$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2afb1ff2-5586-43c7-baa9-e0c06c131116.roa File: 2afb1ff2-5586-43c7-baa9-e0c06c131116.roa (raw, json) Hash identifier: jPvDgnZDBlSAll/B1D0aSDf+90YIMnipSF6FdjholQA= Subject key identifier: 4F:E3:41:85:58:25:00:E7:F1:43:D4:19:62:D3:CE:1B:3A:30:6A:4A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B7FFA788F1FD2D778A6AE9A3EC8C904049925D6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2afb1ff2-5586-43c7-baa9-e0c06c131116.roa Signing time: Wed 25 Feb 2026 00:21:25 +0000 ROA not before: Wed 25 Feb 2026 00:21:25 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 40.178.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:7f:fa:78:8f:1f:d2:d7:78:a6:ae:9a:3e:c8:c9:04:04:99:25:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 00:21:25 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=5b8abbe7d70c869c15c1b54514016042b7c0a49e9ddda1cb7f17edfd62b118ec, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ee:1a:b8:7f:d6:ea:48:ef:be:44:02:e9:a7: 92:31:c4:02:b3:29:5f:f9:62:d9:ae:d2:fd:42:de: 51:11:ea:e6:21:87:e4:27:f7:68:5e:ba:0b:ef:a0: 46:84:0b:a4:18:2d:bf:38:1b:d0:df:20:d4:ba:ff: 0e:71:4b:4a:f7:2a:54:4b:a9:ec:4a:33:79:16:32: 41:f4:5e:f8:49:eb:54:49:5f:cb:c2:c9:04:62:00: d3:cc:d7:d0:78:2f:99:64:1b:9b:43:a4:12:87:0f: b0:81:a6:0f:f9:e0:c2:c9:fb:79:78:8f:2f:af:26: 17:34:99:f8:e3:12:ef:54:67:e0:78:c2:b1:25:75: 42:1e:8e:d5:cd:bb:5e:1c:26:3a:93:65:3d:37:fc: eb:54:d8:98:74:81:72:f5:a0:d2:4c:d4:dd:f7:38: 30:2f:c5:30:c7:77:b3:89:ae:65:2a:61:e1:d5:4c: 3a:bd:56:98:4c:20:1a:a3:26:8a:48:e6:d5:87:b1: 11:23:0b:36:d1:8a:d9:1d:66:b5:4c:f7:e5:8c:49: 9e:13:43:d7:ef:1a:7e:28:53:ee:97:f1:4a:6c:27: 5a:c7:e5:05:fd:69:98:25:16:90:b8:ca:07:41:11: 62:62:d3:14:ec:9d:86:29:e7:3c:37:7e:6f:a6:8d: 31:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E3:41:85:58:25:00:E7:F1:43:D4:19:62:D3:CE:1B:3A:30:6A:4A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2afb1ff2-5586-43c7-baa9-e0c06c131116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.178.0.0/15 Signature Algorithm: sha256WithRSAEncryption 24:75:f9:fe:a7:6e:67:ad:f9:fb:64:79:bb:74:69:d7:3c:bf: 86:50:21:e1:81:ec:89:59:a8:7c:0c:51:4b:28:2c:98:f4:2e: 79:76:65:99:2e:5f:1b:8f:73:0a:c9:64:2f:a8:02:99:f2:f8: b5:51:4e:78:53:eb:93:d5:2f:0d:1c:2f:4c:53:5f:6d:1f:40: 42:9e:2a:44:3b:33:7a:65:d2:87:0f:6f:28:f1:f3:66:05:3a: 77:ab:e9:b6:b4:9b:71:d7:05:aa:af:de:37:95:b5:3c:5b:72: 87:c5:00:ad:6c:dd:4b:c7:65:66:28:4a:cb:e3:9b:b9:38:ca: 2d:1e:5e:e4:31:04:23:e4:53:e1:22:8c:dd:91:bb:82:63:16: 4b:43:38:7b:de:e0:d7:99:56:e7:07:fb:28:6e:f1:2b:07:de: 8b:87:d0:ca:c9:eb:ff:19:5b:ec:26:5a:16:e3:21:50:e8:9d: 27:ee:a1:f7:69:ff:3d:e4:66:55:3d:66:6e:cf:5c:78:f9:b5: 5a:11:87:de:fd:8c:f5:40:73:71:34:ed:3f:dd:7b:1c:9c:00: c0:cb:a3:41:a5:ea:d0:a4:c8:cd:a6:15:fe:fb:8e:3d:51:6f: c7:68:7b:f7:8e:ff:76:25:27:b3:82:f5:b6:fe:d7:cf:12:3f: 36:f4:20:4d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUW3/6eI8f0td4pq6aPsjJBASZJdYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDAyMTI1WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YjhhYmJlN2Q3MGM4NjljMTVjMWI1NDUxNDAxNjA0MmI3 YzBhNDllOWRkZGExY2I3ZjE3ZWRmZDYyYjExOGVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDL7hq4f9bqSO++RALpp5IxxAKzKV/5Ytmu0v1C3lER6uYh h+Qn92heugvvoEaEC6QYLb84G9DfINS6/w5xS0r3KlRLqexKM3kWMkH0XvhJ61RJ X8vCyQRiANPM19B4L5lkG5tDpBKHD7CBpg/54MLJ+3l4jy+vJhc0mfjjEu9UZ+B4 wrEldUIejtXNu14cJjqTZT03/OtU2Jh0gXL1oNJM1N33ODAvxTDHd7OJrmUqYeHV TDq9VphMIBqjJopI5tWHsREjCzbRitkdZrVM9+WMSZ4TQ9fvGn4oU+6X8UpsJ1rH 5QX9aZglFpC4ygdBEWJi0xTsnYYp5zw3fm+mjTGjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUT+NBhVglAOfxQ9QZYtPOGzowakowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhZmIxZmYyLTU1ODYtNDNjNy1iYWE5LWUwYzA2YzEzMTExNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEosjANBgkqhkiG9w0BAQsFAAOCAQEAJHX5/qduZ635+2R5u3Rp1zy/hlAh 4YHsiVmofAxRSygsmPQueXZlmS5fG49zCslkL6gCmfL4tVFOeFPrk9UvDRwvTFNf bR9AQp4qRDszemXShw9vKPHzZgU6d6vptrSbcdcFqq/eN5W1PFtyh8UArWzdS8dl ZihKy+ObuTjKLR5e5DEEI+RT4SKM3ZG7gmMWS0M4e97g15lW5wf7KG7xKwfei4fQ ysnr/xlb7CZaFuMhUOidJ+6h92n/PeRmVT1mbs9cePm1WhGH3v2M9UBzcTTtP917 HJwAwMujQaXq0KTIzaYV/vuOPVFvx2h7947/diUns4L1tv7XzxI/NvQgTQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:18:59 2026 by rpki-client