$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04146639-6989-41ea-8c06-55c4e27a3ad8.roa File: 04146639-6989-41ea-8c06-55c4e27a3ad8.roa (raw, json) Hash identifier: mZirvIBiBOcLBn9P/Rt+QJgYnesWTc7o+LX64fzYDgE= Subject key identifier: 4D:05:64:73:83:BB:0E:87:45:A6:D0:A3:FC:04:FD:77:25:14:9A:82 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7B5F922241213B85A02162E5F869B9CF6EF3314A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04146639-6989-41ea-8c06-55c4e27a3ad8.roa Signing time: Sat 21 Feb 2026 00:30:20 +0000 ROA not before: Sat 21 Feb 2026 00:30:20 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:5f:92:22:41:21:3b:85:a0:21:62:e5:f8:69:b9:cf:6e:f3:31:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:30:20 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=da3c6edf8a2693969b02d390125805440189b277d06c14f5e9bf0fee48fe11f4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f5:0e:07:0e:e5:79:8b:9f:c1:ce:6f:f7:82: 4a:6c:ca:22:36:76:a6:a7:32:f8:4a:83:de:66:0c: f8:85:27:5b:9f:7c:34:18:08:6f:77:5b:6b:a8:bc: d1:52:f7:38:1b:f4:28:0d:83:ea:f0:d8:72:96:45: 2c:d3:ea:e9:e0:cf:12:66:1c:a0:1a:82:e8:c9:78: c8:14:01:6a:b6:a4:f5:e9:50:27:c3:08:d6:87:6a: 68:e5:49:57:e0:57:ec:49:7b:58:e3:32:5e:8e:ed: 93:ca:d5:11:fb:34:b8:7a:b4:69:e7:27:9c:78:52: d2:c5:68:99:02:2a:bf:7a:6a:01:7b:17:73:1e:fa: e4:73:00:91:cc:38:de:93:87:40:93:d9:a8:cd:09: 5b:83:e3:6c:3c:98:7e:79:bd:49:ac:26:d1:f7:ba: 21:1b:c6:d3:95:44:94:98:37:6f:15:e0:87:26:e4: 9a:9c:25:1e:29:14:bb:e0:41:24:e5:e4:00:08:d8: 88:93:fd:e4:17:1e:dd:0e:98:60:8c:e0:b5:bf:37: bd:d2:42:f4:66:7c:50:ce:59:a7:3e:04:d3:42:0c: 69:83:ad:57:e3:7a:ba:01:4d:90:7f:5a:c2:5d:dc: dd:2e:d2:d8:de:24:43:90:90:8f:51:bb:cf:b5:4c: 36:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:05:64:73:83:BB:0E:87:45:A6:D0:A3:FC:04:FD:77:25:14:9A:82 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04146639-6989-41ea-8c06-55c4e27a3ad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.77.0/24 Signature Algorithm: sha256WithRSAEncryption ae:eb:d0:59:c6:5b:3c:37:45:11:35:82:e3:8d:99:c1:83:a5: 50:fa:84:06:1b:dc:d6:bd:e4:5d:0e:07:c0:de:ee:4a:58:a7: f8:65:cf:82:28:c0:2c:57:e2:23:d0:72:d0:24:80:94:8d:63: 54:a7:71:3a:d5:f6:c3:b8:b5:10:b0:9a:7d:91:88:ac:c9:e9: 11:38:00:d2:80:9f:e0:d0:7c:0b:e0:c6:83:55:42:03:0e:8b: ec:8c:d6:f2:26:0a:8f:66:99:22:7c:bc:ed:fe:1b:6c:93:6b: bf:0f:54:b6:71:d9:9b:dd:f7:dd:8d:a4:36:5c:98:0c:1b:ba: e9:cd:fc:ef:2c:81:61:7f:2e:af:a4:17:e8:3b:2a:db:40:d2: 4d:1a:43:cf:bd:93:89:36:40:7f:6c:9c:cb:f0:c8:9b:f0:d7: 81:ea:f2:47:74:9d:0f:25:e8:f2:ac:b6:53:fb:09:87:8c:77: 77:83:ae:f5:0a:41:45:bf:5f:03:7c:25:7f:94:f6:68:aa:cd: 73:71:87:82:01:ef:2b:3c:de:ec:44:07:fe:92:9c:64:e8:c1: f5:91:d4:ab:d3:a2:56:28:db:f9:ba:a8:26:df:51:9c:03:d4: a8:10:77:d6:58:2f:57:02:70:d8:e9:cd:b0:30:9a:83:75:8f: 83:45:6f:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUe1+SIkEhO4WgIWLl+Gm5z27zMUowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDAzMDIwWhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTNjNmVkZjhhMjY5Mzk2OWIwMmQzOTAxMjU4MDU0NDAx ODliMjc3ZDA2YzE0ZjVlOWJmMGZlZTQ4ZmUxMWY0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDL9Q4HDuV5i5/Bzm/3gkpsyiI2dqanMvhKg95mDPiFJ1uf fDQYCG93W2uovNFS9zgb9CgNg+rw2HKWRSzT6ungzxJmHKAagujJeMgUAWq2pPXp UCfDCNaHamjlSVfgV+xJe1jjMl6O7ZPK1RH7NLh6tGnnJ5x4UtLFaJkCKr96agF7 F3Me+uRzAJHMON6Th0CT2ajNCVuD42w8mH55vUmsJtH3uiEbxtOVRJSYN28V4Icm 5JqcJR4pFLvgQSTl5AAI2IiT/eQXHt0OmGCM4LW/N73SQvRmfFDOWac+BNNCDGmD rVfjeroBTZB/WsJd3N0u0tjeJEOQkI9Ru8+1TDZpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTQVkc4O7DodFptCj/AT9dyUUmoIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA0MTQ2NjM5LTY5ODktNDFlYS04YzA2LTU1YzRlMjdhM2FkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmE0wDQYJKoZIhvcNAQELBQADggEBAK7r0FnGWzw3RRE1guONmcGDpVD6 hAYb3Na95F0OB8De7kpYp/hlz4IowCxX4iPQctAkgJSNY1SncTrV9sO4tRCwmn2R iKzJ6RE4ANKAn+DQfAvgxoNVQgMOi+yM1vImCo9mmSJ8vO3+G2yTa78PVLZx2Zvd 992NpDZcmAwbuunN/O8sgWF/Lq+kF+g7KttA0k0aQ8+9k4k2QH9snMvwyJvw14Hq 8kd0nQ8l6PKstlP7CYeMd3eDrvUKQUW/XwN8JX+U9miqzXNxh4IB7ys83uxEB/6S nGTowfWR1KvTolYo2/m6qCbfUZwD1KgQd9ZYL1cCcNjpzbAwmoN1j4NFb6M= -----END CERTIFICATE-----Generated at Mon Mar 2 03:49:45 2026 by rpki-client