$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/573a7afe-7c89-46e3-b222-37958ce5e554.roa File: 573a7afe-7c89-46e3-b222-37958ce5e554.roa (raw, json) Hash identifier: uPdGrdRzL7pA7PS/t3wLtFWvn9dBuRy/wLL5hDbFkAM= Subject key identifier: 4C:30:1F:67:12:B8:8A:D7:8D:10:C7:2B:63:63:01:7F:E8:A5:58:F8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3A3905BB39FED0E917183552F32E254FE16380E7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/573a7afe-7c89-46e3-b222-37958ce5e554.roa Signing time: Sat 07 Feb 2026 00:31:02 +0000 ROA not before: Sat 07 Feb 2026 00:31:02 +0000 ROA not after: Fri 08 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 147.2.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:39:05:bb:39:fe:d0:e9:17:18:35:52:f3:2e:25:4f:e1:63:80:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 7 00:31:02 2026 GMT Not After : May 8 23:59:59 2026 GMT Subject: serialNumber=0424e63bffa91bdf045eee1457d7ea220adb5c2c0ff0008000200bc375a02599, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:93:67:93:7a:23:e3:2a:d3:31:e8:fc:a0:d1: e1:f9:a7:f2:a5:98:8c:d3:c5:ba:de:ec:a4:bf:0d: 36:36:10:49:58:ce:3a:7d:2f:83:e6:32:c8:07:24: d8:9d:a6:9c:50:d5:b6:b1:7a:25:45:d2:22:96:d2: e1:03:6a:b5:7b:e2:f2:fb:c7:67:6c:3a:2a:f0:63: 4f:6a:6e:f8:fb:11:15:82:c0:81:20:fd:5e:8f:4f: bf:c4:ff:2c:52:76:6c:22:f9:d9:34:9a:96:00:a0: 25:a2:08:9c:c2:90:96:2a:73:d7:7e:e9:12:ad:d1: 0c:63:65:5f:5f:54:b8:37:23:fb:28:bf:80:a5:72: 58:20:0b:b5:4d:16:95:4c:fc:14:38:52:db:e4:82: 35:b9:42:4d:b4:5f:09:96:47:20:bb:6d:fb:04:b5: c8:9c:9b:6c:10:7d:ad:0f:52:3b:41:6a:5b:94:f8: e6:09:2e:ac:ed:78:55:b5:20:03:82:5d:f2:48:a5: 38:c2:0a:f2:87:8b:82:8f:dc:2a:e6:f8:fa:53:b7: 4c:1d:b7:9b:95:04:0f:25:39:25:37:dd:81:47:db: 44:19:2d:ab:8b:3a:56:45:63:a0:fe:fb:6e:1c:78: c7:5f:b2:6f:ff:4c:d7:91:8b:35:9e:fa:7f:aa:e5: f8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:30:1F:67:12:B8:8A:D7:8D:10:C7:2B:63:63:01:7F:E8:A5:58:F8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/573a7afe-7c89-46e3-b222-37958ce5e554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.2.0.0/16 Signature Algorithm: sha256WithRSAEncryption b4:2d:e1:88:03:5e:91:4b:e2:1c:81:23:a1:d0:45:ea:28:6d: 4a:d2:a5:13:12:dd:3b:34:bb:b4:06:60:e7:07:e2:5c:b8:43: 21:1d:6a:94:79:bf:78:a7:a4:21:d9:ef:ae:89:92:e5:64:8a: e7:d6:77:9c:95:47:f4:28:b2:d3:7b:cb:ed:05:46:7c:b5:a6: 43:85:11:0c:e4:20:a6:dc:e5:e2:5e:da:a2:35:03:ed:de:95: 8d:73:79:e6:f9:0a:b2:11:94:6f:e7:d1:3d:1b:0b:f3:8a:c3: 02:60:db:e2:35:9f:d6:8d:1f:0b:c3:50:65:59:f9:6b:fc:4e: 90:26:b9:3e:96:00:28:53:8b:ac:71:cb:1d:28:b6:89:17:ce: ea:37:b3:29:7c:a6:2f:eb:af:34:fc:56:dc:2f:1b:69:ef:92: 9f:fc:b0:0e:a8:5c:cf:c1:b1:08:b2:ea:ba:78:5b:1b:59:0d: 1e:e7:62:15:04:a3:cd:ae:fd:db:9a:8d:49:d9:84:99:a2:b5: 1e:44:43:78:dd:05:85:90:a9:2a:83:04:85:02:bc:11:a9:da: a3:1e:19:10:82:2e:03:f3:9e:f9:4d:07:b9:23:f9:5f:7a:b4: 1a:2f:74:7f:d6:43:6f:b4:15:82:65:b4:f0:8b:47:47:6e:4d: a3:8f:3d:d6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOjkFuzn+0OkXGDVS8y4lT+FjgOcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA3MDAzMTAyWhcNMjYwNTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDI0ZTYzYmZmYTkxYmRmMDQ1ZWVlMTQ1N2Q3ZWEyMjBh ZGI1YzJjMGZmMDAwODAwMDIwMGJjMzc1YTAyNTk5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCok2eTeiPjKtMx6Pyg0eH5p/KlmIzTxbre7KS/DTY2EElY zjp9L4PmMsgHJNidppxQ1baxeiVF0iKW0uEDarV74vL7x2dsOirwY09qbvj7ERWC wIEg/V6PT7/E/yxSdmwi+dk0mpYAoCWiCJzCkJYqc9d+6RKt0QxjZV9fVLg3I/so v4ClclggC7VNFpVM/BQ4UtvkgjW5Qk20XwmWRyC7bfsEtcicm2wQfa0PUjtBaluU +OYJLqzteFW1IAOCXfJIpTjCCvKHi4KP3Crm+PpTt0wdt5uVBA8lOSU33YFH20QZ LauLOlZFY6D++24ceMdfsm//TNeRizWe+n+q5fg1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUTDAfZxK4iteNEMcrY2MBf+ilWPgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU3M2E3YWZlLTdjODktNDZlMy1iMjIyLTM3OTU4Y2U1ZTU1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCTAjANBgkqhkiG9w0BAQsFAAOCAQEAtC3hiANekUviHIEjodBF6ihtStKl ExLdOzS7tAZg5wfiXLhDIR1qlHm/eKekIdnvromS5WSK59Z3nJVH9Ciy03vL7QVG fLWmQ4URDOQgptzl4l7aojUD7d6VjXN55vkKshGUb+fRPRsL84rDAmDb4jWf1o0f C8NQZVn5a/xOkCa5PpYAKFOLrHHLHSi2iRfO6jezKXymL+uvNPxW3C8bae+Sn/yw Dqhcz8GxCLLqunhbG1kNHudiFQSjza7925qNSdmEmaK1HkRDeN0FhZCpKoMEhQK8 Eanaox4ZEIIuA/Oe+U0HuSP5X3q0Gi90f9ZDb7QVgmW08ItHR25No4891g== -----END CERTIFICATE-----Generated at Mon Mar 2 00:28:57 2026 by rpki-client