$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04405b6a-e9b7-4619-9fbc-a70457bae68e.roa File: 04405b6a-e9b7-4619-9fbc-a70457bae68e.roa (raw, json) Hash identifier: gJj6+bJPHvFKG8GTaL6PTUJosU7bNlSKl5NZX+f0m/4= Subject key identifier: 2B:46:C7:E8:6A:BC:BD:55:D3:03:4B:FF:58:97:6C:6E:60:D8:27:96 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6002D79E66FF4DF64CD5A60D278F8C291C563015 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04405b6a-e9b7-4619-9fbc-a70457bae68e.roa Signing time: Thu 26 Feb 2026 00:10:45 +0000 ROA not before: Thu 26 Feb 2026 00:10:45 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.155.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:02:d7:9e:66:ff:4d:f6:4c:d5:a6:0d:27:8f:8c:29:1c:56:30:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 26 00:10:45 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=ed182299b791884e3ef372320ff16af7aed70266e4143c9f0fc980f09092ff29, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:1a:76:b3:a4:68:b5:4c:26:3e:b6:9d:e5: 53:c8:a3:dc:6e:5c:0f:84:42:63:68:29:42:96:20: ea:a7:8a:fa:67:99:c4:54:32:32:92:9e:f1:90:e5: bc:d4:2c:0d:ac:e8:14:55:14:30:42:99:d0:eb:1e: 1a:34:a3:20:d5:62:23:55:ce:e9:c5:69:b2:58:88: d5:43:80:e7:a1:25:36:48:68:02:4d:28:d6:cf:17: 98:95:7f:d2:6b:97:dd:8f:89:79:e6:00:31:a2:3b: 63:7d:9f:21:ba:f8:83:c6:aa:b3:a2:d2:a1:ff:98: 9f:50:7e:52:27:92:7d:5d:a5:6b:51:ae:47:1a:b6: a3:02:ae:a6:a9:5e:07:ec:2a:a3:3e:36:a3:fe:df: b8:1b:0d:d9:08:7e:d2:f8:24:1f:7b:29:55:20:22: 62:5f:d0:09:4f:00:58:40:d2:cd:f7:7b:9d:a3:25: 52:54:e9:94:ad:6c:50:81:19:bf:2a:13:82:5b:ee: 41:06:d6:93:89:13:7b:eb:5b:60:33:1d:d8:4e:0f: 93:03:1f:24:66:fd:57:b9:46:80:ff:32:23:8f:0a: 08:ef:ed:e6:03:cd:58:ea:59:30:f7:84:98:10:5b: 2d:fb:f0:2b:01:45:fe:bf:7b:85:5e:ff:db:b1:f5: ba:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:46:C7:E8:6A:BC:BD:55:D3:03:4B:FF:58:97:6C:6E:60:D8:27:96 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04405b6a-e9b7-4619-9fbc-a70457bae68e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.155.128.0/17 Signature Algorithm: sha256WithRSAEncryption 4e:66:8c:10:cc:c7:7b:78:87:07:54:e6:00:0c:a8:b0:10:80: 1d:c9:fb:b8:16:4c:bf:5a:9e:76:a3:de:91:49:d9:5a:ac:51: 80:cb:c6:39:fa:85:62:52:5a:88:25:dc:1e:52:11:17:9c:83: 74:89:75:77:cf:6a:5a:97:57:12:95:a7:53:ff:2c:6f:ee:db: 3c:a7:a2:f2:e6:c8:1d:db:7f:a1:19:4b:de:35:0a:f1:3b:79: 66:79:2b:29:4b:d6:d0:e3:cb:d0:03:50:27:4b:75:22:3a:be: 27:e3:93:37:0f:fd:74:b1:0e:13:46:b2:09:44:d2:90:dc:83: d9:e3:87:01:7f:7b:60:1f:98:50:ac:e8:3c:a0:0a:46:36:c5: 79:f0:0e:13:74:20:ff:94:17:b3:6b:f9:42:a7:f7:9b:07:83: a7:90:ea:72:69:23:48:e5:3f:1b:28:ed:5a:58:d6:92:dd:44: 0a:f7:5e:df:3d:d6:c2:6d:59:fc:66:ea:9f:d4:9a:b1:30:24: 05:ce:d2:e5:d4:1f:68:71:e8:5a:40:c3:ef:e9:8a:b8:41:cc: 8f:5a:f3:be:76:7d:22:25:5a:c6:6f:60:69:9c:e0:a6:3a:46: 06:1b:4d:d1:09:cf:8e:fc:40:47:79:c9:c9:31:a6:07:d5:fa: a6:3f:aa:de -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYALXnmb/TfZM1aYNJ4+MKRxWMBUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI2MDAxMDQ1WhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZDE4MjI5OWI3OTE4ODRlM2VmMzcyMzIwZmYxNmFmN2Fl ZDcwMjY2ZTQxNDNjOWYwZmM5ODBmMDkwOTJmZjI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0lRp2s6RotUwmPrad5VPIo9xuXA+EQmNoKUKWIOqnivpn mcRUMjKSnvGQ5bzULA2s6BRVFDBCmdDrHho0oyDVYiNVzunFabJYiNVDgOehJTZI aAJNKNbPF5iVf9Jrl92PiXnmADGiO2N9nyG6+IPGqrOi0qH/mJ9QflInkn1dpWtR rkcatqMCrqapXgfsKqM+NqP+37gbDdkIftL4JB97KVUgImJf0AlPAFhA0s33e52j JVJU6ZStbFCBGb8qE4Jb7kEG1pOJE3vrW2AzHdhOD5MDHyRm/Ve5RoD/MiOPCgjv 7eYDzVjqWTD3hJgQWy378CsBRf6/e4Ve/9ux9bo3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUK0bH6Gq8vVXTA0v/WJdsbmDYJ5YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA0NDA1YjZhLWU5YjctNDYxOS05ZmJjLWE3MDQ1N2JhZTY4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc4m4AwDQYJKoZIhvcNAQELBQADggEBAE5mjBDMx3t4hwdU5gAMqLAQgB3J +7gWTL9annaj3pFJ2VqsUYDLxjn6hWJSWogl3B5SERecg3SJdXfPalqXVxKVp1P/ LG/u2zynovLmyB3bf6EZS941CvE7eWZ5KylL1tDjy9ADUCdLdSI6vifjkzcP/XSx DhNGsglE0pDcg9njhwF/e2AfmFCs6DygCkY2xXnwDhN0IP+UF7Nr+UKn95sHg6eQ 6nJpI0jlPxso7VpY1pLdRAr3Xt891sJtWfxm6p/UmrEwJAXO0uXUH2hx6FpAw+/p irhBzI9a8752fSIlWsZvYGmc4KY6RgYbTdEJz478QEd5yckxpgfV+qY/qt4= -----END CERTIFICATE-----Generated at Sun Mar 1 22:18:41 2026 by rpki-client