$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334bc486-65fe-46fa-a302-04508210ecdb.roa File: 334bc486-65fe-46fa-a302-04508210ecdb.roa (raw, json) Hash identifier: BvEQZY37GonlQRkm1teWnPKl8bXFf+C3z2ghXUcCUKw= Subject key identifier: 6C:76:81:8F:1B:7F:62:F2:AF:AF:CB:25:A5:A7:29:26:FC:D2:EA:7A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 32411E883B3EC1EAB9E8B44CF75BD484C614A337 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334bc486-65fe-46fa-a302-04508210ecdb.roa Signing time: Tue 24 Feb 2026 02:10:49 +0000 ROA not before: Tue 24 Feb 2026 02:10:49 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 159.157.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:41:1e:88:3b:3e:c1:ea:b9:e8:b4:4c:f7:5b:d4:84:c6:14:a3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 02:10:49 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=015843fe1074fcea5c34286a91877a38396baa08848867fe1dee1d58f1bfa2b4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:87:84:49:71:2b:f4:3d:d0:bd:fb:2f:0f: f3:89:49:55:62:67:23:63:f6:29:f8:5d:05:ea:9e: 1c:f9:5f:cc:fe:b2:7a:b4:7b:c5:25:84:80:b4:0b: 52:d8:89:ba:f2:ea:8c:2f:26:58:16:3b:93:56:63: 1e:3f:92:68:e9:28:eb:47:c7:1f:ce:f4:4a:5f:cf: 49:bd:99:65:e4:f9:1a:a3:33:54:0e:81:59:21:f5: 0f:59:2b:8d:cf:b9:b2:33:8d:cf:31:6a:3b:7e:3e: 77:a5:ac:38:83:b0:33:23:46:8f:3f:22:05:aa:4e: 93:4d:17:75:d1:f5:2e:76:1f:6a:fa:45:28:68:fe: bd:14:c8:65:f1:8d:eb:30:da:1b:0f:ef:d6:60:68: 05:7f:36:0b:d8:fc:4b:7e:4f:f7:a5:8f:ae:80:ce: 28:c6:9d:75:10:56:03:96:a5:5b:11:07:92:d5:7d: 24:fa:6b:a3:ef:90:69:ec:25:a9:1b:8c:73:44:8c: 4b:31:11:f6:4f:e7:4d:32:c6:02:29:ea:a3:d1:ac: 41:df:4c:ab:91:6a:70:48:6f:6f:48:65:84:f7:48: 07:93:85:c9:3f:3f:b1:d0:b9:19:cb:9e:86:20:20: a1:c6:85:ec:25:b5:30:7e:2c:97:a6:e8:9e:8f:58: d6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:76:81:8F:1B:7F:62:F2:AF:AF:CB:25:A5:A7:29:26:FC:D2:EA:7A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334bc486-65fe-46fa-a302-04508210ecdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.157.0.0/16 Signature Algorithm: sha256WithRSAEncryption 41:5f:f7:fb:25:49:51:22:f4:56:15:07:1e:e2:6c:27:b5:09: ac:c1:43:23:78:7f:0e:24:c1:db:a9:41:e0:44:dd:e8:41:49: f2:a0:db:a4:32:e2:12:3c:3a:37:3c:3a:84:7c:ed:db:2e:e6: 34:e1:d4:ab:28:f4:2a:e1:41:9a:e6:82:46:59:1b:82:92:95: 69:49:80:b9:79:93:de:89:5e:36:ee:86:a4:e9:5f:33:51:6d: a1:f7:ea:25:12:55:bf:fd:4a:76:94:ec:d0:70:50:34:79:e9: 71:c2:64:ed:f0:5f:ac:c8:59:d6:0d:63:51:c7:e4:81:a6:67: cf:15:c9:49:a7:75:fb:93:b9:c5:4a:a8:78:1b:f3:a7:e9:5c: 6b:a2:f7:fe:c4:9b:69:ae:f0:97:6d:26:b6:19:51:b8:8e:e3: 43:4d:0a:90:d3:bd:72:75:cd:92:61:b6:1f:ac:d9:55:b6:20: 28:ec:83:66:a2:2d:0c:b1:ec:4a:46:4c:84:e8:b1:f0:00:eb: a4:cf:6e:74:fb:0a:9e:c0:20:4b:10:f2:69:aa:d1:e4:6b:e3: 20:1e:12:84:a6:e4:84:68:8a:5d:8a:c6:5a:b5:78:46:b6:1c: 31:d9:ad:9b:4b:20:ed:9a:25:e9:26:b7:5a:0a:dc:8a:14:fc: 8b:54:bb:66 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMkEeiDs+weq56LRM91vUhMYUozcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDIxMDQ5WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTU4NDNmZTEwNzRmY2VhNWMzNDI4NmE5MTg3N2EzODM5 NmJhYTA4ODQ4ODY3ZmUxZGVlMWQ1OGYxYmZhMmI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3goeESXEr9D3QvfsvD/OJSVViZyNj9in4XQXqnhz5X8z+ snq0e8UlhIC0C1LYibry6owvJlgWO5NWYx4/kmjpKOtHxx/O9Epfz0m9mWXk+Rqj M1QOgVkh9Q9ZK43PubIzjc8xajt+PnelrDiDsDMjRo8/IgWqTpNNF3XR9S52H2r6 RSho/r0UyGXxjesw2hsP79ZgaAV/NgvY/Et+T/elj66AzijGnXUQVgOWpVsRB5LV fST6a6PvkGnsJakbjHNEjEsxEfZP500yxgIp6qPRrEHfTKuRanBIb29IZYT3SAeT hck/P7HQuRnLnoYgIKHGhewltTB+LJem6J6PWNbxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUbHaBjxt/YvKvr8slpacpJvzS6nowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMzNGJjNDg2LTY1ZmUtNDZmYS1hMzAyLTA0NTA4MjEwZWNkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCfnTANBgkqhkiG9w0BAQsFAAOCAQEAQV/3+yVJUSL0VhUHHuJsJ7UJrMFD I3h/DiTB26lB4ETd6EFJ8qDbpDLiEjw6Nzw6hHzt2y7mNOHUqyj0KuFBmuaCRlkb gpKVaUmAuXmT3oleNu6GpOlfM1FtoffqJRJVv/1KdpTs0HBQNHnpccJk7fBfrMhZ 1g1jUcfkgaZnzxXJSad1+5O5xUqoeBvzp+lca6L3/sSbaa7wl20mthlRuI7jQ00K kNO9cnXNkmG2H6zZVbYgKOyDZqItDLHsSkZMhOix8ADrpM9udPsKnsAgSxDyaarR 5GvjIB4ShKbkhGiKXYrGWrV4RrYcMdmtm0sg7Zol6Sa3WgrcihT8i1S7Zg== -----END CERTIFICATE-----Generated at Mon Mar 2 00:08:41 2026 by rpki-client