$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08eaf4a4-3c36-4a01-8fca-c225a194c8cf.roa File: 08eaf4a4-3c36-4a01-8fca-c225a194c8cf.roa (raw, json) Hash identifier: sQLqE8cvynHjW7fMs+277NuZJdbp1qQQjrE0c7ZInPw= Subject key identifier: 87:9A:BF:9D:CE:EC:D0:82:5A:E7:3F:D5:AD:E0:4F:54:C4:A4:DD:0D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4A836769E3442C3D2E097B46C78774BF370C1F3B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08eaf4a4-3c36-4a01-8fca-c225a194c8cf.roa Signing time: Wed 25 Feb 2026 00:40:37 +0000 ROA not before: Wed 25 Feb 2026 00:40:37 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 65.9.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:83:67:69:e3:44:2c:3d:2e:09:7b:46:c7:87:74:bf:37:0c:1f:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 00:40:37 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=7a9d05e89d86587ceebb742d616ba7ceef78b6412a4325ac7469a1c1d7f61c3f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ed:1a:69:42:33:89:6e:5d:e3:ef:9a:93:db: b2:bd:d8:e8:48:23:d7:17:20:ca:a9:d8:70:b0:5a: 2e:24:93:2c:fc:1f:c5:01:cf:dc:dd:f5:99:f5:6a: 23:86:a5:ce:cd:69:96:c7:19:84:5b:ee:59:1d:4a: dc:b4:1a:1e:e7:7e:e4:83:1d:cc:5e:f7:f2:be:7d: f7:73:74:34:df:1f:5d:0d:9d:9e:71:ae:85:92:67: 9f:75:0c:ff:87:d2:16:25:02:40:d0:05:69:5b:06: ad:6e:5b:72:8a:04:06:53:34:27:74:b3:69:3c:e4: e7:1d:d1:bd:7e:cb:77:48:c8:5f:f0:c1:35:8b:0c: 7c:9e:58:95:36:d7:7b:58:e3:f8:89:c8:58:9e:96: dd:2c:4a:32:84:f3:bf:3b:f9:1f:4a:7e:08:79:fc: 99:8d:4b:5c:e3:5c:bb:f5:d4:78:87:f8:e9:81:6b: d0:bb:6d:bf:22:89:bb:0a:ec:98:37:4e:0e:a9:bf: bc:7e:54:87:ac:f7:1b:ec:b3:37:12:d5:64:fa:60: d3:be:50:13:cc:21:b6:95:a2:b4:52:c7:54:b2:ee: a2:99:22:c3:e4:98:9c:a1:d3:e0:dc:bd:5e:85:b0: 91:cc:b4:9f:74:43:5b:2d:c1:62:3a:9e:1d:5c:ac: fa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9A:BF:9D:CE:EC:D0:82:5A:E7:3F:D5:AD:E0:4F:54:C4:A4:DD:0D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08eaf4a4-3c36-4a01-8fca-c225a194c8cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.9.163.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:89:ef:75:ce:ad:32:71:f5:5e:74:5c:37:d6:74:38:66:f4: 9e:9b:2d:00:49:d5:cf:7b:6f:f9:39:23:bc:2b:00:73:04:49: 94:25:3e:b8:67:3b:21:96:6b:f8:49:56:4b:66:fe:2d:ac:e5: e9:80:36:bb:ac:9b:3e:8b:ee:8a:d3:5d:1a:1a:a2:24:e2:ee: 24:ba:c9:a1:76:fa:c4:c2:0b:cc:ef:e3:a9:29:a3:fd:08:0a: ac:0b:39:49:db:0e:36:80:a6:56:47:59:3b:ab:01:4e:28:d6: 0e:37:f2:72:60:5f:15:02:c8:6a:82:67:17:bd:67:f7:a0:3a: 19:89:11:c4:67:6e:94:15:8b:e6:cd:0f:c4:bb:3a:8f:c0:fd: 2b:08:34:1f:7f:ca:ac:b6:89:d8:93:2f:80:36:1b:16:16:54: 9c:87:f5:d6:2e:19:3c:45:3b:87:41:cf:d2:8f:b5:ca:83:89: f8:12:3e:68:43:0a:de:76:08:5b:e1:6f:d6:a5:c5:7e:b5:47: 45:ea:8a:7c:c9:77:9b:f7:f9:49:6b:1c:eb:6f:69:6b:af:55: b5:c2:5b:39:0a:92:fc:cf:d4:30:03:9a:68:a4:8e:ec:e3:d5: b4:7c:42:9c:1c:80:b0:e6:7b:7e:b5:a7:3f:ef:3b:ce:a6:d9: 39:8f:60:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSoNnaeNELD0uCXtGx4d0vzcMHzswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDA0MDM3WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTlkMDVlODlkODY1ODdjZWViYjc0MmQ2MTZiYTdjZWVm NzhiNjQxMmE0MzI1YWM3NDY5YTFjMWQ3ZjYxYzNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC37RppQjOJbl3j75qT27K92OhII9cXIMqp2HCwWi4kkyz8 H8UBz9zd9Zn1aiOGpc7NaZbHGYRb7lkdSty0Gh7nfuSDHcxe9/K+ffdzdDTfH10N nZ5xroWSZ591DP+H0hYlAkDQBWlbBq1uW3KKBAZTNCd0s2k85Ocd0b1+y3dIyF/w wTWLDHyeWJU213tY4/iJyFielt0sSjKE8787+R9Kfgh5/JmNS1zjXLv11HiH+OmB a9C7bb8iibsK7Jg3Tg6pv7x+VIes9xvsszcS1WT6YNO+UBPMIbaVorRSx1Sy7qKZ IsPkmJyh0+DcvV6FsJHMtJ90Q1stwWI6nh1crPrVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUh5q/nc7s0IJa5z/VreBPVMSk3Q0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA4ZWFmNGE0LTNjMzYtNGEwMS04ZmNhLWMyMjVhMTk0YzhjZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABBCaMwDQYJKoZIhvcNAQELBQADggEBAD+J73XOrTJx9V50XDfWdDhm9J6b LQBJ1c97b/k5I7wrAHMESZQlPrhnOyGWa/hJVktm/i2s5emANrusmz6L7orTXRoa oiTi7iS6yaF2+sTCC8zv46kpo/0ICqwLOUnbDjaAplZHWTurAU4o1g438nJgXxUC yGqCZxe9Z/egOhmJEcRnbpQVi+bND8S7Oo/A/SsINB9/yqy2idiTL4A2GxYWVJyH 9dYuGTxFO4dBz9KPtcqDifgSPmhDCt52CFvhb9alxX61R0XqinzJd5v3+UlrHOtv aWuvVbXCWzkKkvzP1DADmmikjuzj1bR8QpwcgLDme361pz/vO86m2TmPYA8= -----END CERTIFICATE-----Generated at Sun Mar 1 22:13:04 2026 by rpki-client