$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b9adc9-cd45-4063-bd3b-110c018322fe.roa File: 67b9adc9-cd45-4063-bd3b-110c018322fe.roa (raw, json) Hash identifier: 3R0BgUaLBYiLwNy0XW7VtXmizjY41hpef0LUaDD3bUw= Subject key identifier: 2E:0F:AC:8E:E0:4D:89:39:D8:C5:FC:7D:F1:EF:B2:91:3F:4A:79:C7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 30E8C8FA265A1B41913A413411E18D4E6511D5B4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b9adc9-cd45-4063-bd3b-110c018322fe.roa Signing time: Wed 25 Feb 2026 00:20:07 +0000 ROA not before: Wed 25 Feb 2026 00:20:07 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 23.21.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e8:c8:fa:26:5a:1b:41:91:3a:41:34:11:e1:8d:4e:65:11:d5:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 00:20:07 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=072e5cb5bf6ce5354dfe752a02c8d28239b9dac686bc2c4222883f0d6bfbd43d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fe:aa:9b:17:65:4d:dc:38:63:cb:1c:58:38: ab:6d:e8:99:7c:bf:a4:99:9d:06:c9:6d:69:91:e4: 0d:86:48:5f:e0:fe:c6:1a:9f:86:f4:20:fb:d2:9a: 2e:3d:c2:21:c0:23:6d:fe:31:8b:5e:c3:4b:7f:d7: d5:bc:e6:7a:dd:29:45:09:01:fb:91:2b:d3:7e:8c: f7:96:b0:04:f2:4f:3c:99:08:41:9c:b5:59:88:9f: 2a:5d:41:95:6f:ec:69:8f:1c:f6:7d:b9:60:fa:b9: 82:ca:17:03:94:5c:eb:7d:4e:c0:61:62:97:d4:a0: c9:a3:49:8a:9c:a4:d0:81:f5:17:28:6b:be:68:3d: 6a:ff:45:ce:bd:e3:9a:eb:a3:fe:ec:cd:a1:f2:6b: 77:4d:ec:b2:36:e9:a8:77:6a:ac:eb:23:ce:da:9f: 0d:65:75:b1:9e:06:f6:e3:41:b4:63:47:03:ea:4b: 22:76:aa:60:f5:a6:48:10:ea:eb:f9:53:c7:c0:e2: a1:31:f3:19:52:de:e2:c2:82:73:db:3b:61:19:db: 65:5e:d5:5a:14:a7:9b:c8:b0:5b:66:0d:48:4a:12: e7:21:55:2f:ea:b2:a9:36:d4:9f:fb:24:a8:49:8c: d1:e2:ee:e6:6a:40:57:d8:12:56:dc:3f:a6:f3:07: a1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0F:AC:8E:E0:4D:89:39:D8:C5:FC:7D:F1:EF:B2:91:3F:4A:79:C7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b9adc9-cd45-4063-bd3b-110c018322fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.21.40.0/21 Signature Algorithm: sha256WithRSAEncryption 2d:91:d5:34:1a:b3:40:73:05:5b:87:8a:97:90:03:c2:9a:9c: 84:82:62:08:87:93:53:fe:ff:68:12:a5:9a:9c:da:63:33:24: 6e:02:d5:46:95:ae:4b:63:2c:01:67:d3:96:21:72:ae:d4:60: ee:ed:d8:6c:85:0f:32:bb:f4:d5:de:a2:3e:52:e9:10:5b:83: 3c:39:a9:a7:89:17:eb:45:b0:2e:35:f4:a0:80:55:48:06:06: e0:77:ed:72:c6:ff:1f:ce:3e:39:f6:8e:ca:9d:35:39:27:7c: 2e:17:ba:c7:ea:5a:d2:9f:08:fd:96:0d:2c:d1:d1:76:5c:dd: ca:ef:6a:d0:07:59:1b:22:11:46:f2:c8:c5:58:ba:4c:00:5c: 44:87:d4:8f:4e:b2:64:ff:bb:e9:5f:52:ac:0b:c8:5a:0f:b6: ad:27:f2:a5:19:a1:75:d8:b2:7d:15:9f:53:6b:f3:98:49:5e: 72:b9:f2:3a:22:29:7e:08:c5:6a:d1:ca:87:c6:82:7e:ac:96: 67:c6:43:29:23:29:41:c5:16:6d:6d:28:81:1f:50:9d:37:9f: ef:b9:4a:c2:63:72:5b:3b:e5:2b:ef:ec:7a:bc:f6:90:ff:92: ca:43:be:58:ef:72:c1:8d:cc:ed:1c:fe:7b:36:dc:67:09:b5: d4:ff:82:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMOjI+iZaG0GROkE0EeGNTmUR1bQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDAyMDA3WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzJlNWNiNWJmNmNlNTM1NGRmZTc1MmEwMmM4ZDI4MjM5 YjlkYWM2ODZiYzJjNDIyMjg4M2YwZDZiZmJkNDNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDG/qqbF2VN3DhjyxxYOKtt6Jl8v6SZnQbJbWmR5A2GSF/g /sYan4b0IPvSmi49wiHAI23+MYtew0t/19W85nrdKUUJAfuRK9N+jPeWsATyTzyZ CEGctVmInypdQZVv7GmPHPZ9uWD6uYLKFwOUXOt9TsBhYpfUoMmjSYqcpNCB9Rco a75oPWr/Rc6945rro/7szaHya3dN7LI26ah3aqzrI87anw1ldbGeBvbjQbRjRwPq SyJ2qmD1pkgQ6uv5U8fA4qEx8xlS3uLCgnPbO2EZ22Ve1VoUp5vIsFtmDUhKEuch VS/qsqk21J/7JKhJjNHi7uZqQFfYElbcP6bzB6GvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULg+sjuBNiTnYxfx98e+ykT9KeccwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3YjlhZGM5LWNkNDUtNDA2My1iZDNiLTExMGMwMTgzMjJmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMXFSgwDQYJKoZIhvcNAQELBQADggEBAC2R1TQas0BzBVuHipeQA8KanISC YgiHk1P+/2gSpZqc2mMzJG4C1UaVrktjLAFn05Yhcq7UYO7t2GyFDzK79NXeoj5S 6RBbgzw5qaeJF+tFsC419KCAVUgGBuB37XLG/x/OPjn2jsqdNTknfC4XusfqWtKf CP2WDSzR0XZc3crvatAHWRsiEUbyyMVYukwAXESH1I9OsmT/u+lfUqwLyFoPtq0n 8qUZoXXYsn0Vn1Nr85hJXnK58joiKX4IxWrRyofGgn6slmfGQykjKUHFFm1tKIEf UJ03n++5SsJjcls75Svv7Hq89pD/kspDvljvcsGNzO0c/ns23GcJtdT/giQ= -----END CERTIFICATE-----Generated at Mon Mar 2 09:01:26 2026 by rpki-client