0RQd3460vtqs= Subject key identifier: F1:38:19:48:A9:1B:8D:00:74:31:12:A2:21:2C:FB:2B:97:D6:DA:8C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 078AEA33F6093B1E7513673E9925ADA441B2C79F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf2879dc-a3c0-4fe8-91e9-164299bad956.roa Signing time: Tue 10 Feb 2026 00:50:55 +0000 ROA not before: Tue 10 Feb 2026 00:50:55 +0000 ROA not after: Mon 11 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1e:cc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:8a:ea:33:f6:09:3b:1e:75:13:67:3e:99:25:ad:a4:41:b2:c7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 10 00:50:55 2026 GMT Not After : May 11 23:59:59 2026 GMT Subject: serialNumber=9c5465a8b1a2f69ce0244760e6824b6e561364d708b8fd3686c01b411058ef88, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:96:4f:fc:b8:c0:6a:f3:64:3a:5d:c1:48:40: 67:45:41:4c:a7:5e:1a:3e:29:76:4f:cd:5d:30:8f: 28:af:70:42:26:84:22:2e:79:fa:ed:35:e9:13:20: 47:83:a1:e2:95:78:ff:f3:e1:6e:a4:33:a8:7f:0f: b0:df:15:2d:6b:61:2b:ff:2b:b4:c9:50:62:d4:25: 7d:75:b5:83:99:9a:7b:1d:2b:1f:98:84:61:3b:44: d1:33:8f:f6:bc:91:21:59:b7:d5:64:cc:d7:d3:55: 98:58:ea:13:98:6a:5f:43:6a:66:b9:cc:e4:02:df: ed:0d:97:ba:5e:29:57:a5:05:05:78:92:f5:19:61: d8:cd:ee:61:d0:78:ad:c2:b8:0e:f9:4b:5a:4b:0d: 5c:51:52:41:c4:76:23:ff:37:43:e8:b6:d9:ae:17: 2d:c9:76:72:33:a9:b4:cb:cf:28:8d:00:cf:f9:0c: bb:b6:48:4f:a3:d7:0d:1c:fd:94:b5:0e:08:31:2f: 01:41:d8:35:5b:76:2a:4e:98:e4:59:72:22:82:6d: f7:86:d2:9a:b1:eb:48:c0:91:d4:c6:98:01:72:3e: c7:ac:b6:18:8c:28:77:05:38:ad:bf:28:9a:fb:0f: 94:fe:63:c7:9a:93:73:6f:7e:2c:e8:70:2a:dd:61: e7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:38:19:48:A9:1B:8D:00:74:31:12:A2:21:2C:FB:2B:97:D6:DA:8C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf2879dc-a3c0-4fe8-91e9-164299bad956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1e:cc00::/38 Signature Algorithm: sha256WithRSAEncryption 26:e6:22:77:ba:1f:08:25:f9:ce:59:7b:85:76:18:c2:23:98: e4:0e:ef:08:c0:38:8d:43:37:0b:df:3c:49:3f:1f:09:5e:9e: 45:43:38:54:cd:24:68:de:fe:9b:6d:75:d5:ed:78:f5:27:df: a0:4f:a5:30:e9:d3:0d:c0:ea:c9:92:37:2f:8e:9b:b0:31:28: 5f:15:17:ed:94:ee:30:0e:7c:50:7a:06:30:5a:1e:c1:f5:fe: 2e:03:08:00:26:10:5f:97:a0:6b:ee:a8:7b:f7:d5:71:31:74: 20:1c:a6:55:ac:a1:e4:c6:93:5b:55:39:7d:c8:f3:cd:8a:de: 0f:d5:2a:0d:d8:6e:ad:e3:66:81:85:a6:8e:f5:82:f5:e6:de: 1e:55:29:51:00:9f:2f:7a:0b:b8:c1:e4:e7:8f:34:5a:7d:cd: 5f:9c:78:a0:43:ee:12:11:c3:51:31:a5:db:e2:8c:b7:47:9c: 20:fc:a3:23:4e:55:4e:b9:36:22:3b:f5:2d:5b:2c:3a:b6:7e: 02:90:bd:a0:c5:d0:32:b2:ca:66:4b:17:68:19:8c:2d:23:41: b4:dc:2a:cd:f5:65:f0:f5:43:4e:ca:51:36:a2:21:72:f3:b1: 30:78:f8:71:bd:59:ce:6f:f4:35:1e:15:4e:32:dd:6d:d9:1b: 9e:b3:5b:d6 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUB4rqM/YJOx51E2c+mSWtpEGyx58wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDA1MDU1WhcNMjYwNTExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YzU0NjVhOGIxYTJmNjljZTAyNDQ3NjBlNjgyNGI2ZTU2 MTM2NGQ3MDhiOGZkMzY4NmMwMWI0MTEwNThlZjg4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZlk/8uMBq82Q6XcFIQGdFQUynXho+KXZPzV0wjyivcEIm hCIuefrtNekTIEeDoeKVeP/z4W6kM6h/D7DfFS1rYSv/K7TJUGLUJX11tYOZmnsd Kx+YhGE7RNEzj/a8kSFZt9VkzNfTVZhY6hOYal9Dama5zOQC3+0Nl7peKVelBQV4 kvUZYdjN7mHQeK3CuA75S1pLDVxRUkHEdiP/N0PottmuFy3JdnIzqbTLzyiNAM/5 DLu2SE+j1w0c/ZS1DggxLwFB2DVbdipOmORZciKCbfeG0pqx60jAkdTGmAFyPses thiMKHcFOK2/KJr7D5T+Y8eak3NvfizocCrdYeelAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU8TgZSKkbjQB0MRKiISz7K5fW2owwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NmMjg3OWRjLWEzYzAtNGZlOC05MWU5LTE2NDI5OWJhZDk1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8ezDANBgkqhkiG9w0BAQsFAAOCAQEAJuYid7ofCCX5zll7hXYYwiOY 5A7vCMA4jUM3C988ST8fCV6eRUM4VM0kaN7+m2111e149SffoE+lMOnTDcDqyZI3 L46bsDEoXxUX7ZTuMA58UHoGMFoewfX+LgMIACYQX5ega+6oe/fVcTF0IBymVayh 5MaTW1U5fcjzzYreD9UqDdhureNmgYWmjvWC9ebeHlUpUQCfL3oLuMHk5480Wn3N X5x4oEPuEhHDUTGl2+KMt0ecIPyjI05VTrk2Ijv1LVssOrZ+ApC9oMXQMrLKZksX aBmMLSNBtNwqzfVl8PVDTspRNqIhcvOxMHj4cb1Zzm/0NR4VTjLdbdkbnrNb1g== -----END CERTIFICATE-----Generated at Mon Mar 2 00:15:13 2026 by rpki-client