$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/227bf4de-3fe9-4706-9a15-6810d1cb02f8.roa File: 227bf4de-3fe9-4706-9a15-6810d1cb02f8.roa (raw, json) Hash identifier: qQiZicuUhryl+iKZAd2fB4C9gP0z2siA3IPJFTi3cf8= Subject key identifier: 33:D1:A1:8E:6B:5C:95:37:A1:7E:F3:08:AE:71:7F:59:3E:9E:F6:C0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 614409A671A49DE5C4133B175D6D522DA62C453A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/227bf4de-3fe9-4706-9a15-6810d1cb02f8.roa Signing time: Tue 24 Feb 2026 02:20:29 +0000 ROA not before: Tue 24 Feb 2026 02:20:29 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 161.193.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:44:09:a6:71:a4:9d:e5:c4:13:3b:17:5d:6d:52:2d:a6:2c:45:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 02:20:29 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=9a65399e08d5a7b2ff648ff1f31b23007b8cf671b0c5038939ffd7aae840f0f1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:67:ac:7d:55:32:31:75:73:37:94:53:04:9e: 45:55:d5:38:54:9b:6d:fa:bf:2d:a0:71:24:de:09: 6c:e9:af:5d:9d:fb:20:0a:04:95:23:bf:3c:8e:4c: 62:c3:03:b7:76:62:47:be:e7:80:5f:03:04:82:8e: ae:37:dc:c4:ac:93:50:bb:98:c7:23:b3:b0:e8:0f: b8:ad:2a:66:6b:70:8b:41:48:41:4e:bf:b2:6c:9b: ab:e3:2b:af:b4:c2:63:4c:39:94:09:13:37:20:71: e2:d7:8b:2b:12:1f:5f:0a:a5:03:bf:83:e8:46:62: e5:ed:b4:46:3d:40:91:29:d0:31:30:ca:b9:1f:fb: 3d:c9:77:b7:6e:0b:80:17:a0:71:9e:c3:c7:83:37: bb:72:be:60:5a:d1:4a:de:a5:dd:5b:25:c7:e4:2f: 79:ea:9f:ac:79:93:c1:82:4c:4f:76:20:a3:2a:ae: 87:71:1c:f6:5f:0c:1d:78:99:df:d8:a5:20:10:a6: 96:66:10:96:4c:d3:49:12:8f:9d:fe:a5:46:ea:2c: 10:91:1b:10:e8:96:36:4b:e5:00:2f:bf:a1:ff:04: fa:8a:c0:dd:9d:a3:08:55:11:6e:89:1d:26:9d:4d: dd:76:ab:40:62:4b:5e:40:16:30:39:23:c6:34:13: 9d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D1:A1:8E:6B:5C:95:37:A1:7E:F3:08:AE:71:7F:59:3E:9E:F6:C0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/227bf4de-3fe9-4706-9a15-6810d1cb02f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.193.128.0/18 Signature Algorithm: sha256WithRSAEncryption 85:c1:f3:bc:c6:d8:aa:69:46:3a:e3:89:6f:9a:aa:7b:9e:80: 63:2e:69:ca:da:bf:b2:7d:3b:03:de:42:68:99:97:c1:bf:7c: 32:5d:c9:43:58:40:bb:3f:ce:38:68:f1:6e:fb:b9:c5:9b:79: da:95:64:5d:d1:87:a4:4b:cc:8b:07:31:24:23:f0:ec:d6:cc: 2c:88:99:b5:5b:4d:de:b0:cf:c0:65:51:59:15:69:0b:46:e9: 0f:32:9e:4d:1d:37:eb:a5:8b:c4:27:ce:ed:a5:2c:60:b7:9f: f8:12:01:2b:7a:e9:85:13:94:db:0e:71:20:2b:3a:d1:2f:6a: be:a4:60:1b:be:ce:d9:f9:6a:1a:d3:20:b4:8a:3d:f5:9c:4c: 51:57:07:98:53:e0:84:5f:ed:78:f4:2d:59:6a:dc:eb:69:ec: f6:9e:d8:71:95:dd:9a:73:86:f0:28:19:33:91:7a:df:9c:78: 03:18:29:dc:d1:b7:f6:2d:3a:4f:0f:e3:e3:f5:26:c8:80:18: 3b:49:84:32:61:7a:90:5d:d7:f8:35:fd:98:8c:90:e5:6b:bb: 13:a4:61:db:74:6e:cb:a1:26:fa:54:7c:21:0e:69:82:a4:74: 11:27:10:10:b7:2a:f4:63:07:c8:0e:2a:c2:98:ca:12:95:d1: 15:49:3b:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYUQJpnGkneXEEzsXXW1SLaYsRTowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDIyMDI5WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTY1Mzk5ZTA4ZDVhN2IyZmY2NDhmZjFmMzFiMjMwMDdi OGNmNjcxYjBjNTAzODkzOWZmZDdhYWU4NDBmMGYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvZ6x9VTIxdXM3lFMEnkVV1ThUm236vy2gcSTeCWzpr12d +yAKBJUjvzyOTGLDA7d2Yke+54BfAwSCjq433MSsk1C7mMcjs7DoD7itKmZrcItB SEFOv7Jsm6vjK6+0wmNMOZQJEzcgceLXiysSH18KpQO/g+hGYuXttEY9QJEp0DEw yrkf+z3Jd7duC4AXoHGew8eDN7tyvmBa0Urepd1bJcfkL3nqn6x5k8GCTE92IKMq rodxHPZfDB14md/YpSAQppZmEJZM00kSj53+pUbqLBCRGxDoljZL5QAvv6H/BPqK wN2dowhVEW6JHSadTd12q0BiS15AFjA5I8Y0E533AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUM9GhjmtclTehfvMIrnF/WT6e9sAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyN2JmNGRlLTNmZTktNDcwNi05YTE1LTY4MTBkMWNiMDJmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAahwYAwDQYJKoZIhvcNAQELBQADggEBAIXB87zG2KppRjrjiW+aqnuegGMu acrav7J9OwPeQmiZl8G/fDJdyUNYQLs/zjho8W77ucWbedqVZF3Rh6RLzIsHMSQj 8OzWzCyImbVbTd6wz8BlUVkVaQtG6Q8ynk0dN+uli8Qnzu2lLGC3n/gSASt66YUT lNsOcSArOtEvar6kYBu+ztn5ahrTILSKPfWcTFFXB5hT4IRf7Xj0LVlq3Otp7Pae 2HGV3ZpzhvAoGTORet+ceAMYKdzRt/YtOk8P4+P1JsiAGDtJhDJhepBd1/g1/ZiM kOVruxOkYdt0bsuhJvpUfCEOaYKkdBEnEBC3KvRjB8gOKsKYyhKV0RVJO3g= -----END CERTIFICATE-----Generated at Mon Mar 2 04:56:39 2026 by rpki-client