$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cbf798e-d927-4aad-b9d0-7145e6341534.roa File: 4cbf798e-d927-4aad-b9d0-7145e6341534.roa (raw, json) Hash identifier: /leXTvkhtnJl8cyj9eQLj2a+dCxjgyoDpX5vaH3FMAE= Subject key identifier: EE:80:4C:8D:E4:A7:7D:88:0C:B6:86:3F:84:1B:B9:55:84:97:81:1C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 29CD7BEC2C2919FDF2DD69B4055E2389CC99BB37 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cbf798e-d927-4aad-b9d0-7145e6341534.roa Signing time: Sun 08 Feb 2026 00:30:15 +0000 ROA not before: Sun 08 Feb 2026 00:30:15 +0000 ROA not after: Sat 09 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 40.163.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:cd:7b:ec:2c:29:19:fd:f2:dd:69:b4:05:5e:23:89:cc:99:bb:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 8 00:30:15 2026 GMT Not After : May 9 23:59:59 2026 GMT Subject: serialNumber=5e68680672b30338cd56f586c6d8dc68e4b61c9b9b62150105a3d809157c4182, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:63:20:d5:a3:82:a4:2b:96:cc:aa:46:90:1e: c1:08:91:05:f7:6f:50:08:7c:4e:f7:46:ac:ea:25: b0:01:0a:d3:ef:89:5b:be:d1:6a:4e:ed:80:ae:dd: f8:5a:7d:8f:cc:ca:28:43:a9:c0:b5:b5:3d:ca:bb: b6:92:40:0d:86:99:9b:4a:d5:b2:d8:4e:3a:20:17: da:f5:12:52:02:e9:bc:4d:d1:26:8f:a4:8c:1e:69: c6:6d:5c:db:bd:3b:f8:72:e4:42:bb:0e:9e:52:c0: 04:2c:d1:59:24:29:3f:03:a4:4d:71:1e:0d:60:3c: cd:c3:16:5e:ee:0e:18:12:13:6f:49:13:c5:27:da: 6c:ee:2f:b1:78:f0:b8:40:44:c6:9f:5c:11:ab:4b: 55:4a:41:60:e9:07:1e:05:21:a8:a8:c8:ea:a1:9f: 00:12:50:5c:90:c0:a0:a3:7e:ae:a2:ec:8f:95:ab: a6:97:7b:81:57:31:1a:5c:6d:94:36:10:55:b7:35: 5e:80:49:0f:dd:3a:1e:5d:a7:93:df:27:79:b9:c3: 4b:bd:38:e5:4c:09:93:0c:6f:1c:06:35:74:7b:02: c1:9b:69:23:cc:09:bf:eb:c2:c5:f2:58:40:3c:f0: 04:39:ae:05:3c:fa:c2:1a:91:15:bd:60:2b:81:99: 21:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:80:4C:8D:E4:A7:7D:88:0C:B6:86:3F:84:1B:B9:55:84:97:81:1C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cbf798e-d927-4aad-b9d0-7145e6341534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.163.0.0/16 Signature Algorithm: sha256WithRSAEncryption 13:80:d6:c5:a2:dc:91:55:95:f0:45:70:41:ba:e4:5d:f6:75: 6f:76:45:04:4b:4b:48:ba:0c:b8:2a:9d:22:ba:23:e6:0f:56: 41:53:a8:e0:21:ae:53:ae:7b:e0:86:3a:9a:80:24:77:f8:b9: 7a:09:d4:8e:35:ac:19:e7:43:fe:53:86:1a:f3:4f:2b:81:fd: 5b:40:99:a1:b4:ec:19:1c:ca:7e:cc:60:bf:54:34:a8:3c:05: ee:5f:f7:c5:09:dc:8e:bb:14:3a:c8:91:1a:a9:75:96:b4:99: 09:dd:d9:55:2e:2d:ac:3a:d9:23:49:d0:bd:8d:79:c6:34:d0: c9:57:8b:e4:44:b9:ad:99:b1:44:24:79:4a:e3:64:4d:31:f4: 93:53:07:9f:b8:06:b1:de:85:d9:40:70:f7:94:31:36:45:03: 49:56:b4:6d:61:a6:68:e6:d1:b3:e8:1d:d2:3e:43:02:18:9b: 71:92:41:10:76:8c:81:4e:70:97:ba:58:bc:bb:9f:da:f3:ee: f5:f8:ab:81:44:4e:69:09:ba:f6:24:d5:e6:9c:3d:24:5d:66: 01:b0:4e:f8:fe:47:e2:09:e7:d7:16:7b:90:c7:99:75:9b:35: bc:ce:c5:29:90:5f:8e:da:bc:b1:e5:70:f1:1b:28:8d:b7:e8: 09:91:35:27 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKc177CwpGf3y3Wm0BV4jicyZuzcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA4MDAzMDE1WhcNMjYwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZTY4NjgwNjcyYjMwMzM4Y2Q1NmY1ODZjNmQ4ZGM2OGU0 YjYxYzliOWI2MjE1MDEwNWEzZDgwOTE1N2M0MTgyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBYyDVo4KkK5bMqkaQHsEIkQX3b1AIfE73RqzqJbABCtPv iVu+0WpO7YCu3fhafY/MyihDqcC1tT3Ku7aSQA2GmZtK1bLYTjogF9r1ElIC6bxN 0SaPpIweacZtXNu9O/hy5EK7Dp5SwAQs0VkkKT8DpE1xHg1gPM3DFl7uDhgSE29J E8Un2mzuL7F48LhARMafXBGrS1VKQWDpBx4FIaioyOqhnwASUFyQwKCjfq6i7I+V q6aXe4FXMRpcbZQ2EFW3NV6ASQ/dOh5dp5PfJ3m5w0u9OOVMCZMMbxwGNXR7AsGb aSPMCb/rwsXyWEA88AQ5rgU8+sIakRW9YCuBmSFhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU7oBMjeSnfYgMtoY/hBu5VYSXgRwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjYmY3OThlLWQ5MjctNGFhZC1iOWQwLTcxNDVlNjM0MTUzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAoozANBgkqhkiG9w0BAQsFAAOCAQEAE4DWxaLckVWV8EVwQbrkXfZ1b3ZF BEtLSLoMuCqdIroj5g9WQVOo4CGuU6574IY6moAkd/i5egnUjjWsGedD/lOGGvNP K4H9W0CZobTsGRzKfsxgv1Q0qDwF7l/3xQncjrsUOsiRGql1lrSZCd3ZVS4trDrZ I0nQvY15xjTQyVeL5ES5rZmxRCR5SuNkTTH0k1MHn7gGsd6F2UBw95QxNkUDSVa0 bWGmaObRs+gd0j5DAhibcZJBEHaMgU5wl7pYvLuf2vPu9firgUROaQm69iTV5pw9 JF1mAbBO+P5H4gnn1xZ7kMeZdZs1vM7FKZBfjtq8seVw8RsojbfoCZE1Jw== -----END CERTIFICATE-----Generated at Sun Mar 1 22:26:05 2026 by rpki-client