$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4db2b40b-f71f-4e89-96a6-7651dae12fbc.roa File: 4db2b40b-f71f-4e89-96a6-7651dae12fbc.roa (raw, json) Hash identifier: TmPAey00LGb6dYEUtZ2CsAKyp2iTo6I5t51fCorpR04= Subject key identifier: 23:8D:AC:56:7E:C2:AF:1A:00:57:3B:5B:41:A0:7A:98:09:6D:AE:46 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B1FAFFF880687D23E8A31082BFCA88DFA8E2D32 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4db2b40b-f71f-4e89-96a6-7651dae12fbc.roa Signing time: Tue 24 Feb 2026 00:31:04 +0000 ROA not before: Tue 24 Feb 2026 00:31:04 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 7224 IP address blocks: 198.14.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:1f:af:ff:88:06:87:d2:3e:8a:31:08:2b:fc:a8:8d:fa:8e:2d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 00:31:04 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=eb1b0a6b7d4f99c455e44aa316b5982cd731eebe3433240abeb413460c81837d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:94:ca:70:e2:f3:e2:77:1c:70:61:93:73:8a: f1:e0:de:3b:44:65:77:cb:e5:dd:e2:79:7b:25:4c: 55:82:cb:25:42:e8:8e:41:05:e5:b8:0b:26:ed:9a: 45:58:64:57:6f:bd:85:66:13:47:21:00:8f:3e:e3: 7a:d5:0c:f0:4c:16:d6:c7:ee:48:b5:8e:70:14:de: 7a:cd:11:4a:d7:86:00:53:46:9a:eb:be:1d:c4:8c: fc:ec:65:46:87:c4:6e:c2:87:e0:8d:58:25:8c:e0: 71:89:4a:c0:1c:60:9a:3e:02:13:64:f5:7c:54:26: c0:44:b6:63:f4:af:ec:e0:8b:48:40:48:a6:4f:ff: 7a:da:03:5a:e4:5f:d1:df:1e:4f:c7:30:97:b5:91: 49:ea:1c:ea:0d:13:fd:0c:27:3c:f0:18:81:09:33: 82:89:98:45:bd:27:55:d4:93:1a:4e:de:e6:6d:bd: 88:88:d3:52:68:a5:46:8a:0d:49:90:2c:4b:62:64: 12:69:7c:d5:1d:dd:52:a5:49:9f:28:cc:48:1d:cb: 57:31:f5:86:17:03:8c:c4:43:b2:bb:7a:d2:d4:49: 32:82:64:59:88:82:a7:4e:ee:19:71:31:96:f6:83: e7:76:f5:c1:29:bf:b1:6d:43:0c:8d:c5:25:51:12: 4e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8D:AC:56:7E:C2:AF:1A:00:57:3B:5B:41:A0:7A:98:09:6D:AE:46 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4db2b40b-f71f-4e89-96a6-7651dae12fbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.14.2.0/24 Signature Algorithm: sha256WithRSAEncryption 90:2a:46:3e:08:cb:bd:00:6e:d2:64:2a:73:81:e3:5b:e4:e6: ad:6e:71:dc:7d:e4:f1:8f:43:fe:be:6f:fe:e7:08:35:bf:45: 76:c6:62:ed:37:40:12:ab:7a:2d:6a:42:5f:5a:0b:a5:45:11: 23:ef:53:44:dd:c6:9d:8f:41:cd:1c:27:f5:02:2b:9a:36:ec: 0c:f5:03:79:79:5f:00:cd:48:b8:69:4e:b0:20:2e:c6:b9:c0: b4:99:40:30:4a:5e:f4:80:6a:ba:da:f7:c2:76:77:40:f8:23: ab:bb:a4:00:df:b1:f5:21:bf:c3:a3:57:ab:bc:d8:e7:95:ad: 9d:59:6f:f2:7f:a1:4a:45:2a:0f:c0:39:32:01:c5:e7:0b:68: 5b:66:01:2e:61:ca:e1:41:97:99:6d:d6:2e:49:dc:ee:e6:40: 4a:2d:31:dd:79:a2:e7:04:36:1f:b2:3a:e6:0e:1a:e0:3a:58: 9b:a7:14:e5:dd:31:cf:c7:8d:95:69:63:5d:95:0c:b3:b4:bc: 59:89:d0:d8:79:fb:95:ed:78:92:22:7b:f3:46:09:3e:2e:ab: 91:87:c0:d0:d7:cc:e0:a6:ae:5d:4c:d5:2d:6c:f3:8d:67:d8: 4a:37:6b:95:31:69:92:b1:78:d9:21:d3:af:48:6a:3f:ae:14: 69:ad:cd:04 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWx+v/4gGh9I+ijEIK/yojfqOLTIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDAzMTA0WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYjFiMGE2YjdkNGY5OWM0NTVlNDRhYTMxNmI1OTgyY2Q3 MzFlZWJlMzQzMzI0MGFiZWI0MTM0NjBjODE4MzdkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjlMpw4vPidxxwYZNzivHg3jtEZXfL5d3ieXslTFWCyyVC 6I5BBeW4CybtmkVYZFdvvYVmE0chAI8+43rVDPBMFtbH7ki1jnAU3nrNEUrXhgBT Rprrvh3EjPzsZUaHxG7Ch+CNWCWM4HGJSsAcYJo+AhNk9XxUJsBEtmP0r+zgi0hA SKZP/3raA1rkX9HfHk/HMJe1kUnqHOoNE/0MJzzwGIEJM4KJmEW9J1XUkxpO3uZt vYiI01JopUaKDUmQLEtiZBJpfNUd3VKlSZ8ozEgdy1cx9YYXA4zEQ7K7etLUSTKC ZFmIgqdO7hlxMZb2g+d29cEpv7FtQwyNxSVREk4hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUI42sVn7CrxoAVztbQaB6mAltrkYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRkYjJiNDBiLWY3MWYtNGU4OS05NmE2LTc2NTFkYWUxMmZiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGDgIwDQYJKoZIhvcNAQELBQADggEBAJAqRj4Iy70AbtJkKnOB41vk5q1u cdx95PGPQ/6+b/7nCDW/RXbGYu03QBKrei1qQl9aC6VFESPvU0Tdxp2PQc0cJ/UC K5o27Az1A3l5XwDNSLhpTrAgLsa5wLSZQDBKXvSAarra98J2d0D4I6u7pADfsfUh v8OjV6u82OeVrZ1Zb/J/oUpFKg/AOTIBxecLaFtmAS5hyuFBl5lt1i5J3O7mQEot Md15oucENh+yOuYOGuA6WJunFOXdMc/HjZVpY12VDLO0vFmJ0Nh5+5XteJIie/NG CT4uq5GHwNDXzOCmrl1M1S1s841n2Eo3a5UxaZKxeNkh069Iaj+uFGmtzQQ= -----END CERTIFICATE-----Generated at Mon Mar 2 03:07:33 2026 by rpki-client