$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90e1e7c8-ca09-4b6c-aaba-4ece84621221.roa File: 90e1e7c8-ca09-4b6c-aaba-4ece84621221.roa (raw, json) Hash identifier: GFJc8p67Q8L7bQGg3xoZaDTFpvsHyrwOYYHsUyMK/VQ= Subject key identifier: 1E:F4:64:D0:41:64:83:C2:6B:4B:02:45:D1:E5:14:C6:24:E8:BF:DB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5716F45EF1E3C16CC7E751C3E864765A43BE58AE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90e1e7c8-ca09-4b6c-aaba-4ece84621221.roa Signing time: Tue 24 Feb 2026 22:36:34 +0000 ROA not before: Tue 24 Feb 2026 22:36:34 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.234.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:16:f4:5e:f1:e3:c1:6c:c7:e7:51:c3:e8:64:76:5a:43:be:58:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 22:36:34 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=adff738c509c00454a78d1b932ea7a467c89625c8d6a270c4a7f8e81309b8252, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:dd:cf:74:cd:42:be:b0:52:18:38:f3:4e: 2d:8f:44:de:8c:08:22:83:00:0f:04:dc:13:8b:99: f7:48:a5:67:17:85:02:e5:ac:d7:7d:28:6c:71:93: 42:0a:f6:5c:36:09:61:d9:00:25:9d:2d:b3:a6:a0: c5:85:55:85:90:48:b3:97:6f:a5:87:e3:41:89:6e: b9:66:f2:c8:63:45:64:78:79:c0:65:bf:64:a2:62: 25:e6:32:7b:f5:ee:cc:55:1a:53:bb:87:27:8c:eb: 2f:f6:dd:4b:1f:9d:40:d8:b1:3b:53:7d:d2:36:a4: 12:56:c8:94:fd:02:79:5e:bc:2a:e6:1b:f2:eb:df: 4c:2b:d3:1f:ff:2d:57:65:33:1c:82:ab:18:08:6f: 79:e6:a8:0c:ce:78:9c:5a:74:8d:5b:75:ae:0a:b3: 20:43:35:fc:22:e9:ca:d9:98:17:69:94:9a:6e:5f: a3:10:f2:0c:0e:63:af:6f:20:69:79:10:2b:d7:14: 57:65:86:dc:6e:52:48:dc:7c:68:09:34:94:76:24: 8b:fb:a5:5b:31:1c:25:f6:bd:b0:b8:7f:c5:3f:47: 88:8f:98:54:37:dd:73:57:94:3c:41:88:ca:db:86: de:98:49:3f:ed:09:e6:1d:0d:ff:51:69:fb:ac:9c: 68:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F4:64:D0:41:64:83:C2:6B:4B:02:45:D1:E5:14:C6:24:E8:BF:DB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90e1e7c8-ca09-4b6c-aaba-4ece84621221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.234.197.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:44:4c:99:31:d4:83:99:97:96:0b:e5:83:8b:f2:e7:44:b0: 99:78:2f:b7:d9:09:c0:4f:35:c9:d4:62:55:b2:68:7a:24:f5: a4:06:0a:b8:49:69:7c:81:ec:ef:59:26:ba:02:8d:b3:11:c6: 9c:d1:49:79:cc:6f:07:e8:b6:5a:f6:fc:dc:82:ff:be:ec:07: c7:34:cb:e5:05:2f:95:35:1c:e5:a0:fe:ff:6c:aa:99:79:9a: 4d:19:54:bf:49:8e:bf:93:95:23:a5:1c:29:95:ca:ec:5f:ba: 81:a6:c0:4b:67:72:06:6d:c7:69:05:81:a0:e8:62:51:0c:11: 1a:7e:3c:8b:a8:27:4c:2d:7f:0f:80:af:cd:e7:41:0d:fb:c3: eb:ef:36:e9:d9:ce:36:01:c7:66:8f:ac:94:ef:34:b3:a4:6e: 29:61:cf:78:7c:c8:8c:b5:aa:ee:18:9b:16:be:b2:d9:fb:63: 98:71:c5:29:fd:de:00:56:ae:ad:93:8e:0a:3e:1b:09:50:79: 6c:fd:b1:cf:28:6b:34:e6:e0:3d:af:54:49:72:31:fd:2a:5f: 48:7d:d0:c3:c2:4d:a0:8e:0f:23:ee:7e:4d:c7:66:bd:f0:d0: 88:06:b1:8e:3b:a5:35:a5:ae:12:43:e0:19:13:10:d6:aa:b4: 43:57:0d:02 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVxb0XvHjwWzH51HD6GR2WkO+WK4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MjIzNjM0WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZGZmNzM4YzUwOWMwMDQ1NGE3OGQxYjkzMmVhN2E0Njdj ODk2MjVjOGQ2YTI3MGM0YTdmOGU4MTMwOWI4MjUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC6d3PdM1CvrBSGDjzTi2PRN6MCCKDAA8E3BOLmfdIpWcX hQLlrNd9KGxxk0IK9lw2CWHZACWdLbOmoMWFVYWQSLOXb6WH40GJbrlm8shjRWR4 ecBlv2SiYiXmMnv17sxVGlO7hyeM6y/23UsfnUDYsTtTfdI2pBJWyJT9AnlevCrm G/Lr30wr0x//LVdlMxyCqxgIb3nmqAzOeJxadI1bda4KsyBDNfwi6crZmBdplJpu X6MQ8gwOY69vIGl5ECvXFFdlhtxuUkjcfGgJNJR2JIv7pVsxHCX2vbC4f8U/R4iP mFQ33XNXlDxBiMrbht6YST/tCeYdDf9RafusnGgDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHvRk0EFkg8JrSwJF0eUUxiTov9swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkwZTFlN2M4LWNhMDktNGI2Yy1hYWJhLTRlY2U4NDYyMTIyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX6sUwDQYJKoZIhvcNAQELBQADggEBAI1ETJkx1IOZl5YL5YOL8udEsJl4 L7fZCcBPNcnUYlWyaHok9aQGCrhJaXyB7O9ZJroCjbMRxpzRSXnMbwfotlr2/NyC /77sB8c0y+UFL5U1HOWg/v9sqpl5mk0ZVL9Jjr+TlSOlHCmVyuxfuoGmwEtncgZt x2kFgaDoYlEMERp+PIuoJ0wtfw+Ar83nQQ37w+vvNunZzjYBx2aPrJTvNLOkbilh z3h8yIy1qu4Ymxa+stn7Y5hxxSn93gBWrq2Tjgo+GwlQeWz9sc8oazTm4D2vVEly Mf0qX0h90MPCTaCODyPufk3HZr3w0IgGsY47pTWlrhJD4BkTENaqtENXDQI= -----END CERTIFICATE-----Generated at Sun Mar 1 21:38:21 2026 by rpki-client