$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f453c42-9e01-4343-9d00-659e79e057bb.roa File: 0f453c42-9e01-4343-9d00-659e79e057bb.roa (raw, json) Hash identifier: /6cBAkS3NqEJ9/9WGo9D++wxtNAB7Jl/i2MiEBgGttk= Subject key identifier: DF:B8:7A:82:F0:38:C9:79:14:7E:8E:BA:E1:3F:8E:07:14:CC:BC:B0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 67BAB8476A979D76774C59754C2D63577F08F271 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f453c42-9e01-4343-9d00-659e79e057bb.roa Signing time: Sun 15 Feb 2026 00:11:13 +0000 ROA not before: Sun 15 Feb 2026 00:11:13 +0000 ROA not after: Sat 16 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.201.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ba:b8:47:6a:97:9d:76:77:4c:59:75:4c:2d:63:57:7f:08:f2:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 15 00:11:13 2026 GMT Not After : May 16 23:59:59 2026 GMT Subject: serialNumber=b44829d0c8fe3fddbbe37f6ab045da60129811047c0ff01724c5cf998d086024, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:54:2e:2a:8d:cf:b4:fc:6b:f2:88:94:a4:19: d1:c2:4a:28:aa:88:6d:90:23:91:64:64:a8:34:86: e0:fe:40:72:4c:c7:cd:b7:ae:56:b7:23:ee:fd:d0: cd:0c:21:b6:c5:98:f4:c8:85:e4:75:90:36:25:f5: 73:1c:62:34:f8:29:ff:81:2d:8a:e9:21:74:6d:6b: f2:dc:58:79:4d:8f:8c:f7:b0:f4:71:30:3e:51:12: 35:83:36:0c:0f:5d:81:99:cb:54:df:29:98:25:32: b9:70:fc:80:b0:0e:d0:ae:d0:4e:7e:2d:59:5f:a5: d9:e2:3d:72:6c:51:38:fd:ba:99:ba:f3:bf:56:44: 36:b0:09:2a:b4:51:f4:1f:45:36:0c:0e:3d:bb:65: 32:26:49:dd:c4:87:54:2a:8c:05:8f:a4:e5:3f:9c: ba:f3:98:4b:df:e0:18:96:21:0d:5d:1f:fc:56:d5: 4f:96:9c:2f:2f:fc:42:18:c2:f8:7e:bf:1e:8a:3a: 8a:23:e3:7e:f4:be:c1:d3:90:d6:97:2f:56:a2:be: 54:65:66:62:ae:d8:ff:c0:ad:c9:c4:1c:b8:83:82: 48:cf:aa:65:a7:d4:ee:0d:30:91:90:90:d1:d3:98: 84:91:3e:7d:a0:33:bb:6d:90:ce:81:79:cd:51:21: fd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B8:7A:82:F0:38:C9:79:14:7E:8E:BA:E1:3F:8E:07:14:CC:BC:B0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f453c42-9e01-4343-9d00-659e79e057bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.201.0.0/19 Signature Algorithm: sha256WithRSAEncryption b1:5e:c9:e3:c3:1a:fe:ec:f9:10:35:fe:82:27:fe:0e:f2:bf: 42:55:c9:4d:f4:89:3f:ea:02:18:9e:0d:01:53:5f:97:6c:95: 58:a1:1d:51:dd:15:8d:34:a2:b6:a2:e2:93:a4:dd:2e:c5:bc: 5e:92:5c:bc:80:84:24:7c:f7:c0:ed:5d:da:c3:0c:cf:5b:08: c2:9c:8b:9a:22:2d:50:cf:f9:36:42:38:53:fd:0e:c4:24:d6: 04:4e:78:4e:53:78:61:7d:17:c8:b6:da:9f:a2:52:41:84:52: d6:b8:ed:3c:51:ec:c6:dc:4f:c8:24:de:58:94:b3:d9:e7:fd: 69:84:2c:c2:8e:c8:4d:34:80:2f:0e:eb:ad:64:b1:91:7b:4e: 91:f6:80:df:65:68:4e:2f:b4:e3:76:fb:22:81:6b:d8:1f:29: fc:d4:aa:cf:35:91:a3:25:27:af:f5:18:1b:1c:33:e1:1f:f2: 35:43:0e:5b:af:40:14:86:90:d1:f0:7f:50:d1:06:82:18:f9: 2f:9e:0b:f3:ee:27:43:37:ee:e0:95:72:df:78:e2:44:91:1e: 3b:48:a1:d2:97:cb:75:65:79:c5:11:e3:8d:25:0c:cc:0f:6a: 99:f6:84:56:0b:6a:a5:f1:4f:74:9b:85:59:65:47:27:00:fb: 5c:0e:10:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ7q4R2qXnXZ3TFl1TC1jV38I8nEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE1MDAxMTEzWhcNMjYwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDQ4MjlkMGM4ZmUzZmRkYmJlMzdmNmFiMDQ1ZGE2MDEy OTgxMTA0N2MwZmYwMTcyNGM1Y2Y5OThkMDg2MDI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiVC4qjc+0/GvyiJSkGdHCSiiqiG2QI5FkZKg0huD+QHJM x823rla3I+790M0MIbbFmPTIheR1kDYl9XMcYjT4Kf+BLYrpIXRta/LcWHlNj4z3 sPRxMD5REjWDNgwPXYGZy1TfKZglMrlw/ICwDtCu0E5+LVlfpdniPXJsUTj9upm6 879WRDawCSq0UfQfRTYMDj27ZTImSd3Eh1QqjAWPpOU/nLrzmEvf4BiWIQ1dH/xW 1U+WnC8v/EIYwvh+vx6KOooj4370vsHTkNaXL1aivlRlZmKu2P/ArcnEHLiDgkjP qmWn1O4NMJGQkNHTmISRPn2gM7ttkM6Bec1RIf0nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU37h6gvA4yXkUfo664T+OBxTMvLAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBmNDUzYzQyLTllMDEtNDM0My05ZDAwLTY1OWU3OWUwNTdiYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVAyQAwDQYJKoZIhvcNAQELBQADggEBALFeyePDGv7s+RA1/oIn/g7yv0JV yU30iT/qAhieDQFTX5dslVihHVHdFY00orai4pOk3S7FvF6SXLyAhCR898DtXdrD DM9bCMKci5oiLVDP+TZCOFP9DsQk1gROeE5TeGF9F8i22p+iUkGEUta47TxR7Mbc T8gk3liUs9nn/WmELMKOyE00gC8O661ksZF7TpH2gN9laE4vtON2+yKBa9gfKfzU qs81kaMlJ6/1GBscM+Ef8jVDDluvQBSGkNHwf1DRBoIY+S+eC/PuJ0M37uCVct94 4kSRHjtIodKXy3VlecUR440lDMwPapn2hFYLaqXxT3SbhVllRycA+1wOEAo= -----END CERTIFICATE-----Generated at Sun Mar 1 22:23:38 2026 by rpki-client