$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5eac4af7-a50d-47d9-86d6-2298b7626d53.roa File: 5eac4af7-a50d-47d9-86d6-2298b7626d53.roa (raw, json) Hash identifier: FKaqa/Svn5+pHVvXJQNSxDShQUM1dpRIOoI884A0Kr8= Subject key identifier: 20:96:47:E7:DD:3A:BD:6C:91:7E:FA:BE:A4:14:67:CF:8B:8B:8E:27 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 01FE4F56EA74B3E8F4748F3E68EF7235F0CA66AC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5eac4af7-a50d-47d9-86d6-2298b7626d53.roa Signing time: Sat 21 Feb 2026 00:51:57 +0000 ROA not before: Sat 21 Feb 2026 00:51:57 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:fe:4f:56:ea:74:b3:e8:f4:74:8f:3e:68:ef:72:35:f0:ca:66:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:51:57 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=b9da44fa22e23faffa4071802c78e68d37ea1268823e55eed70e5e405071b64a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:26:65:07:26:65:b7:31:72:24:6e:e1:61: 27:f1:4f:6b:b6:8e:8c:36:e1:64:4b:b4:3c:2a:c5: 4a:09:19:dc:00:ed:a2:f1:8c:e8:c6:b0:5f:c9:1c: 77:df:a2:4b:21:31:51:80:2e:f2:3f:b0:ea:9d:1b: 87:71:a0:68:5a:19:ff:5b:20:dd:4c:a0:8e:15:22: 98:7c:c4:6a:56:2a:1b:cc:90:ac:21:cc:45:47:da: 90:36:97:14:b3:52:04:57:0a:ce:e0:30:b0:4b:b4: 13:3c:a2:39:a9:79:c5:fe:fe:b4:bd:c0:a4:c9:dd: 04:7a:2a:b7:de:6a:b0:ca:83:f8:da:00:7e:cb:ae: 05:b2:0c:9e:a3:fc:47:62:d8:f7:12:1f:39:93:ac: 7d:50:f5:15:f1:a8:3e:cf:9c:78:36:0e:e5:ad:d4: 15:58:ab:11:b2:27:c4:35:41:34:f5:f1:4c:1e:b1: 74:41:30:60:94:e6:db:fa:4d:3f:d0:b2:cc:c2:b1: 0b:4a:ca:c8:08:cc:a9:f1:2a:d5:a1:7d:db:f1:19: cf:06:05:86:b2:7b:59:83:3d:0b:ac:77:a0:02:6e: 67:54:1e:6a:05:10:b1:54:53:53:16:63:ed:36:66: 17:7f:3e:96:e4:a6:88:d2:fd:6f:be:dd:48:bc:4a: a1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:96:47:E7:DD:3A:BD:6C:91:7E:FA:BE:A4:14:67:CF:8B:8B:8E:27 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5eac4af7-a50d-47d9-86d6-2298b7626d53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.86.0/24 Signature Algorithm: sha256WithRSAEncryption 91:d4:3f:57:63:db:68:22:d2:e1:67:3e:43:8e:e2:77:5b:31: da:10:ed:eb:f2:c8:49:e5:52:97:23:52:2d:05:01:c3:e4:b9: 2f:53:fd:8e:96:fa:45:d0:15:8e:87:3e:c5:13:d5:b5:b5:72: 36:6d:1e:e2:c2:a9:d7:53:1f:d8:a2:68:3a:b9:17:17:93:21: 43:7a:3b:90:8d:d7:89:80:a9:b4:81:e7:50:4f:1f:bb:51:c9: 8d:cf:ec:af:5c:5f:1a:9a:76:29:7b:b6:5c:10:42:bb:4a:3c: 21:6a:c1:73:89:36:6d:12:fd:94:0e:5a:38:b4:92:2d:59:cf: c7:03:57:20:5d:b8:7c:b5:3f:b8:9e:e9:6a:09:63:ee:7f:b9: a6:3c:0a:0b:ed:62:f6:4f:d1:7f:01:ab:ee:df:fd:2b:85:dd: 31:0e:ee:d6:78:0b:63:0a:25:e9:1b:b1:57:15:7b:20:2d:9d: f9:b1:4e:c9:f7:b2:cf:b1:bd:2f:31:6a:a5:ae:eb:a2:55:2b: 54:35:01:10:6c:3e:27:07:ae:91:00:92:99:c5:12:be:05:d7: 52:a9:7f:cc:97:f6:ed:b3:36:1a:31:c9:70:45:3a:5a:c3:ec: 08:cf:0d:c8:41:cf:30:cd:e9:3b:c2:61:cf:ec:28:f8:52:18: ff:1c:44:4d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAf5PVup0s+j0dI8+aO9yNfDKZqwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDA1MTU3WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiOWRhNDRmYTIyZTIzZmFmZmE0MDcxODAyYzc4ZTY4ZDM3 ZWExMjY4ODIzZTU1ZWVkNzBlNWU0MDUwNzFiNjRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGsCZlByZltzFyJG7hYSfxT2u2jow24WRLtDwqxUoJGdwA 7aLxjOjGsF/JHHffokshMVGALvI/sOqdG4dxoGhaGf9bIN1MoI4VIph8xGpWKhvM kKwhzEVH2pA2lxSzUgRXCs7gMLBLtBM8ojmpecX+/rS9wKTJ3QR6KrfearDKg/ja AH7LrgWyDJ6j/Edi2PcSHzmTrH1Q9RXxqD7PnHg2DuWt1BVYqxGyJ8Q1QTT18Uwe sXRBMGCU5tv6TT/QsszCsQtKysgIzKnxKtWhfdvxGc8GBYaye1mDPQusd6ACbmdU HmoFELFUU1MWY+02Zhd/PpbkpojS/W++3Ui8SqEjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIJZH5906vWyRfvq+pBRnz4uLjicwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlYWM0YWY3LWE1MGQtNDdkOS04NmQ2LTIyOThiNzYyNmQ1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmFYwDQYJKoZIhvcNAQELBQADggEBAJHUP1dj22gi0uFnPkOO4ndbMdoQ 7evyyEnlUpcjUi0FAcPkuS9T/Y6W+kXQFY6HPsUT1bW1cjZtHuLCqddTH9iiaDq5 FxeTIUN6O5CN14mAqbSB51BPH7tRyY3P7K9cXxqadil7tlwQQrtKPCFqwXOJNm0S /ZQOWji0ki1Zz8cDVyBduHy1P7ie6WoJY+5/uaY8CgvtYvZP0X8Bq+7f/SuF3TEO 7tZ4C2MKJekbsVcVeyAtnfmxTsn3ss+xvS8xaqWu66JVK1Q1ARBsPicHrpEAkpnF Er4F11Kpf8yX9u2zNhoxyXBFOlrD7AjPDchBzzDN6TvCYc/sKPhSGP8cRE0= -----END CERTIFICATE-----Generated at Mon Mar 2 00:12:47 2026 by rpki-client