$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83580bdd-7d89-48f0-b15a-bd643a75c06a.roa File: 83580bdd-7d89-48f0-b15a-bd643a75c06a.roa (raw, json) Hash identifier: XmKCyeVy/N0tnT6WALI3d5r91xd1Dy6Yg1HCN8DCxjo= Subject key identifier: 72:1E:F8:7D:B0:B4:66:93:09:A2:13:D3:8B:50:49:67:02:BE:FD:D4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 333D37EFC75EDCFA6172548A56BDCFFFFF377B54 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83580bdd-7d89-48f0-b15a-bd643a75c06a.roa Signing time: Sat 21 Feb 2026 00:41:27 +0000 ROA not before: Sat 21 Feb 2026 00:41:27 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:3d:37:ef:c7:5e:dc:fa:61:72:54:8a:56:bd:cf:ff:ff:37:7b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:41:27 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=c0e7effa8ee702854a621145022484fdfbeb1293db3b8b82f57d37d51d23f32c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e0:1e:11:ae:4e:d5:78:fb:f2:67:e1:ae:ce: 4d:0d:b0:9e:dc:3d:4a:e2:59:5e:7e:7b:3b:74:84: 84:b2:8e:91:39:54:e3:a7:91:57:82:46:10:71:43: 54:ef:01:03:f5:84:d8:e2:54:00:d8:78:19:2a:94: ae:1b:5d:ea:e3:4a:f6:17:96:a3:b8:c1:90:5e:e2: 87:44:9d:d9:69:49:c5:cc:a7:83:68:da:64:4e:68: 12:21:aa:f2:48:76:0c:e7:b7:78:fd:74:d1:3e:08: 40:7b:2b:9e:69:d5:b4:5d:0e:ea:80:39:af:55:db: 17:18:79:49:f2:0f:04:36:0b:28:b9:56:6f:99:45: ca:0e:df:07:1e:f9:e2:9a:01:6e:7b:a8:79:b5:be: 05:1c:89:16:10:3f:5e:07:e0:ac:22:13:51:20:cd: 15:26:31:c7:c5:ad:63:32:d8:7f:be:5b:73:d1:42: 66:ea:37:2e:4a:60:ea:67:b8:56:ba:1c:e9:bb:46: 80:ef:fa:6f:4e:d5:0c:5e:98:7d:bc:06:e1:2e:55: 39:72:8e:e6:7d:e6:94:75:ef:70:d7:7f:5c:65:65: 0c:e8:29:da:d2:76:7f:ac:36:a9:40:07:bd:88:69: d3:39:e5:b7:01:27:d9:b6:50:8e:92:03:a0:f7:6f: 4b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1E:F8:7D:B0:B4:66:93:09:A2:13:D3:8B:50:49:67:02:BE:FD:D4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83580bdd-7d89-48f0-b15a-bd643a75c06a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.71.0/24 Signature Algorithm: sha256WithRSAEncryption 19:22:7e:74:a8:bd:be:48:f9:53:83:ae:c9:7e:03:94:7b:62: 0e:87:83:44:1f:e1:1c:42:0e:2a:67:bc:7a:23:d2:2c:8d:0b: 2c:af:ed:3d:e4:cb:f2:67:e8:53:b2:50:70:a4:d4:34:2d:6b: 0a:e8:12:1a:f5:ae:c3:99:b9:bb:4a:17:52:94:a0:f3:4e:59: d2:02:30:60:c1:dc:1d:75:2f:c7:4a:9a:85:2b:d0:57:a6:a7: 9a:41:f8:3b:b9:51:31:0e:01:51:66:09:81:f1:98:4a:ad:4b: 8b:7d:77:28:45:2c:e1:c2:4a:be:48:f3:71:a5:48:dd:33:f2: 12:a6:b0:4e:c6:ea:9e:70:a2:b9:82:ac:7c:93:15:40:61:d4: b8:5f:8d:ed:57:36:51:4e:74:3d:b4:b7:55:5a:0d:d8:11:13: e2:6f:6a:c0:71:a5:e8:dd:e8:30:b7:1b:43:fb:17:6f:e9:c1: 7f:52:54:ae:44:ae:1e:b6:c4:29:f5:b0:68:7f:aa:ee:c7:a3: 3f:be:20:9a:50:99:eb:95:b6:9b:7d:48:10:ba:ff:d3:eb:52: b2:b8:3e:89:90:37:c1:f9:34:01:05:ac:18:ce:c4:6a:b9:55: 60:c0:43:5f:05:aa:01:de:d7:7e:06:81:4e:aa:6c:17:e4:e6: 08:c9:56:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMz0378de3PphclSKVr3P//83e1QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDA0MTI3WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMGU3ZWZmYThlZTcwMjg1NGE2MjExNDUwMjI0ODRmZGZi ZWIxMjkzZGIzYjhiODJmNTdkMzdkNTFkMjNmMzJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQ4B4Rrk7VePvyZ+Guzk0NsJ7cPUriWV5+ezt0hISyjpE5 VOOnkVeCRhBxQ1TvAQP1hNjiVADYeBkqlK4bXerjSvYXlqO4wZBe4odEndlpScXM p4No2mROaBIhqvJIdgznt3j9dNE+CEB7K55p1bRdDuqAOa9V2xcYeUnyDwQ2Cyi5 Vm+ZRcoO3wce+eKaAW57qHm1vgUciRYQP14H4KwiE1EgzRUmMcfFrWMy2H++W3PR QmbqNy5KYOpnuFa6HOm7RoDv+m9O1QxemH28BuEuVTlyjuZ95pR173DXf1xlZQzo KdrSdn+sNqlAB72IadM55bcBJ9m2UI6SA6D3b0v3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUch74fbC0ZpMJohPTi1BJZwK+/dQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgzNTgwYmRkLTdkODktNDhmMC1iMTVhLWJkNjQzYTc1YzA2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmEcwDQYJKoZIhvcNAQELBQADggEBABkifnSovb5I+VODrsl+A5R7Yg6H g0Qf4RxCDipnvHoj0iyNCyyv7T3ky/Jn6FOyUHCk1DQtawroEhr1rsOZubtKF1KU oPNOWdICMGDB3B11L8dKmoUr0Femp5pB+Du5UTEOAVFmCYHxmEqtS4t9dyhFLOHC Sr5I83GlSN0z8hKmsE7G6p5wormCrHyTFUBh1Lhfje1XNlFOdD20t1VaDdgRE+Jv asBxpejd6DC3G0P7F2/pwX9SVK5Erh62xCn1sGh/qu7Hoz++IJpQmeuVtpt9SBC6 /9PrUrK4PomQN8H5NAEFrBjOxGq5VWDAQ18FqgHe134GgU6qbBfk5gjJVuM= -----END CERTIFICATE-----Generated at Sun Mar 1 22:27:04 2026 by rpki-client