$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c1e2604-6355-4061-8e4d-164d58041afe.roa File: 1c1e2604-6355-4061-8e4d-164d58041afe.roa (raw, json) Hash identifier: mJiFzrFDGzjYZ8pRmuBqhInNuVVCbHGTrTC3gOpu5wc= Subject key identifier: 6A:1A:4E:20:F5:44:0F:56:27:AF:DC:D2:40:50:E9:B8:16:61:68:D5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 562E8D48E8004123DFF9DB4340C7FFFDC8D57B2E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c1e2604-6355-4061-8e4d-164d58041afe.roa Signing time: Sun 08 Feb 2026 00:20:42 +0000 ROA not before: Sun 08 Feb 2026 00:20:42 +0000 ROA not after: Sat 09 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 66.219.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:2e:8d:48:e8:00:41:23:df:f9:db:43:40:c7:ff:fd:c8:d5:7b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 8 00:20:42 2026 GMT Not After : May 9 23:59:59 2026 GMT Subject: serialNumber=da5b40b6869edd230f01c8a5cde3d13c9ead90e747bfe82560f8855556f10f62, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b3:f8:a5:95:d1:de:e0:d0:ad:88:b3:d4:f3: 9d:4a:d6:31:25:05:45:c1:ef:ae:0b:fa:db:2c:6e: 01:d1:60:71:01:1f:31:fd:58:a4:d9:80:43:af:05: 05:21:14:cc:08:fc:c9:8d:92:ae:63:f0:57:1e:ad: a9:d2:2c:d1:53:e7:b9:20:6d:ba:2f:08:99:4e:e0: 4c:0d:d0:ff:8a:b6:49:43:11:c9:73:a9:16:75:51: 03:b9:31:3a:e1:5b:22:26:fa:2b:3b:7c:15:a9:a6: 40:71:43:c3:86:3b:34:8a:68:9b:9e:f9:81:f5:32: a5:31:44:39:00:27:39:dc:40:ed:a8:d5:8f:3a:58: 8f:04:7e:9f:b9:fb:40:b5:e4:f9:6f:8f:53:10:1c: b1:ff:94:76:23:0d:e5:75:8b:4e:59:cd:31:f9:95: 61:b8:24:fd:6d:5e:68:82:7a:45:cf:b5:ac:79:dc: ae:94:f2:56:a3:be:66:c4:28:92:c4:2c:4f:ca:dd: 5b:1f:df:09:51:e8:29:7c:0e:a1:da:77:47:86:bc: ed:ef:cd:54:74:29:81:f7:89:20:93:a7:61:e4:35: 43:d9:c9:c5:97:19:52:af:9f:b7:a1:18:ea:82:17: f0:61:68:bb:eb:64:bd:ae:da:99:ab:d1:73:8d:c6: 65:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:1A:4E:20:F5:44:0F:56:27:AF:DC:D2:40:50:E9:B8:16:61:68:D5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c1e2604-6355-4061-8e4d-164d58041afe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.219.64.0/19 Signature Algorithm: sha256WithRSAEncryption 97:f9:9a:ba:c3:c1:77:34:34:3b:c3:79:52:e2:2a:76:71:14: f5:6b:7a:a1:ed:48:b0:22:94:23:6d:9c:60:96:03:a8:85:8a: b8:91:79:90:26:a0:4a:4e:c4:bb:70:a3:e1:e9:09:bc:60:9a: f5:f1:b3:d0:c2:b0:b3:32:ef:c5:24:33:53:57:07:da:a8:89: 7c:0a:c6:49:7b:65:8e:91:dd:35:07:c9:44:04:f8:7e:1a:1c: 67:86:da:e3:ea:e1:af:09:77:36:e3:b9:8b:5f:bc:f6:f9:4a: ac:79:ae:92:b1:18:b1:43:8a:76:44:d5:dc:e1:d7:d2:5c:ca: 52:a4:23:82:7d:71:18:41:b7:19:91:1a:d5:15:b2:b8:3c:61: ef:fc:7b:99:cf:03:cd:8d:e2:c3:af:a7:52:c0:8c:b4:1a:f6: 60:69:82:54:61:e7:01:59:8a:fa:32:7f:0e:bc:f6:4a:4e:98: f9:8f:58:9f:4e:b9:24:08:00:8b:28:e7:7b:ee:99:ce:d8:f3: 30:7e:eb:13:12:4f:55:f7:f1:5e:64:6c:89:a4:95:12:63:37: 5e:ec:ee:3c:d7:ee:9c:76:13:50:f3:ad:80:ce:99:44:99:83: 3d:21:4a:22:fc:ce:63:50:38:1d:df:02:0f:fc:2f:d5:3b:45: 07:99:b3:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVi6NSOgAQSPf+dtDQMf//cjVey4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA4MDAyMDQyWhcNMjYwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTViNDBiNjg2OWVkZDIzMGYwMWM4YTVjZGUzZDEzYzll YWQ5MGU3NDdiZmU4MjU2MGY4ODU1NTU2ZjEwZjYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCDs/illdHe4NCtiLPU851K1jElBUXB764L+tssbgHRYHEB HzH9WKTZgEOvBQUhFMwI/MmNkq5j8FceranSLNFT57kgbbovCJlO4EwN0P+KtklD EclzqRZ1UQO5MTrhWyIm+is7fBWppkBxQ8OGOzSKaJue+YH1MqUxRDkAJzncQO2o 1Y86WI8Efp+5+0C15Plvj1MQHLH/lHYjDeV1i05ZzTH5lWG4JP1tXmiCekXPtax5 3K6U8lajvmbEKJLELE/K3Vsf3wlR6Cl8DqHad0eGvO3vzVR0KYH3iSCTp2HkNUPZ ycWXGVKvn7ehGOqCF/BhaLvrZL2u2pmr0XONxmVNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUahpOIPVED1Ynr9zSQFDpuBZhaNUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFjMWUyNjA0LTYzNTUtNDA2MS04ZTRkLTE2NGQ1ODA0MWFmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVC20AwDQYJKoZIhvcNAQELBQADggEBAJf5mrrDwXc0NDvDeVLiKnZxFPVr eqHtSLAilCNtnGCWA6iFiriReZAmoEpOxLtwo+HpCbxgmvXxs9DCsLMy78UkM1NX B9qoiXwKxkl7ZY6R3TUHyUQE+H4aHGeG2uPq4a8JdzbjuYtfvPb5Sqx5rpKxGLFD inZE1dzh19JcylKkI4J9cRhBtxmRGtUVsrg8Ye/8e5nPA82N4sOvp1LAjLQa9mBp glRh5wFZivoyfw689kpOmPmPWJ9OuSQIAIso53vumc7Y8zB+6xMST1X38V5kbImk lRJjN17s7jzX7px2E1DzrYDOmUSZgz0hSiL8zmNQOB3fAg/8L9U7RQeZs3g= -----END CERTIFICATE-----Generated at Sun Mar 1 22:31:14 2026 by rpki-client