$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80ab57e1-986b-4c57-a362-e2dfa19f8170.roa File: 80ab57e1-986b-4c57-a362-e2dfa19f8170.roa (raw, json) Hash identifier: 613sDdaQXmvkVelKUn+7fpdewpQ4LXau3bUIMRZamj8= Subject key identifier: F1:39:EA:09:FA:DB:32:7C:14:97:C3:83:1C:10:07:E6:9F:D8:43:77 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 557C79FCE297211331265BBC3E1D93CBE0FC0DB3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80ab57e1-986b-4c57-a362-e2dfa19f8170.roa Signing time: Thu 26 Feb 2026 00:50:47 +0000 ROA not before: Thu 26 Feb 2026 00:50:47 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 188.230.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:7c:79:fc:e2:97:21:13:31:26:5b:bc:3e:1d:93:cb:e0:fc:0d:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 26 00:50:47 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=d1a17a33aa666299e0c9afcc9cfade8df23c85229294f1e291f8780946c8ee22, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:90:f8:09:2b:7e:0e:f8:59:da:87:6c:c7:43: 61:50:a7:ee:5c:52:db:b7:fb:9b:3a:5f:72:7c:73: fc:08:8c:42:8c:29:34:7e:1e:f1:ab:a8:c2:4d:f1: 22:75:38:ff:b7:c0:7a:79:08:d3:5c:82:2e:ab:e3: 57:65:7d:b8:8a:54:4b:06:2c:20:df:9c:94:81:8a: d5:19:d6:47:75:30:04:0b:36:5c:d7:45:80:d3:92: e4:70:32:15:69:dd:d9:2a:da:41:ac:df:d5:78:24: 8c:1e:f3:8f:48:ed:8b:34:ee:29:59:86:61:2c:64: 31:ab:97:21:ff:e7:f5:9b:94:b6:f0:16:e4:dc:13: 31:89:37:f6:3a:2c:a4:70:fd:cd:3d:70:eb:cc:31: a6:69:9f:99:0d:1a:39:42:3d:57:f1:e9:26:f2:11: 86:f5:6c:65:14:27:38:f0:df:9b:37:01:e4:57:b1: c6:b1:8c:8e:0c:2d:17:b6:c0:67:e4:fa:74:77:bd: c2:69:e5:71:09:2b:b3:4a:e4:1f:83:43:7b:fc:05: 32:00:21:22:24:5e:76:ff:5b:95:38:30:25:b6:7d: ad:f2:17:62:f0:16:00:e6:2e:5c:d9:48:a6:0c:32: 4c:09:49:37:e2:1d:1b:11:5e:67:51:a8:9b:38:8f: 3e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:39:EA:09:FA:DB:32:7C:14:97:C3:83:1C:10:07:E6:9F:D8:43:77 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80ab57e1-986b-4c57-a362-e2dfa19f8170.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.230.0.0/17 Signature Algorithm: sha256WithRSAEncryption 22:ff:5b:81:02:5a:fa:d8:a8:7f:6f:8b:dd:63:db:a1:df:c9: 16:c3:f3:79:06:71:d7:f2:c5:ac:c5:07:df:f1:e9:13:c8:a2: e4:1e:d2:19:70:56:a6:98:eb:f8:33:fd:c7:19:30:45:f7:4f: d0:99:0e:88:a9:71:3b:97:ee:eb:f3:9d:5a:94:72:dc:0b:82: 59:f6:4a:4c:42:38:5d:d5:09:09:21:c2:80:49:d4:39:aa:64: 50:59:f0:89:15:83:59:fe:c7:f8:0b:fc:83:05:f5:78:ff:0e: df:56:b6:92:5a:12:38:92:e4:89:07:c7:dc:aa:3e:7f:16:36: a2:fb:60:40:e6:04:2a:b7:48:a2:e3:f8:35:81:03:72:e9:95: f6:a7:43:2e:6f:d5:c9:4f:39:fd:3b:5e:13:8a:c4:79:8e:c7: 0a:50:ff:2a:aa:6e:68:67:25:ca:e0:5c:1c:c9:a5:de:36:a6: 12:93:10:7e:d2:a3:f1:70:30:ff:6c:91:9f:5f:ac:da:cb:38: 03:54:31:ad:f4:2d:e2:c5:dd:f3:4c:d8:5e:c0:e7:d3:a7:c5: a2:7b:39:59:d0:15:cf:c2:e6:7b:c7:b0:0b:59:5f:c1:78:c5: 98:81:27:a0:3a:0c:d3:f5:49:ad:ae:53:66:04:66:e6:9f:98: c8:f2:2a:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVXx5/OKXIRMxJlu8Ph2Ty+D8DbMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI2MDA1MDQ3WhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMWExN2EzM2FhNjY2Mjk5ZTBjOWFmY2M5Y2ZhZGU4ZGYy M2M4NTIyOTI5NGYxZTI5MWY4NzgwOTQ2YzhlZTIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+kPgJK34O+Fnah2zHQ2FQp+5cUtu3+5s6X3J8c/wIjEKM KTR+HvGrqMJN8SJ1OP+3wHp5CNNcgi6r41dlfbiKVEsGLCDfnJSBitUZ1kd1MAQL NlzXRYDTkuRwMhVp3dkq2kGs39V4JIwe849I7Ys07ilZhmEsZDGrlyH/5/WblLbw FuTcEzGJN/Y6LKRw/c09cOvMMaZpn5kNGjlCPVfx6SbyEYb1bGUUJzjw35s3AeRX scaxjI4MLRe2wGfk+nR3vcJp5XEJK7NK5B+DQ3v8BTIAISIkXnb/W5U4MCW2fa3y F2LwFgDmLlzZSKYMMkwJSTfiHRsRXmdRqJs4jz6FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8TnqCfrbMnwUl8ODHBAH5p/YQ3cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgwYWI1N2UxLTk4NmItNGM1Ny1hMzYyLWUyZGZhMTlmODE3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAe85gAwDQYJKoZIhvcNAQELBQADggEBACL/W4ECWvrYqH9vi91j26HfyRbD 83kGcdfyxazFB9/x6RPIouQe0hlwVqaY6/gz/ccZMEX3T9CZDoipcTuX7uvznVqU ctwLgln2SkxCOF3VCQkhwoBJ1DmqZFBZ8IkVg1n+x/gL/IMF9Xj/Dt9WtpJaEjiS 5IkHx9yqPn8WNqL7YEDmBCq3SKLj+DWBA3LplfanQy5v1clPOf07XhOKxHmOxwpQ /yqqbmhnJcrgXBzJpd42phKTEH7So/FwMP9skZ9frNrLOANUMa30LeLF3fNM2F7A 59OnxaJ7OVnQFc/C5nvHsAtZX8F4xZiBJ6A6DNP1Sa2uU2YEZuafmMjyKu8= -----END CERTIFICATE-----Generated at Sun Mar 1 22:21:48 2026 by rpki-client