$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2300825a-8820-45a1-837c-e7e6b3f0eca5.roa File: 2300825a-8820-45a1-837c-e7e6b3f0eca5.roa (raw, json) Hash identifier: LbhjaNuY746mS+zBDWBztc0ZireHxow/IolWVCm512w= Subject key identifier: 3F:C4:C0:8D:6A:4D:08:0D:4A:02:B6:86:0E:F8:AD:68:4B:C3:72:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B1197F9C8C731BEDB7D3A8AF89774C461FD304B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2300825a-8820-45a1-837c-e7e6b3f0eca5.roa Signing time: Wed 25 Feb 2026 02:40:48 +0000 ROA not before: Wed 25 Feb 2026 02:40:48 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 1.179.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:11:97:f9:c8:c7:31:be:db:7d:3a:8a:f8:97:74:c4:61:fd:30:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 02:40:48 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=d9e5b6227e4ec9f29088c43fac03a5de1eb38f6fdbd018d3f4aad32bcce47a55, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e2:a6:69:06:34:0b:2a:86:03:e5:b0:da:af: 56:52:26:ef:28:a1:52:16:f1:a7:aa:21:53:68:bf: 3a:4e:07:74:82:2c:59:59:1d:69:03:60:1d:78:57: 5f:3a:a0:46:8d:50:83:73:73:8e:86:5d:5a:8b:03: 58:ae:76:9a:25:75:28:12:9e:7f:b3:eb:cb:3f:31: 01:1e:7f:b4:0c:04:8a:62:a3:e4:15:cf:10:d6:2f: 4f:e7:15:d3:33:4d:1b:76:2e:5f:1f:2e:54:fd:ec: f9:46:58:41:b9:d0:b0:41:ea:c8:3a:df:a0:71:ce: 6e:35:b3:3a:63:8e:d1:6f:ef:1e:3c:8b:57:ca:6e: b7:cb:9a:5c:d7:38:4d:b4:6a:d0:ec:24:a5:6e:20: 80:4b:6f:be:18:89:b3:d8:de:18:0d:7d:7a:d1:47: e9:06:e2:08:4b:f2:63:0d:c7:a6:54:66:73:d8:4f: 2d:15:2c:c9:7f:32:50:92:09:d8:e3:63:d7:74:29: 8b:cd:1d:03:71:9c:e2:5a:b0:56:5b:5b:38:e1:64: 19:a9:d4:d2:95:98:df:41:1e:05:81:c1:d0:f7:4d: e5:c8:54:d0:ef:b6:2d:21:f9:86:c0:1b:28:6c:7a: 9b:18:e5:ec:0e:94:bf:5a:42:66:43:67:0c:91:d7: 29:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C4:C0:8D:6A:4D:08:0D:4A:02:B6:86:0E:F8:AD:68:4B:C3:72:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2300825a-8820-45a1-837c-e7e6b3f0eca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.179.2.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:25:d4:f9:0e:c0:84:30:46:18:6d:52:e6:a8:03:24:e4:10: a1:45:7d:a5:cf:2c:49:81:cf:56:c8:4a:ab:c0:0a:7e:ff:41: b0:a1:92:ee:9a:df:c6:f4:02:ff:1c:83:b9:97:ae:59:ab:fc: 18:a3:f5:47:bd:dc:71:88:78:dc:d8:ba:97:3a:3b:55:0b:39: 44:2b:5d:6f:ef:72:25:ab:7a:43:26:85:db:ed:43:76:a9:23: 0f:0f:f7:aa:87:72:74:04:20:77:36:a8:8c:06:ce:7c:76:f2: e6:60:40:7f:7e:4b:c7:a7:9b:b1:10:66:9a:f0:14:25:c8:46: 14:99:86:ed:90:87:8a:52:fa:d2:aa:31:36:fb:e5:3b:0e:fe: f3:79:fa:f9:61:93:56:52:00:70:e6:cd:42:40:d5:25:9b:0c: ff:83:ab:87:38:b7:80:46:89:07:2c:9b:c6:6e:2c:e1:79:8f: d9:a6:a5:ed:2a:8f:97:a6:46:08:f6:9a:c3:ad:40:57:00:d5: b8:9b:76:45:34:75:5d:ba:1c:68:84:7b:b7:6a:2a:58:f6:60: 4f:7d:2d:17:d6:b8:f4:80:80:9f:d3:cf:0a:e4:3d:2d:db:3e: 9d:11:b1:67:05:45:ea:dd:95:ae:0c:27:d8:d5:7b:47:94:3c: 33:6d:4d:c7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWxGX+cjHMb7bfTqK+Jd0xGH9MEswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDI0MDQ4WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOWU1YjYyMjdlNGVjOWYyOTA4OGM0M2ZhYzAzYTVkZTFl YjM4ZjZmZGJkMDE4ZDNmNGFhZDMyYmNjZTQ3YTU1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCO4qZpBjQLKoYD5bDar1ZSJu8ooVIW8aeqIVNovzpOB3SC LFlZHWkDYB14V186oEaNUINzc46GXVqLA1iudpoldSgSnn+z68s/MQEef7QMBIpi o+QVzxDWL0/nFdMzTRt2Ll8fLlT97PlGWEG50LBB6sg636Bxzm41szpjjtFv7x48 i1fKbrfLmlzXOE20atDsJKVuIIBLb74YibPY3hgNfXrRR+kG4ghL8mMNx6ZUZnPY Ty0VLMl/MlCSCdjjY9d0KYvNHQNxnOJasFZbWzjhZBmp1NKVmN9BHgWBwdD3TeXI VNDvti0h+YbAGyhsepsY5ewOlL9aQmZDZwyR1yk/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUP8TAjWpNCA1KAraGDvitaEvDcpEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzMDA4MjVhLTg4MjAtNDVhMS04MzdjLWU3ZTZiM2YwZWNhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBswIwDQYJKoZIhvcNAQELBQADggEBAJwl1PkOwIQwRhhtUuaoAyTkEKFF faXPLEmBz1bISqvACn7/QbChku6a38b0Av8cg7mXrlmr/Bij9Ue93HGIeNzYupc6 O1ULOUQrXW/vciWrekMmhdvtQ3apIw8P96qHcnQEIHc2qIwGznx28uZgQH9+S8en m7EQZprwFCXIRhSZhu2Qh4pS+tKqMTb75TsO/vN5+vlhk1ZSAHDmzUJA1SWbDP+D q4c4t4BGiQcsm8ZuLOF5j9mmpe0qj5emRgj2msOtQFcA1bibdkU0dV26HGiEe7dq Klj2YE99LRfWuPSAgJ/TzwrkPS3bPp0RsWcFRerdla4MJ9jVe0eUPDNtTcc= -----END CERTIFICATE-----Generated at Mon Mar 2 00:08:50 2026 by rpki-client