$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8aea7f1f-37eb-49d5-be70-ed3b2400d81c.roa File: 8aea7f1f-37eb-49d5-be70-ed3b2400d81c.roa (raw, json) Hash identifier: TjNXaGST0QNZI3RnxdCzNoOFxThL7fxqWkhgGknaOII= Subject key identifier: 8A:BF:32:CF:34:E4:02:43:F5:12:8A:7C:AB:75:C1:8A:79:53:86:48 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 20F3D9FDAE151816EC78F38D768BD8C541E265DB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8aea7f1f-37eb-49d5-be70-ed3b2400d81c.roa Signing time: Wed 25 Feb 2026 00:21:24 +0000 ROA not before: Wed 25 Feb 2026 00:21:24 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:f3:d9:fd:ae:15:18:16:ec:78:f3:8d:76:8b:d8:c5:41:e2:65:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 00:21:24 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=f1a280ab9124db7ad0c85edbb459330fc4a51a1a58f50416b2c7f7994c538451, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:83:de:fd:e2:8a:bd:ce:b0:43:36:5b:a6:78: fd:23:63:2b:60:1b:9e:7c:de:2e:10:a7:7a:22:cf: f3:7d:e8:fa:cd:ee:f4:1f:d8:4d:62:b8:09:bb:c2: e9:7a:1c:00:d7:e0:ab:74:71:d7:6a:1b:67:40:5d: ef:4e:63:bc:a3:68:f4:20:ca:3f:e1:cc:87:a5:19: 87:80:5a:98:52:31:48:ec:25:de:ae:42:6a:27:1c: 18:b3:fd:94:03:e5:79:12:18:25:2c:3c:09:64:07: 06:f4:10:59:a4:09:b2:3d:03:b8:5b:50:50:7e:91: 5c:6b:4b:db:9a:66:28:7b:5a:7b:bc:2e:6c:62:60: 35:e4:bc:40:d3:8d:45:a1:f6:ee:8f:c3:f4:de:a6: 69:39:b7:99:3b:72:00:fe:e0:69:ae:24:5e:4a:0f: f0:0f:7a:3d:ca:e8:40:18:e0:db:e3:12:48:a0:5d: a8:29:04:11:d8:08:2a:73:40:b9:06:d0:e6:13:03: a4:86:ac:7f:27:0e:f1:e7:e4:51:4a:ad:6b:d2:7b: 2b:05:d6:7a:aa:b9:7b:7d:cf:fe:34:3d:03:2b:8f: 30:4a:90:dd:c6:56:1f:ce:87:73:a0:d2:74:a3:0e: 98:8f:05:e4:09:6a:d6:05:8a:76:57:ba:bb:dd:f3: a4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BF:32:CF:34:E4:02:43:F5:12:8A:7C:AB:75:C1:8A:79:53:86:48 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8aea7f1f-37eb-49d5-be70-ed3b2400d81c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.97.0/24 Signature Algorithm: sha256WithRSAEncryption 40:a5:38:ad:b2:3f:f1:16:29:c8:8b:d5:a3:82:74:cf:19:60: 5b:6c:74:e2:53:21:14:b2:60:a6:65:b8:b5:a3:30:6c:ac:de: 96:40:4c:a4:e2:1a:c6:38:2c:03:39:b6:bc:d6:7e:d4:7a:1a: 89:8a:db:d7:ff:c7:29:d3:0c:3f:d5:cd:ed:a7:9d:69:ff:40: e7:ef:24:2d:0e:d6:1b:97:34:2f:33:f5:5d:43:05:ac:7e:78: 28:e1:77:b7:07:9e:87:af:be:ac:01:cd:78:35:b5:94:b3:19: e9:46:f9:80:57:5c:ff:c4:aa:00:fd:e4:b6:0e:0d:fe:8b:c8: 37:e4:9c:67:97:c8:e7:7a:63:9c:0e:31:d8:67:75:84:d7:80: 20:64:6d:a5:e1:23:10:51:59:c1:6c:27:3c:ef:bf:a6:b9:48: d9:d5:8f:f3:13:6a:44:05:53:55:6f:ea:9e:70:72:df:a5:4f: 4a:c6:a0:23:69:8c:9e:8e:0c:22:77:1a:77:c1:d6:16:af:b5: fe:e9:05:a8:12:d2:7d:34:97:7a:a4:1a:cd:d8:75:1e:2d:d7: 26:ab:54:c4:84:be:29:a5:cf:28:2a:cc:3d:92:3a:05:a5:e5: 88:d3:8b:df:53:3d:1d:c5:e6:67:a6:ad:de:df:a4:86:c5:28: d6:3c:13:6e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIPPZ/a4VGBbsePONdovYxUHiZdswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDAyMTI0WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMWEyODBhYjkxMjRkYjdhZDBjODVlZGJiNDU5MzMwZmM0 YTUxYTFhNThmNTA0MTZiMmM3Zjc5OTRjNTM4NDUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOg9794oq9zrBDNlumeP0jYytgG5583i4Qp3oiz/N96PrN 7vQf2E1iuAm7wul6HADX4Kt0cddqG2dAXe9OY7yjaPQgyj/hzIelGYeAWphSMUjs Jd6uQmonHBiz/ZQD5XkSGCUsPAlkBwb0EFmkCbI9A7hbUFB+kVxrS9uaZih7Wnu8 LmxiYDXkvEDTjUWh9u6Pw/Tepmk5t5k7cgD+4GmuJF5KD/APej3K6EAY4NvjEkig XagpBBHYCCpzQLkG0OYTA6SGrH8nDvHn5FFKrWvSeysF1nqquXt9z/40PQMrjzBK kN3GVh/Oh3Og0nSjDpiPBeQJatYFinZXurvd86ShAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUir8yzzTkAkP1Eop8q3XBinlThkgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhhZWE3ZjFmLTM3ZWItNDlkNS1iZTcwLWVkM2IyNDAwZDgxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/GEwDQYJKoZIhvcNAQELBQADggEBAEClOK2yP/EWKciL1aOCdM8ZYFts dOJTIRSyYKZluLWjMGys3pZATKTiGsY4LAM5trzWftR6GomK29f/xynTDD/Vze2n nWn/QOfvJC0O1huXNC8z9V1DBax+eCjhd7cHnoevvqwBzXg1tZSzGelG+YBXXP/E qgD95LYODf6LyDfknGeXyOd6Y5wOMdhndYTXgCBkbaXhIxBRWcFsJzzvv6a5SNnV j/MTakQFU1Vv6p5wct+lT0rGoCNpjJ6ODCJ3GnfB1havtf7pBagS0n00l3qkGs3Y dR4t1yarVMSEvimlzygqzD2SOgWl5YjTi99TPR3F5memrd7fpIbFKNY8E24= -----END CERTIFICATE-----Generated at Mon Mar 2 01:59:22 2026 by rpki-client