$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58b96c78-954b-41c2-87ff-4cf8f7be9e27.roa File: 58b96c78-954b-41c2-87ff-4cf8f7be9e27.roa (raw, json) Hash identifier: o9US2dVqiv8qTYv6Yu3UW5C4pIUje/cJGK8umO4Kwd8= Subject key identifier: 34:16:2D:10:85:81:09:F7:C7:0C:17:D8:59:BE:F5:0B:95:3C:3B:89 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2C0F75759AE57043B814DDA42C6B460CC5916239 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58b96c78-954b-41c2-87ff-4cf8f7be9e27.roa Signing time: Sun 08 Feb 2026 00:21:00 +0000 ROA not before: Sun 08 Feb 2026 00:21:00 +0000 ROA not after: Sat 09 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.114.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:0f:75:75:9a:e5:70:43:b8:14:dd:a4:2c:6b:46:0c:c5:91:62:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 8 00:21:00 2026 GMT Not After : May 9 23:59:59 2026 GMT Subject: serialNumber=bb32c2b6bc52d2fb3a303b79c9818087b81b4ee0fc07edb1fd78241ebfd692c5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:63:c8:57:48:72:79:5f:88:f3:83:c6:69:60: e7:15:b9:fd:5f:c3:ec:39:1e:c9:59:09:3c:6d:d4: a0:47:a1:fc:aa:e6:2c:45:fb:75:a2:30:ba:39:7e: 87:2d:5f:ff:4d:24:c4:39:68:c1:2c:a3:ea:75:83: 28:3a:5a:76:1c:e7:5e:09:8b:20:c2:0d:22:cb:c2: d9:83:80:06:0f:04:72:78:bb:4e:57:ca:0d:ee:3c: eb:14:aa:c3:a4:0f:c6:f9:67:c6:01:6f:d1:bd:37: 02:fa:4c:7b:cb:20:65:f0:86:0b:0f:a5:81:e2:77: 35:50:f1:9f:81:00:9f:5b:f5:b6:1e:05:60:06:6f: be:6c:a0:31:15:ee:ef:e8:52:c7:5c:fa:ad:63:17: 6e:db:50:6e:40:3c:96:13:48:22:35:9a:59:12:5c: 89:6a:76:0c:d0:fb:34:e6:e5:8c:5b:91:c6:15:a3: 9d:77:f8:e1:9a:88:2d:fd:6b:ea:75:e7:d4:d4:0a: 6b:da:80:c2:b3:74:d3:e5:52:05:2e:3d:5c:c4:8c: 8e:fc:c1:45:91:84:f3:8f:35:d3:de:93:75:45:48: 32:13:43:a0:90:5e:e7:92:64:59:16:0a:0b:e8:a4: a6:9e:5c:bd:56:d0:36:f0:bf:87:70:64:d3:a9:a2: df:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:16:2D:10:85:81:09:F7:C7:0C:17:D8:59:BE:F5:0B:95:3C:3B:89 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58b96c78-954b-41c2-87ff-4cf8f7be9e27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.114.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8f:f4:bd:52:24:ed:11:b0:df:7a:1a:1f:85:a2:e9:41:ad:2f: 6d:a4:58:ab:a1:77:a2:f9:81:bf:46:1a:21:bc:f6:3b:77:bc: f6:9d:c7:0e:88:87:2c:9d:23:72:cb:05:54:0d:63:c2:6a:b8: dc:78:e8:b7:2d:83:93:1c:cd:c5:5b:d6:58:e8:ca:c1:35:96: 82:a2:bb:1c:4e:7a:10:61:9c:71:ed:b9:2a:b2:fb:4b:b5:3e: d4:42:2b:e0:3f:27:f5:b9:3b:ee:96:e1:7c:13:ad:5e:bd:92: 1f:2d:7d:0b:f3:50:12:25:49:9d:44:cf:c3:e2:36:fc:0b:2e: 19:0c:0a:84:43:f7:ed:61:95:66:62:d7:7e:8d:d3:25:d5:96: 0f:95:56:1b:7a:ac:d2:4c:c5:37:11:44:68:aa:44:ec:b7:b9: 61:83:b5:40:90:09:c6:5b:47:3f:d6:36:c5:ec:97:98:fa:19: 16:43:9b:e6:c3:1e:d7:74:01:22:cf:7a:44:a4:00:fd:7a:43: 07:e7:4e:b9:5a:7d:74:c5:ed:1f:e6:24:03:64:e2:60:5b:a0: 86:41:c4:bb:db:c8:4a:9e:4a:f3:5e:0f:22:01:a0:cb:f0:b9: 92:0e:d4:c1:09:23:2d:3e:5c:6e:e8:66:44:b3:a7:73:53:05: 34:f4:32:06 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULA91dZrlcEO4FN2kLGtGDMWRYjkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA4MDAyMTAwWhcNMjYwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjMyYzJiNmJjNTJkMmZiM2EzMDNiNzljOTgxODA4N2I4 MWI0ZWUwZmMwN2VkYjFmZDc4MjQxZWJmZDY5MmM1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDeY8hXSHJ5X4jzg8ZpYOcVuf1fw+w5HslZCTxt1KBHofyq 5ixF+3WiMLo5foctX/9NJMQ5aMEso+p1gyg6WnYc514JiyDCDSLLwtmDgAYPBHJ4 u05Xyg3uPOsUqsOkD8b5Z8YBb9G9NwL6THvLIGXwhgsPpYHidzVQ8Z+BAJ9b9bYe BWAGb75soDEV7u/oUsdc+q1jF27bUG5APJYTSCI1mlkSXIlqdgzQ+zTm5YxbkcYV o513+OGaiC39a+p159TUCmvagMKzdNPlUgUuPVzEjI78wUWRhPOPNdPek3VFSDIT Q6CQXueSZFkWCgvopKaeXL1W0Dbwv4dwZNOpot8rAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUNBYtEIWBCffHDBfYWb71C5U8O4kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU4Yjk2Yzc4LTk1NGItNDFjMi04N2ZmLTRjZjhmN2JlOWUyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4cjANBgkqhkiG9w0BAQsFAAOCAQEAj/S9UiTtEbDfehofhaLpQa0vbaRY q6F3ovmBv0YaIbz2O3e89p3HDoiHLJ0jcssFVA1jwmq43Hjoty2DkxzNxVvWWOjK wTWWgqK7HE56EGGcce25KrL7S7U+1EIr4D8n9bk77pbhfBOtXr2SHy19C/NQEiVJ nUTPw+I2/AsuGQwKhEP37WGVZmLXfo3TJdWWD5VWG3qs0kzFNxFEaKpE7Le5YYO1 QJAJxltHP9Y2xeyXmPoZFkOb5sMe13QBIs96RKQA/XpDB+dOuVp9dMXtH+YkA2Ti YFughkHEu9vISp5K814PIgGgy/C5kg7UwQkjLT5cbuhmRLOnc1MFNPQyBg== -----END CERTIFICATE-----Generated at Sun Mar 1 23:55:02 2026 by rpki-client