$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/424f8ace-0502-433d-b305-08ed3d55c9f5.roa File: 424f8ace-0502-433d-b305-08ed3d55c9f5.roa (raw, json) Hash identifier: Q8tkpOHF5igJcox3NalA+o8JkQXVVt0bFjCb1v/W+aw= Subject key identifier: 3D:D0:CF:9B:E8:6B:CC:4E:89:D0:18:94:ED:01:C1:50:F5:7F:0D:87 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0B320DDFF9E67BAFA3E9581381A7ADA4B49465D3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/424f8ace-0502-433d-b305-08ed3d55c9f5.roa Signing time: Thu 26 Feb 2026 00:20:49 +0000 ROA not before: Thu 26 Feb 2026 00:20:49 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 207.21.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:32:0d:df:f9:e6:7b:af:a3:e9:58:13:81:a7:ad:a4:b4:94:65:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 26 00:20:49 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=e011a03289c7bfefb23c9f96150bdf0da18a4a094f19fed5f4a6b364908ddb75, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:34:a0:f2:26:24:d2:d5:30:5d:67:05:13:68: ba:69:6d:81:75:e6:06:ae:46:f6:c6:21:76:5d:ac: 54:48:35:05:45:2a:90:0f:55:bf:22:52:0f:8b:8a: e6:7e:13:85:fc:fa:90:e3:0d:83:55:70:79:e8:8c: 8c:52:6e:73:03:ec:6b:18:b5:4f:78:bc:ef:ea:0f: 64:90:33:f9:82:a6:a9:dd:59:72:17:29:28:f6:fc: dc:05:c9:c8:24:fd:ec:3a:96:54:f4:42:8b:20:0e: 43:ef:96:84:90:57:42:33:f6:85:fd:29:c4:78:8f: 26:2c:a1:ba:71:4f:88:d3:16:ce:8b:ac:d1:7f:f3: fa:d2:2b:3b:ba:6a:7e:a9:d0:d9:6b:65:80:7a:d2: 4f:7f:93:e6:e3:36:f7:ac:ad:a2:ab:8e:f9:0e:94: d8:69:e6:34:7d:a7:4e:14:8b:ba:2c:a4:f0:ef:96: d6:07:19:0b:c6:9c:b2:dd:12:96:42:18:32:03:30: f4:e0:88:6d:6c:c6:18:47:5a:9f:f0:a6:d0:8b:f5: a6:d0:cf:d4:72:40:ba:c5:22:c1:7a:b5:e9:86:5c: 84:b0:5d:73:d9:30:85:a8:41:c9:9e:b7:32:ce:af: 20:5d:da:cc:f6:fe:8b:d4:79:ac:fb:cd:23:ce:b0: f5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D0:CF:9B:E8:6B:CC:4E:89:D0:18:94:ED:01:C1:50:F5:7F:0D:87 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/424f8ace-0502-433d-b305-08ed3d55c9f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.21.204.0/24 Signature Algorithm: sha256WithRSAEncryption 24:95:36:ad:b2:42:01:99:83:59:8a:05:e8:4b:a2:df:39:a1: aa:4a:b3:8a:06:f0:34:21:06:9d:8f:94:c6:be:2b:8a:5d:f6: 79:b8:86:af:32:3a:9b:ca:a7:d2:15:8b:83:fc:41:9b:01:7b: b6:5c:81:68:4b:8b:0a:19:ab:d6:4d:cb:29:5f:1c:17:31:5b: 65:1a:92:f2:3e:2d:85:a9:97:f4:b8:2e:d7:a8:32:2e:65:d0: 1d:4c:0c:37:ec:c5:69:d6:8d:b8:2f:8f:09:14:81:9a:21:b9: cd:64:43:ea:d7:22:44:93:53:5f:00:dc:5e:fc:a5:c9:7e:84: f2:34:80:70:50:41:18:96:9f:ef:22:1c:28:2f:b9:e8:e0:ed: 14:86:97:61:26:1a:67:1a:a5:71:c0:2e:ca:d1:cb:98:16:8d: 85:97:39:58:02:16:58:72:75:ea:96:8b:4a:93:49:24:88:75: aa:02:8c:78:a3:46:d6:3a:f0:9a:d7:40:3b:7a:9e:6b:ca:aa: 27:5d:e3:86:38:cd:5a:3d:7a:c4:df:d5:70:20:dc:3d:ae:28: 2b:b0:f8:e9:9a:47:52:2a:70:c2:c2:19:29:b6:30:e2:94:0b: 98:9d:90:ab:2e:c5:ab:6c:15:ad:84:fc:5c:0b:e8:71:70:84: 95:2b:17:2c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCzIN3/nme6+j6VgTgaetpLSUZdMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI2MDAyMDQ5WhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMDExYTAzMjg5YzdiZmVmYjIzYzlmOTYxNTBiZGYwZGEx OGE0YTA5NGYxOWZlZDVmNGE2YjM2NDkwOGRkYjc1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuNKDyJiTS1TBdZwUTaLppbYF15gauRvbGIXZdrFRINQVF KpAPVb8iUg+LiuZ+E4X8+pDjDYNVcHnojIxSbnMD7GsYtU94vO/qD2SQM/mCpqnd WXIXKSj2/NwFycgk/ew6llT0QosgDkPvloSQV0Iz9oX9KcR4jyYsobpxT4jTFs6L rNF/8/rSKzu6an6p0NlrZYB60k9/k+bjNvesraKrjvkOlNhp5jR9p04Ui7ospPDv ltYHGQvGnLLdEpZCGDIDMPTgiG1sxhhHWp/wptCL9abQz9RyQLrFIsF6temGXISw XXPZMIWoQcmetzLOryBd2sz2/ovUeaz7zSPOsPVXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPdDPm+hrzE6J0BiU7QHBUPV/DYcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQyNGY4YWNlLTA1MDItNDMzZC1iMzA1LTA4ZWQzZDU1YzlmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADPFcwwDQYJKoZIhvcNAQELBQADggEBACSVNq2yQgGZg1mKBehLot85oapK s4oG8DQhBp2PlMa+K4pd9nm4hq8yOpvKp9IVi4P8QZsBe7ZcgWhLiwoZq9ZNyylf HBcxW2UakvI+LYWpl/S4LteoMi5l0B1MDDfsxWnWjbgvjwkUgZohuc1kQ+rXIkST U18A3F78pcl+hPI0gHBQQRiWn+8iHCgvuejg7RSGl2EmGmcapXHALsrRy5gWjYWX OVgCFlhydeqWi0qTSSSIdaoCjHijRtY68JrXQDt6nmvKqidd44Y4zVo9esTf1XAg 3D2uKCuw+OmaR1IqcMLCGSm2MOKUC5idkKsuxatsFa2E/FwL6HFwhJUrFyw= -----END CERTIFICATE-----Generated at Mon Mar 2 03:06:34 2026 by rpki-client