$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87352d4c-dc85-4274-af66-3a28d56c0282.roa File: 87352d4c-dc85-4274-af66-3a28d56c0282.roa (raw, json) Hash identifier: vjODQ1L/JPS6KjtFlsBdWdSH6mzBcXxVkeA6WWGeldQ= Subject key identifier: AA:55:C0:AC:10:8F:B1:2F:44:4B:E3:D1:F7:3E:8C:34:5B:09:D3:69 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0BFB79B1D6C91301F50BB9AB2B2E9274DCC2F8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87352d4c-dc85-4274-af66-3a28d56c0282.roa Signing time: Sun 22 Feb 2026 00:51:11 +0000 ROA not before: Sun 22 Feb 2026 00:51:11 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 205.147.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:fb:79:b1:d6:c9:13:01:f5:0b:b9:ab:2b:2e:92:74:dc:c2:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 22 00:51:11 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=70023cbcd63cd1709c60e3ac2aabeee6e1af7c988ef1386a33f193474c0dc287, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b7:23:58:67:7e:3b:ab:d0:de:e0:0b:d7:e0: 11:b8:96:3d:91:94:09:54:24:19:1e:ac:1a:d5:16: 1d:96:65:b7:5c:de:5d:11:e6:cb:6d:a7:c1:d7:41: 31:2c:7f:8c:e3:1b:a5:ee:7c:48:2c:fa:c0:22:58: 64:dc:0e:86:95:e8:f5:09:a7:88:ab:54:14:7f:cd: 56:2c:4c:a8:b3:1d:ec:f9:a3:61:75:a7:09:03:58: 79:16:0d:44:ad:27:55:ec:d2:e5:84:17:1d:83:75: 49:bb:41:e1:1d:1d:80:1f:09:92:83:f3:20:ff:7e: e3:91:e0:b7:69:47:f0:fc:b2:b5:a1:d5:0a:89:e6: b9:a5:f4:09:cf:58:2c:74:13:c4:f4:f7:91:70:c0: 78:f0:d5:c6:a0:c9:d9:63:c1:94:44:98:79:93:fd: 85:e0:c3:cd:fb:fd:73:71:81:46:d3:89:01:de:82: 1c:d0:a8:4a:b7:46:f0:12:87:3d:08:a9:f9:37:82: d4:f8:28:8e:8e:b2:d6:55:97:93:b6:26:c4:2d:cf: 0a:b5:de:65:79:32:fa:ad:ec:53:be:77:d4:ad:c7: f5:be:5c:a5:5d:4b:37:44:32:1b:da:f7:0d:f9:45: 55:a0:29:ee:34:1c:17:e8:48:95:12:f5:b5:af:4a: 72:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:55:C0:AC:10:8F:B1:2F:44:4B:E3:D1:F7:3E:8C:34:5B:09:D3:69 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87352d4c-dc85-4274-af66-3a28d56c0282.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.147.216.0/23 Signature Algorithm: sha256WithRSAEncryption 20:72:8f:5a:bd:ab:2d:1b:c3:c2:e7:a0:95:b9:a9:10:d4:3b: 86:7b:f4:5d:a1:23:30:c6:14:56:ba:66:be:bd:a3:1c:a5:8e: c9:60:d0:33:1d:bf:00:25:1d:0a:84:d7:01:01:e9:44:6f:6e: 5c:26:4a:03:b2:f6:a2:f9:f7:74:84:f2:1e:ac:b7:ea:0e:d2: 53:27:d0:48:be:b2:f8:4c:a5:ae:ca:7d:8b:df:73:79:3e:25: 6c:45:01:8c:e6:6f:d1:85:e8:bd:77:05:f3:54:57:5a:27:00: 67:4e:2d:c0:34:f7:08:26:49:d2:e4:0b:f6:02:e0:92:af:fe: 08:ea:2c:56:d8:0b:ea:73:97:2c:0a:16:ca:d4:8e:36:09:f8: 3d:a5:b5:f7:aa:0e:48:b6:03:ae:46:6c:45:6c:d0:63:de:03: 5b:2b:79:64:6b:b3:09:8c:97:18:54:f7:10:80:98:85:68:84: 87:ab:b6:66:9b:51:59:a6:46:37:51:bd:7f:f7:2c:aa:24:b0: 54:d1:c6:c3:dd:36:6d:28:81:18:e4:bb:b5:d9:9b:20:1d:03: 0e:1e:5a:d9:b2:e5:c3:1d:4c:2e:b3:86:9e:8c:b2:1a:4d:b3: 6f:21:d9:1b:2c:5f:3d:a8:10:13:97:08:a4:09:49:34:96:fe: 2a:65:be:f3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITC/t5sdbJEwH1C7mrKy6SdNzC+DANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjAyMjIwMDUxMTFaFw0yNjA1MjMyMzU5NTla MHoxSTBHBgNVBAUTQDcwMDIzY2JjZDYzY2QxNzA5YzYwZTNhYzJhYWJlZWU2ZTFh ZjdjOTg4ZWYxMzg2YTMzZjE5MzQ3NGMwZGMyODcxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKC3I1hnfjur0N7gC9fgEbiWPZGUCVQkGR6sGtUWHZZlt1ze XRHmy22nwddBMSx/jOMbpe58SCz6wCJYZNwOhpXo9QmniKtUFH/NVixMqLMd7Pmj YXWnCQNYeRYNRK0nVezS5YQXHYN1SbtB4R0dgB8JkoPzIP9+45Hgt2lH8PyytaHV ConmuaX0Cc9YLHQTxPT3kXDAePDVxqDJ2WPBlESYeZP9heDDzfv9c3GBRtOJAd6C HNCoSrdG8BKHPQip+TeC1Pgojo6y1lWXk7YmxC3PCrXeZXky+q3sU7531K3H9b5c pV1LN0QyG9r3DflFVaAp7jQcF+hIlRL1ta9KcrsCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBSqVcCsEI+xL0RL49H3Pow0WwnTaTAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvODczNTJkNGMtZGM4NS00Mjc0LWFmNjYtM2EyOGQ1NmMwMjgyLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAc2T2DANBgkqhkiG9w0BAQsFAAOCAQEAIHKPWr2rLRvDwueglbmpENQ7hnv0 XaEjMMYUVrpmvr2jHKWOyWDQMx2/ACUdCoTXAQHpRG9uXCZKA7L2ovn3dITyHqy3 6g7SUyfQSL6y+Eylrsp9i99zeT4lbEUBjOZv0YXovXcF81RXWicAZ04twDT3CCZJ 0uQL9gLgkq/+COosVtgL6nOXLAoWytSONgn4PaW196oOSLYDrkZsRWzQY94DWyt5 ZGuzCYyXGFT3EICYhWiEh6u2ZptRWaZGN1G9f/csqiSwVNHGw902bSiBGOS7tdmb IB0DDh5a2bLlwx1MLrOGnoyyGk2zbyHZGyxfPagQE5cIpAlJNJb+KmW+8w== -----END CERTIFICATE-----Generated at Sun Mar 1 22:30:58 2026 by rpki-client