$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a0ae139-46ff-4a75-a3b7-fd1b21863b9b.roa File: 8a0ae139-46ff-4a75-a3b7-fd1b21863b9b.roa (raw, json) Hash identifier: 5WXAydVXEXhqOD3QOT78bEw2F3HWvrXHL0UKoARJzi0= Subject key identifier: 25:A3:AE:7E:0A:53:42:C0:C2:34:A9:DC:C0:40:B5:D2:7B:44:1F:CB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 620667842DBB67A16815CF4326E279E403A3621A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a0ae139-46ff-4a75-a3b7-fd1b21863b9b.roa Signing time: Sun 22 Feb 2026 00:50:05 +0000 ROA not before: Sun 22 Feb 2026 00:50:05 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 209.92.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:06:67:84:2d:bb:67:a1:68:15:cf:43:26:e2:79:e4:03:a3:62:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 22 00:50:05 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=2bc2a6d911b4e0543c7bd7983fa3fa4acad292a10a51558f6125eeba45dac749, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:43:f3:b8:cd:f2:e8:64:50:d8:51:77:3b:db: 4b:29:08:f9:9d:39:6a:d5:fd:b9:ef:e4:9a:11:ea: 4e:db:bb:ef:ae:5e:fa:3f:29:23:8f:ec:d4:0c:70: 32:67:29:3b:47:69:cf:11:7a:43:45:a0:60:96:6f: 5d:95:29:74:71:b9:b5:68:eb:f9:36:ae:cc:34:94: 56:4f:77:5b:8c:f1:e7:60:43:b7:e8:62:43:1c:7a: 13:ca:96:6a:fe:06:0c:bf:05:ca:9e:64:9b:40:fc: b1:d6:be:f4:d7:94:27:66:cc:db:50:f3:48:67:4b: 64:23:cd:3d:dc:7a:dc:44:7f:1a:75:43:26:ef:d9: 8c:b8:0e:5c:08:30:f5:21:11:6b:9f:56:c7:4c:c6: 10:34:0a:6a:34:3d:1c:5d:58:2b:e2:69:48:aa:7b: e8:d4:3e:57:e6:00:3b:6d:65:ac:16:17:dd:a2:37: eb:ad:87:3a:93:b8:7f:2c:48:25:dd:97:c4:12:74: 29:3d:d4:bc:e3:3f:93:7c:88:e1:5c:24:b6:bf:ab: 24:8a:65:66:3e:15:14:3d:44:65:c6:78:af:c3:87: e6:fb:9d:61:2b:fc:4b:de:6d:9f:ca:5d:d0:a3:35: f0:d9:f6:e6:d4:8a:d9:dd:ab:d1:fd:8c:29:16:52: 5f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A3:AE:7E:0A:53:42:C0:C2:34:A9:DC:C0:40:B5:D2:7B:44:1F:CB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a0ae139-46ff-4a75-a3b7-fd1b21863b9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.92.138.0/23 Signature Algorithm: sha256WithRSAEncryption 20:33:cd:26:92:ce:15:32:7b:c1:b1:82:b0:f3:57:54:84:d2: c6:dd:69:70:98:6a:12:80:75:18:ee:5f:48:73:32:9a:89:d0: 45:be:91:6a:d7:d0:d5:76:c7:d3:7b:a2:a3:c8:76:8e:d5:e4: 7e:bc:e4:e0:82:28:81:0e:35:1b:7c:b6:32:48:c7:f5:b8:d2: d4:30:db:e7:30:8e:22:ba:4b:51:f9:4a:73:d5:19:3a:82:0e: 8c:da:d7:c0:e6:4c:da:e7:c2:93:49:ef:ad:44:79:4d:f6:f5: 07:50:38:3f:ba:dc:bf:37:25:8f:20:40:7a:1f:b8:8c:83:16: b5:e3:4f:93:7a:00:c2:ae:15:92:4d:d7:0f:31:25:3e:6c:10: ff:61:d9:87:56:39:db:73:0e:64:28:fe:1a:f9:d9:58:96:b3: 04:ed:29:e3:83:97:07:91:d5:08:3e:2a:97:21:87:02:68:74: 2d:2d:bb:7e:26:d1:e8:1e:c0:b5:bb:b6:94:bc:c2:7c:62:89: 95:21:c9:9f:39:a0:5c:56:48:22:b4:79:2a:1f:17:0b:6d:23: ad:4d:35:f0:91:9b:fc:45:cb:05:33:13:29:39:de:33:c7:a0: 7e:47:a5:b5:6d:80:bb:40:52:ad:e1:81:2e:56:c0:80:9f:3f: fd:3b:30:eb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYgZnhC27Z6FoFc9DJuJ55AOjYhowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIyMDA1MDA1WhcNMjYwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYmMyYTZkOTExYjRlMDU0M2M3YmQ3OTgzZmEzZmE0YWNh ZDI5MmExMGE1MTU1OGY2MTI1ZWViYTQ1ZGFjNzQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKQ/O4zfLoZFDYUXc720spCPmdOWrV/bnv5JoR6k7bu++u Xvo/KSOP7NQMcDJnKTtHac8RekNFoGCWb12VKXRxubVo6/k2rsw0lFZPd1uM8edg Q7foYkMcehPKlmr+Bgy/BcqeZJtA/LHWvvTXlCdmzNtQ80hnS2QjzT3cetxEfxp1 Qybv2Yy4DlwIMPUhEWufVsdMxhA0Cmo0PRxdWCviaUiqe+jUPlfmADttZawWF92i N+uthzqTuH8sSCXdl8QSdCk91LzjP5N8iOFcJLa/qySKZWY+FRQ9RGXGeK/Dh+b7 nWEr/EvebZ/KXdCjNfDZ9ubUitndq9H9jCkWUl9ZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJaOufgpTQsDCNKncwEC10ntEH8swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhhMGFlMTM5LTQ2ZmYtNGE3NS1hM2I3LWZkMWIyMTg2M2I5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHRXIowDQYJKoZIhvcNAQELBQADggEBACAzzSaSzhUye8GxgrDzV1SE0sbd aXCYahKAdRjuX0hzMpqJ0EW+kWrX0NV2x9N7oqPIdo7V5H685OCCKIEONRt8tjJI x/W40tQw2+cwjiK6S1H5SnPVGTqCDoza18DmTNrnwpNJ761EeU329QdQOD+63L83 JY8gQHofuIyDFrXjT5N6AMKuFZJN1w8xJT5sEP9h2YdWOdtzDmQo/hr52ViWswTt KeODlweR1Qg+KpchhwJodC0tu34m0egewLW7tpS8wnxiiZUhyZ85oFxWSCK0eSof FwttI61NNfCRm/xFywUzEyk53jPHoH5HpbVtgLtAUq3hgS5WwICfP/07MOs= -----END CERTIFICATE-----Generated at Sun Mar 1 22:17:48 2026 by rpki-client