$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a692cc1-0806-494f-a563-a5c943243c8c.roa File: 0a692cc1-0806-494f-a563-a5c943243c8c.roa (raw, json) Hash identifier: 29vkDbKiO545uZoCzDA+M7uBEHen+RUyJ2qN5blOso8= Subject key identifier: 8A:C3:A9:3A:1A:3B:54:1A:FA:F4:A6:42:F2:79:23:FF:3E:76:28:C0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 25A8B8243D18F3B759FF3CA257F3ABFDFE7917E8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a692cc1-0806-494f-a563-a5c943243c8c.roa Signing time: Tue 17 Feb 2026 03:23:33 +0000 ROA not before: Tue 17 Feb 2026 03:23:33 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 69.25.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a8:b8:24:3d:18:f3:b7:59:ff:3c:a2:57:f3:ab:fd:fe:79:17:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 17 03:23:33 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=607c41ec07f2318dbc7bfa888bb966d597cb92258100698a099bd9cc3b1f4bad, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:57:bb:68:32:bd:1c:33:d2:f0:9e:9d:76:71: 91:f1:e7:f9:86:df:be:41:47:32:3a:95:40:14:1e: 08:5d:3f:3e:20:b1:35:c2:2d:ac:6b:2b:23:57:4e: 4d:fe:7d:9d:df:fc:e7:bb:4a:7b:69:7e:7e:ec:35: 70:94:fd:22:54:33:28:98:6a:7f:6a:e0:a5:84:c5: 50:0d:a2:48:6f:49:00:a1:cf:32:9c:bf:74:3a:e7: 59:e8:bb:0f:c5:fd:8b:06:ed:82:f5:d9:b6:26:92: a7:b8:d6:61:12:33:87:5b:aa:0c:2d:06:9b:41:79: 8a:0a:19:50:37:bf:5a:f0:0c:a7:73:31:e3:d2:fa: 0b:96:49:a4:35:33:9c:b2:bb:bb:03:7f:75:10:b9: ca:cc:3f:f0:18:21:e1:39:88:d3:c7:68:62:93:1f: d6:d7:82:8e:69:4a:1c:44:ef:c3:9d:cd:a9:1c:dd: 62:56:37:e9:39:b4:64:cd:13:3c:dd:8d:51:2d:f1: 46:3f:f0:ad:6a:c9:6c:fb:2a:a0:bb:92:5a:97:bb: a7:30:83:a6:cd:2d:8b:90:0d:ca:ee:bc:c4:48:07: de:78:a8:e0:ad:ec:86:62:ad:8a:36:20:ed:c0:c7: 0f:88:19:13:33:2e:64:1f:7a:12:e8:d8:01:bb:2c: 52:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C3:A9:3A:1A:3B:54:1A:FA:F4:A6:42:F2:79:23:FF:3E:76:28:C0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a692cc1-0806-494f-a563-a5c943243c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.25.252.0/22 Signature Algorithm: sha256WithRSAEncryption 86:87:ad:12:b6:e0:06:5c:b6:bc:47:3b:c9:75:e0:6d:a6:f6: 48:e3:ab:f8:0b:6c:81:87:e6:35:8e:57:ec:da:8c:32:48:6d: 92:bb:df:a4:c2:a6:1f:fb:3e:8f:78:a4:4b:c6:60:39:61:9c: 47:a4:bd:9d:fc:e8:23:27:2a:b3:15:f6:4a:d2:57:22:a7:1e: be:21:f7:65:eb:c4:67:ce:99:dd:49:84:22:f8:15:3e:80:89: d1:ec:49:9d:36:b9:24:25:43:d1:c8:00:ff:56:eb:b6:7b:b1: d4:ae:f3:54:04:74:d3:e4:34:53:ce:37:d2:61:0b:72:f9:9a: df:5b:75:8c:cf:99:0f:20:52:11:b6:3f:8b:07:8e:0e:c4:10: a0:ef:e1:be:05:25:0a:51:43:43:fa:fb:7e:2c:0b:63:46:77: 12:b5:05:7d:04:b6:87:cd:3c:58:b2:8d:5b:f7:54:7d:d5:72: 71:97:80:27:70:c7:9a:ce:3f:5c:9c:91:c6:8b:f7:f8:0a:a6: 40:ac:68:75:23:15:c2:8f:60:78:e2:26:58:67:28:84:63:d3: 7d:96:3f:6e:c3:2d:db:b4:2a:aa:8a:ab:b4:64:ac:70:20:83: 85:02:7b:4d:bf:0e:59:80:70:82:d7:cc:b0:4e:eb:66:df:d4: 9b:8a:39:9c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJai4JD0Y87dZ/zyiV/Or/f55F+gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE3MDMyMzMzWhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MDdjNDFlYzA3ZjIzMThkYmM3YmZhODg4YmI5NjZkNTk3 Y2I5MjI1ODEwMDY5OGEwOTliZDljYzNiMWY0YmFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgV7toMr0cM9Lwnp12cZHx5/mG375BRzI6lUAUHghdPz4g sTXCLaxrKyNXTk3+fZ3f/Oe7Sntpfn7sNXCU/SJUMyiYan9q4KWExVANokhvSQCh zzKcv3Q651nouw/F/YsG7YL12bYmkqe41mESM4dbqgwtBptBeYoKGVA3v1rwDKdz MePS+guWSaQ1M5yyu7sDf3UQucrMP/AYIeE5iNPHaGKTH9bXgo5pShxE78Odzakc 3WJWN+k5tGTNEzzdjVEt8UY/8K1qyWz7KqC7klqXu6cwg6bNLYuQDcruvMRIB954 qOCt7IZirYo2IO3Axw+IGRMzLmQfehLo2AG7LFKnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUisOpOho7VBr69KZC8nkj/z52KMAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBhNjkyY2MxLTA4MDYtNDk0Zi1hNTYzLWE1Yzk0MzI0M2M4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJFGfwwDQYJKoZIhvcNAQELBQADggEBAIaHrRK24AZctrxHO8l14G2m9kjj q/gLbIGH5jWOV+zajDJIbZK736TCph/7Po94pEvGYDlhnEekvZ386CMnKrMV9krS VyKnHr4h92XrxGfOmd1JhCL4FT6AidHsSZ02uSQlQ9HIAP9W67Z7sdSu81QEdNPk NFPON9JhC3L5mt9bdYzPmQ8gUhG2P4sHjg7EEKDv4b4FJQpRQ0P6+34sC2NGdxK1 BX0EtofNPFiyjVv3VH3VcnGXgCdwx5rOP1yckcaL9/gKpkCsaHUjFcKPYHjiJlhn KIRj032WP27DLdu0KqqKq7RkrHAgg4UCe02/DlmAcILXzLBO62bf1JuKOZw= -----END CERTIFICATE-----Generated at Mon Mar 2 00:00:38 2026 by rpki-client