$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d54f54a-5931-4b42-adfd-9815eaa1c425.roa File: 2d54f54a-5931-4b42-adfd-9815eaa1c425.roa (raw, json) Hash identifier: ohK5HZ/S4DeC8x/j22SRGCx538R8mUAa8LGEcME4I64= Subject key identifier: 29:86:83:3B:0D:25:B3:3F:80:46:62:E8:0E:FD:83:BC:10:D2:77:00 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C80E636BE1C105D8866ABDF2F2A42EEBD7CBD12 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d54f54a-5931-4b42-adfd-9815eaa1c425.roa Signing time: Fri 13 Feb 2026 00:40:07 +0000 ROA not before: Fri 13 Feb 2026 00:40:07 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.128.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:80:e6:36:be:1c:10:5d:88:66:ab:df:2f:2a:42:ee:bd:7c:bd:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 13 00:40:07 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=0cabe9e61ae5b8d7d6f6e1b2e64e098da5e116808933bf2dcf596e97df90a315, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:37:3b:8f:76:68:05:a4:98:46:d8:e8:65:c3: eb:0d:ff:4b:fd:1a:9e:e7:d0:b6:2c:ba:f9:9d:81: 2a:4d:b0:ce:c2:f0:96:b3:06:e5:b7:d9:6c:f1:25: c5:7f:27:00:b2:89:96:fd:d1:26:e3:02:63:36:98: e7:ce:58:fd:94:e0:e3:a9:0d:1b:1e:77:2b:7a:c0: 60:ce:21:35:b0:fe:dc:bf:77:91:89:2a:46:ad:9d: c7:e6:a6:85:00:80:80:21:fe:8d:b4:86:1d:9a:41: 44:51:4f:79:9b:b3:5e:d6:30:db:e7:68:1c:40:f5: f9:3d:42:40:b0:74:3e:5b:9b:f9:4b:fe:3c:0a:a0: 03:29:fc:09:07:ea:99:b5:87:d2:0c:1d:38:a2:87: 22:25:af:23:f3:0e:f9:13:a9:65:7b:46:8a:60:29: f4:e7:0d:b4:7e:77:6f:62:36:2e:a4:03:18:40:1f: 74:7f:ab:34:42:c2:d8:75:27:64:f3:fa:44:91:e2: 07:88:f3:c3:53:8c:a3:21:d0:9b:58:64:55:6e:d0: 45:a2:35:1a:c7:d4:a8:76:13:a6:ff:82:b6:24:e7: 8e:4c:09:7f:b2:25:06:1b:5c:06:05:e8:b0:a5:b2: b9:db:6d:28:c9:82:79:30:46:b8:fc:8a:29:0b:b7: c5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:86:83:3B:0D:25:B3:3F:80:46:62:E8:0E:FD:83:BC:10:D2:77:00 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d54f54a-5931-4b42-adfd-9815eaa1c425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.192.0/19 Signature Algorithm: sha256WithRSAEncryption bc:2c:71:e0:fd:85:71:30:27:74:8c:33:03:37:80:bb:bd:a6: 09:eb:42:5f:87:41:d7:9a:f8:2e:cd:bf:c1:0b:04:4e:51:19: 1a:9d:4f:27:77:1f:ac:c2:0e:07:57:43:d4:28:6c:91:3d:03: b1:b4:3e:b7:bd:db:cc:b8:03:ea:5a:81:15:08:71:8e:8c:f4: ed:24:95:4b:29:99:28:89:b0:fb:ae:8f:bd:ca:28:e7:bc:03: 59:47:ab:05:c0:ef:b1:28:84:a7:5a:f4:30:c9:6c:eb:9d:e1: 41:9f:44:1f:d1:6a:4f:4e:83:46:1b:e5:d1:55:ba:c8:11:5a: 45:66:e0:fc:7c:6d:c6:f8:0f:90:27:5a:a5:c3:68:03:2d:aa: 75:ed:5b:c9:28:3b:f0:42:95:58:02:9d:00:cf:1d:27:68:78: 05:7c:83:be:38:6f:4a:06:ae:41:47:61:53:70:a3:53:37:06: df:1b:6f:d0:04:bf:ef:03:53:a9:5b:49:7f:6e:4e:ff:a8:68: e3:d8:2e:96:8a:60:aa:a1:35:12:e9:16:b5:50:ca:fa:4b:91: ab:53:95:45:88:cd:9b:64:d2:da:17:9d:1e:88:aa:f1:39:70: 91:60:78:ce:81:09:0c:12:db:76:4e:da:34:e9:cb:27:9a:06: ae:65:50:4b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPIDmNr4cEF2IZqvfLypC7r18vRIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEzMDA0MDA3WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwY2FiZTllNjFhZTViOGQ3ZDZmNmUxYjJlNjRlMDk4ZGE1 ZTExNjgwODkzM2JmMmRjZjU5NmU5N2RmOTBhMzE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9NzuPdmgFpJhG2Ohlw+sN/0v9Gp7n0LYsuvmdgSpNsM7C 8JazBuW32WzxJcV/JwCyiZb90SbjAmM2mOfOWP2U4OOpDRsedyt6wGDOITWw/ty/ d5GJKkatncfmpoUAgIAh/o20hh2aQURRT3mbs17WMNvnaBxA9fk9QkCwdD5bm/lL /jwKoAMp/AkH6pm1h9IMHTiihyIlryPzDvkTqWV7RopgKfTnDbR+d29iNi6kAxhA H3R/qzRCwth1J2Tz+kSR4geI88NTjKMh0JtYZFVu0EWiNRrH1Kh2E6b/grYk545M CX+yJQYbXAYF6LClsrnbbSjJgnkwRrj8iikLt8UDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKYaDOw0lsz+ARmLoDv2DvBDSdwAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJkNTRmNTRhLTU5MzEtNGI0Mi1hZGZkLTk4MTVlYWExYzQyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUNgMAwDQYJKoZIhvcNAQELBQADggEBALwsceD9hXEwJ3SMMwM3gLu9pgnr Ql+HQdea+C7Nv8ELBE5RGRqdTyd3H6zCDgdXQ9QobJE9A7G0Pre928y4A+pagRUI cY6M9O0klUspmSiJsPuuj73KKOe8A1lHqwXA77EohKda9DDJbOud4UGfRB/Rak9O g0Yb5dFVusgRWkVm4Px8bcb4D5AnWqXDaAMtqnXtW8koO/BClVgCnQDPHSdoeAV8 g744b0oGrkFHYVNwo1M3Bt8bb9AEv+8DU6lbSX9uTv+oaOPYLpaKYKqhNRLpFrVQ yvpLkatTlUWIzZtk0toXnR6IqvE5cJFgeM6BCQwS23ZO2jTpyyeaBq5lUEs= -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:44 2026 by rpki-client