$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/064a098f-0b4d-4d61-8343-4a50f114e383.roa File: 064a098f-0b4d-4d61-8343-4a50f114e383.roa (raw, json) Hash identifier: rRIS1dcjyEkmwRS4XiT3+om/G70yAyBCDcnlDQXtXxo= Subject key identifier: 4D:6B:A9:63:F0:CE:56:8C:14:3E:4F:D1:26:3E:08:11:82:68:80:D9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 43B64DF5457D3D829150580F8EDB8F2D482E1FA8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/064a098f-0b4d-4d61-8343-4a50f114e383.roa Signing time: Fri 13 Feb 2026 00:00:17 +0000 ROA not before: Fri 13 Feb 2026 00:00:17 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 5.174.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b6:4d:f5:45:7d:3d:82:91:50:58:0f:8e:db:8f:2d:48:2e:1f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 13 00:00:17 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=e3e5cdaf22e4eb5c597cecf5311f3513b6a1e17a917c095ec317aeefe9eec06b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:81:be:4f:28:ba:6f:5f:e1:78:84:6e:9f:06: fb:1a:54:dc:3b:94:e8:ef:6f:88:3d:56:8f:ec:d0: 23:ea:ee:b9:bb:bf:d6:ed:b6:98:84:42:bd:24:64: 09:70:69:19:03:95:16:17:0d:43:03:e6:0a:28:7e: 50:29:bc:da:58:f1:b6:c5:20:e7:a3:f4:4c:f7:cc: 7a:85:e7:30:5c:28:32:eb:b9:58:0b:17:81:4f:04: 7d:cb:ae:6e:1d:16:69:21:40:38:31:7a:13:65:c5: 4d:21:b3:20:c8:f0:7d:19:df:03:a2:36:1c:3c:ab: 42:e5:b0:53:57:2b:ef:fa:bd:0a:57:58:b1:f2:e3: e1:48:c7:c7:78:2a:1a:64:3c:b3:02:df:41:0f:a4: 21:c5:70:1e:b4:fb:ae:17:16:44:c7:9e:87:e3:71: e9:a9:ae:12:07:eb:d0:f2:57:e3:10:39:a9:48:79: 7d:f8:62:ce:e9:69:7f:04:6f:00:74:6f:ee:2e:d5: 5c:05:bc:38:4b:6b:58:ea:dc:ac:c3:57:25:1b:44: a3:ce:65:13:3b:27:9c:47:55:3b:d9:5b:5e:8e:52: 4c:1a:c5:d4:f6:ee:6c:9d:00:a9:91:ec:95:ac:0a: 0e:48:f2:5a:90:7b:20:f4:e2:8f:6a:2b:82:cc:42: 4f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6B:A9:63:F0:CE:56:8C:14:3E:4F:D1:26:3E:08:11:82:68:80:D9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/064a098f-0b4d-4d61-8343-4a50f114e383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.174.144.0/20 Signature Algorithm: sha256WithRSAEncryption 2e:49:ee:a9:52:3e:35:48:12:98:1b:15:53:7a:8e:fb:07:14: e8:11:1e:81:92:f2:65:e8:d0:0b:7d:ad:b4:ba:c3:ed:e5:eb: 4c:fd:dd:31:83:5d:0c:7c:1f:13:bc:fe:b8:8d:dc:0c:73:9f: c5:f4:f3:a0:dc:c7:7d:3e:f6:48:a5:04:20:57:86:b5:35:83: 55:bd:51:32:f8:e9:2a:29:84:26:a7:5d:7b:71:2d:6e:d7:fa: 50:50:ec:94:f6:f5:75:05:32:f0:3f:39:a4:0e:70:69:2b:4b: 14:e1:de:b0:e6:a3:80:de:d6:0d:2c:98:9c:76:bc:09:49:83: 37:07:23:c9:95:b4:5e:43:ee:4a:73:7b:d6:7c:15:b3:fb:88: 70:f9:09:fe:21:a9:9c:26:5f:0e:a8:57:a3:f8:0a:2f:00:c4: 5b:20:6f:75:c6:ed:92:9c:97:54:5e:07:72:f0:a1:f6:84:0e: 07:0e:8c:9d:84:19:a3:1c:14:92:88:fd:b3:1b:bb:71:92:09: bb:90:20:35:3a:36:91:8e:8a:43:1d:d9:bf:b5:d4:4b:9e:e6: f2:53:57:94:da:c1:a4:ec:35:15:61:d5:9b:12:ae:17:d6:19: ad:72:e2:e7:46:72:9a:a9:b4:fb:5e:6d:03:28:b8:67:79:0a: 08:90:69:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ7ZN9UV9PYKRUFgPjtuPLUguH6gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEzMDAwMDE3WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlM2U1Y2RhZjIyZTRlYjVjNTk3Y2VjZjUzMTFmMzUxM2I2 YTFlMTdhOTE3YzA5NWVjMzE3YWVlZmU5ZWVjMDZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAgb5PKLpvX+F4hG6fBvsaVNw7lOjvb4g9Vo/s0CPq7rm7 v9bttpiEQr0kZAlwaRkDlRYXDUMD5gooflApvNpY8bbFIOej9Ez3zHqF5zBcKDLr uVgLF4FPBH3Lrm4dFmkhQDgxehNlxU0hsyDI8H0Z3wOiNhw8q0LlsFNXK+/6vQpX WLHy4+FIx8d4KhpkPLMC30EPpCHFcB60+64XFkTHnofjcemprhIH69DyV+MQOalI eX34Ys7paX8EbwB0b+4u1VwFvDhLa1jq3KzDVyUbRKPOZRM7J5xHVTvZW16OUkwa xdT27mydAKmR7JWsCg5I8lqQeyD04o9qK4LMQk+LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTWupY/DOVowUPk/RJj4IEYJogNkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA2NGEwOThmLTBiNGQtNGQ2MS04MzQzLTRhNTBmMTE0ZTM4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQFrpAwDQYJKoZIhvcNAQELBQADggEBAC5J7qlSPjVIEpgbFVN6jvsHFOgR HoGS8mXo0At9rbS6w+3l60z93TGDXQx8HxO8/riN3Axzn8X086Dcx30+9kilBCBX hrU1g1W9UTL46SophCanXXtxLW7X+lBQ7JT29XUFMvA/OaQOcGkrSxTh3rDmo4De 1g0smJx2vAlJgzcHI8mVtF5D7kpze9Z8FbP7iHD5Cf4hqZwmXw6oV6P4Ci8AxFsg b3XG7ZKcl1ReB3LwofaEDgcOjJ2EGaMcFJKI/bMbu3GSCbuQIDU6NpGOikMd2b+1 1Eue5vJTV5TawaTsNRVh1ZsSrhfWGa1y4udGcpqptPtebQMouGd5CgiQaQ8= -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:08 2026 by rpki-client