$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a06672a-8335-420a-ac28-2f8c4c774377.roa File: 2a06672a-8335-420a-ac28-2f8c4c774377.roa (raw, json) Hash identifier: i+zuzrKUU3bxFy6WdBjAtsVVNcpjkAzknfPLPi58ryY= Subject key identifier: 8A:A4:B8:7E:A5:65:2B:49:47:08:20:62:49:55:95:28:9D:FD:64:C6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2C042CB638F995C801B8F3C04B9C71808096991D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a06672a-8335-420a-ac28-2f8c4c774377.roa Signing time: Sat 14 Feb 2026 00:40:11 +0000 ROA not before: Sat 14 Feb 2026 00:40:11 +0000 ROA not after: Fri 15 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 50.17.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:04:2c:b6:38:f9:95:c8:01:b8:f3:c0:4b:9c:71:80:80:96:99:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 14 00:40:11 2026 GMT Not After : May 15 23:59:59 2026 GMT Subject: serialNumber=e44f1fdac21dfa90bb450a2a6e5a6298bb8cbe7395e562b5a2339c890e69f36e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3b:cb:ea:47:dc:3b:63:4f:85:bb:97:b3:19: bc:1d:ed:9e:53:c3:aa:ba:dc:4d:d4:a6:53:ac:86: bd:8e:45:81:9d:fa:39:31:a8:a3:13:aa:a1:f4:df: 9c:68:d5:57:24:7a:9d:2d:3e:36:33:bd:a4:e1:be: b5:ff:45:38:85:78:ea:68:82:33:a4:7e:13:c2:1d: ea:13:56:ec:c9:10:08:97:5d:64:79:77:3b:b0:95: 9e:98:6d:50:1d:6f:09:3e:88:04:0e:ba:17:63:39: a4:0d:52:64:9b:ed:57:f6:2a:2c:d3:60:38:6f:85: d6:6a:86:53:5b:8e:b4:db:ee:c0:76:32:d6:4f:05: ad:aa:32:52:c7:3a:0b:e4:9b:20:21:fc:6a:ad:de: dd:c4:75:bb:37:d5:25:bf:89:a3:16:36:45:92:30: 6d:79:8d:14:9c:6d:2a:01:51:7f:fc:ae:da:46:ca: b9:c8:15:4a:17:53:c9:65:8a:a0:36:c8:ec:d7:55: f8:52:4b:99:bb:1d:ac:8e:ef:fc:cc:83:25:65:47: 0c:ab:39:ae:20:2f:f0:5b:3f:59:bb:7e:a8:6e:e1: f4:6a:f6:08:b8:f2:dc:55:a4:87:95:bd:8c:b4:c2: 78:36:44:3a:39:6c:e3:00:6b:70:b3:49:ba:2d:fe: fb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A4:B8:7E:A5:65:2B:49:47:08:20:62:49:55:95:28:9D:FD:64:C6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a06672a-8335-420a-ac28-2f8c4c774377.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.17.0.0/17 Signature Algorithm: sha256WithRSAEncryption 0a:29:56:a4:0c:0b:32:be:52:07:f4:33:4e:07:a8:30:7b:be: 4e:8a:7f:f3:73:24:78:a4:b3:84:7a:54:64:c3:31:01:8e:58: 40:b5:f1:1e:1d:b1:06:bb:10:d5:68:49:93:17:c8:ec:c0:3f: 78:d0:e2:4e:06:3e:7d:ad:43:c6:95:c4:f2:c6:76:6d:24:69: a7:97:00:92:91:a6:3d:76:77:f8:42:a4:21:3a:ef:b1:53:47: c7:24:65:26:23:30:b6:30:13:a8:a2:84:4c:8a:59:c6:45:c4: 5c:79:82:3a:05:fb:f9:40:ee:c4:0f:ee:96:53:5c:64:10:7b: 9a:2c:8c:cd:8a:92:de:89:c2:ef:a9:39:88:cb:52:b0:ad:92: 5c:f3:fa:6c:ed:7d:49:0b:91:00:9c:51:18:ce:5f:34:06:5a: 45:23:40:c5:08:67:f4:6d:5b:7f:a3:7b:7f:05:d7:e1:fd:07: 64:05:46:40:71:6e:46:12:52:25:a1:22:4b:63:20:2d:00:71: 52:f5:b7:26:f8:d5:86:c5:ae:96:27:d8:71:6c:ba:f7:74:20: 2c:d0:07:87:39:da:72:2e:70:57:1a:f0:48:74:03:1c:77:80: 4b:95:5a:ef:f3:20:2c:8c:6b:4d:80:89:de:32:05:35:eb:5f: 06:4c:3c:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULAQstjj5lcgBuPPAS5xxgICWmR0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE0MDA0MDExWhcNMjYwNTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDRmMWZkYWMyMWRmYTkwYmI0NTBhMmE2ZTVhNjI5OGJi OGNiZTczOTVlNTYyYjVhMjMzOWM4OTBlNjlmMzZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiO8vqR9w7Y0+Fu5ezGbwd7Z5Tw6q63E3UplOshr2ORYGd +jkxqKMTqqH035xo1Vckep0tPjYzvaThvrX/RTiFeOpogjOkfhPCHeoTVuzJEAiX XWR5dzuwlZ6YbVAdbwk+iAQOuhdjOaQNUmSb7Vf2KizTYDhvhdZqhlNbjrTb7sB2 MtZPBa2qMlLHOgvkmyAh/Gqt3t3Edbs31SW/iaMWNkWSMG15jRScbSoBUX/8rtpG yrnIFUoXU8lliqA2yOzXVfhSS5m7HayO7/zMgyVlRwyrOa4gL/BbP1m7fqhu4fRq 9gi48txVpIeVvYy0wng2RDo5bOMAa3CzSbot/vtBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiqS4fqVlK0lHCCBiSVWVKJ39ZMYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhMDY2NzJhLTgzMzUtNDIwYS1hYzI4LTJmOGM0Yzc3NDM3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcyEQAwDQYJKoZIhvcNAQELBQADggEBAAopVqQMCzK+Ugf0M04HqDB7vk6K f/NzJHiks4R6VGTDMQGOWEC18R4dsQa7ENVoSZMXyOzAP3jQ4k4GPn2tQ8aVxPLG dm0kaaeXAJKRpj12d/hCpCE677FTR8ckZSYjMLYwE6iihEyKWcZFxFx5gjoF+/lA 7sQP7pZTXGQQe5osjM2Kkt6Jwu+pOYjLUrCtklzz+mztfUkLkQCcURjOXzQGWkUj QMUIZ/RtW3+je38F1+H9B2QFRkBxbkYSUiWhIktjIC0AcVL1tyb41YbFrpYn2HFs uvd0ICzQB4c52nIucFca8Eh0Axx3gEuVWu/zICyMa02Aid4yBTXrXwZMPBI= -----END CERTIFICATE-----Generated at Sun Mar 1 22:34:08 2026 by rpki-client