$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b59b775-668d-4eff-a5fc-13102f0cb266.roa File: 5b59b775-668d-4eff-a5fc-13102f0cb266.roa (raw, json) Hash identifier: dotSvEjnonWi/4U9sx3LEl6AsDl0+7nYrLAl338eLi8= Subject key identifier: 2E:69:B6:B3:6C:38:D8:27:E5:B5:B3:9C:C6:77:4D:F6:5B:CB:B1:BF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1D4F84E3BE96503CD91F0878C199FF440182E6C9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b59b775-668d-4eff-a5fc-13102f0cb266.roa Signing time: Tue 10 Feb 2026 01:01:21 +0000 ROA not before: Tue 10 Feb 2026 01:01:21 +0000 ROA not after: Mon 11 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 198.132.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:4f:84:e3:be:96:50:3c:d9:1f:08:78:c1:99:ff:44:01:82:e6:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 10 01:01:21 2026 GMT Not After : May 11 23:59:59 2026 GMT Subject: serialNumber=86fbd97ad015a117e1231586f90af9a6ff5630574ff832e76391741865467108, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f6:ed:e8:72:e6:f1:df:ca:45:6e:49:d2:53: 66:4b:c8:2f:7e:bb:aa:85:d9:8b:88:f1:b9:96:ba: ee:a7:c2:94:31:cc:f2:7b:3e:ff:6b:02:d2:57:71: 9f:0d:15:2f:f7:6d:68:ce:ff:79:d7:b5:c7:5a:59: d0:c4:d2:cf:d4:20:50:39:47:0e:2e:74:78:b7:5f: 15:ad:f3:e7:f8:80:1b:89:4b:42:4d:e7:00:f9:e3: b0:79:9c:32:37:c2:95:7a:dc:b1:1e:e9:ef:d8:70: b0:4a:52:49:19:da:09:18:5a:40:1d:b4:da:cf:2f: f6:5e:69:0f:d9:ca:9f:ff:51:c1:a7:2a:23:4b:f6: 30:a0:24:9a:68:e8:d1:4d:89:26:33:92:be:85:b4: 99:36:0b:14:d4:40:11:59:46:0f:4b:f5:5c:7e:ce: da:70:a1:14:48:06:01:10:85:bf:c9:aa:c1:2d:04: 79:3c:27:e4:5e:3f:28:e3:b7:66:51:7d:58:e1:26: d7:08:05:34:d1:02:23:7c:f4:17:1c:9c:22:d1:aa: ec:31:c3:98:98:b8:79:0c:9b:3a:83:96:92:09:59: 83:bc:59:fb:2e:a3:d9:d0:2e:15:5a:d2:fc:52:af: 9c:1e:37:f7:76:79:8d:99:a2:00:7b:4b:df:2a:b6: 62:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:69:B6:B3:6C:38:D8:27:E5:B5:B3:9C:C6:77:4D:F6:5B:CB:B1:BF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b59b775-668d-4eff-a5fc-13102f0cb266.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.132.0.0/16 Signature Algorithm: sha256WithRSAEncryption 77:61:22:8c:25:98:5e:72:c0:02:c6:d0:cf:2c:96:4b:31:bf: c8:33:dc:02:3c:fe:c6:06:b8:be:69:9c:f5:e3:d3:c7:f8:7b: 13:b6:c4:bb:12:ee:d4:ea:fe:3f:71:2d:ca:dd:76:60:9d:a2: 37:7c:80:52:17:81:43:03:20:50:37:68:c5:56:0e:62:db:dc: 6b:2c:a2:6a:30:f2:1b:94:f3:aa:eb:0d:07:07:1b:a8:b1:a5: 74:41:c1:8b:35:a2:1c:f8:a1:aa:1b:52:af:70:dd:6c:23:2d: 21:f4:cd:69:eb:10:40:dd:71:93:5c:56:bf:52:68:1b:73:de: 7f:f9:3b:c2:0c:39:31:07:08:ef:cb:8f:f5:fd:26:4f:e0:e0: 6b:42:e8:8f:cb:82:d0:ce:49:41:7f:93:a9:00:cb:b5:ad:bb: 6e:ad:41:d2:2a:fa:84:73:41:af:84:f3:d8:20:25:32:ed:bf: 82:b8:88:1c:9e:9d:b1:3a:59:48:fb:bd:ca:c5:6c:ed:7d:44: bc:c9:cd:a8:66:d3:bd:43:96:bd:10:c8:52:bf:8d:70:17:bc: 9e:7e:93:85:b5:c6:3b:6c:1d:6a:b5:68:53:5e:72:00:ec:3f: f8:23:e2:9e:e7:3f:a0:c5:cf:a8:15:77:70:f7:d2:dd:80:be: 3a:21:64:5e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHU+E476WUDzZHwh4wZn/RAGC5skwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDEwMTIxWhcNMjYwNTExMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NmZiZDk3YWQwMTVhMTE3ZTEyMzE1ODZmOTBhZjlhNmZm NTYzMDU3NGZmODMyZTc2MzkxNzQxODY1NDY3MTA4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC79u3ocubx38pFbknSU2ZLyC9+u6qF2YuI8bmWuu6nwpQx zPJ7Pv9rAtJXcZ8NFS/3bWjO/3nXtcdaWdDE0s/UIFA5Rw4udHi3XxWt8+f4gBuJ S0JN5wD547B5nDI3wpV63LEe6e/YcLBKUkkZ2gkYWkAdtNrPL/ZeaQ/Zyp//UcGn KiNL9jCgJJpo6NFNiSYzkr6FtJk2CxTUQBFZRg9L9Vx+ztpwoRRIBgEQhb/JqsEt BHk8J+RePyjjt2ZRfVjhJtcIBTTRAiN89BccnCLRquwxw5iYuHkMmzqDlpIJWYO8 Wfsuo9nQLhVa0vxSr5weN/d2eY2ZogB7S98qtmLnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQULmm2s2w42CfltbOcxndN9lvLsb8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzViNTliNzc1LTY2OGQtNGVmZi1hNWZjLTEzMTAyZjBjYjI2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDGhDANBgkqhkiG9w0BAQsFAAOCAQEAd2EijCWYXnLAAsbQzyyWSzG/yDPc Ajz+xga4vmmc9ePTx/h7E7bEuxLu1Or+P3Etyt12YJ2iN3yAUheBQwMgUDdoxVYO YtvcayyiajDyG5TzqusNBwcbqLGldEHBizWiHPihqhtSr3DdbCMtIfTNaesQQN1x k1xWv1JoG3Pef/k7wgw5MQcI78uP9f0mT+Dga0Loj8uC0M5JQX+TqQDLta27bq1B 0ir6hHNBr4Tz2CAlMu2/griIHJ6dsTpZSPu9ysVs7X1EvMnNqGbTvUOWvRDIUr+N cBe8nn6ThbXGO2wdarVoU15yAOw/+CPinuc/oMXPqBV3cPfS3YC+OiFkXg== -----END CERTIFICATE-----Generated at Mon Mar 2 02:00:27 2026 by rpki-client