$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68262a77-03e2-4c18-92d9-7a34ebeac869.roa File: 68262a77-03e2-4c18-92d9-7a34ebeac869.roa (raw, json) Hash identifier: mTejotNPU2WrHebY7T2DFUv58kMeR7ViEgWmDBbgTpo= Subject key identifier: 33:6E:00:5E:CD:ED:E5:60:18:E2:47:32:25:B3:08:32:FD:6A:01:8E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7D9243039BABD435C862F01E3731A3FEB9B2818B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68262a77-03e2-4c18-92d9-7a34ebeac869.roa Signing time: Tue 10 Feb 2026 00:41:40 +0000 ROA not before: Tue 10 Feb 2026 00:41:40 +0000 ROA not after: Mon 11 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 66.157.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:92:43:03:9b:ab:d4:35:c8:62:f0:1e:37:31:a3:fe:b9:b2:81:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 10 00:41:40 2026 GMT Not After : May 11 23:59:59 2026 GMT Subject: serialNumber=16fb9ba9d9ad4e43b60523a25ff942c4af5652288755a3665fd3e06dc5033f0c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c5:e7:ff:56:c3:29:d2:c9:16:a1:6a:f4:74: 7a:2d:70:17:9d:4c:98:d5:5a:b0:29:2e:73:6a:b1: ed:d8:c7:2d:4c:f7:c4:dc:8d:ea:83:0f:6b:31:9a: 93:28:c9:7c:33:87:ca:39:6d:90:39:4a:d2:f2:9a: d4:5f:cd:a3:4f:c5:c7:36:a1:6d:5a:fe:79:ae:9e: dc:dc:3f:89:70:bb:b1:d2:f7:a7:a1:45:be:76:53: 8f:9c:13:74:1b:4d:70:10:69:5a:0a:c6:5f:a7:14: 19:46:05:03:1f:82:de:09:32:95:48:7b:b0:92:f2: a0:33:e8:0c:bf:bc:37:49:69:e6:f6:ff:f4:eb:d1: 86:5d:73:a6:95:09:2a:03:49:a5:13:37:87:b7:ef: f6:e4:df:8e:98:76:af:86:ed:12:be:83:28:ce:96: 08:6f:3a:0c:e7:28:15:c6:95:18:3a:38:d8:2a:20: c8:06:b2:8b:63:0e:3f:f5:1e:ff:98:32:33:7e:9b: ce:23:b4:be:bd:cb:82:99:b1:50:db:fd:0e:e0:f8: d2:29:34:80:c8:72:a0:b5:ac:21:a1:b0:3f:c0:d2: c9:e6:88:02:2f:2c:ca:5c:e0:ac:77:b9:e7:9c:2e: 68:33:f6:a2:c2:b3:4a:dd:5c:7b:96:69:17:c9:75: db:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6E:00:5E:CD:ED:E5:60:18:E2:47:32:25:B3:08:32:FD:6A:01:8E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68262a77-03e2-4c18-92d9-7a34ebeac869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.157.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7e:4e:f5:7b:a0:62:d4:66:78:90:c9:97:f9:52:31:ec:20:37: 63:ed:8a:9b:3f:d0:55:fd:d4:d3:e7:67:13:59:cc:20:59:a6: 6d:45:82:f9:42:02:12:28:22:bc:d4:22:01:86:6c:f6:9a:05: bb:8b:af:45:ca:10:f8:29:e5:25:df:b5:c3:17:de:70:4d:5c: 42:af:93:c6:c0:e2:e6:5c:d3:dd:59:d3:7c:b7:c8:f7:ce:ff: 5d:3c:b1:68:2d:ae:14:ff:94:61:19:cc:fc:06:14:03:d5:ce: 3d:e2:8a:ec:e4:1d:3c:25:b4:fe:dc:75:49:22:fb:55:48:38: f5:08:32:fb:a1:2d:1b:79:3c:96:4b:f3:5b:1c:a8:8e:75:a6: 1f:f8:1d:b9:95:10:38:65:e3:99:24:8a:88:2c:5b:31:5a:81: 10:92:d5:bf:ef:6d:ef:b4:ec:25:87:d6:2a:88:73:32:e5:28: f6:f3:ef:dc:d6:9c:75:ee:ba:c2:1c:6f:4b:3a:36:77:05:39: 0c:f6:17:f6:a2:2c:df:15:17:1d:7a:49:77:92:08:14:e2:d9: ad:0d:cb:64:99:f0:f2:73:bc:01:bb:3b:59:79:5f:7c:0e:18: d8:cf:86:3f:e1:61:d8:c4:85:df:63:fc:42:b7:de:d2:ab:ef: fa:95:51:79 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfZJDA5ur1DXIYvAeNzGj/rmygYswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDA0MTQwWhcNMjYwNTExMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNmZiOWJhOWQ5YWQ0ZTQzYjYwNTIzYTI1ZmY5NDJjNGFm NTY1MjI4ODc1NWEzNjY1ZmQzZTA2ZGM1MDMzZjBjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuxef/VsMp0skWoWr0dHotcBedTJjVWrApLnNqse3Yxy1M 98TcjeqDD2sxmpMoyXwzh8o5bZA5StLymtRfzaNPxcc2oW1a/nmuntzcP4lwu7HS 96ehRb52U4+cE3QbTXAQaVoKxl+nFBlGBQMfgt4JMpVIe7CS8qAz6Ay/vDdJaeb2 //Tr0YZdc6aVCSoDSaUTN4e37/bk346Ydq+G7RK+gyjOlghvOgznKBXGlRg6ONgq IMgGsotjDj/1Hv+YMjN+m84jtL69y4KZsVDb/Q7g+NIpNIDIcqC1rCGhsD/A0snm iAIvLMpc4Kx3ueecLmgz9qLCs0rdXHuWaRfJddunAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUM24AXs3t5WAY4kcyJbMIMv1qAY4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4MjYyYTc3LTAzZTItNGMxOC05MmQ5LTdhMzRlYmVhYzg2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBCnTANBgkqhkiG9w0BAQsFAAOCAQEAfk71e6Bi1GZ4kMmX+VIx7CA3Y+2K mz/QVf3U0+dnE1nMIFmmbUWC+UICEigivNQiAYZs9poFu4uvRcoQ+CnlJd+1wxfe cE1cQq+TxsDi5lzT3VnTfLfI987/XTyxaC2uFP+UYRnM/AYUA9XOPeKK7OQdPCW0 /tx1SSL7VUg49Qgy+6EtG3k8lkvzWxyojnWmH/gduZUQOGXjmSSKiCxbMVqBEJLV v+9t77TsJYfWKohzMuUo9vPv3Nacde66whxvSzo2dwU5DPYX9qIs3xUXHXpJd5II FOLZrQ3LZJnw8nO8Abs7WXlffA4Y2M+GP+Fh2MSF32P8Qrfe0qvv+pVReQ== -----END CERTIFICATE-----Generated at Mon Mar 2 00:07:02 2026 by rpki-client