$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b1921e8-758f-4cb0-9f87-73e9fa0e8961.roa File: 3b1921e8-758f-4cb0-9f87-73e9fa0e8961.roa (raw, json) Hash identifier: DufSeDWOu6SprOBxEb+3avvU9U5lSKUpfrkrFOyy2BI= Subject key identifier: B1:14:60:44:5C:21:7A:5E:03:70:A0:61:82:BF:55:B7:60:85:1C:07 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 286AC76B7D4EAE2DAD5751A0DD3B550CEDDD79E0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b1921e8-758f-4cb0-9f87-73e9fa0e8961.roa Signing time: Wed 18 Feb 2026 00:20:05 +0000 ROA not before: Wed 18 Feb 2026 00:20:05 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 216.87.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:6a:c7:6b:7d:4e:ae:2d:ad:57:51:a0:dd:3b:55:0c:ed:dd:79:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 18 00:20:05 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=dcbed50be78ec039f4199828461c8f7744aa1f3a6e6c5dc351b0db97b6040a49, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:86:0d:f9:c5:00:c4:b3:3b:82:b4:ba:63:79: 29:3d:32:90:9e:e3:49:ac:e8:f7:c7:59:2f:dd:a9: d1:14:93:32:3b:d2:3b:d3:ec:56:d3:ea:07:0c:5d: 1d:16:de:48:c7:89:34:94:75:8b:ad:3f:48:cf:ff: 0c:fc:1a:91:68:7c:61:ff:73:21:eb:43:17:f2:74: 3b:cf:17:4e:1f:38:f6:dd:10:cc:ff:0a:91:d2:b0: 34:e0:bb:d3:0e:7c:0b:d8:97:a7:6c:69:a5:81:88: d1:d1:43:b0:2a:3b:1e:4e:ba:c2:8e:59:76:ad:e3: 2e:48:1b:f4:58:73:b1:93:27:1a:1e:41:4a:a3:a6: 49:a5:b0:8f:e3:d7:bc:40:5b:c1:ba:6c:21:33:17: 1d:5a:6e:a8:fc:24:8b:8f:a0:75:c7:0e:21:db:35: 2d:d1:38:f3:f5:e9:b3:fe:98:a0:64:56:3b:79:27: 4d:2e:7b:0c:7c:99:a9:a5:a5:11:92:8d:fc:c2:a8: 1c:4d:dc:88:cf:85:0d:31:8d:a1:62:b2:3b:5f:21: 3f:32:37:bc:0d:3a:5f:2f:1d:e9:f4:0a:24:70:cf: b4:08:02:2f:37:83:cc:8c:b6:f9:20:bc:20:f0:db: 5d:eb:2a:62:08:bb:d6:e6:b1:c2:88:dd:1f:94:37: 5c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:14:60:44:5C:21:7A:5E:03:70:A0:61:82:BF:55:B7:60:85:1C:07 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b1921e8-758f-4cb0-9f87-73e9fa0e8961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.87.2.0/23 Signature Algorithm: sha256WithRSAEncryption 15:a7:28:fb:1d:90:40:33:ec:bb:ef:8e:5a:25:b6:5f:25:ec: 36:21:bb:70:7a:18:dd:96:f6:dc:a8:98:9b:0e:40:76:ae:cb: 8b:b0:95:7b:08:2a:72:d9:72:0a:ae:b1:d8:8e:7b:03:58:d4: 62:c3:e2:d8:8c:54:92:fc:b0:e3:86:c7:03:36:4f:28:24:7b: 5d:33:8a:ba:36:77:3a:85:3b:32:60:de:98:35:37:8f:2b:9f: 59:02:22:31:e9:ba:df:f3:bb:7c:1a:20:37:19:a6:e3:6b:5f: 98:e0:fa:fc:14:af:2b:96:4c:c0:15:b0:e3:0c:23:fa:df:70: 1f:ba:f4:52:34:d4:59:ed:d8:4e:85:cf:86:7c:1f:f4:3e:53: 9d:a5:b9:71:e5:5c:c5:9a:d8:f1:3d:2d:f6:fb:c2:b0:c3:93: 9c:1c:d1:f6:59:a8:9e:0d:d9:12:c2:a9:04:5e:a3:7a:43:d0: cd:77:c4:da:c7:20:ec:69:a4:c4:17:68:f7:58:ae:f1:07:b0: 4e:fd:80:6e:a8:12:d7:18:53:72:95:63:95:53:4e:8f:64:22: b2:c0:09:82:86:97:86:95:45:01:42:69:3f:ab:dc:c3:b6:7d: ed:ba:95:be:b7:d6:ee:70:1e:05:cb:c0:08:c6:b7:c0:58:a7: 9f:44:44:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKGrHa31Ori2tV1Gg3TtVDO3deeAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE4MDAyMDA1WhcNMjYwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkY2JlZDUwYmU3OGVjMDM5ZjQxOTk4Mjg0NjFjOGY3NzQ0 YWExZjNhNmU2YzVkYzM1MWIwZGI5N2I2MDQwYTQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkhg35xQDEszuCtLpjeSk9MpCe40ms6PfHWS/dqdEUkzI7 0jvT7FbT6gcMXR0W3kjHiTSUdYutP0jP/wz8GpFofGH/cyHrQxfydDvPF04fOPbd EMz/CpHSsDTgu9MOfAvYl6dsaaWBiNHRQ7AqOx5OusKOWXat4y5IG/RYc7GTJxoe QUqjpkmlsI/j17xAW8G6bCEzFx1abqj8JIuPoHXHDiHbNS3ROPP16bP+mKBkVjt5 J00uewx8mamlpRGSjfzCqBxN3IjPhQ0xjaFisjtfIT8yN7wNOl8vHen0CiRwz7QI Ai83g8yMtvkgvCDw213rKmIIu9bmscKI3R+UN1y/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsRRgRFwhel4DcKBhgr9Vt2CFHAcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNiMTkyMWU4LTc1OGYtNGNiMC05Zjg3LTczZTlmYTBlODk2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHYVwIwDQYJKoZIhvcNAQELBQADggEBABWnKPsdkEAz7Lvvjloltl8l7DYh u3B6GN2W9tyomJsOQHauy4uwlXsIKnLZcgqusdiOewNY1GLD4tiMVJL8sOOGxwM2 Tygke10ziro2dzqFOzJg3pg1N48rn1kCIjHput/zu3waIDcZpuNrX5jg+vwUryuW TMAVsOMMI/rfcB+69FI01Fnt2E6Fz4Z8H/Q+U52luXHlXMWa2PE9Lfb7wrDDk5wc 0fZZqJ4N2RLCqQReo3pD0M13xNrHIOxppMQXaPdYrvEHsE79gG6oEtcYU3KVY5VT To9kIrLACYKGl4aVRQFCaT+r3MO2fe26lb631u5wHgXLwAjGt8BYp59ERHM= -----END CERTIFICATE-----Generated at Mon Mar 2 11:35:34 2026 by rpki-client