$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/822ca9d4-d7a0-4823-8390-dc0e56fd7686.roa File: 822ca9d4-d7a0-4823-8390-dc0e56fd7686.roa (raw, json) Hash identifier: tNatEWG1yW9cnT4p1Lp/UT4jHpPIURPo4Dhdpf3jiWQ= Subject key identifier: A1:68:01:B6:B3:DB:61:52:AA:46:18:45:D2:8A:FA:31:86:25:67:6A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 720AF547F844F32E8F401B7F5A2488FBE5FC5135 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/822ca9d4-d7a0-4823-8390-dc0e56fd7686.roa Signing time: Fri 13 Feb 2026 00:30:14 +0000 ROA not before: Fri 13 Feb 2026 00:30:14 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:0a:f5:47:f8:44:f3:2e:8f:40:1b:7f:5a:24:88:fb:e5:fc:51:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 13 00:30:14 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=3b8c28addda68c1d05c20011e760c2c572da9b6d35e11e46513354d3adfa9f8e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9b:f0:95:53:2e:94:2a:c5:83:4d:ce:e8:f0: 8d:93:53:2d:f2:44:0e:51:57:86:72:7b:f0:c5:76: b3:45:d6:6f:be:34:d4:30:b5:63:6c:bf:dd:86:14: 7b:14:ee:30:86:5e:b3:b5:44:6d:3b:49:4b:00:c5: 34:18:73:34:b7:86:e6:df:2e:9e:92:69:66:71:a7: 21:0a:9e:e0:0e:77:e6:61:ed:82:32:8f:04:9a:4e: 55:d8:b6:37:9e:a0:da:22:fe:bf:2d:86:07:bd:eb: d4:46:a9:af:30:e7:49:1e:36:6e:1a:2b:d2:69:dc: bb:c4:64:33:d4:ca:93:9f:66:c7:d4:db:4d:58:0f: fb:86:bf:a0:ec:f7:e0:79:2c:d9:88:b3:4c:6b:0f: ee:0c:62:a1:c5:f6:54:3d:86:80:28:02:ea:91:2c: 59:18:e9:81:b6:80:04:b1:61:f2:20:d3:ea:04:28: 6f:a9:75:fe:fd:c7:aa:a4:ab:84:71:6f:97:38:f2: 6a:6e:b5:cc:9a:41:52:f0:05:ac:50:dc:bc:42:af: 69:dd:6f:35:59:8b:84:b5:d6:be:60:85:5b:ad:b8: be:0c:47:7a:c3:a1:25:49:d8:83:4e:3e:60:aa:84: c5:e5:9a:71:77:43:3c:f6:8f:cf:60:cf:a4:0e:55: 24:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:68:01:B6:B3:DB:61:52:AA:46:18:45:D2:8A:FA:31:86:25:67:6A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/822ca9d4-d7a0-4823-8390-dc0e56fd7686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.96.0/24 Signature Algorithm: sha256WithRSAEncryption 89:e7:eb:6f:47:58:75:6f:e5:84:48:49:18:93:74:1d:92:c3: fb:e8:14:0b:5f:1a:ab:fb:b2:bb:b4:c9:15:fa:d2:1f:f3:53: 16:b5:75:aa:dd:97:33:5a:e0:1e:65:bc:0e:a9:38:35:b0:ae: e7:5c:67:0c:7a:95:d9:c1:3f:54:1b:84:40:fe:4e:ad:be:36: b0:f0:44:01:58:9c:07:2f:2f:3c:be:06:8a:e9:f9:0f:58:56: 20:ce:31:bb:31:cc:67:32:89:5a:d8:29:0a:f2:3a:82:f9:ba: 7c:fb:41:fc:52:38:15:a0:2d:68:9b:7b:83:44:1a:89:b6:e0: 13:fa:ae:3f:6f:b9:1f:26:15:76:94:da:0a:c1:f5:c2:85:e9: 3c:f1:ce:3c:0b:20:33:b9:ff:28:5b:56:66:f2:7b:9e:fd:79: 65:fb:60:7e:cd:49:0a:a7:c0:18:a6:d5:50:f1:e0:2e:40:ae: dc:28:83:30:d6:ec:f6:92:a7:ed:14:09:c3:9d:cc:bd:a5:ec: 8e:9f:d2:a7:08:23:a2:fb:ce:f0:18:4a:cf:e1:12:64:23:24: 07:4e:7f:32:71:c8:7f:a6:07:fd:32:28:9a:b1:64:af:46:53: 87:7c:98:05:72:3f:e4:ad:64:c3:fa:09:a4:05:6f:65:cb:61: 26:fd:c0:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcgr1R/hE8y6PQBt/WiSI++X8UTUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEzMDAzMDE0WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjhjMjhhZGRkYTY4YzFkMDVjMjAwMTFlNzYwYzJjNTcy ZGE5YjZkMzVlMTFlNDY1MTMzNTRkM2FkZmE5ZjhlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvm/CVUy6UKsWDTc7o8I2TUy3yRA5RV4Zye/DFdrNF1m++ NNQwtWNsv92GFHsU7jCGXrO1RG07SUsAxTQYczS3hubfLp6SaWZxpyEKnuAOd+Zh 7YIyjwSaTlXYtjeeoNoi/r8thge969RGqa8w50keNm4aK9Jp3LvEZDPUypOfZsfU 201YD/uGv6Ds9+B5LNmIs0xrD+4MYqHF9lQ9hoAoAuqRLFkY6YG2gASxYfIg0+oE KG+pdf79x6qkq4Rxb5c48mputcyaQVLwBaxQ3LxCr2ndbzVZi4S11r5ghVutuL4M R3rDoSVJ2INOPmCqhMXlmnF3Qzz2j89gz6QOVSRLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoWgBtrPbYVKqRhhF0or6MYYlZ2owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgyMmNhOWQ0LWQ3YTAtNDgyMy04MzkwLWRjMGU1NmZkNzY4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM32AwDQYJKoZIhvcNAQELBQADggEBAInn629HWHVv5YRISRiTdB2Sw/vo FAtfGqv7sru0yRX60h/zUxa1dardlzNa4B5lvA6pODWwrudcZwx6ldnBP1QbhED+ Tq2+NrDwRAFYnAcvLzy+Borp+Q9YViDOMbsxzGcyiVrYKQryOoL5unz7QfxSOBWg LWibe4NEGom24BP6rj9vuR8mFXaU2grB9cKF6TzxzjwLIDO5/yhbVmbye579eWX7 YH7NSQqnwBim1VDx4C5ArtwogzDW7PaSp+0UCcOdzL2l7I6f0qcII6L7zvAYSs/h EmQjJAdOfzJxyH+mB/0yKJqxZK9GU4d8mAVyP+StZMP6CaQFb2XLYSb9wJ8= -----END CERTIFICATE-----Generated at Mon Mar 2 00:14:21 2026 by rpki-client