$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c2e6eed-2a69-44c6-8018-21f6905051c9.roa File: 2c2e6eed-2a69-44c6-8018-21f6905051c9.roa (raw, json) Hash identifier: Zjjxjb8a9GhApAgCs/dw5cfI5i0fVZewOWKO04pTVIM= Subject key identifier: 96:55:8C:48:E8:88:EE:CA:4E:01:E1:C0:F2:FB:03:DC:04:26:FF:1D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0AC066993B9B0610E83E8FAEEADB6CF1F86971D1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c2e6eed-2a69-44c6-8018-21f6905051c9.roa Signing time: Tue 24 Feb 2026 00:21:13 +0000 ROA not before: Tue 24 Feb 2026 00:21:13 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 107.21.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c0:66:99:3b:9b:06:10:e8:3e:8f:ae:ea:db:6c:f1:f8:69:71:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 00:21:13 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=12d419ca1a3cd4b2d78fc289c5ee8640cbd101356fa5ae1ef4a01d25e2ba5e92, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ee:b6:3a:0a:92:09:c5:e4:3d:1e:cf:31:4a: 26:ef:af:22:2b:e0:8f:8f:30:f0:c7:bc:1a:f0:29: aa:9f:b4:76:7a:80:5c:60:59:36:a5:6f:02:89:2d: 45:33:11:69:94:27:ec:48:b0:54:f4:af:25:f9:95: e7:1d:17:fe:85:11:22:24:75:70:35:2f:b1:64:28: bf:1a:88:42:99:04:13:67:2f:0d:8e:4e:32:be:35: 6b:4a:89:04:72:86:c6:de:91:ea:f8:96:c0:09:b1: bc:b0:0e:eb:7f:26:38:e0:df:03:5f:0b:eb:68:84: 6f:e0:b6:a2:38:0c:e2:40:b8:e4:76:ce:50:30:27: bc:34:f6:24:34:f2:c3:51:7d:1b:1b:a2:47:3a:a4: 8e:ce:5a:b4:b1:37:4c:31:d7:90:50:78:f9:f9:67: 1e:01:8e:f4:61:9e:69:ec:6b:b5:ad:70:96:c1:0d: 79:99:03:11:28:09:50:cf:24:fd:f9:a2:1f:52:49: 75:8b:6a:96:53:d5:f6:ef:c9:fc:38:c6:15:1a:86: 38:59:77:dc:f8:6f:3c:30:26:d1:9f:5a:cf:22:28: 4b:5e:71:a6:68:65:0d:0b:c6:62:17:96:c8:fc:e4: 56:74:f1:c6:d4:04:f5:6d:1b:29:70:42:4e:2c:8b: 6c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:55:8C:48:E8:88:EE:CA:4E:01:E1:C0:F2:FB:03:DC:04:26:FF:1D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c2e6eed-2a69-44c6-8018-21f6905051c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.64.0/20 Signature Algorithm: sha256WithRSAEncryption 26:d9:2b:54:65:a4:7c:d9:25:5f:8c:16:76:50:ae:fa:fe:07: 80:c5:e6:4c:b4:ce:98:44:aa:13:a2:c9:c3:d4:9d:82:76:d3: f9:bd:24:ff:1c:c1:af:c3:82:bc:6a:21:75:2d:20:db:6e:c1: ec:aa:d6:9f:94:49:34:ea:af:fd:af:65:f6:f1:a4:bf:3d:d1: b9:a0:30:62:b6:cc:92:96:5b:3a:04:82:56:21:76:5c:01:46: 2f:ee:b4:23:0b:28:03:44:51:1b:23:58:3f:75:89:92:54:63: 51:d1:3c:d6:b9:46:d3:28:35:b6:32:67:ef:d2:ad:35:47:7b: 89:a9:48:c7:71:7f:71:d0:ff:18:da:d9:b3:e9:88:24:52:1b: 86:3c:61:b4:f5:97:fc:27:2f:d0:04:10:aa:0b:23:bc:09:a0: 3e:7f:42:68:cf:50:97:3f:5a:5e:26:3e:26:61:07:08:21:f5: 28:83:27:93:29:59:e6:97:10:f6:53:5a:3b:78:91:3d:51:5e: 7f:5f:6b:f7:5f:58:46:9f:13:74:b0:f5:74:c4:bc:89:f0:7a: b8:e0:84:3e:43:22:0a:e3:95:82:3d:45:75:a5:de:7b:69:d6: de:cc:88:15:50:b1:a3:41:98:76:f9:0e:75:23:9a:6e:46:4e: b8:ca:6a:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCsBmmTubBhDoPo+u6tts8fhpcdEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDAyMTEzWhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMmQ0MTljYTFhM2NkNGIyZDc4ZmMyODljNWVlODY0MGNi ZDEwMTM1NmZhNWFlMWVmNGEwMWQyNWUyYmE1ZTkyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCc7rY6CpIJxeQ9Hs8xSibvryIr4I+PMPDHvBrwKaqftHZ6 gFxgWTalbwKJLUUzEWmUJ+xIsFT0ryX5lecdF/6FESIkdXA1L7FkKL8aiEKZBBNn Lw2OTjK+NWtKiQRyhsbeker4lsAJsbywDut/Jjjg3wNfC+tohG/gtqI4DOJAuOR2 zlAwJ7w09iQ08sNRfRsbokc6pI7OWrSxN0wx15BQePn5Zx4BjvRhnmnsa7WtcJbB DXmZAxEoCVDPJP35oh9SSXWLapZT1fbvyfw4xhUahjhZd9z4bzwwJtGfWs8iKEte caZoZQ0LxmIXlsj85FZ08cbUBPVtGylwQk4si2wTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUllWMSOiI7spOAeHA8vsD3AQm/x0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJjMmU2ZWVkLTJhNjktNDRjNi04MDE4LTIxZjY5MDUwNTFjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARrFUAwDQYJKoZIhvcNAQELBQADggEBACbZK1RlpHzZJV+MFnZQrvr+B4DF 5ky0zphEqhOiycPUnYJ20/m9JP8cwa/DgrxqIXUtINtuweyq1p+USTTqr/2vZfbx pL890bmgMGK2zJKWWzoEglYhdlwBRi/utCMLKANEURsjWD91iZJUY1HRPNa5RtMo NbYyZ+/SrTVHe4mpSMdxf3HQ/xja2bPpiCRSG4Y8YbT1l/wnL9AEEKoLI7wJoD5/ QmjPUJc/Wl4mPiZhBwgh9SiDJ5MpWeaXEPZTWjt4kT1RXn9fa/dfWEafE3Sw9XTE vInwerjghD5DIgrjlYI9RXWl3ntp1t7MiBVQsaNBmHb5DnUjmm5GTrjKauQ= -----END CERTIFICATE-----Generated at Mon Mar 2 02:06:01 2026 by rpki-client