$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/528b6591-3aae-49d5-aecd-8320249f6d0e.roa File: 528b6591-3aae-49d5-aecd-8320249f6d0e.roa (raw, json) Hash identifier: ePE+IfSyEI0A/5cKAzKGpSfr1oQIrTc6CWe9lLqIvxw= Subject key identifier: 8D:50:D8:D6:C5:DC:9D:D7:D0:C2:EF:0A:A9:18:64:67:D0:8B:5C:55 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3AE7CC8F768DB88C6148ADF730F3001F02E70499 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/528b6591-3aae-49d5-aecd-8320249f6d0e.roa Signing time: Sat 07 Feb 2026 00:21:13 +0000 ROA not before: Sat 07 Feb 2026 00:21:13 +0000 ROA not after: Fri 08 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.17.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e7:cc:8f:76:8d:b8:8c:61:48:ad:f7:30:f3:00:1f:02:e7:04:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 7 00:21:13 2026 GMT Not After : May 8 23:59:59 2026 GMT Subject: serialNumber=a642fef49a18de2de2e7c5e2d581c8c1b2f1ee421468f42678fa3b987aa2cddb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:84:00:e3:6b:d2:c5:ab:4e:26:08:64:57:49: 17:35:3d:fd:7c:80:81:7a:9e:88:22:f0:f0:ea:ab: 98:7f:7c:d4:55:35:c5:b0:3f:77:84:2a:70:d8:46: 14:15:22:6d:e6:de:5a:7d:a1:6b:5a:cb:0c:13:3b: f2:b9:11:ad:ea:e7:e9:44:45:4c:68:c9:6d:be:c7: 3b:28:4d:11:da:0b:db:a7:21:05:3f:f8:05:e8:7d: 16:7d:d3:f3:21:70:58:1a:71:4d:27:22:e5:7b:6f: 4f:a0:bd:58:94:dc:77:f6:e0:9f:f6:67:bd:c9:48: 9e:61:09:eb:9d:2e:1c:e0:ce:e3:6a:60:72:8f:4a: 6d:5d:4c:6f:38:29:51:74:2e:ac:a4:ac:d8:67:7d: c0:ed:5e:6f:5a:44:a3:22:f2:15:fa:3d:a5:44:c0: 80:2f:08:f1:05:d2:88:ec:ad:79:e2:bb:ca:9f:f9: 78:22:de:89:95:0a:10:90:e8:f2:b5:70:f2:32:14: 0c:7e:a2:31:44:57:30:53:97:39:fd:05:c2:8d:52: e6:5e:0c:ed:0e:a2:2f:1b:40:10:28:e5:a1:89:e3: ff:e3:d5:0b:b3:fe:20:4f:d5:02:78:71:b6:34:a5: a1:b5:72:98:29:de:dd:97:95:f2:94:9c:b2:43:98: c7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:50:D8:D6:C5:DC:9D:D7:D0:C2:EF:0A:A9:18:64:67:D0:8B:5C:55 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/528b6591-3aae-49d5-aecd-8320249f6d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.17.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9f:fd:11:9f:c3:fe:47:2d:bd:cf:13:3c:e3:6f:06:55:c6:92: 06:f1:cf:30:02:41:44:85:bd:83:0e:a1:41:39:f6:7a:e4:d9: b9:2d:d5:11:9d:19:35:6f:a4:41:f9:7c:3e:17:c5:9e:3e:f8: 25:0c:7a:4b:94:38:84:9f:6a:25:45:97:ea:05:50:87:37:ea: ac:ea:d6:f8:12:f7:26:c9:75:17:2e:e5:8d:8a:66:95:0d:51: 5c:9a:be:a0:d0:e7:55:15:ba:4e:ac:29:59:f4:5b:81:55:db: a2:c8:a6:28:66:91:c7:47:70:79:4d:89:fb:ae:5b:e7:be:c6: 81:1b:33:d8:07:5f:1a:71:e9:25:e6:2c:5c:23:be:c7:14:fb: 9a:9d:3b:45:8b:52:8e:a4:b9:76:d7:25:47:86:24:f6:c3:19: d2:55:80:63:5d:bd:ff:ff:ac:0b:8f:b0:19:90:18:99:8b:57: 70:1e:c5:01:e5:8d:b9:66:5c:1d:7d:23:8f:aa:7d:94:ea:12: 49:60:13:67:28:6a:88:4b:28:1c:d1:e7:eb:ac:37:d9:dd:4b: 07:4b:41:d2:95:bd:a4:2d:b2:0b:ed:7a:84:b0:a3:1a:2a:01: 6f:af:91:70:c0:ee:b7:e0:4a:33:8e:4e:4f:6b:3c:92:6b:29: 3b:17:0b:b7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOufMj3aNuIxhSK33MPMAHwLnBJkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA3MDAyMTEzWhcNMjYwNTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNjQyZmVmNDlhMThkZTJkZTJlN2M1ZTJkNTgxYzhjMWIy ZjFlZTQyMTQ2OGY0MjY3OGZhM2I5ODdhYTJjZGRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCehADja9LFq04mCGRXSRc1Pf18gIF6nogi8PDqq5h/fNRV NcWwP3eEKnDYRhQVIm3m3lp9oWtaywwTO/K5Ea3q5+lERUxoyW2+xzsoTRHaC9un IQU/+AXofRZ90/MhcFgacU0nIuV7b0+gvViU3Hf24J/2Z73JSJ5hCeudLhzgzuNq YHKPSm1dTG84KVF0LqykrNhnfcDtXm9aRKMi8hX6PaVEwIAvCPEF0ojsrXniu8qf +Xgi3omVChCQ6PK1cPIyFAx+ojFEVzBTlzn9BcKNUuZeDO0Ooi8bQBAo5aGJ4//j 1Quz/iBP1QJ4cbY0paG1cpgp3t2XlfKUnLJDmMe9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUjVDY1sXcndfQwu8KqRhkZ9CLXFUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUyOGI2NTkxLTNhYWUtNDlkNS1hZWNkLTgzMjAyNDlmNmQwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQETANBgkqhkiG9w0BAQsFAAOCAQEAn/0Rn8P+Ry29zxM8428GVcaSBvHP MAJBRIW9gw6hQTn2euTZuS3VEZ0ZNW+kQfl8PhfFnj74JQx6S5Q4hJ9qJUWX6gVQ hzfqrOrW+BL3Jsl1Fy7ljYpmlQ1RXJq+oNDnVRW6TqwpWfRbgVXbosimKGaRx0dw eU2J+65b577GgRsz2AdfGnHpJeYsXCO+xxT7mp07RYtSjqS5dtclR4Yk9sMZ0lWA Y129//+sC4+wGZAYmYtXcB7FAeWNuWZcHX0jj6p9lOoSSWATZyhqiEsoHNHn66w3 2d1LB0tB0pW9pC2yC+16hLCjGioBb6+RcMDut+BKM45OT2s8kmspOxcLtw== -----END CERTIFICATE-----Generated at Sun Mar 1 21:57:03 2026 by rpki-client