$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80966667-e6df-4a84-a91e-10054d3673cd.roa File: 80966667-e6df-4a84-a91e-10054d3673cd.roa (raw, json) Hash identifier: o26p3k/kFdK4EVPvSnj3ViiP7Av2N7L3hDmvadgOTl0= Subject key identifier: 09:0E:33:10:E5:42:75:09:F2:A6:AF:CF:D9:D8:BB:D9:FF:8D:5F:F2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4F88DC094395F0102D526C5DE953E9D8619F0FD6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80966667-e6df-4a84-a91e-10054d3673cd.roa Signing time: Tue 10 Feb 2026 00:50:12 +0000 ROA not before: Tue 10 Feb 2026 00:50:12 +0000 ROA not after: Mon 11 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 54.32.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:88:dc:09:43:95:f0:10:2d:52:6c:5d:e9:53:e9:d8:61:9f:0f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 10 00:50:12 2026 GMT Not After : May 11 23:59:59 2026 GMT Subject: serialNumber=d7dc624630255ce1a44436bca4c31185b1aec8fadd15350bf3027b7bf096b56b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:31:ce:e3:4a:e4:1f:77:e1:1a:95:4a:70:fa: f2:8d:fe:b2:65:0b:e8:1d:c6:af:65:5d:16:fb:fe: ef:d0:0b:d1:4b:1b:36:6f:7d:d9:de:e9:e5:16:d2: 11:df:7d:48:0b:53:1f:e2:67:84:38:0e:99:20:2e: 7b:e5:05:8e:44:e7:46:6f:83:06:9a:aa:d9:3a:69: 42:9b:a6:81:ea:73:ea:68:ef:9b:aa:f7:20:a4:09: 33:98:75:35:11:aa:d5:23:59:5d:4d:68:66:3a:57: 30:87:f1:0b:7a:30:ec:a4:51:29:9c:89:69:ef:09: 7b:77:c3:dd:c9:30:eb:d8:0f:f4:3a:d8:5c:50:ff: 84:c8:e1:e6:50:d9:30:1d:40:59:bb:47:0b:89:0b: c6:cb:5f:1e:a0:a1:85:97:26:aa:1a:4e:fe:d0:0b: 1f:44:be:52:47:46:6d:41:3a:55:10:ee:31:85:f9: bf:bc:e0:df:b8:7f:e5:25:4f:22:5c:06:17:6e:87: 12:dd:07:39:c9:83:f4:ec:53:71:c5:da:bc:e9:d3: 50:b7:03:58:81:1a:ec:7d:37:1e:7d:6d:34:c2:ba: a6:dc:1d:90:9a:2e:b2:fb:65:4d:22:66:47:5a:5c: a4:c4:86:9b:ae:a4:1c:fb:fd:15:7e:3e:04:eb:cc: 01:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0E:33:10:E5:42:75:09:F2:A6:AF:CF:D9:D8:BB:D9:FF:8D:5F:F2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80966667-e6df-4a84-a91e-10054d3673cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.32.0.0/16 Signature Algorithm: sha256WithRSAEncryption 81:ba:57:b6:fb:3c:e9:a8:74:35:fc:91:b0:9d:45:42:79:0d: 5d:4b:cd:9a:db:e1:f4:53:96:1d:bf:6f:2a:3f:8c:47:d2:94: 7a:84:db:4d:ac:27:1c:89:38:34:2f:39:7b:35:06:9e:19:8c: 0c:42:87:d7:d4:8f:1d:bd:b0:cd:56:50:f0:a0:6a:46:aa:f7: 21:ca:cc:35:8a:38:6b:6f:5b:f4:54:18:50:42:b7:6e:1e:40: 36:48:5d:24:45:2f:08:ca:11:16:be:b6:66:dc:37:94:0d:c2: cb:77:ba:d2:e1:bc:0d:ae:cb:11:6e:a0:f5:8a:61:86:bc:f2: df:ff:f8:b5:6b:b9:a9:eb:9f:d0:67:6c:f1:78:25:01:e4:30: 0e:1b:b5:56:95:91:b7:90:ae:43:34:7f:14:f6:31:33:cf:1d: 0b:07:02:4c:3e:59:bf:b3:ef:45:5f:c9:c1:78:b4:3a:24:3f: 3c:cf:b4:ba:b1:4f:03:6b:e2:80:f7:8f:0a:12:30:e2:60:db: ac:40:85:a4:ed:56:2f:97:6d:8a:c5:78:23:e6:11:ba:2d:d5: 92:85:13:15:4f:10:7a:d0:62:9f:9a:72:e5:4c:5b:cb:7d:d9: 9e:3e:5f:8f:37:66:4c:68:3d:b7:ae:89:da:ce:9b:02:0d:26: 96:9d:c4:e6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUT4jcCUOV8BAtUmxd6VPp2GGfD9YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDA1MDEyWhcNMjYwNTExMjM1OTU5 WjB6MUkwRwYDVQQFE0BkN2RjNjI0NjMwMjU1Y2UxYTQ0NDM2YmNhNGMzMTE4NWIx YWVjOGZhZGQxNTM1MGJmMzAyN2I3YmYwOTZiNTZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaMc7jSuQfd+EalUpw+vKN/rJlC+gdxq9lXRb7/u/QC9FL GzZvfdne6eUW0hHffUgLUx/iZ4Q4DpkgLnvlBY5E50Zvgwaaqtk6aUKbpoHqc+po 75uq9yCkCTOYdTURqtUjWV1NaGY6VzCH8Qt6MOykUSmciWnvCXt3w93JMOvYD/Q6 2FxQ/4TI4eZQ2TAdQFm7RwuJC8bLXx6goYWXJqoaTv7QCx9EvlJHRm1BOlUQ7jGF +b+84N+4f+UlTyJcBhduhxLdBznJg/TsU3HF2rzp01C3A1iBGux9Nx59bTTCuqbc HZCaLrL7ZU0iZkdaXKTEhpuupBz7/RV+PgTrzAE/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUCQ4zEOVCdQnypq/P2di72f+NX/IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgwOTY2NjY3LWU2ZGYtNGE4NC1hOTFlLTEwMDU0ZDM2NzNjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2IDANBgkqhkiG9w0BAQsFAAOCAQEAgbpXtvs86ah0NfyRsJ1FQnkNXUvN mtvh9FOWHb9vKj+MR9KUeoTbTawnHIk4NC85ezUGnhmMDEKH19SPHb2wzVZQ8KBq Rqr3IcrMNYo4a29b9FQYUEK3bh5ANkhdJEUvCMoRFr62Ztw3lA3Cy3e60uG8Da7L EW6g9Yphhrzy3//4tWu5qeuf0Gds8XglAeQwDhu1VpWRt5CuQzR/FPYxM88dCwcC TD5Zv7PvRV/JwXi0OiQ/PM+0urFPA2vigPePChIw4mDbrECFpO1WL5dtisV4I+YR ui3VkoUTFU8QetBin5py5Uxby33Znj5fjzdmTGg9t66J2s6bAg0mlp3E5g== -----END CERTIFICATE-----Generated at Sun Mar 1 22:12:26 2026 by rpki-client