$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03ba494e-912d-4221-91f2-fa206eaee885.roa File: 03ba494e-912d-4221-91f2-fa206eaee885.roa (raw, json) Hash identifier: cHPAlhTM1ta5A2HjyQaPwHilwt33YmTzVz5PiekXe3A= Subject key identifier: 63:51:76:34:30:C2:8C:FE:58:31:76:93:3D:A1:6C:90:3A:F6:84:6B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 353DBE18A227AD05AF8EB6D05AE41DA0B89AA2E1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03ba494e-912d-4221-91f2-fa206eaee885.roa Signing time: Sat 21 Feb 2026 01:21:35 +0000 ROA not before: Sat 21 Feb 2026 01:21:35 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:3d:be:18:a2:27:ad:05:af:8e:b6:d0:5a:e4:1d:a0:b8:9a:a2:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:21:35 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=1d750c773a3168978a7a8d535e06211d1f68b93b0aa644fbd0055d8aa231a54a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8b:2f:96:9f:e5:bf:fc:fc:4f:1f:e5:c6:71: c1:02:7f:4a:7f:60:cc:14:62:aa:60:b2:ab:af:ec: 7b:f8:f2:4b:fd:27:fb:e9:d8:fd:73:4d:28:27:64: cf:e2:d1:11:e1:05:4c:ec:bd:67:c3:10:1d:f9:8e: 51:df:75:f5:81:55:8e:cf:32:30:d6:5b:9f:2d:f4: 59:eb:16:f3:1e:e5:e9:d2:9a:c6:ef:64:5b:c8:9b: 62:86:81:92:58:b7:04:d6:78:4b:4e:51:ee:4e:a7: a9:f3:6d:cf:98:0e:99:07:ab:2b:3f:cd:e6:0d:52: ee:d3:6a:93:2a:21:d0:e3:aa:37:cd:d2:a3:de:e3: b6:e3:c4:a4:6f:bd:4c:17:26:0a:2b:9e:cd:aa:0d: 23:e9:68:f9:c3:26:cd:c8:35:3b:71:91:50:ca:03: cf:49:0f:8b:c2:d7:a4:93:99:61:b2:ac:6d:3e:1a: 4c:2a:a0:1f:0e:e2:e3:b8:5f:13:74:61:a7:23:77: 59:62:22:8f:23:8d:71:76:e0:ec:fe:f4:eb:b8:3c: bc:6e:c9:23:8b:88:c0:46:d9:74:25:0c:f5:2f:d8: a6:46:e9:1d:e3:2d:1c:5a:22:5b:27:e2:bb:0e:fb: 97:88:8a:ba:54:fe:62:ca:a3:8b:ea:84:40:c7:f4: bc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:51:76:34:30:C2:8C:FE:58:31:76:93:3D:A1:6C:90:3A:F6:84:6B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03ba494e-912d-4221-91f2-fa206eaee885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.69.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:6f:6c:ca:23:1c:8f:3d:91:e1:94:86:9f:87:73:c6:b6:ee: 9f:09:25:f3:ae:8f:5f:a4:be:96:f6:d8:37:e0:09:7c:28:49: ab:dd:54:57:1c:7a:34:1d:3f:be:1c:96:60:98:e2:b1:c5:b3: 01:fd:30:54:b4:c7:dd:b4:87:b8:66:d6:e0:e3:4d:9a:b8:a3: 16:e7:02:50:9f:40:75:78:2d:f4:10:2a:b4:f8:44:f9:7f:03: d8:f5:65:08:fb:89:96:a6:96:e3:ed:0c:6e:bb:33:11:59:7a: b3:35:8f:2e:7a:c2:c8:b5:30:7f:07:99:b3:32:76:7f:8a:a2: 19:9b:8b:f4:10:c5:b7:fa:e9:16:76:96:00:23:84:86:0d:32: 73:fa:42:00:1a:29:c9:56:46:7b:76:5c:71:a2:36:3f:13:c3: 2d:4f:ce:5e:31:2b:2b:89:08:19:ce:55:4a:52:b8:cb:01:a8: 7c:ff:97:a2:e1:54:c8:16:3c:07:14:a0:54:e4:98:14:d5:e5: 03:b4:7d:48:38:3c:b3:b6:87:ea:ff:d3:a2:c4:1e:b3:5d:22: 9a:bf:39:5d:0d:45:b5:ba:cf:19:d9:39:0f:41:c2:3f:3b:95: c7:77:35:f5:22:04:d8:a4:d1:7e:b2:58:fd:2d:72:4e:c3:2f: d7:09:b5:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNT2+GKInrQWvjrbQWuQdoLiaouEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDEyMTM1WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZDc1MGM3NzNhMzE2ODk3OGE3YThkNTM1ZTA2MjExZDFm NjhiOTNiMGFhNjQ0ZmJkMDA1NWQ4YWEyMzFhNTRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDniy+Wn+W//PxPH+XGccECf0p/YMwUYqpgsquv7Hv48kv9 J/vp2P1zTSgnZM/i0RHhBUzsvWfDEB35jlHfdfWBVY7PMjDWW58t9FnrFvMe5enS msbvZFvIm2KGgZJYtwTWeEtOUe5Op6nzbc+YDpkHqys/zeYNUu7TapMqIdDjqjfN 0qPe47bjxKRvvUwXJgorns2qDSPpaPnDJs3INTtxkVDKA89JD4vC16STmWGyrG0+ GkwqoB8O4uO4XxN0Yacjd1liIo8jjXF24Oz+9Ou4PLxuySOLiMBG2XQlDPUv2KZG 6R3jLRxaIlsn4rsO+5eIirpU/mLKo4vqhEDH9LzLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUY1F2NDDCjP5YMXaTPaFskDr2hGswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzYmE0OTRlLTkxMmQtNDIyMS05MWYyLWZhMjA2ZWFlZTg4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmEUwDQYJKoZIhvcNAQELBQADggEBAE5vbMojHI89keGUhp+Hc8a27p8J JfOuj1+kvpb22DfgCXwoSavdVFccejQdP74clmCY4rHFswH9MFS0x920h7hm1uDj TZq4oxbnAlCfQHV4LfQQKrT4RPl/A9j1ZQj7iZamluPtDG67MxFZerM1jy56wsi1 MH8HmbMydn+Kohmbi/QQxbf66RZ2lgAjhIYNMnP6QgAaKclWRnt2XHGiNj8Twy1P zl4xKyuJCBnOVUpSuMsBqHz/l6LhVMgWPAcUoFTkmBTV5QO0fUg4PLO2h+r/06LE HrNdIpq/OV0NRbW6zxnZOQ9Bwj87lcd3NfUiBNik0X6yWP0tck7DL9cJtVg= -----END CERTIFICATE-----Generated at Sun Mar 1 22:16:05 2026 by rpki-client