$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52a988e6-8b8b-44c6-8c68-26ab8fdedb35.roa File: 52a988e6-8b8b-44c6-8c68-26ab8fdedb35.roa (raw, json) Hash identifier: obofI21e3w2oWvBLuYsZgP2jLxafofBVAB4nBh/hjBA= Subject key identifier: F1:62:52:B1:63:1C:F0:B2:59:17:C4:1E:04:6F:E8:23:9E:AF:DA:03 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2BE1B2E5989C5D16C60893F9FBAC0075B2901D45 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52a988e6-8b8b-44c6-8c68-26ab8fdedb35.roa Signing time: Sun 22 Feb 2026 00:50:04 +0000 ROA not before: Sun 22 Feb 2026 00:50:04 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 204.58.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:e1:b2:e5:98:9c:5d:16:c6:08:93:f9:fb:ac:00:75:b2:90:1d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 22 00:50:04 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=7396fdf60277da0bc720fb242b2f20e58135d2c906aece37dcf3c6081abefd40, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3e:60:34:c5:83:b5:57:ff:53:3a:31:a9:56: 6b:04:82:f0:05:55:22:ee:f0:b2:21:27:59:98:4f: 3d:20:a9:40:90:90:00:4e:5c:fd:de:08:eb:55:f7: 07:0a:0e:24:c9:92:5b:e6:6e:6c:2f:23:f8:0c:1c: 95:8a:3e:ab:f4:35:51:0f:b8:58:52:0b:c2:65:0b: ed:55:40:d0:6a:ec:20:d4:93:d4:5f:dc:df:cc:d2: 73:2a:84:91:93:da:63:e7:29:a5:f0:ae:7b:b1:1c: 98:fb:05:b1:1d:40:f3:85:5b:39:47:23:9b:a3:9d: ca:8c:1d:2e:a1:42:71:de:09:6b:a5:76:7d:dd:97: cb:36:86:f1:69:79:ad:87:ec:69:cf:ca:64:75:63: 73:ce:f0:c1:08:a4:e6:d2:0f:fc:67:b2:2f:30:5f: 48:b4:54:47:79:47:a6:fa:25:62:fa:c4:33:73:cd: 51:74:da:5f:15:1f:0c:be:c6:a8:cb:58:50:3d:34: e7:e3:03:06:da:90:43:8a:08:1e:0f:66:54:3d:85: d4:59:04:d8:f4:bd:04:94:5b:e4:b3:7c:d8:3f:62: c6:f4:e2:20:8f:22:dc:96:ee:23:5a:8b:37:72:7a: e5:d0:45:d4:1e:d1:73:97:9b:a3:a1:b7:2b:79:24: 59:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:62:52:B1:63:1C:F0:B2:59:17:C4:1E:04:6F:E8:23:9E:AF:DA:03 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52a988e6-8b8b-44c6-8c68-26ab8fdedb35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.58.152.0/22 Signature Algorithm: sha256WithRSAEncryption c7:fb:52:87:78:76:7c:7c:31:10:ca:60:c1:33:08:91:c8:f3: d2:ee:89:98:71:c8:d3:b1:8d:f1:9d:65:39:0b:bd:68:94:a8: b0:5c:d8:16:ea:fa:4d:75:32:9d:5d:3c:05:21:58:97:4a:cd: 49:52:52:c6:e8:07:fb:86:d7:0d:83:5c:df:e6:67:6f:69:3f: 56:83:c6:e6:7d:f5:23:5c:0c:e6:62:ae:ff:78:e2:59:27:77: 6b:62:06:e3:59:13:81:4b:f6:f8:c5:4e:1f:88:6b:d7:17:4f: f1:20:d2:2b:aa:42:43:43:dc:fa:e7:bc:74:c4:2a:e5:2c:ce: 14:e2:07:f8:33:68:fb:f4:e8:98:1b:8a:05:e7:c5:a2:48:e6: 62:80:48:c4:95:13:f5:8b:28:cc:db:1e:2c:6a:39:0d:07:66: c2:54:da:16:2d:23:3b:8d:79:d9:87:b7:33:c2:93:56:6f:f1: 35:f6:9e:22:06:b9:23:f6:bb:3a:2d:fd:40:e7:91:af:87:9d: 0d:4e:54:34:77:9b:50:c1:59:39:fb:75:bb:a2:08:49:ab:0b: 79:55:37:5a:c3:84:c0:3d:27:61:61:82:8a:94:42:6f:24:0f: f9:ae:7d:9d:5d:21:10:da:76:4f:19:32:d5:56:f3:11:9b:e8: 61:73:ca:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK+Gy5ZicXRbGCJP5+6wAdbKQHUUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIyMDA1MDA0WhcNMjYwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3Mzk2ZmRmNjAyNzdkYTBiYzcyMGZiMjQyYjJmMjBlNTgx MzVkMmM5MDZhZWNlMzdkY2YzYzYwODFhYmVmZDQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVPmA0xYO1V/9TOjGpVmsEgvAFVSLu8LIhJ1mYTz0gqUCQ kABOXP3eCOtV9wcKDiTJklvmbmwvI/gMHJWKPqv0NVEPuFhSC8JlC+1VQNBq7CDU k9Rf3N/M0nMqhJGT2mPnKaXwrnuxHJj7BbEdQPOFWzlHI5ujncqMHS6hQnHeCWul dn3dl8s2hvFpea2H7GnPymR1Y3PO8MEIpObSD/xnsi8wX0i0VEd5R6b6JWL6xDNz zVF02l8VHwy+xqjLWFA9NOfjAwbakEOKCB4PZlQ9hdRZBNj0vQSUW+SzfNg/Ysb0 4iCPItyW7iNaizdyeuXQRdQe0XOXm6Ohtyt5JFnDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8WJSsWMc8LJZF8QeBG/oI56v2gMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUyYTk4OGU2LThiOGItNDRjNi04YzY4LTI2YWI4ZmRlZGIzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALMOpgwDQYJKoZIhvcNAQELBQADggEBAMf7Uod4dnx8MRDKYMEzCJHI89Lu iZhxyNOxjfGdZTkLvWiUqLBc2Bbq+k11Mp1dPAUhWJdKzUlSUsboB/uG1w2DXN/m Z29pP1aDxuZ99SNcDOZirv944lknd2tiBuNZE4FL9vjFTh+Ia9cXT/Eg0iuqQkND 3PrnvHTEKuUszhTiB/gzaPv06JgbigXnxaJI5mKASMSVE/WLKMzbHixqOQ0HZsJU 2hYtIzuNedmHtzPCk1Zv8TX2niIGuSP2uzot/UDnka+HnQ1OVDR3m1DBWTn7dbui CEmrC3lVN1rDhMA9J2FhgoqUQm8kD/mufZ1dIRDadk8ZMtVW8xGb6GFzykw= -----END CERTIFICATE-----Generated at Mon Mar 2 04:55:49 2026 by rpki-client