$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/611a9329-2af8-483e-ade2-291c7456d663.roa File: 611a9329-2af8-483e-ade2-291c7456d663.roa (raw, json) Hash identifier: l4JbuvYK/d559o9EfHLtj4BpvdZf+zeET8TxVM7saDg= Subject key identifier: 74:27:57:02:8F:83:66:A8:5E:40:4E:A3:19:9F:41:22:72:CD:00:0A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 41938B1D2831EB1F5D8D8089F51CFCC1F8418883 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/611a9329-2af8-483e-ade2-291c7456d663.roa Signing time: Tue 17 Feb 2026 07:23:17 +0000 ROA not before: Tue 17 Feb 2026 07:23:17 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 209.191.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:93:8b:1d:28:31:eb:1f:5d:8d:80:89:f5:1c:fc:c1:f8:41:88:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 17 07:23:17 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=3e69ad142269f61afb02b76c5fd59719505e44a49af1cf648d32fd86967ae247, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bb:01:e8:27:aa:54:4a:43:07:47:5f:1b:2c: 92:fc:aa:e9:2e:22:5d:77:ac:6f:c1:01:f7:63:0e: cc:f3:fc:c4:c1:23:0e:b8:1e:96:cd:7d:3e:54:a7: 69:53:e6:e7:74:7d:e8:e5:ac:06:5b:2b:19:f3:8c: ee:84:1b:6b:a8:b7:1e:f2:6d:f6:c8:59:32:c1:43: fe:ae:68:2d:bb:07:47:05:aa:a7:7a:c2:a3:ed:f4: 5e:f9:2c:51:a0:04:cb:0b:eb:db:f2:2e:4c:09:5e: aa:58:8b:db:49:0a:43:ac:0f:c9:02:30:f3:c7:81: 1b:a7:74:b6:e9:d6:3e:cd:83:f1:c5:ba:93:51:9e: 32:14:e1:3c:10:df:ce:03:cc:a1:1c:e0:ff:56:b2: 22:87:4e:03:47:98:32:4a:c1:6f:2d:3e:a8:65:0a: ea:48:b9:4a:7e:c6:11:5a:8d:3f:79:2d:d6:32:13: d9:8e:e0:b6:24:f9:16:d5:94:f5:15:d8:f6:4e:7c: 13:a7:3a:d7:be:75:55:ba:5d:7f:76:a3:98:a8:6f: c1:3a:65:30:7b:e6:72:20:36:69:57:76:ff:c8:32: ce:4c:33:5b:50:f6:71:b1:eb:ce:28:81:af:8b:75: 4a:1d:a6:d7:11:a5:21:67:ae:a5:a1:b1:1f:f1:fa: f9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:27:57:02:8F:83:66:A8:5E:40:4E:A3:19:9F:41:22:72:CD:00:0A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/611a9329-2af8-483e-ade2-291c7456d663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.191.152.0/22 Signature Algorithm: sha256WithRSAEncryption 00:e8:74:51:eb:79:87:5e:73:cd:d6:6f:4e:df:62:ec:4b:fd: f6:c1:38:4d:f5:c2:48:fc:84:c1:25:45:6c:00:8d:01:ee:e0: 20:58:a3:04:31:9c:c0:46:63:a0:d3:00:05:35:d7:19:5f:61: b8:a7:b7:ac:8c:92:1b:b2:62:a1:c0:ac:13:20:b6:7e:19:17: f7:c9:a3:b4:06:38:df:c5:69:f9:00:1e:b4:d9:16:d3:66:9a: 5c:c7:7c:ef:37:4a:62:6b:31:51:e4:3d:f4:da:49:1e:50:81: 3f:fa:06:fc:fe:9b:79:9b:37:84:a3:ad:ef:95:d6:ac:6e:b7: 59:63:14:60:c9:7b:04:b6:4a:99:e8:92:6a:58:58:c3:8c:8e: 7b:d5:67:46:86:5a:7a:80:9a:15:ed:30:87:5e:a8:a7:1f:29: a9:96:f5:d9:09:c5:3a:0f:9c:29:f5:bb:75:4c:f3:32:2d:90: 38:a9:e2:75:bc:44:5c:9b:09:05:bc:ac:8c:68:cb:5d:d4:04: c5:df:9d:73:f9:1f:90:75:e8:0a:ec:a0:16:a6:39:7c:02:fa: b6:d8:53:79:2a:0f:71:82:b0:35:ec:6d:4e:dc:0e:69:5d:ca: 70:e6:44:1d:66:bf:7b:ac:ec:7d:c5:70:70:e0:df:68:b0:92: 5f:93:e4:81 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQZOLHSgx6x9djYCJ9Rz8wfhBiIMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE3MDcyMzE3WhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTY5YWQxNDIyNjlmNjFhZmIwMmI3NmM1ZmQ1OTcxOTUw NWU0NGE0OWFmMWNmNjQ4ZDMyZmQ4Njk2N2FlMjQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2uwHoJ6pUSkMHR18bLJL8qukuIl13rG/BAfdjDszz/MTB Iw64HpbNfT5Up2lT5ud0fejlrAZbKxnzjO6EG2uotx7ybfbIWTLBQ/6uaC27B0cF qqd6wqPt9F75LFGgBMsL69vyLkwJXqpYi9tJCkOsD8kCMPPHgRundLbp1j7Ng/HF upNRnjIU4TwQ384DzKEc4P9WsiKHTgNHmDJKwW8tPqhlCupIuUp+xhFajT95LdYy E9mO4LYk+RbVlPUV2PZOfBOnOte+dVW6XX92o5iob8E6ZTB75nIgNmlXdv/IMs5M M1tQ9nGx684oga+LdUodptcRpSFnrqWhsR/x+vmrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdCdXAo+DZqheQE6jGZ9BInLNAAowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYxMWE5MzI5LTJhZjgtNDgzZS1hZGUyLTI5MWM3NDU2ZDY2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALRv5gwDQYJKoZIhvcNAQELBQADggEBAADodFHreYdec83Wb07fYuxL/fbB OE31wkj8hMElRWwAjQHu4CBYowQxnMBGY6DTAAU11xlfYbint6yMkhuyYqHArBMg tn4ZF/fJo7QGON/FafkAHrTZFtNmmlzHfO83SmJrMVHkPfTaSR5QgT/6Bvz+m3mb N4Sjre+V1qxut1ljFGDJewS2SpnokmpYWMOMjnvVZ0aGWnqAmhXtMIdeqKcfKamW 9dkJxToPnCn1u3VM8zItkDip4nW8RFybCQW8rIxoy13UBMXfnXP5H5B16ArsoBam OXwC+rbYU3kqD3GCsDXsbU7cDmldynDmRB1mv3us7H3FcHDg32iwkl+T5IE= -----END CERTIFICATE-----Generated at Mon Mar 2 00:01:18 2026 by rpki-client