$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27aff6e8-577a-42bb-8881-56b16bef8f81.roa File: 27aff6e8-577a-42bb-8881-56b16bef8f81.roa (raw, json) Hash identifier: w+J09kiU1oB2pl73Wr25c7E9lBrGm0JJ8Q2+dRwti4M= Subject key identifier: 79:10:AB:45:FE:56:4F:2A:BA:20:D8:F7:3B:C6:F9:5D:34:B4:1F:CF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 69E3739C1DFC45ED93ADCA96F5A831CD5693D808 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27aff6e8-577a-42bb-8881-56b16bef8f81.roa Signing time: Wed 25 Feb 2026 00:10:09 +0000 ROA not before: Wed 25 Feb 2026 00:10:09 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 40.164.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e3:73:9c:1d:fc:45:ed:93:ad:ca:96:f5:a8:31:cd:56:93:d8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 00:10:09 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=78741688ddea3b807a666b927ed87a171dbc073b8841be6afdac34d6e0b6fcca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:05:7f:f4:f8:30:a7:f9:eb:81:90:99:e5:df: 92:51:77:3b:e2:fb:a0:14:74:52:b8:59:20:26:84: 1e:f2:95:49:c0:b9:e9:c5:e3:52:72:90:27:3b:32: 12:18:9e:1f:96:2e:3d:8e:61:7f:4b:d2:01:a6:70: 7a:42:0a:09:42:28:f0:37:07:7c:06:35:17:57:0d: de:9c:8a:d6:d3:7c:15:b4:05:d3:74:23:d3:a7:9e: dc:9c:cd:5e:7a:0d:d2:1a:e4:14:4e:d2:82:b0:62: 40:0f:ae:71:58:3c:24:30:cd:28:ac:52:52:86:2a: 65:61:ef:73:06:39:43:bb:20:64:34:80:9a:44:52: 93:22:30:45:35:62:61:b3:b2:a2:e8:ee:61:81:3d: ca:2a:07:0b:8a:d1:22:06:8e:ec:71:36:a8:5a:64: f4:94:db:55:ed:b5:7a:56:51:ad:5c:40:9c:45:b0: f9:4d:0c:cd:13:8b:f3:4e:2a:19:bb:45:46:7d:ad: cf:cc:33:95:73:c1:b6:db:d2:e1:3a:2b:c8:98:4a: df:92:9b:eb:bf:8e:29:82:9b:12:73:00:18:06:42: 5b:97:15:d9:96:c2:4b:07:03:92:58:9e:6f:8f:14: 37:bc:f3:50:c1:ac:e8:ea:b2:cd:db:f1:08:16:12: 60:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:10:AB:45:FE:56:4F:2A:BA:20:D8:F7:3B:C6:F9:5D:34:B4:1F:CF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/27aff6e8-577a-42bb-8881-56b16bef8f81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.164.0.0/16 Signature Algorithm: sha256WithRSAEncryption 76:42:8f:cb:91:f4:09:42:75:89:e7:30:ad:38:13:1d:76:03: 28:d4:f7:70:cd:a1:4c:bf:c0:2e:dc:2d:38:fc:f0:d6:34:92: da:79:85:c8:0b:bb:d7:05:06:9d:72:24:1b:fe:b8:a1:39:cb: 23:5b:b5:df:01:2c:f5:ff:ba:b3:43:f3:87:86:77:7d:21:86: c2:0b:af:0a:b1:13:76:49:cf:2f:a7:6f:ab:56:04:f2:d3:73: c9:3d:25:af:67:29:5f:98:f4:21:b9:e7:4c:08:70:28:7e:4d: d5:8b:66:b5:a6:98:0c:59:60:ec:c8:b9:d4:5e:55:96:58:9b: 5e:0d:11:b8:a3:bd:d9:18:fa:c0:ad:95:be:6f:c8:88:dc:78: 96:91:ed:32:66:1f:fe:af:de:71:42:1c:7b:7c:3e:2f:f3:43: 04:88:6d:de:05:de:d0:81:03:02:85:13:e7:e9:9f:53:3a:c5: 63:85:13:31:55:c6:e7:9b:c4:70:3c:e9:6d:4b:ff:e5:66:d0: 6c:c1:d0:3f:8a:66:d7:ff:b8:4c:3a:a9:09:93:68:42:73:17: 79:2f:59:1a:c2:9c:1d:4f:4b:f4:87:ea:b9:f3:9f:c1:2f:8a: 10:da:c2:09:31:96:5c:4e:e7:95:15:a4:53:14:05:cd:fa:8b: 55:07:32:7f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUaeNznB38Re2TrcqW9agxzVaT2AgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDAxMDA5WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODc0MTY4OGRkZWEzYjgwN2E2NjZiOTI3ZWQ4N2ExNzFk YmMwNzNiODg0MWJlNmFmZGFjMzRkNmUwYjZmY2NhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtBX/0+DCn+euBkJnl35JRdzvi+6AUdFK4WSAmhB7ylUnA uenF41JykCc7MhIYnh+WLj2OYX9L0gGmcHpCCglCKPA3B3wGNRdXDd6citbTfBW0 BdN0I9OnntyczV56DdIa5BRO0oKwYkAPrnFYPCQwzSisUlKGKmVh73MGOUO7IGQ0 gJpEUpMiMEU1YmGzsqLo7mGBPcoqBwuK0SIGjuxxNqhaZPSU21XttXpWUa1cQJxF sPlNDM0Ti/NOKhm7RUZ9rc/MM5Vzwbbb0uE6K8iYSt+Sm+u/jimCmxJzABgGQluX FdmWwksHA5JYnm+PFDe881DBrOjqss3b8QgWEmDvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUeRCrRf5WTyq6INj3O8b5XTS0H88wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI3YWZmNmU4LTU3N2EtNDJiYi04ODgxLTU2YjE2YmVmOGY4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAopDANBgkqhkiG9w0BAQsFAAOCAQEAdkKPy5H0CUJ1iecwrTgTHXYDKNT3 cM2hTL/ALtwtOPzw1jSS2nmFyAu71wUGnXIkG/64oTnLI1u13wEs9f+6s0Pzh4Z3 fSGGwguvCrETdknPL6dvq1YE8tNzyT0lr2cpX5j0IbnnTAhwKH5N1YtmtaaYDFlg 7Mi51F5VllibXg0RuKO92Rj6wK2Vvm/IiNx4lpHtMmYf/q/ecUIce3w+L/NDBIht 3gXe0IEDAoUT5+mfUzrFY4UTMVXG55vEcDzpbUv/5WbQbMHQP4pm1/+4TDqpCZNo QnMXeS9ZGsKcHU9L9IfqufOfwS+KENrCCTGWXE7nlRWkUxQFzfqLVQcyfw== -----END CERTIFICATE-----Generated at Mon Mar 2 00:10:54 2026 by rpki-client