$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f26251c-d2e5-4db4-a254-a9e1f2b9180b.roa File: 8f26251c-d2e5-4db4-a254-a9e1f2b9180b.roa (raw, json) Hash identifier: bHaRHsqh4Qpnyjhp7LeqJ9Q7OEZffG2gLJP9lzomF5s= Subject key identifier: A1:52:3C:1C:AD:F6:6D:10:4B:C1:72:61:95:E6:85:78:F3:57:EE:38 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7543CE58033BD83EC63788A7A4F6E83051253402 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f26251c-d2e5-4db4-a254-a9e1f2b9180b.roa Signing time: Thu 26 Feb 2026 00:10:08 +0000 ROA not before: Thu 26 Feb 2026 00:10:08 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.135.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:43:ce:58:03:3b:d8:3e:c6:37:88:a7:a4:f6:e8:30:51:25:34:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 26 00:10:08 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=f16c5a79af61aeb22abf3b6b821d33920f0f10ee8883d23e003ebd7e135d9460, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:11:be:cf:6e:ab:a0:ef:cf:d1:c5:84:8e:15: 7b:f5:fb:c6:6b:f2:a8:38:68:86:d6:6b:c8:71:a8: 91:17:74:3a:5f:0d:fa:7f:50:a4:1c:d1:e6:45:49: 13:01:68:19:35:44:41:50:2f:55:ae:61:b0:a1:31: e6:0b:6c:42:36:83:3a:fb:a7:8f:7c:21:7c:91:e6: 47:c5:aa:2b:c8:3a:0a:00:c7:06:6e:db:7b:aa:90: 70:98:85:44:2e:be:a0:c1:88:77:0c:ff:ac:ac:f5: 78:30:0f:cf:5c:9f:7b:e5:b5:0b:15:76:ac:55:e1: e8:82:f2:df:fa:78:4f:73:d3:9d:7f:dc:22:b8:0f: 20:d4:71:cc:ce:ae:da:3b:f1:8a:85:24:c8:46:e7: 2f:a3:6e:9f:ff:78:3e:53:7a:8c:83:48:ed:31:e1: 81:8d:ae:a2:d5:6b:c6:57:00:0c:f1:74:f4:ba:c0: 0b:05:2f:5c:00:9f:c2:59:65:03:95:a4:5a:ec:86: 33:ab:c2:96:2f:ed:2c:00:05:8a:6a:b2:33:af:43: fd:3b:ec:ed:bd:93:08:88:f0:13:a9:72:d4:22:82: 03:df:f7:31:19:ea:68:87:08:9d:0d:f3:d5:ba:de: 3f:00:99:0e:0d:de:70:54:7f:51:0a:ec:84:33:08: f0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:52:3C:1C:AD:F6:6D:10:4B:C1:72:61:95:E6:85:78:F3:57:EE:38 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f26251c-d2e5-4db4-a254-a9e1f2b9180b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.135.128.0/17 Signature Algorithm: sha256WithRSAEncryption 3c:08:24:f4:8a:41:7b:2c:29:cd:48:a9:a6:0d:92:63:8e:23: ca:99:99:66:70:cb:d6:70:1b:6c:68:8f:25:7f:4b:73:47:e4: c8:d7:cd:87:82:ee:71:1a:8e:df:45:00:c6:b9:17:71:69:78: db:c0:59:23:cc:cc:a6:32:b3:ef:7f:33:02:2d:ec:45:f1:49: 56:5b:d4:23:f8:f4:4b:c2:d0:7e:5d:07:53:2d:94:66:31:48: 87:40:5a:d0:3d:cf:e1:32:98:21:f4:68:28:7b:83:69:d4:fe: 61:f2:2e:d2:5b:f4:40:dd:40:54:52:bd:b4:3e:82:a6:71:b5: c6:df:7f:b5:60:a4:14:ef:8e:9a:e8:e5:55:51:d0:2d:cf:f3: 8a:4e:58:d2:74:a5:2f:51:8d:84:e4:d3:da:e7:c6:11:10:02: e3:4d:0c:35:47:52:25:ca:2e:79:51:81:af:06:bd:cd:18:48: c5:de:19:d1:6c:4c:cc:40:51:b5:c5:15:9a:9a:a3:f3:d6:01: f4:07:e6:c3:e3:0f:6c:c5:3f:bd:99:b1:4f:fe:7c:5b:d0:da: 30:92:46:68:88:75:e2:57:cc:b4:a0:5a:2a:08:c4:81:11:67: cb:a2:4c:dd:86:e0:49:50:1c:f6:ba:16:e9:5b:40:62:9a:fd: 63:bc:87:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdUPOWAM72D7GN4inpPboMFElNAIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI2MDAxMDA4WhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTZjNWE3OWFmNjFhZWIyMmFiZjNiNmI4MjFkMzM5MjBm MGYxMGVlODg4M2QyM2UwMDNlYmQ3ZTEzNWQ5NDYwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWEb7Pbqug78/RxYSOFXv1+8Zr8qg4aIbWa8hxqJEXdDpf Dfp/UKQc0eZFSRMBaBk1REFQL1WuYbChMeYLbEI2gzr7p498IXyR5kfFqivIOgoA xwZu23uqkHCYhUQuvqDBiHcM/6ys9XgwD89cn3vltQsVdqxV4eiC8t/6eE9z051/ 3CK4DyDUcczOrto78YqFJMhG5y+jbp//eD5TeoyDSO0x4YGNrqLVa8ZXAAzxdPS6 wAsFL1wAn8JZZQOVpFrshjOrwpYv7SwABYpqsjOvQ/077O29kwiI8BOpctQiggPf 9zEZ6miHCJ0N89W63j8AmQ4N3nBUf1EK7IQzCPB5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoVI8HK32bRBLwXJhleaFePNX7jgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhmMjYyNTFjLWQyZTUtNGRiNC1hMjU0LWE5ZTFmMmI5MTgwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcPh4AwDQYJKoZIhvcNAQELBQADggEBADwIJPSKQXssKc1IqaYNkmOOI8qZ mWZwy9ZwG2xojyV/S3NH5MjXzYeC7nEajt9FAMa5F3FpeNvAWSPMzKYys+9/MwIt 7EXxSVZb1CP49EvC0H5dB1MtlGYxSIdAWtA9z+EymCH0aCh7g2nU/mHyLtJb9EDd QFRSvbQ+gqZxtcbff7VgpBTvjpro5VVR0C3P84pOWNJ0pS9RjYTk09rnxhEQAuNN DDVHUiXKLnlRga8Gvc0YSMXeGdFsTMxAUbXFFZqao/PWAfQH5sPjD2zFP72ZsU/+ fFvQ2jCSRmiIdeJXzLSgWioIxIERZ8uiTN2G4ElQHPa6FulbQGKa/WO8h5M= -----END CERTIFICATE-----Generated at Sun Mar 1 22:19:46 2026 by rpki-client