$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e5c8f2-c974-43b5-8f46-5ca289b283ae.roa File: 38e5c8f2-c974-43b5-8f46-5ca289b283ae.roa (raw, json) Hash identifier: I7/UGRDtKf9rPennRTGCZ/MjlBNhwhhZGeKz6zrcjkk= Subject key identifier: 1B:B0:A0:00:F8:AA:F4:DD:B5:E2:52:48:4B:83:61:AC:37:AD:D2:FF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4896A0706B731561E0B7CE3679F8444221906D2F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e5c8f2-c974-43b5-8f46-5ca289b283ae.roa Signing time: Fri 20 Feb 2026 00:30:12 +0000 ROA not before: Fri 20 Feb 2026 00:30:12 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.91.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:96:a0:70:6b:73:15:61:e0:b7:ce:36:79:f8:44:42:21:90:6d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 20 00:30:12 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=a9d3ceed7f117a1ed51bec556d4bd2f18d102d5553ec32c84a384808e80200fa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:b0:b5:14:6c:d9:fa:18:fe:c8:80:8a:d8: dd:1d:c0:9b:f9:87:11:65:61:63:46:3f:a0:ac:07: eb:5a:12:25:ec:59:d7:e2:5d:b8:6a:c7:15:a5:bf: 4f:9f:22:22:7b:4d:2c:35:24:70:da:f8:68:93:0e: eb:36:4a:c4:a6:d8:ea:8f:1a:7a:3d:a1:2a:be:0d: da:37:6b:1a:7f:97:50:50:52:38:f7:54:76:22:f6: cd:5d:6d:57:3b:0b:56:4c:8f:22:12:9a:09:9e:f6: 45:74:dc:70:69:9d:57:df:2b:34:44:cf:15:c1:bc: fb:9f:f1:c2:f1:0a:44:e2:4c:99:fb:88:2d:e3:46: b0:eb:88:43:56:75:82:f1:53:95:9c:4d:2e:41:b7: 83:ba:be:fa:33:58:c6:36:1f:dd:e8:2f:57:e1:68: 8a:8e:bc:aa:d8:18:24:db:a1:59:12:27:ae:ab:37: 5e:5b:b8:c9:7c:f2:51:e4:52:70:9f:76:db:74:48: f6:45:7f:14:6f:00:49:d6:c2:af:35:66:c1:d5:9c: 41:ab:94:52:ca:ad:35:16:03:9a:30:33:af:53:27: a1:02:7e:4d:7d:ca:1a:f7:2d:72:0c:32:72:16:a6: b7:f7:a5:aa:19:27:54:f8:17:46:b7:e4:5e:f2:80: ed:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B0:A0:00:F8:AA:F4:DD:B5:E2:52:48:4B:83:61:AC:37:AD:D2:FF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e5c8f2-c974-43b5-8f46-5ca289b283ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.91.15.0/24 Signature Algorithm: sha256WithRSAEncryption 79:18:32:1e:e9:61:4e:d3:24:a2:2a:88:c5:f1:86:e9:d5:60: be:05:43:e8:1c:00:d4:55:8a:ff:e0:a3:65:75:e4:80:62:e7: 12:09:d8:69:ee:6a:28:c5:b9:ff:16:79:17:88:df:f7:cd:b9: 42:11:39:69:f2:30:75:c4:ba:e1:36:f6:ea:7c:60:fc:18:5c: c3:ba:30:44:4f:d4:ce:5f:f0:8f:85:b1:19:a5:0c:d7:63:35: 3d:26:87:b8:b4:c1:95:62:3c:6c:83:37:d9:7b:81:4a:5b:fd: a2:2b:a5:75:5a:4e:c5:84:ab:c9:e9:69:74:91:10:c9:35:e3: 0f:54:86:1c:dd:7b:ed:f7:1e:4c:98:fd:e1:9f:50:94:32:d2: d7:20:a6:74:bb:52:8b:a0:c9:43:c1:f2:d0:27:dc:8f:0a:e3: f4:6f:4d:f4:6d:94:56:f6:ef:24:7d:b3:ca:a3:6d:cc:8d:5c: a4:29:b6:10:ff:25:b5:72:ee:6d:94:18:09:80:6e:c5:b6:12: 27:93:ac:99:fe:6e:c7:79:7b:41:56:9f:d2:55:6e:dc:4b:aa: d6:7c:47:98:67:a0:d8:78:1c:0c:4a:ed:89:2d:06:b3:60:e7: 8e:23:69:aa:5f:22:3a:de:11:4a:7d:ba:45:b5:51:25:9b:cf: 41:de:10:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSJagcGtzFWHgt842efhEQiGQbS8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIwMDAzMDEyWhcNMjYwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOWQzY2VlZDdmMTE3YTFlZDUxYmVjNTU2ZDRiZDJmMThk MTAyZDU1NTNlYzMyYzg0YTM4NDgwOGU4MDIwMGZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs2bC1FGzZ+hj+yICK2N0dwJv5hxFlYWNGP6CsB+taEiXs WdfiXbhqxxWlv0+fIiJ7TSw1JHDa+GiTDus2SsSm2OqPGno9oSq+Ddo3axp/l1BQ Ujj3VHYi9s1dbVc7C1ZMjyISmgme9kV03HBpnVffKzREzxXBvPuf8cLxCkTiTJn7 iC3jRrDriENWdYLxU5WcTS5Bt4O6vvozWMY2H93oL1fhaIqOvKrYGCTboVkSJ66r N15buMl88lHkUnCfdtt0SPZFfxRvAEnWwq81ZsHVnEGrlFLKrTUWA5owM69TJ6EC fk19yhr3LXIMMnIWprf3paoZJ1T4F0a35F7ygO2dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUG7CgAPiq9N214lJIS4NhrDet0v8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4ZTVjOGYyLWM5NzQtNDNiNS04ZjQ2LTVjYTI4OWIyODNhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAXWw8wDQYJKoZIhvcNAQELBQADggEBAHkYMh7pYU7TJKIqiMXxhunVYL4F Q+gcANRViv/go2V15IBi5xIJ2GnuaijFuf8WeReI3/fNuUIROWnyMHXEuuE29up8 YPwYXMO6MERP1M5f8I+FsRmlDNdjNT0mh7i0wZViPGyDN9l7gUpb/aIrpXVaTsWE q8npaXSREMk14w9Uhhzde+33HkyY/eGfUJQy0tcgpnS7UougyUPB8tAn3I8K4/Rv TfRtlFb27yR9s8qjbcyNXKQpthD/JbVy7m2UGAmAbsW2EieTrJn+bsd5e0FWn9JV btxLqtZ8R5hnoNh4HAxK7YktBrNg544jaapfIjreEUp9ukW1USWbz0HeEJM= -----END CERTIFICATE-----Generated at Mon Mar 2 00:08:37 2026 by rpki-client