$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/054948cd-40ed-4807-b2fc-8a8c38f8dda0.roa File: 054948cd-40ed-4807-b2fc-8a8c38f8dda0.roa (raw, json) Hash identifier: 34Xe6xa4XWRg1ZUeEwnisMo15DVTaBTYJoK2yoL8e7Q= Subject key identifier: 92:BF:85:16:E9:C5:3F:FB:30:5B:50:55:78:F5:62:BC:DD:FD:20:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1753107AF328695A8BB9283041E14415195E72 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/054948cd-40ed-4807-b2fc-8a8c38f8dda0.roa Signing time: Tue 24 Feb 2026 01:31:33 +0000 ROA not before: Tue 24 Feb 2026 01:31:33 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.16.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:53:10:7a:f3:28:69:5a:8b:b9:28:30:41:e1:44:15:19:5e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 01:31:33 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=08d4d0784a09cbe8fbde39cf5cf8f621eb5c474c3b8b60ee8234cfb7d81f9bcf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:62:e0:fa:ac:af:41:6c:2a:87:6f:67:79: c2:51:8e:55:66:52:66:10:64:ee:6b:37:0c:7a:f2: 3f:fc:2e:3c:e0:8b:76:b4:7b:ff:0b:90:ee:ff:3b: 7d:a5:58:89:ee:cb:e4:02:cc:56:e9:d8:23:c3:90: 98:98:d5:a4:ad:72:a9:90:38:4e:1b:e0:80:22:16: 8a:9c:14:bf:e1:d7:3b:63:30:74:54:eb:66:24:3f: ff:31:80:99:2c:4b:6f:67:60:0b:95:a0:03:2d:e6: 05:d7:82:d3:40:dd:83:89:b2:7a:e7:e7:a6:ed:d5: eb:ae:0a:5e:fa:a1:d5:72:bc:c7:0d:3e:26:b9:26: cf:7d:11:51:18:4d:54:e9:91:61:e4:37:f3:cd:18: 85:3a:6f:48:aa:7a:51:f5:ac:6e:2f:5a:cd:7d:ab: 29:81:15:58:0d:93:aa:0b:f0:93:08:6e:db:48:71: b2:54:46:f2:c7:3c:f0:84:10:86:79:fc:dd:76:1f: a0:40:c1:81:a0:0b:94:a2:8b:ba:fb:d7:da:8a:92: 8d:ee:4d:32:c2:8f:6a:17:13:16:fc:f9:41:19:3c: 02:e3:ab:9e:8e:47:b9:35:fc:a0:be:a3:ef:30:ee: a7:10:79:ff:55:96:7b:78:b7:be:f1:e7:09:26:66: 81:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BF:85:16:E9:C5:3F:FB:30:5B:50:55:78:F5:62:BC:DD:FD:20:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/054948cd-40ed-4807-b2fc-8a8c38f8dda0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 92:1f:34:9b:93:7e:a2:6f:1d:24:8e:0d:34:03:5d:40:1d:9a: b2:d0:df:d8:b1:3f:72:32:78:b0:3f:37:ee:fb:0a:a7:00:c6: 83:29:2d:84:84:a1:81:c2:3b:f0:d7:00:66:07:06:6b:45:2b: 50:04:97:c3:e2:46:f5:db:b7:99:0b:49:01:91:90:ce:f7:c5: 48:81:bf:f4:02:08:47:6f:40:76:4e:05:b1:a4:e5:41:95:68: bf:0c:c4:e4:40:91:d7:a6:9d:af:8e:d1:28:22:f7:3d:f5:54: b1:eb:f2:61:ef:30:0a:44:a7:b3:36:75:e2:84:78:96:31:1e: 51:8d:f2:e5:90:64:c1:cb:9f:16:d6:11:b5:e2:a7:ad:ad:6b: 78:4e:ab:9b:62:91:b3:1a:07:68:43:43:6d:e4:27:2b:bb:98: 3f:79:c8:c4:3d:df:2e:16:3d:6c:13:38:a2:fb:c0:a2:0b:13: e0:31:a5:bd:4d:e1:41:06:fa:e6:2a:1b:55:98:a9:b2:0d:c0: e3:e4:2a:0c:c5:41:26:32:b6:ab:76:a5:51:8c:31:2c:e3:5e: d4:2b:9d:e6:7f:2a:56:10:b0:34:4c:c7:5c:1f:e2:e3:f2:29: b5:4c:0b:a7:54:ac:97:25:bc:9f:33:d8:cf:21:02:5c:c7:fa: 11:bb:ce:4e -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgITF1MQevMoaVqLuSgwQeFEFRlecjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjAyMjQwMTMxMzNaFw0yNjA1MjUyMzU5NTla MHoxSTBHBgNVBAUTQDA4ZDRkMDc4NGEwOWNiZThmYmRlMzljZjVjZjhmNjIxZWI1 YzQ3NGMzYjhiNjBlZTgyMzRjZmI3ZDgxZjliY2YxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMVEYuD6rK9BbCqHb2d5wlGOVWZSZhBk7ms3DHryP/wuPOCL drR7/wuQ7v87faVYie7L5ALMVunYI8OQmJjVpK1yqZA4ThvggCIWipwUv+HXO2Mw dFTrZiQ//zGAmSxLb2dgC5WgAy3mBdeC00Ddg4myeufnpu3V664KXvqh1XK8xw0+ Jrkmz30RURhNVOmRYeQ3880YhTpvSKp6UfWsbi9azX2rKYEVWA2Tqgvwkwhu20hx slRG8sc88IQQhnn83XYfoEDBgaALlKKLuvvX2oqSje5NMsKPahcTFvz5QRk8AuOr no5HuTX8oL6j7zDupxB5/1WWe3i3vvHnCSZmgZsCAwEAAaOCArAwggKsMB0GA1Ud DgQWBBSSv4UW6cU/+zBbUFV49WK83f0g4TAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvMDU0OTQ4Y2QtNDBlZC00ODA3LWIyZmMtOGE4YzM4ZjhkZGEwLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDABAQMA0GCSqGSIb3DQEBCwUAA4IBAQCSHzSbk36ibx0kjg00A11AHZqy0N/Y sT9yMniwPzfu+wqnAMaDKS2EhKGBwjvw1wBmBwZrRStQBJfD4kb127eZC0kBkZDO 98VIgb/0AghHb0B2TgWxpOVBlWi/DMTkQJHXpp2vjtEoIvc99VSx6/Jh7zAKRKez NnXihHiWMR5RjfLlkGTBy58W1hG14qetrWt4TqubYpGzGgdoQ0Nt5Ccru5g/ecjE Pd8uFj1sEzii+8CiCxPgMaW9TeFBBvrmKhtVmKmyDcDj5CoMxUEmMrardqVRjDEs 417UK53mfypWELA0TMdcH+Lj8im1TAunVKyXJbyfM9jPIQJcx/oRu85O -----END CERTIFICATE-----Generated at Sun Mar 1 22:17:39 2026 by rpki-client