$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/535de5eb-7a03-4839-a5ea-cf50f810b149.roa File: 535de5eb-7a03-4839-a5ea-cf50f810b149.roa (raw, json) Hash identifier: xDzDgOr0Gihb3q6Og6oxTtIPsPsB9CuyCpZSYRaSJNU= Subject key identifier: 29:D8:4D:BC:32:64:EC:09:92:B1:A5:25:89:CF:7E:F1:CA:F6:D5:54 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7645C72DEC956D3FE328DC3B5584A47699A7801B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/535de5eb-7a03-4839-a5ea-cf50f810b149.roa Signing time: Sun 01 Mar 2026 00:21:15 +0000 ROA not before: Sun 01 Mar 2026 00:21:15 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 203.88.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:45:c7:2d:ec:95:6d:3f:e3:28:dc:3b:55:84:a4:76:99:a7:80:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 1 00:21:15 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=37b153ea6be271b97a26dc461dda0ad85882ab7590f2099a1ebe1f8304474aa4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7c:27:20:1f:71:da:ef:93:93:6e:d2:db:5e: b5:b3:a5:9d:f1:cd:56:05:19:ac:40:9c:ec:cb:d0: 17:44:41:fb:07:d0:5f:ab:26:29:8f:2b:05:ab:8b: ec:eb:22:88:1e:6f:f7:45:5c:4b:4e:ed:a5:62:58: c0:a8:e4:21:af:fc:cb:89:94:2a:bd:f6:47:78:25: 4f:ed:fd:e7:a5:c3:f2:11:cf:c9:06:91:ca:70:52: 98:b2:4e:ba:27:72:ef:90:b0:05:9f:bb:00:27:e5: e9:5d:0c:91:54:c3:e8:fa:d9:33:b5:c5:28:5f:12: f7:f4:13:9c:16:e3:5a:20:a7:dc:fb:6a:04:9a:63: 65:fe:f0:54:4a:a7:ad:8a:64:d7:34:17:f1:e8:d5: 46:39:6e:6b:81:1f:e1:55:3e:f5:20:05:0e:48:12: be:8b:7e:22:b5:ac:12:9d:47:25:36:ca:d2:8b:05: 34:d8:9f:13:d0:65:8e:d6:20:b9:e9:3a:a4:0a:2f: 35:e2:85:b9:4a:4b:89:4d:65:13:11:a3:4c:48:6b: 68:98:27:5d:88:96:af:38:1c:69:78:1b:f0:3c:45: ec:9b:2a:6c:e5:b8:7e:24:a0:ae:cb:71:0e:17:a5: 86:71:c9:66:02:92:09:d1:e0:07:bf:1e:b4:31:99: 96:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D8:4D:BC:32:64:EC:09:92:B1:A5:25:89:CF:7E:F1:CA:F6:D5:54 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/535de5eb-7a03-4839-a5ea-cf50f810b149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.88.83.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:10:ea:4a:43:24:8d:e3:06:7b:47:d2:d8:52:05:be:cf:56: 94:e5:53:a1:4a:34:de:c7:7e:b8:02:dc:20:23:99:b0:01:0d: 4d:d1:a5:77:28:58:5f:cd:d4:bb:67:85:44:b3:80:9d:71:b9: 5e:60:a0:6d:64:06:43:d2:8d:f7:ef:bb:b3:a1:b7:49:9e:ba: b9:8f:3f:84:e6:c8:1e:4c:17:13:c3:cc:ad:e4:cf:61:5e:ad: ff:0a:ed:b7:48:f6:2e:32:fa:36:b3:bb:43:9c:4a:de:56:d1: f0:61:25:a0:9a:5f:34:a7:08:14:53:f7:aa:21:78:c7:03:f8: 9d:68:f9:55:06:10:55:6e:f2:bc:2e:7b:ef:34:58:3d:bc:1b: 86:11:c1:6b:55:7c:e9:e6:09:4e:11:d6:6a:e9:51:c1:b5:3d: 79:ab:31:e0:30:84:67:c6:ff:41:c1:04:eb:2e:fd:c2:ca:5b: da:f0:66:8f:b4:6b:d8:ca:6c:27:47:bd:f7:00:6a:89:ff:d0: 8b:5c:b7:f4:7b:99:ae:3f:13:76:19:c2:c7:80:1c:4a:13:56: f2:75:99:1d:c1:7f:bb:40:6c:ce:8a:31:ad:87:2b:15:89:8e: f2:af:62:be:70:0e:0c:a8:d8:df:11:e7:e0:50:2d:16:15:c2: 17:00:72:1b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdkXHLeyVbT/jKNw7VYSkdpmngBswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzAxMDAyMTE1WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzN2IxNTNlYTZiZTI3MWI5N2EyNmRjNDYxZGRhMGFkODU4 ODJhYjc1OTBmMjA5OWExZWJlMWY4MzA0NDc0YWE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSfCcgH3Ha75OTbtLbXrWzpZ3xzVYFGaxAnOzL0BdEQfsH 0F+rJimPKwWri+zrIogeb/dFXEtO7aViWMCo5CGv/MuJlCq99kd4JU/t/eelw/IR z8kGkcpwUpiyTroncu+QsAWfuwAn5eldDJFUw+j62TO1xShfEvf0E5wW41ogp9z7 agSaY2X+8FRKp62KZNc0F/Ho1UY5bmuBH+FVPvUgBQ5IEr6LfiK1rBKdRyU2ytKL BTTYnxPQZY7WILnpOqQKLzXihblKS4lNZRMRo0xIa2iYJ12Ilq84HGl4G/A8Reyb KmzluH4koK7LcQ4XpYZxyWYCkgnR4Ae/HrQxmZZbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKdhNvDJk7AmSsaUlic9+8cr21VQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUzNWRlNWViLTdhMDMtNDgzOS1hNWVhLWNmNTBmODEwYjE0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADLWFMwDQYJKoZIhvcNAQELBQADggEBAIoQ6kpDJI3jBntH0thSBb7PVpTl U6FKNN7HfrgC3CAjmbABDU3RpXcoWF/N1LtnhUSzgJ1xuV5goG1kBkPSjffvu7Oh t0meurmPP4TmyB5MFxPDzK3kz2Ferf8K7bdI9i4y+jazu0OcSt5W0fBhJaCaXzSn CBRT96oheMcD+J1o+VUGEFVu8rwue+80WD28G4YRwWtVfOnmCU4R1mrpUcG1PXmr MeAwhGfG/0HBBOsu/cLKW9rwZo+0a9jKbCdHvfcAaon/0Itct/R7ma4/E3YZwseA HEoTVvJ1mR3Bf7tAbM6KMa2HKxWJjvKvYr5wDgyo2N8R5+BQLRYVwhcAchs= -----END CERTIFICATE-----Generated at Sun Mar 1 22:18:09 2026 by rpki-client