$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31cef864-1f6b-465f-b54f-0f3697358f20.roa File: 31cef864-1f6b-465f-b54f-0f3697358f20.roa (raw, json) Hash identifier: WwrPl3B4tyPJAnP3Xl574Ph25iJALOrtl6bOELpNwN0= Subject key identifier: 82:2C:5C:30:7E:3C:69:5E:B7:DE:6E:A4:EC:D6:C7:4B:A6:E7:04:BB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 505B31E97A5FD1F26E8245C1E7E410525C386C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31cef864-1f6b-465f-b54f-0f3697358f20.roa Signing time: Wed 18 Feb 2026 00:20:02 +0000 ROA not before: Wed 18 Feb 2026 00:20:02 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 207.21.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:5b:31:e9:7a:5f:d1:f2:6e:82:45:c1:e7:e4:10:52:5c:38:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 18 00:20:02 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=b5d6dc0402221d2ecf8bd801642e8e22198303231d9daa40ed421bfa00f5a718, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1e:5d:b5:26:18:dd:25:70:0d:4f:22:9e:56: 31:fd:60:8d:bb:53:3a:46:94:4a:a9:3a:f8:8a:f1: 99:03:f0:98:43:cd:bf:9e:94:d3:42:4e:e8:9a:cd: db:bb:38:3f:b1:3e:46:16:65:17:5a:74:dc:3a:37: 23:f8:65:14:c5:f4:38:d6:71:7c:e8:23:7e:91:5b: 5d:b7:b8:03:23:01:82:9e:64:57:c5:38:c6:95:30: f1:ed:d0:ae:d5:4e:76:e5:d8:60:63:51:a1:6f:2a: 21:63:9d:74:f1:09:89:97:36:0f:f6:57:2a:02:08: 28:f3:19:02:15:1f:7b:4c:10:da:52:af:58:38:44: 6d:4e:77:71:db:ea:e2:f4:06:4e:fb:24:6b:67:41: 10:7f:20:27:90:14:e5:53:46:7a:d7:48:8b:98:8a: 86:29:20:12:03:09:3b:07:40:d7:f9:a0:17:2c:6d: fa:f4:4b:af:81:c5:24:43:42:cf:49:e2:d9:56:9f: ed:eb:f9:37:a5:c4:90:75:15:fb:1f:23:7f:f2:9a: 91:28:07:40:96:53:da:b7:f1:8f:18:5e:54:a9:e7: d6:1d:0d:c7:38:78:43:b7:d0:c7:9c:2a:42:12:25: e3:f1:72:43:c0:e4:a6:00:cc:b3:22:54:0b:7e:73: ec:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2C:5C:30:7E:3C:69:5E:B7:DE:6E:A4:EC:D6:C7:4B:A6:E7:04:BB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31cef864-1f6b-465f-b54f-0f3697358f20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.21.236.0/23 Signature Algorithm: sha256WithRSAEncryption bd:35:a8:6a:c2:7a:fb:4d:21:f3:ed:c4:61:a3:2f:b9:7f:2e: 2a:46:de:61:d7:cc:7f:a6:83:fe:85:7f:85:51:4d:7c:49:b3: ed:91:98:8c:30:60:22:7f:f8:ce:18:aa:8c:bf:78:37:9f:0c: 68:3f:92:69:a0:6e:36:8a:96:6d:1f:1d:0d:f3:62:7e:b9:06: 36:d9:af:46:d7:50:1e:f4:4e:6f:74:99:97:c8:0e:be:b0:df: 6e:da:2a:93:a5:aa:7b:c2:35:a0:43:de:70:d6:24:dc:64:5b: 49:fd:32:9b:fc:aa:a2:6b:df:81:14:fb:1c:a6:85:65:ef:dc: d9:1c:aa:56:2b:7a:ba:15:c4:bf:51:bf:0d:09:b3:58:5f:4d: ad:65:c6:23:3e:41:98:d7:20:90:a7:8d:d6:97:55:ed:21:64: 7f:88:c1:73:12:6d:6c:f0:7d:66:e4:83:5b:13:eb:14:ff:9f: 86:1c:ff:27:5c:2a:79:24:7a:2a:45:2e:4e:1b:db:9c:ab:07: d2:76:bf:40:b3:cc:06:e1:63:07:a2:61:dc:6e:ca:78:5c:2d: 83:a5:30:10:07:b1:b2:fd:fb:50:ac:3e:d1:58:d1:a1:17:ba: e5:ee:db:35:63:b2:15:59:ee:1b:0d:c0:7c:f4:d6:d2:a3:e8: cb:64:73:92 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITUFsx6Xpf0fJugkXB5+QQUlw4bDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjAyMTgwMDIwMDJaFw0yNjA1MTkyMzU5NTla MHoxSTBHBgNVBAUTQGI1ZDZkYzA0MDIyMjFkMmVjZjhiZDgwMTY0MmU4ZTIyMTk4 MzAzMjMxZDlkYWE0MGVkNDIxYmZhMDBmNWE3MTgxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAOAeXbUmGN0lcA1PIp5WMf1gjbtTOkaUSqk6+IrxmQPwmEPN v56U00JO6JrN27s4P7E+RhZlF1p03Do3I/hlFMX0ONZxfOgjfpFbXbe4AyMBgp5k V8U4xpUw8e3QrtVOduXYYGNRoW8qIWOddPEJiZc2D/ZXKgIIKPMZAhUfe0wQ2lKv WDhEbU53cdvq4vQGTvska2dBEH8gJ5AU5VNGetdIi5iKhikgEgMJOwdA1/mgFyxt +vRLr4HFJENCz0ni2Vaf7ev5N6XEkHUV+x8jf/KakSgHQJZT2rfxjxheVKnn1h0N xzh4Q7fQx5wqQhIl4/FyQ8DkpgDMsyJUC35z7PkCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBSCLFwwfjxpXrfebqTs1sdLpucEuzAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvMzFjZWY4NjQtMWY2Yi00NjVmLWI1NGYtMGYzNjk3MzU4ZjIwLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAc8V7DANBgkqhkiG9w0BAQsFAAOCAQEAvTWoasJ6+00h8+3EYaMvuX8uKkbe YdfMf6aD/oV/hVFNfEmz7ZGYjDBgIn/4zhiqjL94N58MaD+SaaBuNoqWbR8dDfNi frkGNtmvRtdQHvROb3SZl8gOvrDfbtoqk6Wqe8I1oEPecNYk3GRbSf0ym/yqomvf gRT7HKaFZe/c2RyqVit6uhXEv1G/DQmzWF9NrWXGIz5BmNcgkKeN1pdV7SFkf4jB cxJtbPB9ZuSDWxPrFP+fhhz/J1wqeSR6KkUuThvbnKsH0na/QLPMBuFjB6Jh3G7K eFwtg6UwEAexsv37UKw+0VjRoRe65e7bNWOyFVnuGw3AfPTW0qPoy2Rzkg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:33:38 2026 by rpki-client