$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a7b1d2a-a694-4e2c-b292-4263660a9300.roa File: 8a7b1d2a-a694-4e2c-b292-4263660a9300.roa (raw, json) Hash identifier: yOO0xXe+ZnBMr6qV593IqorjD/9IRp+Ahh0nowdq7WA= Subject key identifier: 44:08:2D:D5:A1:56:99:46:18:0C:81:E2:ED:A6:BC:63:28:61:BE:84 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 38C026BB1E5A8AE57668DCE5376E926247ADD7E0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a7b1d2a-a694-4e2c-b292-4263660a9300.roa Signing time: Sun 01 Mar 2026 00:01:17 +0000 ROA not before: Sun 01 Mar 2026 00:01:17 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 192.189.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c0:26:bb:1e:5a:8a:e5:76:68:dc:e5:37:6e:92:62:47:ad:d7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 1 00:01:17 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=bb89bd049aefbcad1115e9238ed5f3acc407138abc5ffb0a481a0f661a3ef2c8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:16:78:48:e0:59:d6:85:bc:b6:76:d8:54:c0: ff:da:fb:4c:11:6c:df:ab:93:39:f1:7c:d4:a9:3c: 97:0e:91:46:2e:32:9c:fe:ea:3e:cc:61:06:e5:9b: b4:2e:ae:e2:a9:97:fe:9d:6c:6f:1c:30:c8:30:27: 17:e0:19:87:23:54:78:50:84:8f:89:ce:74:b1:b0: f9:69:b7:00:d5:de:2a:90:48:e3:8a:ca:bb:fa:92: 7b:29:b1:fb:88:8d:6f:42:48:b8:67:bc:ab:0a:4a: bb:af:d9:19:14:a1:be:28:62:4e:07:90:ed:da:a9: 87:7e:71:db:cd:f9:1f:e9:71:e3:0e:2f:35:a3:93: e2:b5:e3:c0:48:ad:e9:27:d3:9e:03:8e:f5:c6:59: 9a:fe:5e:47:7b:d7:1f:54:28:a6:f0:a9:2f:47:b6: ef:60:e6:37:ba:ba:0a:a6:63:ed:5e:c7:c5:11:59: 76:46:fc:91:55:1a:c6:2e:96:72:b9:5e:9d:6a:83: 39:94:88:ff:6d:a6:8f:b1:c8:5c:a8:36:5e:ca:26: 5e:a9:80:fe:c9:f8:d7:ff:e0:e6:44:17:34:45:1f: 0a:a8:9d:a6:c9:26:37:ad:9f:3c:b8:0f:e4:7d:da: c9:17:a2:6c:e5:f8:d4:aa:7a:da:eb:af:8a:c5:bf: 68:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:08:2D:D5:A1:56:99:46:18:0C:81:E2:ED:A6:BC:63:28:61:BE:84 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a7b1d2a-a694-4e2c-b292-4263660a9300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.189.196.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:29:ec:dd:b4:cc:2e:1c:dd:ce:9a:30:0f:79:5d:e4:86:51: 60:57:a0:a2:40:8a:8a:e0:2f:49:02:95:ca:be:bd:90:50:af: a4:d5:08:8c:31:7a:e0:0b:23:9f:40:cc:1f:5f:18:08:64:b5: 8f:19:82:3c:c7:10:48:e8:2c:f9:6d:d3:1e:bf:0d:1b:af:93: 36:d4:45:64:86:51:4a:ac:34:64:37:3c:89:28:0c:a0:7e:90: e8:62:f9:c9:63:2f:e7:c5:15:a9:d5:9b:8f:74:bb:6c:98:a6: 94:ee:ba:ca:63:b3:a0:f0:92:04:1a:87:3d:ee:36:d2:a7:0d: f1:86:d8:42:64:e5:fc:1f:32:52:9a:cf:a2:5f:4d:81:5e:e8: ff:1a:b4:4d:6d:c9:4e:f8:ee:ce:de:15:a5:9a:cb:83:70:55: 29:a8:ee:47:74:46:ca:cf:c3:6f:67:4e:6d:5f:44:0c:21:fc: 42:8f:8d:56:a5:75:22:fc:eb:cd:2a:cd:6c:ec:17:98:57:16: f4:08:ed:49:1d:6b:d4:f5:4f:7b:f2:4c:b7:7f:3c:02:c9:d9: 6e:a3:86:4c:c2:1d:83:ea:40:be:25:53:5a:08:53:c2:ae:25: cd:72:d3:52:eb:24:c8:5d:13:4e:69:a1:9e:13:b7:4b:e3:a4: 57:10:b6:f6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOMAmux5aiuV2aNzlN26SYket1+AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzAxMDAwMTE3WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjg5YmQwNDlhZWZiY2FkMTExNWU5MjM4ZWQ1ZjNhY2M0 MDcxMzhhYmM1ZmZiMGE0ODFhMGY2NjFhM2VmMmM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFFnhI4FnWhby2dthUwP/a+0wRbN+rkznxfNSpPJcOkUYu Mpz+6j7MYQblm7QuruKpl/6dbG8cMMgwJxfgGYcjVHhQhI+JznSxsPlptwDV3iqQ SOOKyrv6knspsfuIjW9CSLhnvKsKSruv2RkUob4oYk4HkO3aqYd+cdvN+R/pceMO LzWjk+K148BIrekn054DjvXGWZr+Xkd71x9UKKbwqS9Htu9g5je6ugqmY+1ex8UR WXZG/JFVGsYulnK5Xp1qgzmUiP9tpo+xyFyoNl7KJl6pgP7J+Nf/4OZEFzRFHwqo nabJJjetnzy4D+R92skXomzl+NSqetrrr4rFv2gjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURAgt1aFWmUYYDIHi7aa8YyhhvoQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhhN2IxZDJhLWE2OTQtNGUyYy1iMjkyLTQyNjM2NjBhOTMwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADAvcQwDQYJKoZIhvcNAQELBQADggEBAE0p7N20zC4c3c6aMA95XeSGUWBX oKJAiorgL0kClcq+vZBQr6TVCIwxeuALI59AzB9fGAhktY8ZgjzHEEjoLPlt0x6/ DRuvkzbURWSGUUqsNGQ3PIkoDKB+kOhi+cljL+fFFanVm490u2yYppTuuspjs6Dw kgQahz3uNtKnDfGG2EJk5fwfMlKaz6JfTYFe6P8atE1tyU747s7eFaWay4NwVSmo 7kd0RsrPw29nTm1fRAwh/EKPjValdSL8680qzWzsF5hXFvQI7Ukda9T1T3vyTLd/ PALJ2W6jhkzCHYPqQL4lU1oIU8KuJc1y01LrJMhdE05poZ4Tt0vjpFcQtvY= -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:41 2026 by rpki-client