$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/171a8b54-dde7-4dd4-8e61-d987c2870176.roa File: 171a8b54-dde7-4dd4-8e61-d987c2870176.roa (raw, json) Hash identifier: hxGWB8BWM/U1DIxSRJLl2P11pHzFHk2U8eazNjsWchg= Subject key identifier: 87:49:FF:55:81:27:2E:EA:27:99:7D:AB:72:67:87:A5:0F:D6:CD:56 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 132383DF0D922D0631892EA94F6E5E31126C38E3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/171a8b54-dde7-4dd4-8e61-d987c2870176.roa Signing time: Wed 18 Feb 2026 00:21:35 +0000 ROA not before: Wed 18 Feb 2026 00:21:35 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 69.0.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:23:83:df:0d:92:2d:06:31:89:2e:a9:4f:6e:5e:31:12:6c:38:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 18 00:21:35 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=2c43ff1e7f3001e20daa258eb5de3483e938a494e46f6e6cdf55143ee40f5975, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:ae:c2:cd:87:29:96:0f:a7:1c:92:9d:db: 2d:ec:fc:76:9a:ce:00:8d:4b:80:44:ef:c7:77:23: 75:e4:ee:40:cd:ab:12:ad:11:8f:a7:5a:5a:b0:2d: 67:17:04:7b:e9:67:d5:cb:b1:18:1e:a7:7a:a1:f6: a9:3e:3e:cb:cb:d1:a2:64:df:12:58:4f:6e:80:c6: a2:80:af:ad:25:34:fa:d4:20:b0:3c:cf:c4:c2:0b: 1c:b5:3e:11:20:d2:7d:52:0e:5c:4d:54:82:42:e1: 1f:a6:c1:db:de:51:0f:eb:6b:76:0a:22:2b:17:28: ae:bc:11:23:8a:33:d5:03:5d:06:4b:06:6b:fc:b4: 0d:16:d7:1c:73:a5:8e:18:f9:95:30:2d:4a:b8:42: 5e:f3:25:e1:27:27:17:e4:93:49:d2:ba:4b:ca:f4: df:03:4c:44:8b:29:b4:e8:a4:94:83:c0:be:2d:e7: 58:25:03:9f:52:4b:56:d8:1f:61:d0:41:48:fc:7c: db:d1:dd:24:7f:0f:25:b0:14:18:3b:45:e5:6b:d2: 15:b6:7c:59:23:bd:fc:cd:4b:d5:3f:c6:2c:df:1b: 53:b9:51:06:b4:80:7f:56:4b:38:f9:58:0b:44:63: cd:b4:91:ed:59:c2:60:68:ed:ad:3c:0c:ee:d4:91: d8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:49:FF:55:81:27:2E:EA:27:99:7D:AB:72:67:87:A5:0F:D6:CD:56 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/171a8b54-dde7-4dd4-8e61-d987c2870176.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.0.224.0/20 Signature Algorithm: sha256WithRSAEncryption aa:94:ab:e3:41:57:c7:3f:3d:f2:db:c9:1b:01:66:2b:16:ff: 60:9a:ae:4d:b8:8d:98:20:46:44:ef:22:0a:ed:16:95:75:e8: 43:fb:19:a3:2a:6c:25:6e:0e:e6:1c:35:cc:8f:a0:76:44:ea: a3:72:32:b4:a3:7b:44:e8:0a:a3:c8:44:97:bb:35:a9:d6:9b: 57:72:b6:2e:06:70:15:5f:d0:2b:1c:2c:9d:1a:68:49:56:18: 45:7d:5d:05:42:96:4c:b6:17:58:dd:3b:6d:0a:4d:90:83:50: a5:94:cf:2e:4b:c2:3c:d1:7b:77:d7:30:3f:fb:b1:1b:a3:04: 01:eb:03:a4:67:fc:7e:9c:31:26:e5:7d:19:70:ef:76:82:76: 65:26:9b:08:64:bc:d3:af:8d:c5:9d:6d:73:8f:67:9a:35:7f: 4c:7b:ff:91:0e:4b:54:ae:fe:30:e3:01:fd:42:90:b9:86:84: 60:58:b0:6d:ae:4c:f8:6a:37:f9:88:96:2a:e0:32:68:42:e1: bc:a7:ac:09:93:f7:37:8e:65:19:0f:98:63:af:20:60:ac:f5: 06:c1:12:40:fb:96:0d:b6:d0:9d:e0:c0:00:8f:7d:63:73:28: a9:82:99:0e:08:5a:35:dd:47:f3:c6:ab:e7:07:d2:76:3a:eb: 6b:06:be:02 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEyOD3w2SLQYxiS6pT25eMRJsOOMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE4MDAyMTM1WhcNMjYwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYzQzZmYxZTdmMzAwMWUyMGRhYTI1OGViNWRlMzQ4M2U5 MzhhNDk0ZTQ2ZjZlNmNkZjU1MTQzZWU0MGY1OTc1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0nq7CzYcplg+nHJKd2y3s/HaazgCNS4BE78d3I3Xk7kDN qxKtEY+nWlqwLWcXBHvpZ9XLsRgep3qh9qk+PsvL0aJk3xJYT26AxqKAr60lNPrU ILA8z8TCCxy1PhEg0n1SDlxNVIJC4R+mwdveUQ/ra3YKIisXKK68ESOKM9UDXQZL Bmv8tA0W1xxzpY4Y+ZUwLUq4Ql7zJeEnJxfkk0nSukvK9N8DTESLKbTopJSDwL4t 51glA59SS1bYH2HQQUj8fNvR3SR/DyWwFBg7ReVr0hW2fFkjvfzNS9U/xizfG1O5 UQa0gH9WSzj5WAtEY820ke1ZwmBo7a08DO7UkdifAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUh0n/VYEnLuonmX2rcmeHpQ/WzVYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE3MWE4YjU0LWRkZTctNGRkNC04ZTYxLWQ5ODdjMjg3MDE3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARFAOAwDQYJKoZIhvcNAQELBQADggEBAKqUq+NBV8c/PfLbyRsBZisW/2Ca rk24jZggRkTvIgrtFpV16EP7GaMqbCVuDuYcNcyPoHZE6qNyMrSje0ToCqPIRJe7 NanWm1dyti4GcBVf0CscLJ0aaElWGEV9XQVClky2F1jdO20KTZCDUKWUzy5LwjzR e3fXMD/7sRujBAHrA6Rn/H6cMSblfRlw73aCdmUmmwhkvNOvjcWdbXOPZ5o1f0x7 /5EOS1Su/jDjAf1CkLmGhGBYsG2uTPhqN/mIlirgMmhC4bynrAmT9zeOZRkPmGOv IGCs9QbBEkD7lg220J3gwACPfWNzKKmCmQ4IWjXdR/PGq+cH0nY662sGvgI= -----END CERTIFICATE-----Generated at Mon Mar 2 04:55:05 2026 by rpki-client