$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/215d8cb7-951d-429e-8cf5-ecc8f30c3e2e.roa File: 215d8cb7-951d-429e-8cf5-ecc8f30c3e2e.roa (raw, json) Hash identifier: XiZEEo4oazOFTZ77XlEju+9emgqZvdz6zn8WnmN1hxM= Subject key identifier: BE:4B:9C:06:53:19:33:15:33:DD:5F:CB:47:12:BC:AB:8B:AF:FE:82 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4F2B8859574801F1DC24AB204F21213631EFE8F5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/215d8cb7-951d-429e-8cf5-ecc8f30c3e2e.roa Signing time: Tue 24 Feb 2026 00:30:58 +0000 ROA not before: Tue 24 Feb 2026 00:30:58 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.26.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:2b:88:59:57:48:01:f1:dc:24:ab:20:4f:21:21:36:31:ef:e8:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 00:30:58 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=33c2cfc879983460101232d7d1b5b96955af5d1ff254294af8f7571acf5ba41a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:66:38:94:63:8b:59:3d:63:b6:9f:a4:a0:1a: be:16:ae:ca:64:e5:96:d2:aa:d7:58:cb:5c:07:e2: 8d:68:7f:2c:c3:b0:47:34:82:01:db:19:af:07:97: 28:8c:8b:7a:6a:bc:b4:55:99:ae:2f:3a:ee:44:9d: a1:ce:67:cc:b3:82:27:f3:55:cc:05:2a:d7:0c:08: 22:0d:8f:4f:fc:fc:8a:28:8c:a2:70:bf:bf:3c:70: ed:a5:48:2a:77:b9:14:34:bd:83:be:5d:7e:6c:d9: 4e:af:83:87:5f:2a:52:1b:02:e6:5d:8c:0c:5d:ed: a2:a7:43:0f:a8:80:17:a7:c7:0c:66:17:38:03:39: b2:fc:79:fc:f9:b9:6b:4e:9d:40:11:4f:b6:00:1b: 48:ac:c9:35:46:da:ec:c1:a2:bd:da:cf:4b:b4:8b: d2:de:5f:fe:fb:ec:30:68:0f:fe:22:b6:e5:15:7c: 75:97:67:6b:be:87:9a:fe:89:4c:63:f0:1c:16:f4: 73:fa:75:95:c1:fa:87:9c:1f:31:5e:e2:16:70:11: be:dc:60:70:55:56:ea:56:9e:79:3b:88:70:5f:f9: 92:10:40:cf:9b:a2:08:70:3c:d0:94:3a:fc:21:ce: 5a:6c:1b:0c:b0:8d:ac:09:ac:39:98:90:ab:c9:00: f7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4B:9C:06:53:19:33:15:33:DD:5F:CB:47:12:BC:AB:8B:AF:FE:82 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/215d8cb7-951d-429e-8cf5-ecc8f30c3e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.26.0.0/16 Signature Algorithm: sha256WithRSAEncryption 40:56:38:f7:5c:b4:f4:67:c0:a9:74:2f:fb:a0:4b:a2:6d:6c: cb:02:01:84:71:4a:a4:1f:bc:bb:0a:99:43:4a:62:60:12:4a: 43:d0:b4:a5:6a:15:18:6f:d0:b2:b4:9e:f7:12:e7:6c:36:9a: 93:c6:40:d4:9a:55:a3:f7:1d:59:93:54:a3:55:3f:66:46:cb: 7b:ca:95:aa:8e:0b:99:66:c7:92:07:3e:c4:5c:0b:7e:b6:53: e6:dd:37:67:a9:da:b8:63:2c:d1:6c:03:25:79:76:52:3b:77: 9e:58:cd:a3:07:a5:db:65:34:a0:f8:d6:e3:d3:7e:aa:ac:b5: 32:65:ff:8e:f8:a9:ce:37:17:39:af:22:ce:83:53:48:2a:c6: ee:80:dd:69:9c:84:49:a8:16:71:81:72:3b:67:b9:84:78:15: a0:5d:7f:7b:a9:78:31:d3:f7:b4:aa:d2:0f:f3:2c:3c:f6:c8: be:f2:8c:67:ca:2a:b8:34:aa:2d:30:b0:9b:39:2c:a2:7d:01: 89:40:3b:0b:c3:46:26:8c:ae:22:53:1c:c4:47:56:9d:21:5b: 0f:61:3b:b9:39:f1:4a:8f:42:77:31:59:a2:d2:bb:c2:b6:b1: 7b:1e:a8:7a:28:7b:22:e5:e9:e4:81:46:19:18:f5:9b:9b:1f: 80:70:c6:25 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTyuIWVdIAfHcJKsgTyEhNjHv6PUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDAzMDU4WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzM2MyY2ZjODc5OTgzNDYwMTAxMjMyZDdkMWI1Yjk2OTU1 YWY1ZDFmZjI1NDI5NGFmOGY3NTcxYWNmNWJhNDFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcZjiUY4tZPWO2n6SgGr4Wrspk5ZbSqtdYy1wH4o1ofyzD sEc0ggHbGa8HlyiMi3pqvLRVma4vOu5EnaHOZ8yzgifzVcwFKtcMCCINj0/8/Ioo jKJwv788cO2lSCp3uRQ0vYO+XX5s2U6vg4dfKlIbAuZdjAxd7aKnQw+ogBenxwxm FzgDObL8efz5uWtOnUART7YAG0isyTVG2uzBor3az0u0i9LeX/777DBoD/4ituUV fHWXZ2u+h5r+iUxj8BwW9HP6dZXB+oecHzFe4hZwEb7cYHBVVupWnnk7iHBf+ZIQ QM+boghwPNCUOvwhzlpsGwywjawJrDmYkKvJAPeRAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUvkucBlMZMxUz3V/LRxK8q4uv/oIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIxNWQ4Y2I3LTk1MWQtNDI5ZS04Y2Y1LWVjYzhmMzBjM2UyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQGjANBgkqhkiG9w0BAQsFAAOCAQEAQFY491y09GfAqXQv+6BLom1sywIB hHFKpB+8uwqZQ0piYBJKQ9C0pWoVGG/QsrSe9xLnbDaak8ZA1JpVo/cdWZNUo1U/ ZkbLe8qVqo4LmWbHkgc+xFwLfrZT5t03Z6nauGMs0WwDJXl2Ujt3nljNowel22U0 oPjW49N+qqy1MmX/jvipzjcXOa8izoNTSCrG7oDdaZyESagWcYFyO2e5hHgVoF1/ e6l4MdP3tKrSD/MsPPbIvvKMZ8oquDSqLTCwmzkson0BiUA7C8NGJoyuIlMcxEdW nSFbD2E7uTnxSo9CdzFZotK7wraxex6oeih7IuXp5IFGGRj1m5sfgHDGJQ== -----END CERTIFICATE-----Generated at Sun Mar 1 23:48:45 2026 by rpki-client