$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0541fda6-cb3f-41d2-b3bf-20b0357f5120.roa File: 0541fda6-cb3f-41d2-b3bf-20b0357f5120.roa (raw, json) Hash identifier: l5qm9oQayLi6hJZxdYOoREvQmyYYSR20uDMQxN2Z2FU= Subject key identifier: D2:30:24:70:ED:5B:AB:B6:D1:88:13:65:EC:8E:57:12:B5:CC:BA:37 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 50DD98A5C240390D8970C1ED8A9259A964D3B192 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0541fda6-cb3f-41d2-b3bf-20b0357f5120.roa Signing time: Sat 07 Feb 2026 00:00:51 +0000 ROA not before: Sat 07 Feb 2026 00:00:51 +0000 ROA not after: Fri 08 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 150.247.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:dd:98:a5:c2:40:39:0d:89:70:c1:ed:8a:92:59:a9:64:d3:b1:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 7 00:00:51 2026 GMT Not After : May 8 23:59:59 2026 GMT Subject: serialNumber=2fcd14452f087fefb19483ab25b6b983dc458ff9a1fe513901bc55284437e08c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:38:8e:9c:3f:36:7e:4b:fc:40:5a:85:02:51: 93:83:48:3c:c3:0d:96:ed:b4:82:07:fa:41:d4:12: f6:ca:39:dc:aa:b6:d1:51:d9:3c:25:c0:e2:be:1e: 55:39:bb:9d:86:9c:5f:99:a1:22:dd:d2:6b:d3:ff: 86:a5:6c:72:ea:c6:81:82:f9:70:eb:a7:bb:a8:9a: 72:2b:ea:c7:d9:68:15:33:c2:f1:71:fb:3b:c8:2c: 78:d8:40:4e:a3:ed:37:80:58:86:20:c4:ba:3d:95: f7:cd:99:a9:e3:c8:ef:90:5d:29:f6:92:26:01:83: dc:80:9c:a6:6f:d0:16:a9:b1:21:3c:6a:44:85:fd: 22:37:cf:aa:3b:be:bf:fa:61:f6:d0:e7:16:09:71: 3c:a1:ba:f5:b0:73:5c:19:30:15:50:23:36:82:af: 79:06:20:09:d3:a9:aa:2d:94:87:f3:fc:04:dd:f0: ae:e7:4a:ee:cd:cb:1f:51:0a:23:52:2b:f1:9b:d5: f7:c2:4c:17:02:d0:ee:dd:e9:ae:4e:ce:04:01:32: 4e:04:4a:0b:78:97:24:83:bb:21:68:9f:95:3b:da: 23:db:f1:88:ee:35:3f:ce:39:e3:ef:cd:b4:8f:6b: 79:2c:1a:36:06:bb:09:4d:c5:fb:6b:ae:9e:04:5a: 1a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:30:24:70:ED:5B:AB:B6:D1:88:13:65:EC:8E:57:12:B5:CC:BA:37 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0541fda6-cb3f-41d2-b3bf-20b0357f5120.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.247.33.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:43:16:8d:4c:7f:cf:de:a1:2d:4d:d9:e8:7d:94:e7:53:56: 13:93:f7:29:b5:e4:95:c1:40:72:22:26:5b:a6:1e:b9:27:b2: ea:b1:d5:ad:79:9f:64:a2:88:be:4d:37:20:27:69:55:b3:2a: a0:6a:37:1b:84:8b:9b:6f:ef:2c:13:0d:e7:61:7b:60:e0:eb: 37:6a:98:f1:1d:b9:d8:41:f5:c6:f3:1b:0a:f2:3b:1a:4d:31: 1d:6a:ab:07:81:7e:4e:50:ce:13:16:2e:1c:61:61:41:1f:f3: 2e:58:6e:ff:a6:c9:b9:71:e2:1d:88:b6:ee:4b:fe:b3:96:c2: b8:6d:20:ee:cc:d7:78:18:70:78:48:f2:bd:26:16:b6:47:ae: 6a:f8:fe:da:25:65:00:99:b7:a7:a1:7f:f8:cd:84:12:39:c2: d0:9d:e0:7b:a0:b3:53:c2:78:ac:cf:f1:f1:49:72:d3:ca:1f: 61:48:78:8f:88:4e:f7:37:79:7f:9a:02:ef:b7:44:63:38:4a: 90:09:ba:13:25:65:db:9c:69:5a:f4:30:8a:b9:96:5b:e7:c6: 20:0c:53:ba:b7:d0:b9:13:08:a4:21:bc:1e:b0:bf:78:09:7f: 5c:31:76:c8:5d:be:f5:c9:ed:04:a0:b4:99:52:aa:2a:59:f5: 97:3c:f9:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUN2YpcJAOQ2JcMHtipJZqWTTsZIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA3MDAwMDUxWhcNMjYwNTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZmNkMTQ0NTJmMDg3ZmVmYjE5NDgzYWIyNWI2Yjk4M2Rj NDU4ZmY5YTFmZTUxMzkwMWJjNTUyODQ0MzdlMDhjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0OI6cPzZ+S/xAWoUCUZODSDzDDZbttIIH+kHUEvbKOdyq ttFR2TwlwOK+HlU5u52GnF+ZoSLd0mvT/4albHLqxoGC+XDrp7uomnIr6sfZaBUz wvFx+zvILHjYQE6j7TeAWIYgxLo9lffNmanjyO+QXSn2kiYBg9yAnKZv0BapsSE8 akSF/SI3z6o7vr/6YfbQ5xYJcTyhuvWwc1wZMBVQIzaCr3kGIAnTqaotlIfz/ATd 8K7nSu7Nyx9RCiNSK/Gb1ffCTBcC0O7d6a5OzgQBMk4ESgt4lySDuyFon5U72iPb 8YjuNT/OOePvzbSPa3ksGjYGuwlNxftrrp4EWhoNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0jAkcO1bq7bRiBNl7I5XErXMujcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA1NDFmZGE2LWNiM2YtNDFkMi1iM2JmLTIwYjAzNTdmNTEyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW9yEwDQYJKoZIhvcNAQELBQADggEBAB5DFo1Mf8/eoS1N2eh9lOdTVhOT 9ym15JXBQHIiJlumHrknsuqx1a15n2SiiL5NNyAnaVWzKqBqNxuEi5tv7ywTDedh e2Dg6zdqmPEdudhB9cbzGwryOxpNMR1qqweBfk5QzhMWLhxhYUEf8y5Ybv+myblx 4h2Itu5L/rOWwrhtIO7M13gYcHhI8r0mFrZHrmr4/tolZQCZt6ehf/jNhBI5wtCd 4Hugs1PCeKzP8fFJctPKH2FIeI+ITvc3eX+aAu+3RGM4SpAJuhMlZducaVr0MIq5 llvnxiAMU7q30LkTCKQhvB6wv3gJf1wxdshdvvXJ7QSgtJlSqipZ9Zc8+bE= -----END CERTIFICATE-----Generated at Mon Mar 2 00:06:43 2026 by rpki-client