$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49d6e5df-c778-467a-bc75-947943288321.roa File: 49d6e5df-c778-467a-bc75-947943288321.roa (raw, json) Hash identifier: MZHDpz9F/55VRA8oCKUil0hPpBuBsuc+N0jDmiJ2a4c= Subject key identifier: BD:B1:7F:D0:4B:A8:A2:27:2F:25:14:3C:88:BF:88:E1:4A:74:25:D1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 668EC8C5AE575370973E5FDF956A9FD1899508F9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49d6e5df-c778-467a-bc75-947943288321.roa Signing time: Mon 16 Feb 2026 21:53:29 +0000 ROA not before: Mon 16 Feb 2026 21:53:29 +0000 ROA not after: Sun 17 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.94.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:8e:c8:c5:ae:57:53:70:97:3e:5f:df:95:6a:9f:d1:89:95:08:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 16 21:53:29 2026 GMT Not After : May 17 23:59:59 2026 GMT Subject: serialNumber=63286f001e1b84a9fd1f805f29137364b87f2f2975cbbe25eab74835082a814f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e6:29:9c:ae:0c:33:f6:4d:28:7d:2f:ec:ca: 4a:3b:5d:d8:33:d3:4f:35:c3:3d:41:45:e2:58:fd: b7:59:c2:46:19:84:bc:72:78:5e:52:12:38:2e:e4: e2:06:d8:cb:5d:bf:a5:c8:e1:14:50:e4:95:45:1c: 09:36:17:07:b7:2e:00:03:4f:5b:d1:e5:70:cb:83: cd:e8:8b:e7:65:2b:98:8e:b6:81:7b:89:b8:a3:05: 59:9d:1e:14:2f:70:7a:92:74:e4:08:08:12:4a:06: 12:fe:d2:6b:e5:79:91:d0:ea:23:8e:56:73:3f:cf: ef:4b:02:47:7e:1d:fd:a1:93:d8:91:b4:b8:47:38: eb:0a:08:eb:2d:c6:08:b2:17:0b:93:f7:2a:c8:81: 23:8c:15:0a:09:5d:d0:46:52:e9:21:b6:28:db:3b: b7:52:1b:f1:08:fd:90:e3:58:b7:ee:91:26:82:37: 4a:3c:5c:2c:34:8d:7a:67:f8:16:b6:c4:38:c1:fb: cd:a3:9a:63:ad:bb:44:63:27:6e:2e:90:bd:8a:55: 83:33:7b:bf:80:25:c5:49:e9:20:41:2d:5e:c4:48: c7:03:9e:24:00:c7:c6:56:32:fa:53:c8:3a:64:c9: a7:bb:a9:0f:4b:42:fb:fa:e8:0a:00:c6:4e:3e:89: e5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B1:7F:D0:4B:A8:A2:27:2F:25:14:3C:88:BF:88:E1:4A:74:25:D1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49d6e5df-c778-467a-bc75-947943288321.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.94.20.0/22 Signature Algorithm: sha256WithRSAEncryption 56:ca:96:30:3b:48:a7:20:82:e2:9e:b5:36:8d:1e:6a:88:d9: af:cb:22:c6:f0:fd:57:e7:da:fe:31:aa:85:46:30:42:88:a1: 87:9f:76:45:77:1c:42:e6:ab:d9:c2:a6:e1:cb:92:dc:5e:ac: 9f:e0:e3:9a:08:c4:96:8f:09:b4:62:da:51:83:82:9c:a3:74: ed:ac:0f:b9:b5:0a:db:a2:95:dc:86:76:69:11:76:d9:a5:d5: 5e:49:44:f6:ef:b5:df:f5:5f:20:4d:e8:db:9c:27:b2:d1:04: 31:3b:eb:37:17:6d:68:71:b4:30:da:d2:5f:e3:c3:9a:1c:ab: be:7d:39:67:f2:d8:9f:33:63:06:77:80:ad:f5:97:32:bc:0b: 2c:d3:f5:aa:f7:16:04:55:13:f7:c8:32:92:6d:e8:fd:04:01: 27:f3:aa:bc:3f:47:ff:c0:a8:5d:a2:67:db:46:b5:65:22:8b: 1b:de:71:67:cc:93:6e:e8:44:7f:a3:d7:a4:7d:2b:dc:1d:ec: 52:af:d9:bb:cc:89:98:41:20:be:23:bd:63:dd:6d:78:cc:49: 5d:a1:e5:73:a0:d6:a9:6d:02:03:de:20:f6:74:c3:77:73:1f: f3:5b:59:03:3b:b4:fc:f8:53:e7:86:32:53:56:e4:58:5e:4d: ca:14:17:20 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZo7Ixa5XU3CXPl/flWqf0YmVCPkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE2MjE1MzI5WhcNMjYwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzI4NmYwMDFlMWI4NGE5ZmQxZjgwNWYyOTEzNzM2NGI4 N2YyZjI5NzVjYmJlMjVlYWI3NDgzNTA4MmE4MTRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF5imcrgwz9k0ofS/syko7Xdgz0081wz1BReJY/bdZwkYZ hLxyeF5SEjgu5OIG2Mtdv6XI4RRQ5JVFHAk2Fwe3LgADT1vR5XDLg83oi+dlK5iO toF7ibijBVmdHhQvcHqSdOQICBJKBhL+0mvleZHQ6iOOVnM/z+9LAkd+Hf2hk9iR tLhHOOsKCOstxgiyFwuT9yrIgSOMFQoJXdBGUukhtijbO7dSG/EI/ZDjWLfukSaC N0o8XCw0jXpn+Ba2xDjB+82jmmOtu0RjJ24ukL2KVYMze7+AJcVJ6SBBLV7ESMcD niQAx8ZWMvpTyDpkyae7qQ9LQvv66AoAxk4+ieXFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvbF/0EuooicvJRQ8iL+I4Up0JdEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ5ZDZlNWRmLWM3NzgtNDY3YS1iYzc1LTk0Nzk0MzI4ODMyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJAXhQwDQYJKoZIhvcNAQELBQADggEBAFbKljA7SKcgguKetTaNHmqI2a/L Isbw/Vfn2v4xqoVGMEKIoYefdkV3HELmq9nCpuHLktxerJ/g45oIxJaPCbRi2lGD gpyjdO2sD7m1CtuildyGdmkRdtml1V5JRPbvtd/1XyBN6NucJ7LRBDE76zcXbWhx tDDa0l/jw5ocq759OWfy2J8zYwZ3gK31lzK8CyzT9ar3FgRVE/fIMpJt6P0EASfz qrw/R//AqF2iZ9tGtWUiixvecWfMk27oRH+j16R9K9wd7FKv2bvMiZhBIL4jvWPd bXjMSV2h5XOg1qltAgPeIPZ0w3dzH/NbWQM7tPz4U+eGMlNW5FheTcoUFyA= -----END CERTIFICATE-----Generated at Mon Mar 2 00:02:17 2026 by rpki-client