$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5764c5f6-9fe6-46c5-b1a0-268cd76692f2.roa File: 5764c5f6-9fe6-46c5-b1a0-268cd76692f2.roa (raw, json) Hash identifier: ZiQXzs+E3q6+aBEAaR0oNxnxfgOtdRTlKuo8pi21ErA= Subject key identifier: 66:A8:F0:DC:37:CF:C8:8D:09:25:22:F3:D1:AA:45:70:2F:08:CD:AA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 37351CB59D2586DF4AB507CCEF3ECEE20E3FEA40 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5764c5f6-9fe6-46c5-b1a0-268cd76692f2.roa Signing time: Sun 01 Mar 2026 00:11:26 +0000 ROA not before: Sun 01 Mar 2026 00:11:26 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 153.42.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:35:1c:b5:9d:25:86:df:4a:b5:07:cc:ef:3e:ce:e2:0e:3f:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 1 00:11:26 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=efc35111440ba5885e954058861b3b1fd97256ec4d5b1d9e16f57677105bfd4c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:4d:4c:df:08:46:40:97:23:f0:c3:d5:d1: a1:37:f2:14:d5:c2:69:c0:5f:cb:b5:2a:c4:23:46: 31:2d:4e:5b:9b:0c:20:49:07:54:0f:18:a1:f8:8b: 85:a9:8c:77:ce:ea:5c:bb:05:ef:3f:06:b5:b2:40: 98:5d:ed:5e:a1:ef:f8:e0:7f:72:91:5d:75:60:cc: b5:fe:27:20:1d:68:c7:49:cf:ef:fc:48:c4:3b:c6: 8d:49:a6:d8:dd:89:9f:81:ef:b4:54:96:ef:d3:e7: b6:d8:d0:d4:83:3b:14:8c:a2:1b:a7:9e:24:bc:a1: 47:42:85:3e:d2:a1:d4:b0:12:7d:73:36:6a:fa:19: b9:05:8f:a9:70:4f:a0:b1:d5:6a:34:13:23:2d:bd: 13:3f:a9:b5:9c:08:ad:f7:4d:4b:e5:23:b1:8d:e1: 69:a6:f2:a6:67:5a:4a:c7:ef:11:f2:8a:fe:7b:d6: 63:b3:50:5c:6d:8d:3d:85:03:ae:0b:f0:33:75:5b: fb:05:ba:4c:99:7b:c7:f1:fb:e4:f8:7e:b6:1d:c2: 50:d9:c3:ee:ad:79:0d:91:a5:b7:27:8d:e9:ed:bc: 7b:38:77:62:40:da:6b:e5:af:be:80:6f:c5:a4:e0: 06:ef:4b:f5:39:53:fc:2b:66:12:4d:2c:9b:2c:cb: 48:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A8:F0:DC:37:CF:C8:8D:09:25:22:F3:D1:AA:45:70:2F:08:CD:AA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5764c5f6-9fe6-46c5-b1a0-268cd76692f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.42.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9b:74:c0:24:78:0f:72:e5:95:8a:6b:cd:25:a2:47:62:db:4d: 92:29:d7:8c:db:36:10:1f:d7:30:dd:c8:54:c8:54:f0:bc:dc: a3:3c:de:c7:4b:c6:23:0d:bd:5e:e0:4c:f7:af:36:66:6c:92: 25:21:ee:fa:63:98:a8:06:2f:a7:89:04:67:53:70:d1:42:a0: af:62:31:c4:82:60:04:4a:90:54:0e:ff:16:4d:0b:64:74:93: 99:3a:51:bf:90:0b:8f:94:6b:88:8a:ac:35:61:0c:b5:0e:ff: a1:e2:6f:d6:29:ea:8f:96:61:35:52:36:ab:7a:d4:ab:bc:89: 0f:86:00:61:28:f7:6b:49:83:e8:00:a2:e1:2b:15:ff:70:d9: 78:ea:93:c0:10:6a:66:34:2d:7d:82:f4:72:e0:89:0d:be:45: ed:e5:e7:92:1f:f7:1f:22:d2:a2:15:0e:ad:d5:21:32:04:f5: ff:4e:2b:ea:9e:f6:b0:bd:32:c9:87:d5:1e:8f:d4:1d:99:3e: dd:ba:8d:e2:33:2b:9a:38:13:e8:17:cb:a1:ee:2c:c0:04:6a: a9:13:c0:1b:5a:27:f0:e4:9b:50:6a:3c:82:8c:c0:2b:74:e3: 01:f9:74:69:64:fe:ab:f8:9e:a7:be:3a:f6:05:93:f4:e6:e4: 74:48:95:3d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNzUctZ0lht9KtQfM7z7O4g4/6kAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzAxMDAxMTI2WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZmMzNTExMTQ0MGJhNTg4NWU5NTQwNTg4NjFiM2IxZmQ5 NzI1NmVjNGQ1YjFkOWUxNmY1NzY3NzEwNWJmZDRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8V01M3whGQJcj8MPV0aE38hTVwmnAX8u1KsQjRjEtTlub DCBJB1QPGKH4i4WpjHfO6ly7Be8/BrWyQJhd7V6h7/jgf3KRXXVgzLX+JyAdaMdJ z+/8SMQ7xo1JptjdiZ+B77RUlu/T57bY0NSDOxSMohunniS8oUdChT7SodSwEn1z Nmr6GbkFj6lwT6Cx1Wo0EyMtvRM/qbWcCK33TUvlI7GN4Wmm8qZnWkrH7xHyiv57 1mOzUFxtjT2FA64L8DN1W/sFukyZe8fx++T4frYdwlDZw+6teQ2RpbcnjentvHs4 d2JA2mvlr76Ab8Wk4AbvS/U5U/wrZhJNLJssy0hdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUZqjw3DfPyI0JJSLz0apFcC8IzaowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU3NjRjNWY2LTlmZTYtNDZjNS1iMWEwLTI2OGNkNzY2OTJmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCZKjANBgkqhkiG9w0BAQsFAAOCAQEAm3TAJHgPcuWVimvNJaJHYttNkinX jNs2EB/XMN3IVMhU8Lzcozzex0vGIw29XuBM9682ZmySJSHu+mOYqAYvp4kEZ1Nw 0UKgr2IxxIJgBEqQVA7/Fk0LZHSTmTpRv5ALj5RriIqsNWEMtQ7/oeJv1inqj5Zh NVI2q3rUq7yJD4YAYSj3a0mD6ACi4SsV/3DZeOqTwBBqZjQtfYL0cuCJDb5F7eXn kh/3HyLSohUOrdUhMgT1/04r6p72sL0yyYfVHo/UHZk+3bqN4jMrmjgT6BfLoe4s wARqqRPAG1on8OSbUGo8gozAK3TjAfl0aWT+q/iep7469gWT9ObkdEiVPQ== -----END CERTIFICATE-----Generated at Mon Mar 2 00:11:32 2026 by rpki-client