$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ac220a6-0e06-40a8-b44e-4fbb37349986.roa File: 3ac220a6-0e06-40a8-b44e-4fbb37349986.roa (raw, json) Hash identifier: xluzV/FsAJTjdlvqKn1k/R2Ol74lkWnxcDBc0RqrqMo= Subject key identifier: 3F:46:28:66:53:6A:60:5D:A3:F4:81:B2:8A:1A:51:80:C5:DA:60:7C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 411AAA3F52BE68CA0A7383D3A386568EB29D6B13 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ac220a6-0e06-40a8-b44e-4fbb37349986.roa Signing time: Sun 15 Feb 2026 00:31:08 +0000 ROA not before: Sun 15 Feb 2026 00:31:08 +0000 ROA not after: Sat 16 May 2026 23:59:59 +0000 asID: 9498 IP address blocks: 70.130.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:1a:aa:3f:52:be:68:ca:0a:73:83:d3:a3:86:56:8e:b2:9d:6b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 15 00:31:08 2026 GMT Not After : May 16 23:59:59 2026 GMT Subject: serialNumber=de76465faa9b35103cbdbac42b3502b220302239542d83aacf5dff01c3c9a5ce, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ba:72:88:7c:84:91:2f:17:a6:10:bf:5b:aa: c6:00:b0:c2:03:58:96:52:95:47:a0:53:b4:dd:32: 67:d9:37:15:db:76:b0:6a:d7:31:84:a0:4c:0a:8f: 25:4c:df:e2:b2:04:85:e3:0f:ec:52:f1:73:4a:34: 8a:87:c0:db:a1:ca:56:67:8b:0f:2b:57:07:fd:0b: 83:61:08:94:30:78:9f:47:9c:41:15:9c:f0:6f:85: 05:ae:0e:b6:dc:38:f9:86:88:b8:33:0a:74:e9:ed: 3b:cf:2d:43:ac:77:8b:df:c4:fc:aa:c5:ee:7b:fa: 44:cd:97:2f:f0:97:4b:45:02:f5:82:45:45:90:f1: ab:bf:c5:a7:bd:49:bf:b9:94:6b:bc:79:9e:cd:a5: 35:01:89:16:e9:a6:4b:a5:34:2f:ac:3e:2c:aa:34: 88:ec:9a:07:0f:fe:3e:c6:f7:9b:65:77:46:a9:12: 98:d1:89:4d:77:1f:4d:81:bd:2b:77:3b:f3:f6:e8: 91:f5:2c:2b:6e:ec:3a:54:a6:0a:2d:fb:81:96:af: 2f:6f:ab:0e:0b:40:1d:9c:13:05:98:fa:14:10:cc: 7b:73:c1:96:7a:ce:d8:ad:25:67:43:fe:41:3a:7c: a9:e8:5d:99:ec:8d:70:14:cf:de:6a:56:21:3d:dd: 31:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:46:28:66:53:6A:60:5D:A3:F4:81:B2:8A:1A:51:80:C5:DA:60:7C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ac220a6-0e06-40a8-b44e-4fbb37349986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.130.228.0/24 Signature Algorithm: sha256WithRSAEncryption ad:36:1d:13:f5:fe:53:fb:95:ec:ca:14:60:41:0f:1c:09:49: ac:89:40:14:f4:7f:4f:cc:14:de:05:d7:e3:59:1b:fa:08:39: ad:77:c8:ca:b7:2e:0c:79:63:c9:b7:2e:ed:a4:1a:1a:f8:3b: e4:55:f5:16:7e:b7:dc:c9:c3:ba:8c:b5:5e:05:87:d6:ac:8e: b0:23:cc:45:d8:9c:58:39:2c:56:d3:60:ef:43:72:e3:f4:57: 92:31:6e:0f:28:23:d0:89:00:5e:3b:45:d4:ce:66:9b:b3:fa: 55:55:8a:b7:a8:df:ae:7c:f5:06:d5:cd:24:4c:a7:21:bf:e0: 6e:6b:83:2c:be:61:2c:fb:f0:25:54:ad:e5:5c:94:de:e6:14: ed:6a:54:02:18:15:d5:3a:76:c1:29:18:97:01:9e:a7:56:73: c3:2a:73:33:af:86:86:3c:04:25:aa:7c:e5:d8:05:91:da:6a: b8:88:1f:df:ea:75:eb:3c:f1:54:a2:ac:4f:fc:ac:4f:f5:23: 04:ce:8b:83:f0:f3:40:32:e2:2e:35:84:48:08:97:a6:6b:ac: 08:75:5b:f4:61:1e:19:e1:4a:78:d4:1c:63:5c:d8:90:f8:a5: 44:71:8a:08:1e:20:44:f9:57:45:ae:b3:66:69:5f:5c:54:d8: fb:d3:ca:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQRqqP1K+aMoKc4PTo4ZWjrKdaxMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE1MDAzMTA4WhcNMjYwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTc2NDY1ZmFhOWIzNTEwM2NiZGJhYzQyYjM1MDJiMjIw MzAyMjM5NTQyZDgzYWFjZjVkZmYwMWMzYzlhNWNlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtunKIfISRLxemEL9bqsYAsMIDWJZSlUegU7TdMmfZNxXb drBq1zGEoEwKjyVM3+KyBIXjD+xS8XNKNIqHwNuhylZniw8rVwf9C4NhCJQweJ9H nEEVnPBvhQWuDrbcOPmGiLgzCnTp7TvPLUOsd4vfxPyqxe57+kTNly/wl0tFAvWC RUWQ8au/xae9Sb+5lGu8eZ7NpTUBiRbppkulNC+sPiyqNIjsmgcP/j7G95tld0ap EpjRiU13H02BvSt3O/P26JH1LCtu7DpUpgot+4GWry9vqw4LQB2cEwWY+hQQzHtz wZZ6ztitJWdD/kE6fKnoXZnsjXAUz95qViE93TGvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUP0YoZlNqYF2j9IGyihpRgMXaYHwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNhYzIyMGE2LTBlMDYtNDBhOC1iNDRlLTRmYmIzNzM0OTk4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABGguQwDQYJKoZIhvcNAQELBQADggEBAK02HRP1/lP7lezKFGBBDxwJSayJ QBT0f0/MFN4F1+NZG/oIOa13yMq3Lgx5Y8m3Lu2kGhr4O+RV9RZ+t9zJw7qMtV4F h9asjrAjzEXYnFg5LFbTYO9DcuP0V5Ixbg8oI9CJAF47RdTOZpuz+lVVireo3658 9QbVzSRMpyG/4G5rgyy+YSz78CVUreVclN7mFO1qVAIYFdU6dsEpGJcBnqdWc8Mq czOvhoY8BCWqfOXYBZHaariIH9/qdes88VSirE/8rE/1IwTOi4Pw80Ay4i41hEgI l6ZrrAh1W/RhHhnhSnjUHGNc2JD4pURxiggeIET5V0Wus2ZpX1xU2PvTyr8= -----END CERTIFICATE-----Generated at Mon Mar 2 11:35:40 2026 by rpki-client