$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16db1f58-f0a9-4753-8e7d-67d34cc02fbd.roa File: 16db1f58-f0a9-4753-8e7d-67d34cc02fbd.roa (raw, json) Hash identifier: ZGH0iy+AKbGArQA2nZ4maSsK00In/JsupLJkvqaLh6U= Subject key identifier: 6C:8D:38:3B:DF:B2:B9:B6:CD:83:91:2E:8C:89:AD:F2:C9:6F:32:AD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1E30B8460CAAF4FA08DC565BC4FFFD8127684B72 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16db1f58-f0a9-4753-8e7d-67d34cc02fbd.roa Signing time: Sat 21 Feb 2026 01:40:35 +0000 ROA not before: Sat 21 Feb 2026 01:40:35 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:30:b8:46:0c:aa:f4:fa:08:dc:56:5b:c4:ff:fd:81:27:68:4b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:40:35 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=95a2979a0021a863a1655fe3ed8f0e96c0dd64bfa9de6e6b9a186214c190442e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:50:08:a1:c5:07:65:27:62:4f:32:00:bf:92: 56:43:b7:34:30:8e:8b:ef:bb:34:bb:6c:1e:54:c2: 16:f9:52:b7:10:4f:ae:00:52:5f:76:e1:fe:e6:ec: d5:6f:1c:e7:3e:35:fe:9d:f1:ea:13:f7:73:35:fa: b5:20:39:bd:c7:77:e5:cf:90:ab:04:33:ae:4a:b8: 46:33:4b:06:a1:f1:6c:21:37:78:f0:4a:34:db:b7: a9:c0:ad:5f:50:3f:5e:06:1a:8a:24:c9:b1:e6:4d: 51:ca:26:de:35:c6:7f:b3:7d:d0:27:e7:0a:92:64: 03:30:f1:b8:5c:1d:cd:f5:db:ab:f6:42:86:89:49: 98:74:43:55:06:d5:d3:3d:9d:f4:99:ab:7a:cb:13: da:32:05:e6:eb:ad:47:b4:08:c1:29:f7:42:99:8b: d5:48:c2:11:5f:78:3f:ba:3c:ce:08:6a:0b:96:41: 02:0e:6d:3b:4f:2b:89:a6:e3:d4:4b:b9:f8:48:35: fd:e4:71:5a:67:03:8d:05:9e:a0:51:bb:e1:ae:81: ef:c7:9b:f3:cf:4a:f3:7c:d1:48:5c:12:99:c1:1c: ec:cc:86:5b:fb:3a:f2:10:19:8c:e8:51:61:a8:3d: 8b:3a:b5:cb:03:35:46:b0:b8:66:ac:a5:dd:85:d0: 41:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8D:38:3B:DF:B2:B9:B6:CD:83:91:2E:8C:89:AD:F2:C9:6F:32:AD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16db1f58-f0a9-4753-8e7d-67d34cc02fbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.110.0/24 Signature Algorithm: sha256WithRSAEncryption 67:6a:c2:53:21:90:ff:af:fc:73:6c:ee:02:17:47:d8:25:39: a4:d4:ef:af:50:9c:71:86:4a:b6:0f:6d:57:f3:d7:85:04:cd: 8e:c0:94:63:7c:7d:28:06:da:b2:1e:64:52:90:c1:80:8c:ab: 9b:94:58:e1:d3:2a:6e:de:e9:12:85:ad:e8:7a:40:a3:dd:e4: 0a:7c:37:f4:68:b5:b2:34:1d:f4:79:03:1d:53:75:44:05:14: 07:fd:70:78:32:08:b7:3b:2a:ec:42:c1:b3:1b:ba:ed:1d:6f: fd:97:6a:f7:89:21:eb:34:e1:c5:51:4c:88:3f:6a:00:d9:2d: ae:e2:b6:13:57:20:d2:5d:3a:1e:2b:a7:1b:d4:c9:50:6d:f4: bb:66:f7:51:6f:4f:38:e3:59:b7:aa:38:8e:c4:cc:c1:3a:f4: 2b:4a:88:65:41:00:07:b2:98:16:3a:46:16:96:5c:35:2e:a5: 40:95:15:2e:b2:b7:ee:ab:59:99:c3:73:20:e0:36:d8:a3:75: cf:a7:46:b0:83:93:02:15:43:d7:96:f6:f7:3a:1a:4d:26:ad: 02:79:a2:0d:59:ca:cb:39:97:a5:a6:4e:ae:46:b0:e8:e9:f6: ba:0d:a2:c7:1c:5b:88:47:2a:2d:61:2a:36:ab:2b:da:6c:54: 7e:17:9e:5f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHjC4Rgyq9PoI3FZbxP/9gSdoS3IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDE0MDM1WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NWEyOTc5YTAwMjFhODYzYTE2NTVmZTNlZDhmMGU5NmMw ZGQ2NGJmYTlkZTZlNmI5YTE4NjIxNGMxOTA0NDJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpUAihxQdlJ2JPMgC/klZDtzQwjovvuzS7bB5Uwhb5UrcQ T64AUl924f7m7NVvHOc+Nf6d8eoT93M1+rUgOb3Hd+XPkKsEM65KuEYzSwah8Wwh N3jwSjTbt6nArV9QP14GGookybHmTVHKJt41xn+zfdAn5wqSZAMw8bhcHc3126v2 QoaJSZh0Q1UG1dM9nfSZq3rLE9oyBebrrUe0CMEp90KZi9VIwhFfeD+6PM4IaguW QQIObTtPK4mm49RLufhINf3kcVpnA40FnqBRu+Guge/Hm/PPSvN80UhcEpnBHOzM hlv7OvIQGYzoUWGoPYs6tcsDNUawuGaspd2F0EGrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbI04O9+yubbNg5EujImt8slvMq0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE2ZGIxZjU4LWYwYTktNDc1My04ZTdkLTY3ZDM0Y2MwMmZiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmG4wDQYJKoZIhvcNAQELBQADggEBAGdqwlMhkP+v/HNs7gIXR9glOaTU 769QnHGGSrYPbVfz14UEzY7AlGN8fSgG2rIeZFKQwYCMq5uUWOHTKm7e6RKFreh6 QKPd5Ap8N/RotbI0HfR5Ax1TdUQFFAf9cHgyCLc7KuxCwbMbuu0db/2XaveJIes0 4cVRTIg/agDZLa7ithNXINJdOh4rpxvUyVBt9Ltm91FvTzjjWbeqOI7EzME69CtK iGVBAAeymBY6RhaWXDUupUCVFS6yt+6rWZnDcyDgNtijdc+nRrCDkwIVQ9eW9vc6 Gk0mrQJ5og1Zyss5l6WmTq5GsOjp9roNosccW4hHKi1hKjarK9psVH4Xnl8= -----END CERTIFICATE-----Generated at Mon Mar 2 06:35:36 2026 by rpki-client