$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fac2932-bc67-4322-b578-c260d2fa66e7.roa File: 2fac2932-bc67-4322-b578-c260d2fa66e7.roa (raw, json) Hash identifier: 5gvy7G+SJXhpsndvT7ph7OgiIcuPwiCs2JJ3sizrNPw= Subject key identifier: 93:95:DE:3C:2A:1F:6B:E3:46:4A:B9:12:DC:16:6E:0F:8D:FF:BF:21 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 478C08427E140BFF3A698E7C04709BA74C66BE6A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fac2932-bc67-4322-b578-c260d2fa66e7.roa Signing time: Sun 08 Feb 2026 00:51:32 +0000 ROA not before: Sun 08 Feb 2026 00:51:32 +0000 ROA not after: Sat 09 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 209.91.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:8c:08:42:7e:14:0b:ff:3a:69:8e:7c:04:70:9b:a7:4c:66:be:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 8 00:51:32 2026 GMT Not After : May 9 23:59:59 2026 GMT Subject: serialNumber=bb0a3a0eb3a205a2593951e824e5c251560e2557595c8b89708f206e606f2406, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1e:f7:88:24:88:ef:50:4e:c1:0e:0d:84:25: 2f:09:5a:f5:ef:2a:1e:5d:3e:13:1f:c9:b1:60:a7: 3d:b2:5e:1c:a3:a6:e8:ee:36:a8:65:1c:3a:fb:d4: c3:92:c6:7b:d0:36:3a:62:a2:6a:7c:c5:44:ec:a9: 72:43:21:f0:99:12:ae:98:b3:71:b2:0c:73:88:72: 56:eb:c9:03:e4:b7:95:5d:8a:1c:98:bb:5e:c9:77: d8:b1:ae:76:75:0d:e7:41:6c:93:c6:e1:22:8f:1e: b2:00:89:0a:77:b0:57:29:2c:4d:11:9e:a0:cd:b6: fa:f7:5d:17:0b:7c:a3:08:c1:ae:6f:56:13:23:14: 7c:7f:b8:c0:8a:e4:eb:46:3e:b5:4e:63:3b:97:48: 94:fd:6d:65:4e:36:63:ee:58:3e:31:20:0b:60:5e: e5:1b:5f:a5:b1:dd:f6:0b:2b:76:16:52:7c:93:bc: 17:76:21:ce:b5:dc:13:f5:c5:58:b5:6c:fd:cf:7b: a7:54:07:7a:4e:d9:00:b3:9e:a6:8b:44:2f:88:aa: 54:a6:01:d3:24:5b:df:0b:37:d3:64:d9:02:36:66: 59:5d:5e:36:ce:2f:b3:fb:65:b3:52:2b:f3:97:57: 91:38:fe:c1:66:34:9d:04:d5:07:6f:df:96:3a:c1: 83:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:95:DE:3C:2A:1F:6B:E3:46:4A:B9:12:DC:16:6E:0F:8D:FF:BF:21 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fac2932-bc67-4322-b578-c260d2fa66e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.91.0.0/18 Signature Algorithm: sha256WithRSAEncryption 16:bb:04:af:fc:ff:6d:7a:20:cc:97:9d:9e:cf:70:96:99:2e: e5:f2:9d:c3:5b:e1:8e:9b:07:c5:b4:33:12:a5:eb:a1:42:1e: 98:a1:4a:f6:4e:19:e3:9e:f6:d5:00:95:bf:6a:bb:ed:bb:5e: b3:68:12:82:bc:d1:b0:ef:d7:58:8b:c6:af:66:e5:98:84:f3: cc:5e:65:87:d7:94:b2:9f:e7:97:fd:69:7c:79:2a:13:43:a4: 2a:20:42:d7:5b:4f:3c:87:b7:0f:6f:10:0b:73:e8:91:21:32: 12:20:1c:d6:5a:6c:80:68:5f:78:7c:9b:61:98:40:bc:4d:9d: c3:88:61:ce:2d:01:21:fb:d6:24:e2:22:d3:f6:4f:f9:9d:8b: 0c:e1:f8:c8:58:3b:45:04:d9:3d:80:32:82:39:82:f0:9c:ad: d8:a1:a8:35:41:5a:96:62:30:ac:c8:3a:e4:a4:01:f4:27:2c: d8:32:47:b0:63:c7:e8:e6:e3:5f:9e:c2:8d:9b:3f:21:88:c8: 76:cd:c2:e8:0a:6b:d9:a4:e7:ce:d5:c2:54:63:8a:34:46:e7: 3d:83:eb:9c:1f:cf:d8:b3:bc:06:f9:7c:4c:ee:16:c1:62:c3: 6a:38:07:ec:9b:17:07:73:dd:b8:a3:ff:3d:b3:25:fa:9d:77: 31:f3:8b:c6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR4wIQn4UC/86aY58BHCbp0xmvmowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA4MDA1MTMyWhcNMjYwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjBhM2EwZWIzYTIwNWEyNTkzOTUxZTgyNGU1YzI1MTU2 MGUyNTU3NTk1YzhiODk3MDhmMjA2ZTYwNmYyNDA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeHveIJIjvUE7BDg2EJS8JWvXvKh5dPhMfybFgpz2yXhyj pujuNqhlHDr71MOSxnvQNjpiomp8xUTsqXJDIfCZEq6Ys3GyDHOIclbryQPkt5Vd ihyYu17Jd9ixrnZ1DedBbJPG4SKPHrIAiQp3sFcpLE0RnqDNtvr3XRcLfKMIwa5v VhMjFHx/uMCK5OtGPrVOYzuXSJT9bWVONmPuWD4xIAtgXuUbX6Wx3fYLK3YWUnyT vBd2Ic613BP1xVi1bP3Pe6dUB3pO2QCznqaLRC+IqlSmAdMkW98LN9Nk2QI2Zlld XjbOL7P7ZbNSK/OXV5E4/sFmNJ0E1Qdv35Y6wYMFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUk5XePCofa+NGSrkS3BZuD43/vyEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJmYWMyOTMyLWJjNjctNDMyMi1iNTc4LWMyNjBkMmZhNjZlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbRWwAwDQYJKoZIhvcNAQELBQADggEBABa7BK/8/216IMyXnZ7PcJaZLuXy ncNb4Y6bB8W0MxKl66FCHpihSvZOGeOe9tUAlb9qu+27XrNoEoK80bDv11iLxq9m 5ZiE88xeZYfXlLKf55f9aXx5KhNDpCogQtdbTzyHtw9vEAtz6JEhMhIgHNZabIBo X3h8m2GYQLxNncOIYc4tASH71iTiItP2T/mdiwzh+MhYO0UE2T2AMoI5gvCcrdih qDVBWpZiMKzIOuSkAfQnLNgyR7Bjx+jm41+ewo2bPyGIyHbNwugKa9mk587VwlRj ijRG5z2D65wfz9izvAb5fEzuFsFiw2o4B+ybFwdz3bij/z2zJfqddzHzi8Y= -----END CERTIFICATE-----Generated at Mon Mar 2 00:07:00 2026 by rpki-client