$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61d0d1a8-1d1a-4b6a-be79-09198325212d.roa File: 61d0d1a8-1d1a-4b6a-be79-09198325212d.roa (raw, json) Hash identifier: 8JoQ8/99YkcKan98rWxnC61XOypThRJxn9nIPUIDJHM= Subject key identifier: 92:5F:3D:42:AC:AD:2F:F2:B7:2B:F0:D3:C7:21:D8:04:7C:0D:66:D7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4F5176C24F6445CF02F223168EE35B977B765331 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61d0d1a8-1d1a-4b6a-be79-09198325212d.roa Signing time: Sun 08 Feb 2026 00:41:37 +0000 ROA not before: Sun 08 Feb 2026 00:41:37 +0000 ROA not after: Sat 09 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 65.4.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:51:76:c2:4f:64:45:cf:02:f2:23:16:8e:e3:5b:97:7b:76:53:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 8 00:41:37 2026 GMT Not After : May 9 23:59:59 2026 GMT Subject: serialNumber=d3afba7edd58bdf317c785cd6ae19b25d59572b5c19928b19f314889a2efccfe, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:99:0a:b4:e7:01:5d:aa:ef:76:db:c9:1c:95: 43:7d:c1:5e:a8:e7:0a:03:47:0a:b0:03:41:56:07: 0f:71:2a:42:25:b6:8e:76:c8:3c:65:3a:c0:80:49: 0f:a4:06:47:7c:5d:48:c2:b2:18:54:89:d4:4c:1f: a1:9f:ae:f9:a5:d8:ab:6d:27:18:ac:00:08:06:2f: 3f:6e:ca:f5:49:66:d5:dd:36:0c:c2:18:5e:d6:a1: 53:26:29:82:7d:15:b5:90:7b:41:e5:7e:81:4e:3d: a5:e7:dd:b1:01:2b:8a:a0:03:17:38:3f:85:4f:a0: 3e:09:b2:a9:02:24:73:09:04:5e:85:10:bd:fe:f3: 91:4d:35:91:a3:4a:c5:6e:af:2d:8f:26:43:64:ae: a5:cd:8b:fb:74:33:76:84:9c:e6:cc:00:74:45:17: 4f:2e:a3:bd:b6:1d:c3:05:e1:07:25:c8:24:6d:e6: ea:a3:4a:ed:19:29:4f:58:a8:7b:a5:03:84:59:24: 36:ce:ca:bc:46:cc:ea:f6:b6:5b:5a:ea:ab:08:23: 28:8c:d1:d1:ca:44:6a:a3:77:88:cd:b7:e3:15:03: bf:80:ad:00:7c:d4:e5:cf:3e:d1:1a:cd:a5:4d:fa: e8:6d:ad:58:c9:9f:0f:95:1c:fb:c7:e7:66:32:3d: f9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5F:3D:42:AC:AD:2F:F2:B7:2B:F0:D3:C7:21:D8:04:7C:0D:66:D7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61d0d1a8-1d1a-4b6a-be79-09198325212d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.4.0.0/16 Signature Algorithm: sha256WithRSAEncryption b2:85:15:69:96:59:65:37:53:05:55:ea:da:1a:40:5e:76:b3: 19:a0:e0:9c:c1:0f:bb:8e:61:85:3b:62:19:e5:b8:10:e7:9b: b5:7d:45:a2:2d:97:0f:79:f0:41:72:b8:9a:b5:a9:63:21:db: 9f:17:7f:4e:f8:2a:c5:64:28:61:65:f4:4e:49:65:55:6b:ea: 89:ee:ec:10:e4:db:42:4c:6a:06:29:74:a3:c3:0a:e1:05:68: 6c:39:19:ef:f5:fa:1a:a4:99:89:44:57:59:73:05:62:84:a2: c4:bf:7c:c9:ae:78:f0:88:fc:9f:a8:76:1d:53:0e:ed:cd:39: e4:b6:cb:3d:18:ee:6a:56:15:c2:cf:5f:cc:f7:8d:53:e8:b5: bd:09:cc:4e:b8:a3:23:f2:77:85:b8:47:ef:10:1e:bd:2c:20: 05:8d:be:76:31:5b:0d:2b:2c:bb:1a:13:6b:68:b0:0f:e1:4b: 92:b2:25:91:da:12:bb:c3:18:b0:c8:16:bc:e2:48:38:40:8b: 9a:b5:61:f8:06:28:b4:30:15:2d:f2:b6:53:f4:6a:76:d9:86: 23:f4:b5:b3:5a:90:44:69:32:53:d0:92:ad:c9:ff:ae:2c:98: c8:e3:e7:98:10:dd:28:65:bc:c0:d4:f7:40:a0:67:a1:f5:ee: 32:8a:dc:8b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUT1F2wk9kRc8C8iMWjuNbl3t2UzEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA4MDA0MTM3WhcNMjYwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkM2FmYmE3ZWRkNThiZGYzMTdjNzg1Y2Q2YWUxOWIyNWQ1 OTU3MmI1YzE5OTI4YjE5ZjMxNDg4OWEyZWZjY2ZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLmQq05wFdqu9228kclUN9wV6o5woDRwqwA0FWBw9xKkIl to52yDxlOsCASQ+kBkd8XUjCshhUidRMH6Gfrvml2KttJxisAAgGLz9uyvVJZtXd NgzCGF7WoVMmKYJ9FbWQe0HlfoFOPaXn3bEBK4qgAxc4P4VPoD4JsqkCJHMJBF6F EL3+85FNNZGjSsVury2PJkNkrqXNi/t0M3aEnObMAHRFF08uo722HcMF4QclyCRt 5uqjSu0ZKU9YqHulA4RZJDbOyrxGzOr2tlta6qsIIyiM0dHKRGqjd4jNt+MVA7+A rQB81OXPPtEazaVN+uhtrVjJnw+VHPvH52YyPfljAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUkl89QqytL/K3K/DTxyHYBHwNZtcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYxZDBkMWE4LTFkMWEtNGI2YS1iZTc5LTA5MTk4MzI1MjEyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBBBDANBgkqhkiG9w0BAQsFAAOCAQEAsoUVaZZZZTdTBVXq2hpAXnazGaDg nMEPu45hhTtiGeW4EOebtX1Foi2XD3nwQXK4mrWpYyHbnxd/TvgqxWQoYWX0Tkll VWvqie7sEOTbQkxqBil0o8MK4QVobDkZ7/X6GqSZiURXWXMFYoSixL98ya548Ij8 n6h2HVMO7c055LbLPRjualYVws9fzPeNU+i1vQnMTrijI/J3hbhH7xAevSwgBY2+ djFbDSssuxoTa2iwD+FLkrIlkdoSu8MYsMgWvOJIOECLmrVh+AYotDAVLfK2U/Rq dtmGI/S1s1qQRGkyU9CSrcn/riyYyOPnmBDdKGW8wNT3QKBnofXuMorciw== -----END CERTIFICATE-----Generated at Mon Mar 2 02:07:03 2026 by rpki-client