$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35694f5c-2eef-435f-9086-b9728b5d49fd.roa File: 35694f5c-2eef-435f-9086-b9728b5d49fd.roa (raw, json) Hash identifier: hLRVSQiyhXa6iSXHLTJWKDLpSkR/y1ORjOFpgz1dobA= Subject key identifier: 36:F5:22:16:60:62:31:70:E5:BD:7A:FB:09:0C:B5:8E:36:71:FF:EE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E9DE30483AB3277E67E435A7391190CC3625296 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35694f5c-2eef-435f-9086-b9728b5d49fd.roa Signing time: Tue 17 Feb 2026 02:52:57 +0000 ROA not before: Tue 17 Feb 2026 02:52:57 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 69.25.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9d:e3:04:83:ab:32:77:e6:7e:43:5a:73:91:19:0c:c3:62:52:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 17 02:52:57 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=651e289dd69ad9f456223a9e24fcfbad9f282465866c7f7b6dc7d1d70006ac86, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:75:23:d5:3e:b7:1c:2e:73:c6:66:77:ae:40: 6a:3b:3f:d2:97:0d:5d:6f:39:f0:48:04:d2:91:93: 60:33:73:ad:b9:30:36:4f:38:ec:d7:03:fd:ae:ce: ec:8e:3b:d7:65:a6:a9:6a:c8:cf:d1:1d:8f:8f:0c: e6:79:f3:0e:6c:1f:1d:df:b4:5e:3e:98:f5:e5:f9: 61:07:13:4e:14:3a:b0:cc:49:51:70:ce:17:6d:e3: 61:be:78:bb:fd:6c:f2:81:25:e8:5d:16:c5:66:e2: fe:7f:a8:37:93:04:ea:a2:91:7e:f5:cd:63:a6:7c: 4a:24:e0:9e:04:da:94:65:58:2a:f9:e0:ee:b1:dc: 82:2f:26:3c:f5:3b:65:73:f9:e6:57:8d:f5:9a:32: d9:bd:a0:15:d0:fb:42:7e:a2:76:a4:8e:cc:3f:40: 90:73:a7:9c:a5:08:8e:00:2c:db:05:2f:17:e0:34: fb:39:ef:21:95:d9:90:df:ec:09:11:cc:25:28:b3: 2b:72:be:bc:9c:bc:a5:60:a0:68:af:c8:03:9b:2a: 6f:24:ba:cc:ab:26:d3:44:b5:3c:ad:3d:3d:f9:fd: 59:50:27:b6:65:8d:ae:0a:ba:7e:03:5f:49:d6:dc: b2:28:da:38:fb:0f:ef:18:c2:1b:5f:8e:9f:a0:77: 5b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F5:22:16:60:62:31:70:E5:BD:7A:FB:09:0C:B5:8E:36:71:FF:EE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35694f5c-2eef-435f-9086-b9728b5d49fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.25.132.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:fd:27:9f:07:57:c7:9a:01:a2:bf:9b:30:8e:f7:38:f0:b5: aa:95:6d:a6:50:ee:ea:72:25:a2:b2:ae:9e:3c:4a:24:93:b7: 78:d7:88:74:1f:70:3a:dc:e4:12:5a:ed:1b:4d:6c:b2:02:a2: ad:a3:5a:66:78:e6:2a:8f:ba:be:6b:ee:87:5b:f2:1a:71:22: 7d:40:3f:d7:29:54:9b:5b:7c:8a:c9:fa:f3:d6:a7:e3:b6:79: ce:d1:35:eb:1f:98:c0:83:06:96:6a:77:4a:fc:64:c4:31:c9: c8:09:2f:5b:8b:8c:8d:ee:e5:fa:0a:6f:88:db:fc:c0:36:36: 05:24:fc:8d:97:2f:7e:e3:96:6b:28:cb:1d:47:0c:6e:a7:31: da:4b:d4:23:62:5f:dc:f1:64:d7:34:56:01:30:56:e5:b4:1b: 24:88:c7:5a:99:6b:8c:b4:28:59:65:ba:9f:71:83:d3:55:83: b8:1d:96:81:26:b3:32:8e:a1:fa:b0:1b:82:7b:32:f1:8a:d3: f8:a6:bd:c6:76:77:4d:4d:dd:c1:74:ef:3d:00:78:a1:3e:86: 7a:21:8b:29:b6:0d:a7:b4:8d:1d:f3:31:b7:28:ec:48:e5:0b: 9d:4c:ae:86:be:da:e8:c8:1e:97:19:ad:3c:75:80:3d:56:ba: 36:4f:50:85 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTp3jBIOrMnfmfkNac5EZDMNiUpYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE3MDI1MjU3WhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTFlMjg5ZGQ2OWFkOWY0NTYyMjNhOWUyNGZjZmJhZDlm MjgyNDY1ODY2YzdmN2I2ZGM3ZDFkNzAwMDZhYzg2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPdSPVPrccLnPGZneuQGo7P9KXDV1vOfBIBNKRk2Azc625 MDZPOOzXA/2uzuyOO9dlpqlqyM/RHY+PDOZ58w5sHx3ftF4+mPXl+WEHE04UOrDM SVFwzhdt42G+eLv9bPKBJehdFsVm4v5/qDeTBOqikX71zWOmfEok4J4E2pRlWCr5 4O6x3IIvJjz1O2Vz+eZXjfWaMtm9oBXQ+0J+onakjsw/QJBzp5ylCI4ALNsFLxfg NPs57yGV2ZDf7AkRzCUosytyvrycvKVgoGivyAObKm8kusyrJtNEtTytPT35/VlQ J7Zlja4Kun4DX0nW3LIo2jj7D+8Ywhtfjp+gd1v/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNvUiFmBiMXDlvXr7CQy1jjZx/+4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM1Njk0ZjVjLTJlZWYtNDM1Zi05MDg2LWI5NzI4YjVkNDlmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJFGYQwDQYJKoZIhvcNAQELBQADggEBAF/9J58HV8eaAaK/mzCO9zjwtaqV baZQ7upyJaKyrp48SiSTt3jXiHQfcDrc5BJa7RtNbLICoq2jWmZ45iqPur5r7odb 8hpxIn1AP9cpVJtbfIrJ+vPWp+O2ec7RNesfmMCDBpZqd0r8ZMQxycgJL1uLjI3u 5foKb4jb/MA2NgUk/I2XL37jlmsoyx1HDG6nMdpL1CNiX9zxZNc0VgEwVuW0GySI x1qZa4y0KFllup9xg9NVg7gdloEmszKOofqwG4J7MvGK0/imvcZ2d01N3cF07z0A eKE+hnohiym2Dae0jR3zMbco7EjlC51Mroa+2ujIHpcZrTx1gD1WujZPUIU= -----END CERTIFICATE-----Generated at Sun Mar 1 23:43:16 2026 by rpki-client