$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5def9086-58d5-488f-a7a3-9d1d8a71b08f.roa File: 5def9086-58d5-488f-a7a3-9d1d8a71b08f.roa (raw, json) Hash identifier: M8cwFeOjCbewYEc3fgDD32rv0HlxkZB5UJRDGrE2SR4= Subject key identifier: CE:81:B6:E0:48:6D:19:B2:05:35:00:05:15:A9:F2:8C:85:74:88:B4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 72318E3F6B9AEF77636D43E83F79F1589BDB68C7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5def9086-58d5-488f-a7a3-9d1d8a71b08f.roa Signing time: Fri 13 Feb 2026 01:10:07 +0000 ROA not before: Fri 13 Feb 2026 01:10:07 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:31:8e:3f:6b:9a:ef:77:63:6d:43:e8:3f:79:f1:58:9b:db:68:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 13 01:10:07 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=622fb77784acca19490fb0c0190bb48300754d83cae6cc95f428fff7aebf98de, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1c:70:12:e8:ef:26:fc:9f:4c:c6:2d:ab:55: 3a:94:82:0f:34:30:b9:04:dd:72:8b:15:e2:65:50: c4:2c:5a:e1:44:7e:73:a9:41:cf:20:f6:5b:06:14: 4e:b9:e0:1a:a3:00:4c:76:0d:a9:ae:10:25:c2:77: bb:85:24:1b:7d:49:64:2c:1e:23:29:b3:6c:0f:aa: 98:42:54:5f:f8:eb:07:a7:25:54:9b:aa:5d:41:4a: 06:7d:1a:71:36:08:69:a1:7d:71:05:a6:bc:43:fa: 4a:26:b3:15:74:e9:e9:6f:fc:19:54:2e:33:0d:70: a6:a2:78:c4:08:02:05:ad:1a:3c:7c:a4:de:c9:b8: 93:d2:8a:98:06:d0:d0:8f:8c:27:b0:e8:2c:36:82: d7:b8:87:85:e4:6a:50:c6:e4:17:09:ee:16:ef:d3: fc:f1:bb:08:c4:64:ad:1e:31:e7:4f:bc:c1:5e:11: fd:6b:86:d2:71:5e:d7:c2:ba:61:56:c7:2c:5e:18: a9:a3:8e:88:8a:bf:c9:c7:b3:24:54:c3:1c:1f:a9: a5:f6:76:78:68:50:1e:00:7d:b4:d3:75:34:19:d6: 2d:02:8a:bf:d4:28:21:e5:f0:d4:bf:6f:d2:da:e0: 5d:af:98:85:c0:86:34:51:65:72:c5:b4:41:d0:be: e0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:81:B6:E0:48:6D:19:B2:05:35:00:05:15:A9:F2:8C:85:74:88:B4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5def9086-58d5-488f-a7a3-9d1d8a71b08f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.104.0/24 Signature Algorithm: sha256WithRSAEncryption 57:c3:50:f0:f6:8a:2b:99:95:0d:a7:cb:94:4b:79:53:bb:28: 6a:b4:6e:ad:fd:c2:8f:47:4d:1a:fa:8a:2e:7d:a2:26:65:6e: ae:13:6d:e6:63:4a:e1:3a:01:f5:33:52:1b:55:54:70:a8:c3: 82:92:96:38:da:c8:4c:ba:b0:ac:b1:08:cb:88:df:48:0d:bf: a0:76:c2:5f:fe:62:2d:4e:a3:73:87:cd:d2:d5:e4:a2:d7:55: 2d:45:4c:4f:1c:20:ad:b9:6d:07:dc:6e:a5:03:ac:6b:68:8a: 4b:62:eb:4c:e8:80:dc:fc:fd:6d:81:cc:f8:d4:75:64:cc:c0: d6:38:f2:11:d5:18:bb:9b:72:31:35:c7:ac:55:f8:4a:1d:94: c0:94:9f:bb:d7:01:0b:a9:ce:eb:62:84:82:d9:27:83:17:7c: 80:9a:5b:61:e1:97:b6:34:58:35:a8:01:73:d0:2d:27:07:aa: 41:bb:b8:36:d4:eb:3d:9c:38:30:de:29:3a:74:e0:33:a0:c3: 30:da:7c:c8:87:9c:5a:d2:bb:25:9b:60:35:da:6f:ca:cf:4f: f6:02:d3:e2:78:85:f5:98:57:72:0f:e6:73:4f:5e:e3:4b:0b: 1c:91:7e:f7:49:72:7a:6b:2f:70:be:df:09:6f:e2:c8:17:89: 7e:6e:f4:cc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcjGOP2ua73djbUPoP3nxWJvbaMcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEzMDExMDA3WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjJmYjc3Nzg0YWNjYTE5NDkwZmIwYzAxOTBiYjQ4MzAw NzU0ZDgzY2FlNmNjOTVmNDI4ZmZmN2FlYmY5OGRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoHHAS6O8m/J9Mxi2rVTqUgg80MLkE3XKLFeJlUMQsWuFE fnOpQc8g9lsGFE654BqjAEx2DamuECXCd7uFJBt9SWQsHiMps2wPqphCVF/46wen JVSbql1BSgZ9GnE2CGmhfXEFprxD+komsxV06elv/BlULjMNcKaieMQIAgWtGjx8 pN7JuJPSipgG0NCPjCew6Cw2gte4h4XkalDG5BcJ7hbv0/zxuwjEZK0eMedPvMFe Ef1rhtJxXtfCumFWxyxeGKmjjoiKv8nHsyRUwxwfqaX2dnhoUB4AfbTTdTQZ1i0C ir/UKCHl8NS/b9La4F2vmIXAhjRRZXLFtEHQvuA5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzoG24EhtGbIFNQAFFanyjIV0iLQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVkZWY5MDg2LTU4ZDUtNDg4Zi1hN2EzLTlkMWQ4YTcxYjA4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM32gwDQYJKoZIhvcNAQELBQADggEBAFfDUPD2iiuZlQ2ny5RLeVO7KGq0 bq39wo9HTRr6ii59oiZlbq4TbeZjSuE6AfUzUhtVVHCow4KSljjayEy6sKyxCMuI 30gNv6B2wl/+Yi1Oo3OHzdLV5KLXVS1FTE8cIK25bQfcbqUDrGtoikti60zogNz8 /W2BzPjUdWTMwNY48hHVGLubcjE1x6xV+EodlMCUn7vXAQupzutihILZJ4MXfICa W2Hhl7Y0WDWoAXPQLScHqkG7uDbU6z2cODDeKTp04DOgwzDafMiHnFrSuyWbYDXa b8rPT/YC0+J4hfWYV3IP5nNPXuNLCxyRfvdJcnprL3C+3wlv4sgXiX5u9Mw= -----END CERTIFICATE-----Generated at Mon Mar 2 01:48:58 2026 by rpki-client