$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc5bc94-7e1f-4624-a0e0-c51944553aae.roa File: 7dc5bc94-7e1f-4624-a0e0-c51944553aae.roa (raw, json) Hash identifier: 8y7Ud0AdHQH9HNEA25qqeClMZazG7i2gDxoydkJ0+nI= Subject key identifier: 9A:0F:7F:31:4E:C6:51:F0:E2:BD:38:3A:33:BF:50:AC:7A:E9:C1:E5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F03BD7ACD0CEF03A4999801EE21885132FCB6F2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc5bc94-7e1f-4624-a0e0-c51944553aae.roa Signing time: Sat 21 Feb 2026 01:22:03 +0000 ROA not before: Sat 21 Feb 2026 01:22:03 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:03:bd:7a:cd:0c:ef:03:a4:99:98:01:ee:21:88:51:32:fc:b6:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:22:03 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=3f618ebbca80daf036086f2d20f365c3bba550e0f20e869103efe4f6edc95918, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:83:a6:fd:08:3f:7f:8b:1e:99:ba:64:eb:82: 99:31:74:18:0a:6e:8a:18:34:6b:1f:4d:7e:a9:da: 2c:6a:6e:4c:1b:f7:b2:20:39:db:78:76:77:eb:ca: 18:01:d8:0a:d7:6e:24:50:ce:c0:52:19:50:72:ce: 9f:50:cf:ca:cb:10:8c:c3:6d:d1:11:98:2c:8d:5e: 30:40:00:41:14:f1:7e:f5:1b:a0:43:c2:e9:84:cf: de:ea:36:0c:a5:36:fa:e5:68:41:77:fd:21:8e:cd: 40:e2:f7:63:2d:ab:69:2c:75:76:0c:25:6f:3a:56: d1:0d:0c:43:7b:04:42:9b:c5:f4:63:8d:82:9f:27: a5:70:d8:02:87:e3:9d:6b:e4:c1:07:e3:58:42:23: 56:77:68:ac:f9:5d:ab:2a:47:50:85:fc:48:ba:34: 1e:71:0d:7d:a4:32:ec:a0:86:ae:f5:f7:bf:db:65: cc:58:40:3d:ea:e5:ea:78:fc:b8:25:ad:12:92:c5: ad:b3:65:ac:8a:b0:60:b2:1c:a9:be:5a:a1:56:9d: 4e:54:1d:20:e0:d9:e8:f8:1f:a3:a3:a3:da:58:96: 3d:8d:61:29:02:f5:40:30:c4:9c:34:ba:d3:72:a3: 56:a5:95:17:c6:35:8a:a7:c7:83:95:f1:d1:68:99: 9e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0F:7F:31:4E:C6:51:F0:E2:BD:38:3A:33:BF:50:AC:7A:E9:C1:E5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc5bc94-7e1f-4624-a0e0-c51944553aae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.0.0/24 Signature Algorithm: sha256WithRSAEncryption ce:b3:18:2d:49:41:32:97:38:6e:3e:8a:33:68:62:d7:47:44: a1:e0:e0:76:1b:96:3e:20:98:f0:ea:80:4b:7d:58:88:d6:50: f2:0a:f2:20:5c:c2:6e:b2:ab:b0:e6:a2:d4:c2:22:e0:be:27: 0f:d8:52:f9:3d:f5:a9:56:d2:4e:34:89:d1:a0:09:e3:4b:37: bf:7b:00:d5:7b:97:8b:c4:c5:1f:06:33:73:e3:67:98:7e:19: bf:82:e4:a9:f8:7e:f3:0b:c6:41:37:97:9f:15:60:d4:67:f2: a9:e5:82:00:55:2c:7e:57:ed:05:7e:db:d2:45:c0:82:aa:28: 49:18:c0:4b:54:ed:4b:a7:88:96:cc:94:1a:1d:91:fd:58:78: f7:6b:4c:28:0a:a0:22:6f:cb:c2:09:c4:e2:9e:de:73:1f:4d: a0:d9:4a:5c:24:8c:a6:d0:93:da:dd:4a:6d:d3:2c:a5:4f:5d: 18:d1:61:72:04:e7:af:57:1e:ca:b1:03:59:e7:87:d1:bf:54: 78:ec:dc:6a:19:2b:d3:a7:b5:1a:ac:f4:5a:64:26:d5:a1:89: f1:d2:2d:e4:cf:a4:e6:be:62:7f:29:7a:47:d6:55:42:c0:4c: f0:c2:29:64:c9:0c:37:51:91:8e:a6:d5:2c:48:c1:5a:ed:70: e5:ef:57:ca -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXwO9es0M7wOkmZgB7iGIUTL8tvIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDEyMjAzWhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZjYxOGViYmNhODBkYWYwMzYwODZmMmQyMGYzNjVjM2Ji YTU1MGUwZjIwZTg2OTEwM2VmZTRmNmVkYzk1OTE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVg6b9CD9/ix6ZumTrgpkxdBgKbooYNGsfTX6p2ixqbkwb 97IgOdt4dnfryhgB2ArXbiRQzsBSGVByzp9Qz8rLEIzDbdERmCyNXjBAAEEU8X71 G6BDwumEz97qNgylNvrlaEF3/SGOzUDi92Mtq2ksdXYMJW86VtENDEN7BEKbxfRj jYKfJ6Vw2AKH451r5MEH41hCI1Z3aKz5XasqR1CF/Ei6NB5xDX2kMuyghq7197/b ZcxYQD3q5ep4/LglrRKSxa2zZayKsGCyHKm+WqFWnU5UHSDg2ej4H6Ojo9pYlj2N YSkC9UAwxJw0utNyo1allRfGNYqnx4OV8dFomZ4lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmg9/MU7GUfDivTg6M79QrHrpweUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkYzViYzk0LTdlMWYtNDYyNC1hMGUwLWM1MTk0NDU1M2FhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmAAwDQYJKoZIhvcNAQELBQADggEBAM6zGC1JQTKXOG4+ijNoYtdHRKHg 4HYblj4gmPDqgEt9WIjWUPIK8iBcwm6yq7DmotTCIuC+Jw/YUvk99alW0k40idGg CeNLN797ANV7l4vExR8GM3PjZ5h+Gb+C5Kn4fvMLxkE3l58VYNRn8qnlggBVLH5X 7QV+29JFwIKqKEkYwEtU7UuniJbMlBodkf1YePdrTCgKoCJvy8IJxOKe3nMfTaDZ SlwkjKbQk9rdSm3TLKVPXRjRYXIE569XHsqxA1nnh9G/VHjs3GoZK9OntRqs9Fpk JtWhifHSLeTPpOa+Yn8pekfWVULATPDCKWTJDDdRkY6m1SxIwVrtcOXvV8o= -----END CERTIFICATE-----Generated at Sun Mar 1 22:24:26 2026 by rpki-client