$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a4ce9e7-b596-43b2-bb24-814c65627e76.roa File: 0a4ce9e7-b596-43b2-bb24-814c65627e76.roa (raw, json) Hash identifier: Nb1zvdCdvyQO+Ljtd20lIvnF9JtTv6nJ8JgaCRoBM84= Subject key identifier: 54:84:83:77:53:8B:B5:09:FA:D6:6B:E0:F9:25:3F:24:88:C7:C0:AE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4462FEE7046797FFEB5FC5D79FF498EA67B39372 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a4ce9e7-b596-43b2-bb24-814c65627e76.roa Signing time: Tue 10 Feb 2026 00:50:12 +0000 ROA not before: Tue 10 Feb 2026 00:50:12 +0000 ROA not after: Mon 11 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.32.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:62:fe:e7:04:67:97:ff:eb:5f:c5:d7:9f:f4:98:ea:67:b3:93:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 10 00:50:12 2026 GMT Not After : May 11 23:59:59 2026 GMT Subject: serialNumber=8db19a723ccf08a10f73fae823240a8942dd42657fa313d8843a85a6a99c4925, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:61:65:79:14:39:c8:be:b3:3b:83:ff:b6:fc: 69:2a:1d:1e:a3:0d:bf:b7:cd:8d:5e:88:d7:19:0a: e0:f6:57:a2:18:3b:0f:f4:35:1c:75:e9:c4:9a:6d: 80:45:47:38:36:89:8c:1e:a3:1f:f2:97:d4:41:47: 5c:a0:80:b4:a4:af:4d:4d:8e:d1:ad:29:59:32:26: 83:36:3a:91:51:dd:85:92:bb:35:b4:e4:45:af:e5: 90:94:c6:ec:be:b2:0e:ea:d6:08:59:78:36:e0:22: b5:2c:ae:c1:64:8e:cd:e5:15:35:1c:1a:d5:4a:8b: 6e:0a:b6:5a:97:3b:dc:c7:f4:96:d2:86:1d:e2:9b: e5:5f:8b:84:7d:e4:43:6e:8a:e2:18:a3:0c:3e:a3: 14:13:9d:ed:c5:60:6a:93:54:f7:69:78:ac:d7:8b: e4:54:07:9a:d9:ee:5f:ca:90:7f:a8:31:0b:dc:77: e4:8b:51:30:62:f5:f2:fc:56:44:b7:53:ff:cb:e3: af:51:df:43:23:74:26:54:09:97:bf:fe:ef:1b:c0: 21:42:3a:5b:60:cf:78:fb:9d:5f:27:e6:d7:bd:78: 99:8e:ee:31:db:12:4f:8b:72:ac:15:0b:f1:22:81: d1:30:bc:08:66:00:2d:8c:02:bf:5d:b3:d5:0e:23: 10:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:84:83:77:53:8B:B5:09:FA:D6:6B:E0:F9:25:3F:24:88:C7:C0:AE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a4ce9e7-b596-43b2-bb24-814c65627e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.32.0.0/16 Signature Algorithm: sha256WithRSAEncryption 39:73:7e:14:69:ae:37:d3:08:5a:b9:e9:4f:c3:3f:4b:f5:1f: d7:1a:42:dc:fc:77:a0:a8:fb:4a:52:53:a7:a3:23:d7:0b:ff: 9e:37:20:e5:b8:a0:4e:85:88:bc:bf:dc:06:b1:22:53:2a:91: 0b:cd:e4:77:f1:a9:c7:00:ff:c7:b9:17:55:9a:25:66:25:18: e8:1f:a2:ab:36:f3:b7:ca:5d:b4:6b:52:06:b6:06:99:75:4f: 1a:de:42:52:0b:7c:1c:97:46:e9:6d:75:86:4d:25:ae:6d:a9: 5a:e2:06:90:69:e2:9b:67:29:d2:a1:29:9b:c9:ad:8d:96:58: 9e:3a:60:76:13:d2:eb:b9:4f:85:cc:f0:ca:d3:53:1d:e9:06: 74:7f:9d:dc:e8:c3:ac:9b:36:05:60:ba:47:c2:0a:3e:63:5a: dd:44:24:3a:98:3c:cd:1e:e5:2d:c9:77:fb:68:63:ee:b2:a7: 0e:77:94:02:02:4a:ef:17:f3:08:43:11:16:6e:35:32:47:a5: 05:c3:8f:c6:e0:9d:3a:21:3e:26:4c:99:e9:39:95:09:f1:eb: c5:58:91:f0:34:8e:9f:70:04:f2:51:e6:d6:5b:6a:48:25:44: b7:ee:25:37:28:8c:5c:eb:f2:75:ce:8a:57:50:77:1f:32:81: a8:5f:7a:d6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURGL+5wRnl//rX8XXn/SY6mezk3IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDA1MDEyWhcNMjYwNTExMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZGIxOWE3MjNjY2YwOGExMGY3M2ZhZTgyMzI0MGE4OTQy ZGQ0MjY1N2ZhMzEzZDg4NDNhODVhNmE5OWM0OTI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJYWV5FDnIvrM7g/+2/GkqHR6jDb+3zY1eiNcZCuD2V6IY Ow/0NRx16cSabYBFRzg2iYweox/yl9RBR1yggLSkr01NjtGtKVkyJoM2OpFR3YWS uzW05EWv5ZCUxuy+sg7q1ghZeDbgIrUsrsFkjs3lFTUcGtVKi24KtlqXO9zH9JbS hh3im+Vfi4R95ENuiuIYoww+oxQTne3FYGqTVPdpeKzXi+RUB5rZ7l/KkH+oMQvc d+SLUTBi9fL8VkS3U//L469R30MjdCZUCZe//u8bwCFCOltgz3j7nV8n5te9eJmO 7jHbEk+LcqwVC/EigdEwvAhmAC2MAr9ds9UOIxBDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVISDd1OLtQn61mvg+SU/JIjHwK4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBhNGNlOWU3LWI1OTYtNDNiMi1iYjI0LTgxNGM2NTYyN2U3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2IDANBgkqhkiG9w0BAQsFAAOCAQEAOXN+FGmuN9MIWrnpT8M/S/Uf1xpC 3Px3oKj7SlJTp6Mj1wv/njcg5bigToWIvL/cBrEiUyqRC83kd/GpxwD/x7kXVZol ZiUY6B+iqzbzt8pdtGtSBrYGmXVPGt5CUgt8HJdG6W11hk0lrm2pWuIGkGnim2cp 0qEpm8mtjZZYnjpgdhPS67lPhczwytNTHekGdH+d3OjDrJs2BWC6R8IKPmNa3UQk Opg8zR7lLcl3+2hj7rKnDneUAgJK7xfzCEMRFm41MkelBcOPxuCdOiE+JkyZ6TmV CfHrxViR8DSOn3AE8lHm1ltqSCVEt+4lNyiMXOvydc6KV1B3HzKBqF961g== -----END CERTIFICATE-----Generated at Sun Mar 1 22:19:22 2026 by rpki-client