$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c2a34e0-9a32-453c-85db-ddb5e7497a1c.roa File: 2c2a34e0-9a32-453c-85db-ddb5e7497a1c.roa (raw, json) Hash identifier: 7ZFK4Z3nxCXorT3diFKmux0PiBCilxXSrU8W5CaqjV8= Subject key identifier: 76:C7:38:E8:BD:DB:03:42:C2:AE:82:AF:96:C0:D1:FF:B3:00:6E:EC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0EBACF881AAD45DF4D25A8029C0C9F06D0753E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c2a34e0-9a32-453c-85db-ddb5e7497a1c.roa Signing time: Wed 25 Feb 2026 00:10:46 +0000 ROA not before: Wed 25 Feb 2026 00:10:46 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 7224 IP address blocks: 173.228.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ba:cf:88:1a:ad:45:df:4d:25:a8:02:9c:0c:9f:06:d0:75:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 00:10:46 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=f36b72b6fb713368101a5da9eefe6e9c577a1ba8990053e25c32610a5bf108bb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:54:bb:90:72:fc:af:db:1c:2d:73:de:77:d4: 76:72:f2:33:f9:c0:16:a8:3f:a5:49:6f:1a:78:3e: 5b:56:69:a6:d8:86:0e:43:b0:25:fc:ef:ae:5f:6f: 31:c9:64:3d:da:1d:55:13:5e:5a:7b:4e:08:2f:cc: a0:52:93:dc:67:cc:0a:11:d8:7f:6e:7e:a7:ee:55: 0b:6a:88:f8:a9:60:97:62:74:43:bf:a1:0a:9f:7d: ec:ff:3f:03:04:af:79:77:98:60:76:cf:cb:71:7f: 05:fc:41:09:ca:61:f0:9f:83:0e:66:b0:41:a2:e6: 37:1d:e5:32:3f:e4:a4:66:2d:0c:9d:8c:5e:53:b7: 9f:b8:e4:51:29:63:1f:f1:f4:0b:65:dd:f0:c3:e7: 5b:47:f3:d7:bf:a3:bb:36:98:35:7b:1e:42:08:da: a0:72:2a:61:f1:49:ed:bf:d0:ff:eb:6f:cf:93:aa: 1f:f6:8b:11:82:3e:82:52:4f:70:9f:ff:4e:53:c3: 60:fb:76:08:a7:4a:b3:3d:18:ef:0d:ef:0e:05:ca: de:ee:dd:ca:53:4d:ac:70:5d:82:57:bb:79:4c:a8: b2:af:5f:3b:51:fd:84:9a:16:78:81:17:23:05:66: f0:0e:a9:81:40:66:b9:a9:45:34:27:2c:64:d2:b8: f8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C7:38:E8:BD:DB:03:42:C2:AE:82:AF:96:C0:D1:FF:B3:00:6E:EC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c2a34e0-9a32-453c-85db-ddb5e7497a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.228.160.0/19 Signature Algorithm: sha256WithRSAEncryption 47:8d:d5:e4:22:77:76:ae:55:c5:d1:ae:ba:26:f0:17:b5:c0: 1f:fb:7e:0d:cb:11:97:3c:d7:ed:dc:fb:b1:05:7f:63:fc:92: 7a:01:f2:42:d8:e8:0f:f5:66:fa:8c:b9:0c:78:41:0f:34:18: 67:b2:4b:41:09:07:aa:7e:e8:8e:07:10:07:33:32:1b:04:9a: 49:2c:b2:8c:04:73:cf:69:69:24:9e:bf:5b:b3:33:1e:8b:98: 07:6b:17:2f:b8:14:e6:d6:13:64:a9:1e:21:e1:a0:04:ad:af: 2f:2e:5d:e9:92:eb:14:df:77:3a:b4:27:1e:8b:a4:79:10:08: 6a:57:7f:b2:b5:4d:17:60:04:9b:79:38:ab:46:de:e6:3d:31: 76:2d:7c:a5:2d:35:e4:21:c6:41:96:5a:ca:5e:ff:2a:c5:74: 2c:90:98:01:a6:ea:91:98:32:0b:48:e8:b7:70:62:61:ab:0e: f8:35:33:21:4e:8a:3a:ba:56:7d:3a:ad:d0:7b:db:6d:d5:55: 53:5d:2f:da:d7:b0:16:9e:da:82:50:07:5f:2c:a9:0b:e7:8b: 05:40:8f:fc:b8:df:bc:56:e0:ee:5c:06:99:bf:c3:70:24:8d: 40:a7:25:4e:71:58:d0:86:cf:e0:3e:e8:70:ea:05:f1:cb:c0: 6c:53:87:02 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITDrrPiBqtRd9NJagCnAyfBtB1PjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjAyMjUwMDEwNDZaFw0yNjA1MjYyMzU5NTla MHoxSTBHBgNVBAUTQGYzNmI3MmI2ZmI3MTMzNjgxMDFhNWRhOWVlZmU2ZTljNTc3 YTFiYTg5OTAwNTNlMjVjMzI2MTBhNWJmMTA4YmIxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKhUu5By/K/bHC1z3nfUdnLyM/nAFqg/pUlvGng+W1ZpptiG DkOwJfzvrl9vMclkPdodVRNeWntOCC/MoFKT3GfMChHYf25+p+5VC2qI+Klgl2J0 Q7+hCp997P8/AwSveXeYYHbPy3F/BfxBCcph8J+DDmawQaLmNx3lMj/kpGYtDJ2M XlO3n7jkUSljH/H0C2Xd8MPnW0fz17+juzaYNXseQgjaoHIqYfFJ7b/Q/+tvz5Oq H/aLEYI+glJPcJ//TlPDYPt2CKdKsz0Y7w3vDgXK3u7dylNNrHBdgle7eUyosq9f O1H9hJoWeIEXIwVm8A6pgUBmualFNCcsZNK4+JUCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBR2xzjovdsDQsKugq+WwNH/swBu7DAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvMmMyYTM0ZTAtOWEzMi00NTNjLTg1ZGItZGRiNWU3NDk3YTFjLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBa3koDANBgkqhkiG9w0BAQsFAAOCAQEAR43V5CJ3dq5VxdGuuibwF7XAH/t+ DcsRlzzX7dz7sQV/Y/ySegHyQtjoD/Vm+oy5DHhBDzQYZ7JLQQkHqn7ojgcQBzMy GwSaSSyyjARzz2lpJJ6/W7MzHouYB2sXL7gU5tYTZKkeIeGgBK2vLy5d6ZLrFN93 OrQnHoukeRAIald/srVNF2AEm3k4q0be5j0xdi18pS015CHGQZZayl7/KsV0LJCY AabqkZgyC0jot3BiYasO+DUzIU6KOrpWfTqt0HvbbdVVU10v2tewFp7aglAHXyyp C+eLBUCP/LjfvFbg7lwGmb/DcCSNQKclTnFY0IbP4D7ocOoF8cvAbFOHAg== -----END CERTIFICATE-----Generated at Mon Mar 2 03:05:43 2026 by rpki-client