$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47451a7d-9c77-4016-a3e5-88cd310f0fdf.roa File: 47451a7d-9c77-4016-a3e5-88cd310f0fdf.roa (raw, json) Hash identifier: s3/oR2DHWjER1cgoa1oJz3LoSoD+fXufRwBGQLfguhg= Subject key identifier: B8:2E:65:D1:60:3D:2F:2E:A0:2F:D7:15:96:15:F0:C4:E0:B1:86:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E01DAB684417F7758D63236FA4AB798FA2127E6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47451a7d-9c77-4016-a3e5-88cd310f0fdf.roa Signing time: Sat 14 Feb 2026 00:30:19 +0000 ROA not before: Sat 14 Feb 2026 00:30:19 +0000 ROA not after: Fri 15 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 192.210.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:01:da:b6:84:41:7f:77:58:d6:32:36:fa:4a:b7:98:fa:21:27:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 14 00:30:19 2026 GMT Not After : May 15 23:59:59 2026 GMT Subject: serialNumber=91e74b9617286773a463cb54273a5ad72fdc4fe256b8948e77e9a2177b9be71e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a2:ef:14:16:a3:cc:66:ff:b4:d4:8d:fa:29: e2:6d:c1:f3:bb:f4:20:d7:11:e1:94:33:e0:7b:74: 78:97:c8:87:2d:f4:59:9b:6f:42:d9:17:d6:80:0a: a5:7b:e1:61:a5:f0:20:9d:34:81:3f:e2:d6:31:cd: ab:50:b4:b1:ce:97:86:6b:b6:3f:f4:81:7e:2f:41: 7f:9e:db:d4:7a:31:02:25:63:b4:f1:5a:95:a1:60: 3a:29:2a:0a:52:56:7d:f5:34:b8:af:a2:f3:97:5a: 46:e5:fa:60:58:5a:8b:2e:b2:f1:8d:c8:3b:1e:97: fc:01:ed:18:60:3b:3a:f6:e4:1c:67:c1:f7:07:e1: 3f:9d:70:7c:10:2d:16:67:3e:42:ab:2b:74:7f:fe: 38:34:39:cc:15:10:c0:b1:32:2e:66:49:91:9a:87: c2:79:7c:81:aa:cc:43:21:d2:f6:74:82:22:a7:0d: 52:c5:c7:06:fa:21:9d:05:13:e6:80:51:a8:f2:83: 38:8e:8d:80:2c:21:82:b0:31:7f:1a:d2:72:e6:ef: 5a:a2:8d:b0:e9:ae:64:b4:fb:9c:96:97:88:f4:28: df:6c:6e:0f:21:fd:8d:85:a6:ea:30:99:5e:b3:34: 3d:0f:b2:f3:75:68:84:ca:7c:82:e9:e9:57:b1:a8: f3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2E:65:D1:60:3D:2F:2E:A0:2F:D7:15:96:15:F0:C4:E0:B1:86:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47451a7d-9c77-4016-a3e5-88cd310f0fdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.210.48.0/20 Signature Algorithm: sha256WithRSAEncryption b1:5e:08:db:82:a4:b0:cd:5a:e3:32:2d:f4:44:29:55:72:f2: ee:af:41:58:86:b4:aa:88:59:89:5c:6e:ce:44:50:e8:ee:6d: f7:c3:d9:6a:48:7c:3f:ca:ca:01:7b:8d:eb:bf:fa:6c:0c:01: 41:7d:38:ab:01:12:2a:32:21:c1:94:6f:ba:c9:4b:d3:f5:0f: f6:06:7e:6a:10:a1:97:c0:4c:f4:9f:97:6f:95:72:59:c2:fe: 3b:7e:d8:ec:66:8f:98:ed:16:f6:62:59:c3:c6:fe:98:0f:b3: 3f:0d:8b:fd:50:bf:89:31:10:62:6c:61:c9:c6:f1:86:e0:4f: 1c:c0:f7:2e:26:88:f5:98:f9:60:97:aa:83:35:34:9f:21:42: bb:48:38:cb:4c:49:a7:c1:db:b3:41:c9:b7:e1:3d:69:03:5f: 79:ab:42:f5:70:11:af:30:1f:8a:d2:2f:d7:20:79:d3:c0:76: 55:8f:85:b0:40:9e:23:d9:65:84:89:c7:cf:24:9e:fc:2e:3c: e8:3a:fb:f0:7b:c0:7f:34:a2:f2:36:0f:43:82:1e:aa:6f:13: 01:d0:68:4e:ec:da:b6:3b:a2:ca:78:a0:99:fb:5c:68:a2:80: a6:47:1a:b3:4c:f0:13:8c:16:61:75:5f:b2:89:63:87:66:98: 60:aa:d2:6e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDgHatoRBf3dY1jI2+kq3mPohJ+YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE0MDAzMDE5WhcNMjYwNTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MWU3NGI5NjE3Mjg2NzczYTQ2M2NiNTQyNzNhNWFkNzJm ZGM0ZmUyNTZiODk0OGU3N2U5YTIxNzdiOWJlNzFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJou8UFqPMZv+01I36KeJtwfO79CDXEeGUM+B7dHiXyIct 9Fmbb0LZF9aACqV74WGl8CCdNIE/4tYxzatQtLHOl4Zrtj/0gX4vQX+e29R6MQIl Y7TxWpWhYDopKgpSVn31NLivovOXWkbl+mBYWosusvGNyDsel/wB7RhgOzr25Bxn wfcH4T+dcHwQLRZnPkKrK3R//jg0OcwVEMCxMi5mSZGah8J5fIGqzEMh0vZ0giKn DVLFxwb6IZ0FE+aAUajygziOjYAsIYKwMX8a0nLm71qijbDprmS0+5yWl4j0KN9s bg8h/Y2FpuowmV6zND0PsvN1aITKfILp6VexqPNDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuC5l0WA9Ly6gL9cVlhXwxOCxhnAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ3NDUxYTdkLTljNzctNDAxNi1hM2U1LTg4Y2QzMTBmMGZkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATA0jAwDQYJKoZIhvcNAQELBQADggEBALFeCNuCpLDNWuMyLfREKVVy8u6v QViGtKqIWYlcbs5EUOjubffD2WpIfD/KygF7jeu/+mwMAUF9OKsBEioyIcGUb7rJ S9P1D/YGfmoQoZfATPSfl2+VclnC/jt+2Oxmj5jtFvZiWcPG/pgPsz8Ni/1Qv4kx EGJsYcnG8YbgTxzA9y4miPWY+WCXqoM1NJ8hQrtIOMtMSafB27NBybfhPWkDX3mr QvVwEa8wH4rSL9cgedPAdlWPhbBAniPZZYSJx88knvwuPOg6+/B7wH80ovI2D0OC HqpvEwHQaE7s2rY7osp4oJn7XGiigKZHGrNM8BOMFmF1X7KJY4dmmGCq0m4= -----END CERTIFICATE-----Generated at Mon Mar 2 00:06:42 2026 by rpki-client