$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02e66835-7e79-443d-92ab-f0b0b02d4fb2.roa File: 02e66835-7e79-443d-92ab-f0b0b02d4fb2.roa (raw, json) Hash identifier: zCq9951BoH5zS/rZNaUJIutVgsP+eLmKhXRjPTD0puM= Subject key identifier: 18:05:73:B9:2A:AC:E4:BC:8D:46:C0:39:9A:CD:78:7E:C5:AB:CA:45 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7500F04ED1BB770129CAE0BE76B946C7BA40D10E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02e66835-7e79-443d-92ab-f0b0b02d4fb2.roa Signing time: Sun 22 Feb 2026 00:50:08 +0000 ROA not before: Sun 22 Feb 2026 00:50:08 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:00:f0:4e:d1:bb:77:01:29:ca:e0:be:76:b9:46:c7:ba:40:d1:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 22 00:50:08 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=2d1b647067403c9784558260f43690013e53640f7c0d251b8a2c2abf182ab6a2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:89:92:1f:39:bd:a5:44:5d:53:6e:8f:f8: 6e:f3:2b:93:8e:ff:44:05:58:79:36:19:73:8b:19: be:18:3e:c0:74:8f:08:b5:f8:e8:de:c1:cd:f2:74: d3:2c:62:96:2e:fd:ad:d4:f5:d1:c5:6b:2a:36:52: bc:a8:47:00:5a:d1:21:fe:15:f3:c8:80:c8:43:99: 1c:3a:6a:e8:67:d5:3f:5f:21:c4:82:09:7d:6b:12: aa:ad:29:d8:db:30:55:2a:1e:b2:fc:51:3c:26:12: 35:19:e6:51:86:e3:8c:46:16:12:bd:66:ad:ed:4e: 6c:02:7a:4f:9a:35:36:21:66:e4:0e:00:fe:59:07: b1:0b:1f:e9:e9:25:0b:e6:b2:ca:4a:56:6d:5c:68: 8d:e2:14:2c:20:3f:b8:c5:db:b9:9b:af:20:5e:24: 5b:84:66:06:98:88:e9:00:31:ae:68:a7:54:d2:e2: dc:30:8b:aa:bd:02:92:fe:e9:b8:2e:6c:d2:78:d0: d0:7e:67:95:35:4f:b3:e8:99:11:cd:68:4f:ab:9e: 35:ba:7a:02:59:58:43:12:65:f7:cc:fc:02:9d:f9: c8:17:ba:d5:e8:5f:da:3d:56:f6:7f:3f:33:b7:a8: 5d:5a:4a:b4:28:3b:e0:28:6a:84:cd:9d:ff:c1:d6: ca:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:05:73:B9:2A:AC:E4:BC:8D:46:C0:39:9A:CD:78:7E:C5:AB:CA:45 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02e66835-7e79-443d-92ab-f0b0b02d4fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.125.0/24 Signature Algorithm: sha256WithRSAEncryption 57:bd:f1:5c:15:b2:9b:f7:3d:72:77:b9:86:7b:86:65:46:90: cf:36:bb:76:33:b3:bc:87:da:b9:21:45:eb:04:79:6b:08:65: d2:bc:90:c3:bc:70:b0:f3:0a:1f:e0:a0:87:b7:69:0b:be:31: 98:cf:92:16:fc:1a:cd:4d:e8:06:5d:3b:ea:c4:ef:70:87:0a: e9:f9:be:65:27:a9:42:3d:64:cd:87:b3:2c:03:73:2f:28:a6: 68:c5:e3:9e:d4:b9:af:c8:91:86:68:d8:58:a2:3a:66:14:9d: 55:48:dc:50:c2:e3:88:de:b4:50:f2:f0:fd:f1:01:40:76:28: 14:57:d7:67:2a:e9:45:9d:6d:eb:72:70:d6:10:e2:89:99:86: 90:16:14:d5:2f:c3:d7:6f:f0:03:59:54:f6:de:ff:5f:a8:0c: 04:86:ee:f9:ae:f1:fa:5a:30:50:43:54:36:68:a5:68:17:59: f9:c7:a5:3d:5a:fc:54:44:16:74:bc:a4:be:7a:e2:83:d5:e8: 92:4a:74:28:1a:a8:03:c4:61:c1:97:50:24:34:c8:ea:ca:4f: 41:4a:61:1c:7a:85:da:bb:94:ca:92:e0:b1:75:e9:fb:31:d2: 79:df:54:d3:0e:b9:7c:7b:7e:a7:42:47:86:0e:0a:53:c2:43: 72:e7:db:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdQDwTtG7dwEpyuC+drlGx7pA0Q4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIyMDA1MDA4WhcNMjYwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDFiNjQ3MDY3NDAzYzk3ODQ1NTgyNjBmNDM2OTAwMTNl NTM2NDBmN2MwZDI1MWI4YTJjMmFiZjE4MmFiNmEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDANImSHzm9pURdU26P+G7zK5OO/0QFWHk2GXOLGb4YPsB0 jwi1+Ojewc3ydNMsYpYu/a3U9dHFayo2UryoRwBa0SH+FfPIgMhDmRw6auhn1T9f IcSCCX1rEqqtKdjbMFUqHrL8UTwmEjUZ5lGG44xGFhK9Zq3tTmwCek+aNTYhZuQO AP5ZB7ELH+npJQvmsspKVm1caI3iFCwgP7jF27mbryBeJFuEZgaYiOkAMa5op1TS 4twwi6q9ApL+6bgubNJ40NB+Z5U1T7PomRHNaE+rnjW6egJZWEMSZffM/AKd+cgX utXoX9o9VvZ/PzO3qF1aSrQoO+AoaoTNnf/B1sppAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGAVzuSqs5LyNRsA5ms14fsWrykUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyZTY2ODM1LTdlNzktNDQzZC05MmFiLWYwYjBiMDJkNGZiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmH0wDQYJKoZIhvcNAQELBQADggEBAFe98VwVspv3PXJ3uYZ7hmVGkM82 u3Yzs7yH2rkhResEeWsIZdK8kMO8cLDzCh/goIe3aQu+MZjPkhb8Gs1N6AZdO+rE 73CHCun5vmUnqUI9ZM2HsywDcy8opmjF457Uua/IkYZo2FiiOmYUnVVI3FDC44je tFDy8P3xAUB2KBRX12cq6UWdbetycNYQ4omZhpAWFNUvw9dv8ANZVPbe/1+oDASG 7vmu8fpaMFBDVDZopWgXWfnHpT1a/FREFnS8pL564oPV6JJKdCgaqAPEYcGXUCQ0 yOrKT0FKYRx6hdq7lMqS4LF16fsx0nnfVNMOuXx7fqdCR4YOClPCQ3Ln2x4= -----END CERTIFICATE-----Generated at Sun Mar 1 22:36:56 2026 by rpki-client