$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5104db5f-fd45-4603-92d6-05f0fd6e1def.roa File: 5104db5f-fd45-4603-92d6-05f0fd6e1def.roa (raw, json) Hash identifier: CSEc//9AwrpP3xm9stvcH22WAzkk5ZTvxkAZMYZ+sV4= Subject key identifier: 68:80:15:71:E1:31:8E:3F:1D:D8:5C:A1:FE:58:6A:B3:A0:6D:FA:08 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 614C6F6C7556D3C38B1DFF6F6C611D2353985D0A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5104db5f-fd45-4603-92d6-05f0fd6e1def.roa Signing time: Wed 25 Feb 2026 02:21:15 +0000 ROA not before: Wed 25 Feb 2026 02:21:15 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.125.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:4c:6f:6c:75:56:d3:c3:8b:1d:ff:6f:6c:61:1d:23:53:98:5d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 02:21:15 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=8345fe48b095e0c9701ba6467825f7feef8341379239bc84d9000682ca6bcafb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:02:62:a7:d4:0a:0e:35:b3:76:50:69:6e:25: e2:6c:65:49:95:f4:8e:77:cb:b1:c8:e8:88:2c:3b: 15:ac:d9:2d:a2:80:f0:2e:f0:e4:54:51:e8:c2:ab: 69:de:7c:dc:26:bb:27:a3:3f:88:49:e8:97:a5:3a: 4e:27:62:b4:2e:12:f3:65:be:b0:95:a3:13:ae:27: ed:09:e6:3b:b0:be:c5:c9:08:46:0e:cf:7f:06:5b: 81:ff:a8:fd:e7:5a:13:a2:bd:e9:84:a6:80:ac:18: 9b:b2:47:5b:60:21:73:cf:82:86:68:21:ba:09:d7: 21:36:c7:7c:aa:18:48:1f:bc:3c:0c:f7:28:cd:27: 53:37:70:a9:fc:bf:76:17:23:5c:58:a5:40:c1:e6: 6d:38:6f:70:68:92:e0:ac:d9:2f:e0:b6:17:9a:94: 96:15:b5:c8:7a:7f:30:ed:7c:3c:dd:44:77:98:7a: c7:40:ef:c6:b7:51:36:f4:35:86:6a:20:90:f6:ae: 81:61:1b:50:11:e3:ab:60:05:3c:ae:88:b0:be:23: b3:d9:a8:1e:a4:6e:f3:45:f2:5e:17:06:fa:da:ab: 3f:f1:75:6b:7f:4e:cd:5b:98:dd:a8:74:b3:a4:06: d3:74:5d:7d:d7:1f:5e:c2:e1:ab:e4:ab:77:e6:b7: b2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:80:15:71:E1:31:8E:3F:1D:D8:5C:A1:FE:58:6A:B3:A0:6D:FA:08 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5104db5f-fd45-4603-92d6-05f0fd6e1def.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.125.0.0/16 Signature Algorithm: sha256WithRSAEncryption 48:12:57:38:44:50:f5:87:20:be:f5:c8:95:f6:09:61:6b:f4: 4c:da:a2:61:2c:85:df:53:10:6a:27:a6:db:1a:82:61:cd:4b: b3:5a:36:15:d2:a9:14:f1:6e:94:39:9e:a7:c8:1d:ef:6c:13: 49:32:c1:de:08:d6:6c:32:57:5a:18:71:5c:c7:fe:a3:59:c1: c6:88:c0:16:b6:20:22:8b:6a:e0:12:2c:a9:24:54:1d:66:d3: eb:b3:81:b4:1c:2a:25:c3:d7:ed:4f:35:25:24:ca:2a:de:29: 43:8b:e3:84:42:6c:a5:89:f7:0f:bf:71:f4:fe:7a:83:ba:24: 75:4c:22:61:d9:a7:0e:e3:3e:2c:fa:5d:fa:5e:19:29:95:2c: e4:ff:5f:3a:d5:87:59:51:f3:5f:04:96:0a:c8:d9:4d:da:99: c2:6e:e9:f0:c6:34:9f:c0:fa:7a:ed:ab:1b:95:4f:81:f1:32: 20:2c:05:c2:fc:e0:d3:9e:e3:4e:b6:a7:71:7e:96:c8:a0:5e: 40:5a:83:e2:38:59:da:06:95:8e:5a:e1:6f:83:48:4a:60:a3: 59:ba:fa:9b:09:2d:c4:9a:19:82:05:9b:60:f6:24:91:59:54: 41:ec:1b:d9:25:70:22:5a:57:fb:f9:5b:54:1d:53:34:a1:27: a7:85:c7:33 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYUxvbHVW08OLHf9vbGEdI1OYXQowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDIyMTE1WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzQ1ZmU0OGIwOTVlMGM5NzAxYmE2NDY3ODI1ZjdmZWVm ODM0MTM3OTIzOWJjODRkOTAwMDY4MmNhNmJjYWZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQAmKn1AoONbN2UGluJeJsZUmV9I53y7HI6IgsOxWs2S2i gPAu8ORUUejCq2nefNwmuyejP4hJ6JelOk4nYrQuEvNlvrCVoxOuJ+0J5juwvsXJ CEYOz38GW4H/qP3nWhOivemEpoCsGJuyR1tgIXPPgoZoIboJ1yE2x3yqGEgfvDwM 9yjNJ1M3cKn8v3YXI1xYpUDB5m04b3BokuCs2S/gthealJYVtch6fzDtfDzdRHeY esdA78a3UTb0NYZqIJD2roFhG1AR46tgBTyuiLC+I7PZqB6kbvNF8l4XBvraqz/x dWt/Ts1bmN2odLOkBtN0XX3XH17C4avkq3fmt7JPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUaIAVceExjj8d2Fyh/lhqs6Bt+ggwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUxMDRkYjVmLWZkNDUtNDYwMy05MmQ2LTA1ZjBmZDZlMWRlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4fTANBgkqhkiG9w0BAQsFAAOCAQEASBJXOERQ9YcgvvXIlfYJYWv0TNqi YSyF31MQaiem2xqCYc1Ls1o2FdKpFPFulDmep8gd72wTSTLB3gjWbDJXWhhxXMf+ o1nBxojAFrYgIotq4BIsqSRUHWbT67OBtBwqJcPX7U81JSTKKt4pQ4vjhEJspYn3 D79x9P56g7okdUwiYdmnDuM+LPpd+l4ZKZUs5P9fOtWHWVHzXwSWCsjZTdqZwm7p 8MY0n8D6eu2rG5VPgfEyICwFwvzg057jTrancX6WyKBeQFqD4jhZ2gaVjlrhb4NI SmCjWbr6mwktxJoZggWbYPYkkVlUQewb2SVwIlpX+/lbVB1TNKEnp4XHMw== -----END CERTIFICATE-----Generated at Mon Mar 2 12:37:32 2026 by rpki-client