$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ddc6be0-5659-42f8-bbae-d72e65d08d95.roa File: 7ddc6be0-5659-42f8-bbae-d72e65d08d95.roa (raw, json) Hash identifier: NEsKnfsCMTaCNBhpgHPpGrsEQ+DxPJV++e5hSFCUfFY= Subject key identifier: DB:69:9C:49:AD:78:99:83:73:28:9B:F6:50:36:F6:DA:13:05:B9:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 56676674DC288D593491F78C79B10B054EDF5FB9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ddc6be0-5659-42f8-bbae-d72e65d08d95.roa Signing time: Wed 11 Feb 2026 01:01:46 +0000 ROA not before: Wed 11 Feb 2026 01:01:46 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.216.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:67:66:74:dc:28:8d:59:34:91:f7:8c:79:b1:0b:05:4e:df:5f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 11 01:01:46 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=72bfeebfd031ff48c370a6c9347968ccb974a1fb9983c341a9b361d4870c398e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ba:e5:33:13:3a:b9:65:53:73:6b:f5:a2:cc: 74:6d:5a:07:a7:09:95:37:27:6b:41:b2:3d:f6:56: c2:2f:20:59:7c:3d:d8:d1:49:89:61:1c:01:f6:41: 6e:f6:55:22:32:6b:6d:0d:0b:11:75:a4:13:e6:8f: bf:86:c3:d2:35:eb:b9:04:8d:0d:4b:22:e1:a5:0b: 3c:e0:e0:3f:2d:bd:80:58:92:4d:75:2c:f1:22:41: ee:05:60:71:9a:79:8a:b1:f3:6a:65:ce:e5:50:09: 89:83:45:b3:4b:93:d9:a5:16:6d:8f:83:bd:76:15: da:91:cf:10:20:f1:71:91:8a:e1:92:bf:d6:04:ea: e9:05:96:2c:54:b3:d3:ab:94:ed:22:23:6d:6a:b4: 63:95:47:8e:1d:ec:e7:a2:0c:49:71:13:ab:69:b1: b5:b1:a0:5d:e6:35:47:ea:56:d1:8d:a8:96:2a:e5: 34:76:3d:3f:e8:b5:53:05:c6:a6:c6:f2:37:cc:80: 0d:45:79:2c:76:9e:a1:18:29:40:2a:04:fa:c9:fb: 70:06:17:7b:59:42:4f:bc:52:08:73:1e:d4:91:73: 43:4b:94:8b:c2:fa:9b:a2:fa:db:b0:b0:3b:d6:e4: 6c:9f:4d:c3:f4:1a:08:2e:26:b7:92:bf:b4:6b:76: 82:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:69:9C:49:AD:78:99:83:73:28:9B:F6:50:36:F6:DA:13:05:B9:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ddc6be0-5659-42f8-bbae-d72e65d08d95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.216.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8d:db:19:8b:7d:4a:55:f3:aa:e0:d6:c9:6e:1f:6a:7d:b9:99: 27:08:23:9d:0e:20:b5:75:c7:94:dd:5f:bd:61:8a:80:9d:94: 97:f1:7e:17:b8:ea:80:93:fa:fa:34:aa:e7:7b:8a:14:d7:5f: d3:e1:12:06:04:33:30:61:b2:61:59:9d:be:fe:c2:55:48:fe: 9d:8e:b4:d2:3a:d9:2f:2e:ea:0e:7d:58:9c:87:5a:55:97:13: f0:66:e4:81:39:a8:74:26:cf:d3:1b:47:e5:86:70:d0:1f:0b: bb:04:e4:0f:03:ae:d9:3b:36:cc:58:ab:ae:eb:0e:66:04:b6: 96:28:94:b2:15:fa:4f:2a:89:a4:9c:63:c3:f1:f3:05:df:cb: 81:3d:97:90:1c:3f:72:f4:6f:91:2b:14:0c:ae:21:e3:21:0a: ea:93:9e:c8:b6:d3:a6:52:4c:a6:02:ca:a4:48:95:6e:e2:6f: 32:5c:4f:cc:e0:14:c6:05:22:76:79:e5:c0:90:14:7b:f9:31: c0:2b:41:54:e1:8f:af:46:e6:7a:7b:a5:45:47:57:48:91:52: 45:e2:a4:0c:78:94:14:7e:99:8c:a0:68:d4:40:ae:34:32:6c: 01:69:fb:1e:dc:0c:e1:d9:7d:bb:30:ea:7d:a4:28:06:70:5a: 57:0b:22:cd -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVmdmdNwojVk0kfeMebELBU7fX7kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjExMDEwMTQ2WhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MmJmZWViZmQwMzFmZjQ4YzM3MGE2YzkzNDc5NjhjY2I5 NzRhMWZiOTk4M2MzNDFhOWIzNjFkNDg3MGMzOThlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCuuUzEzq5ZVNza/WizHRtWgenCZU3J2tBsj32VsIvIFl8 PdjRSYlhHAH2QW72VSIya20NCxF1pBPmj7+Gw9I167kEjQ1LIuGlCzzg4D8tvYBY kk11LPEiQe4FYHGaeYqx82plzuVQCYmDRbNLk9mlFm2Pg712FdqRzxAg8XGRiuGS v9YE6ukFlixUs9OrlO0iI21qtGOVR44d7OeiDElxE6tpsbWxoF3mNUfqVtGNqJYq 5TR2PT/otVMFxqbG8jfMgA1FeSx2nqEYKUAqBPrJ+3AGF3tZQk+8UghzHtSRc0NL lIvC+pui+tuwsDvW5GyfTcP0GgguJreSv7RrdoLVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU22mcSa14mYNzKJv2UDb22hMFuRMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkZGM2YmUwLTU2NTktNDJmOC1iYmFlLWQ3MmU2NWQwOGQ5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP2DANBgkqhkiG9w0BAQsFAAOCAQEAjdsZi31KVfOq4NbJbh9qfbmZJwgj nQ4gtXXHlN1fvWGKgJ2Ul/F+F7jqgJP6+jSq53uKFNdf0+ESBgQzMGGyYVmdvv7C VUj+nY600jrZLy7qDn1YnIdaVZcT8GbkgTmodCbP0xtH5YZw0B8LuwTkDwOu2Ts2 zFirrusOZgS2liiUshX6TyqJpJxjw/HzBd/LgT2XkBw/cvRvkSsUDK4h4yEK6pOe yLbTplJMpgLKpEiVbuJvMlxPzOAUxgUidnnlwJAUe/kxwCtBVOGPr0bmenulRUdX SJFSReKkDHiUFH6ZjKBo1ECuNDJsAWn7HtwM4dl9uzDqfaQoBnBaVwsizQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:18:40 2026 by rpki-client