$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86ef4bdc-4721-4e14-81a3-9b9f9374a046.roa File: 86ef4bdc-4721-4e14-81a3-9b9f9374a046.roa (raw, json) Hash identifier: /kxYpVh1orC1kdl1dpH7YZJbvWaITUlHi5iakhPQozA= Subject key identifier: AB:D4:C2:4A:4B:3F:5C:D4:AF:FA:D8:0E:95:83:F6:B1:C5:24:5B:AF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1777EA1F64431C49446F2FF2D09B2FAC7DD47C0B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86ef4bdc-4721-4e14-81a3-9b9f9374a046.roa Signing time: Wed 18 Feb 2026 00:31:58 +0000 ROA not before: Wed 18 Feb 2026 00:31:58 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.190.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:77:ea:1f:64:43:1c:49:44:6f:2f:f2:d0:9b:2f:ac:7d:d4:7c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 18 00:31:58 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=2a87156302070bce27799e576cd14b64ef3f12df5c7d8173b649db539d720728, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:2a:75:69:2b:f2:e9:71:30:45:00:99:ac:50: f2:09:e7:a1:3b:c2:97:ea:5c:0e:3e:29:7f:9d:4a: ba:30:03:66:71:d4:b8:37:a3:ee:71:77:82:d2:a2: be:4d:34:10:63:dd:a2:db:da:f1:e0:08:83:08:b8: d7:b2:35:dc:4f:aa:81:e6:64:a4:c9:9b:15:77:38: 1f:bb:36:df:b0:1a:cb:e6:99:65:1e:3e:7b:91:4a: a5:7d:9c:83:ee:e4:bf:2d:39:dc:0e:3b:c5:12:cf: 82:00:b8:9e:66:09:33:35:bd:96:2f:08:34:bf:0c: d9:db:70:25:fd:94:3f:ae:c7:2c:96:c1:16:01:53: 74:dc:2e:b7:60:e4:7b:57:ae:f8:24:fe:eb:c9:14: 35:c4:2a:60:17:0f:eb:4c:b7:31:f6:3a:23:38:cf: ef:0a:0e:5d:14:cc:a2:b5:2e:53:7e:09:23:0f:8b: fe:bf:c5:c8:5b:91:f4:e9:8a:dd:0f:69:b9:3b:2b: 5a:31:24:d2:ca:33:6b:39:ac:5f:bf:ef:2c:2e:41: 79:9d:e6:db:b5:be:97:89:27:9a:81:90:5a:7f:40: 39:9e:d8:6b:5a:1e:f1:55:2f:11:2f:b5:09:27:9e: ce:59:f2:73:10:25:f2:b2:4f:fa:35:08:e5:1e:9a: d0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D4:C2:4A:4B:3F:5C:D4:AF:FA:D8:0E:95:83:F6:B1:C5:24:5B:AF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86ef4bdc-4721-4e14-81a3-9b9f9374a046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.190.122.0/24 Signature Algorithm: sha256WithRSAEncryption d5:00:13:83:e4:ae:9a:0b:ff:a7:00:ad:04:f1:24:3e:ec:d6: c7:84:6a:7c:e4:43:b9:da:85:7c:13:7a:c4:9c:94:5a:c6:4f: 91:3b:8b:57:cf:fa:f8:d6:c6:12:28:3e:06:03:54:f9:88:88: 6a:1b:5f:5d:27:d4:0d:3b:d7:50:1f:ce:36:5c:a1:55:6b:28: 59:03:4f:fc:5e:83:85:a4:3a:51:85:56:c4:d5:6e:5b:da:fb: c0:8a:c8:43:a8:40:0d:25:aa:e6:b7:1a:be:65:2e:16:81:3a: 32:e3:9d:dc:59:14:68:5e:cb:b1:19:13:5e:f9:39:c9:e8:ec: d5:99:4f:59:91:19:34:f2:bb:3e:d0:6c:cf:53:e3:ab:d4:8e: b5:6c:3b:24:71:67:aa:4f:7b:75:2a:62:f9:42:56:d2:c7:1a: 5a:c2:8f:2a:d8:ce:06:29:0c:ef:6c:27:eb:4c:a9:9b:54:6b: 6c:46:54:65:66:73:a3:f7:28:d3:4a:07:34:11:bf:1c:05:ab: 4d:17:58:41:c5:41:80:a2:ca:44:00:b5:20:8d:9a:0f:29:b0: eb:c2:8c:83:a7:68:4c:7a:bd:7e:ac:e0:34:7f:b4:ca:c7:df: 29:b4:6e:23:0c:c4:6a:07:f2:38:4b:7c:a8:0d:00:08:7a:75: 41:b1:9f:d0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF3fqH2RDHElEby/y0JsvrH3UfAswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE4MDAzMTU4WhcNMjYwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTg3MTU2MzAyMDcwYmNlMjc3OTllNTc2Y2QxNGI2NGVm M2YxMmRmNWM3ZDgxNzNiNjQ5ZGI1MzlkNzIwNzI4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD1KnVpK/LpcTBFAJmsUPIJ56E7wpfqXA4+KX+dSrowA2Zx 1Lg3o+5xd4LSor5NNBBj3aLb2vHgCIMIuNeyNdxPqoHmZKTJmxV3OB+7Nt+wGsvm mWUePnuRSqV9nIPu5L8tOdwOO8USz4IAuJ5mCTM1vZYvCDS/DNnbcCX9lD+uxyyW wRYBU3TcLrdg5HtXrvgk/uvJFDXEKmAXD+tMtzH2OiM4z+8KDl0UzKK1LlN+CSMP i/6/xchbkfTpit0Pabk7K1oxJNLKM2s5rF+/7ywuQXmd5tu1vpeJJ5qBkFp/QDme 2GtaHvFVLxEvtQknns5Z8nMQJfKyT/o1COUemtBXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUq9TCSks/XNSv+tgOlYP2scUkW68wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg2ZWY0YmRjLTQ3MjEtNGUxNC04MWEzLTliOWY5Mzc0YTA0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABAvnowDQYJKoZIhvcNAQELBQADggEBANUAE4PkrpoL/6cArQTxJD7s1seE anzkQ7nahXwTesSclFrGT5E7i1fP+vjWxhIoPgYDVPmIiGobX10n1A0711AfzjZc oVVrKFkDT/xeg4WkOlGFVsTVblva+8CKyEOoQA0lqua3Gr5lLhaBOjLjndxZFGhe y7EZE175Ocno7NWZT1mRGTTyuz7QbM9T46vUjrVsOyRxZ6pPe3UqYvlCVtLHGlrC jyrYzgYpDO9sJ+tMqZtUa2xGVGVmc6P3KNNKBzQRvxwFq00XWEHFQYCiykQAtSCN mg8psOvCjIOnaEx6vX6s4DR/tMrH3ym0biMMxGoH8jhLfKgNAAh6dUGxn9A= -----END CERTIFICATE-----Generated at Mon Mar 2 00:07:04 2026 by rpki-client