$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/466309f8-ad84-4ccd-a3ab-f603c201bc26.roa File: 466309f8-ad84-4ccd-a3ab-f603c201bc26.roa (raw, json) Hash identifier: 8nscscVYWoxerLNB4YgsO7iMt1pTnANgma08ZoF2HZk= Subject key identifier: 4D:0E:00:2D:BB:D5:4E:E8:2A:17:42:D3:46:B9:C4:1A:3C:D8:EA:51 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 062B680F630211E1F883AB98ED58E518EFA0AF9C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/466309f8-ad84-4ccd-a3ab-f603c201bc26.roa Signing time: Wed 18 Feb 2026 00:30:58 +0000 ROA not before: Wed 18 Feb 2026 00:30:58 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 124.25.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2b:68:0f:63:02:11:e1:f8:83:ab:98:ed:58:e5:18:ef:a0:af:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 18 00:30:58 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=d80f93a37f6b0f2bc9b4230d179825a5826320f7a8f70966d6320c67f1613414, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:38:a4:26:52:4e:2c:23:f4:40:95:ee:0f: 5b:6c:66:17:99:02:7a:e8:bf:4c:4a:3f:04:7d:74: 03:c0:0f:f9:4b:43:f5:fe:86:50:44:99:19:01:09: b1:f3:d1:ef:4f:e7:6a:32:79:3b:53:7d:c8:b2:79: 4f:12:9b:b3:c4:98:69:0d:0e:fe:99:ba:df:20:1c: c4:26:e3:34:21:27:0a:e6:0d:ae:56:d0:48:04:ac: 25:37:fd:7b:01:0f:ff:66:12:cb:21:1f:d9:05:70: 2c:6d:5c:1a:b1:17:f8:1e:39:42:30:65:f1:e9:fb: 26:6c:9a:e9:5a:e2:8e:79:ea:ec:8a:d2:2a:9d:a8: 9d:8f:a0:d4:d2:dd:2e:d0:a9:f3:5c:2a:aa:21:e3: ce:4f:e1:25:74:fd:e0:e9:07:99:cf:59:6a:0c:da: df:c9:84:38:7c:f2:3a:28:65:2a:37:46:5c:b8:de: 6e:67:4a:dc:62:e4:7e:20:66:6d:89:0c:17:cd:dd: 83:13:8e:e7:18:0a:14:69:1d:c2:5d:ae:20:a8:a8: 7e:3b:74:31:c0:e8:fc:26:52:0c:eb:13:3f:3c:0c: 1c:62:e6:43:04:f9:21:c5:bc:fd:de:09:c4:18:f3: 85:65:ab:ad:bc:5d:b2:f4:79:20:33:18:5a:2a:ce: 50:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0E:00:2D:BB:D5:4E:E8:2A:17:42:D3:46:B9:C4:1A:3C:D8:EA:51 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/466309f8-ad84-4ccd-a3ab-f603c201bc26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.25.0.0/18 Signature Algorithm: sha256WithRSAEncryption 56:f7:22:f3:01:7d:52:3c:a1:09:fd:46:46:9c:13:4a:05:ec: 90:cd:f1:78:79:61:47:21:54:5b:c2:f2:59:a7:c2:78:0c:1e: ce:60:aa:02:24:1e:9e:93:08:5b:7e:4b:a8:b6:b3:b7:5c:b0: 51:8c:ef:78:60:76:1b:f1:82:cf:4a:f1:2e:63:40:26:64:fd: 70:b2:8d:3f:c1:e5:27:1d:09:c0:ef:63:c9:54:45:2a:bb:d0: cd:c9:83:60:d6:3e:04:68:e6:83:68:cb:2f:88:ce:11:5b:4d: 98:cc:66:e4:73:ae:ad:f1:66:7d:54:87:9d:13:95:11:73:4a: c5:ce:4e:f3:26:37:05:17:7f:87:40:a1:46:8e:fd:d3:be:67: 35:f4:23:5a:3d:1d:e8:0a:55:da:0b:84:e4:67:fa:f7:47:5d: 14:66:0b:8a:4c:fb:e1:56:cc:4b:91:3f:01:70:81:ae:92:fa: 9d:f3:de:d9:50:c4:20:44:b9:35:a0:ce:57:d7:31:2e:5b:13: 25:d0:7b:32:c1:ee:02:3a:e6:f7:b7:87:4e:2d:26:a0:2c:4f: ce:25:18:1d:32:c9:a5:07:2a:32:61:2f:78:41:d1:fd:d0:6f: e5:fe:14:d9:1b:fa:bb:e7:f0:66:91:2c:2a:96:f0:cb:a8:e6: 2f:bf:dd:81 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBitoD2MCEeH4g6uY7VjlGO+gr5wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE4MDAzMDU4WhcNMjYwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkODBmOTNhMzdmNmIwZjJiYzliNDIzMGQxNzk4MjVhNTgy NjMyMGY3YThmNzA5NjZkNjMyMGM2N2YxNjEzNDE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3gjikJlJOLCP0QJXuD1tsZheZAnrov0xKPwR9dAPAD/lL Q/X+hlBEmRkBCbHz0e9P52oyeTtTfciyeU8Sm7PEmGkNDv6Zut8gHMQm4zQhJwrm Da5W0EgErCU3/XsBD/9mEsshH9kFcCxtXBqxF/geOUIwZfHp+yZsmula4o556uyK 0iqdqJ2PoNTS3S7QqfNcKqoh485P4SV0/eDpB5nPWWoM2t/JhDh88jooZSo3Rly4 3m5nStxi5H4gZm2JDBfN3YMTjucYChRpHcJdriCoqH47dDHA6PwmUgzrEz88DBxi 5kME+SHFvP3eCcQY84Vlq628XbL0eSAzGFoqzlCxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTQ4ALbvVTugqF0LTRrnEGjzY6lEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2NjMwOWY4LWFkODQtNGNjZC1hM2FiLWY2MDNjMjAxYmMyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZ8GQAwDQYJKoZIhvcNAQELBQADggEBAFb3IvMBfVI8oQn9RkacE0oF7JDN 8Xh5YUchVFvC8lmnwngMHs5gqgIkHp6TCFt+S6i2s7dcsFGM73hgdhvxgs9K8S5j QCZk/XCyjT/B5ScdCcDvY8lURSq70M3Jg2DWPgRo5oNoyy+IzhFbTZjMZuRzrq3x Zn1Uh50TlRFzSsXOTvMmNwUXf4dAoUaO/dO+ZzX0I1o9HegKVdoLhORn+vdHXRRm C4pM++FWzEuRPwFwga6S+p3z3tlQxCBEuTWgzlfXMS5bEyXQezLB7gI65ve3h04t JqAsT84lGB0yyaUHKjJhL3hB0f3Qb+X+FNkb+rvn8GaRLCqW8Muo5i+/3YE= -----END CERTIFICATE-----Generated at Mon Mar 2 00:17:37 2026 by rpki-client