$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9164f463-7e8f-44d4-847f-38619ebeb0b7.roa File: 9164f463-7e8f-44d4-847f-38619ebeb0b7.roa (raw, json) Hash identifier: HwDnm7gFUoIBx6/XE/F5mWAUVadSfXxWPI9fQfvCRO8= Subject key identifier: B5:6C:FC:95:9F:B0:8F:AA:82:BE:D2:84:6E:E4:57:57:1E:3F:D4:55 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 34CF5F291D6040D891C96157E3C1E760BBF71313 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9164f463-7e8f-44d4-847f-38619ebeb0b7.roa Signing time: Sun 08 Feb 2026 00:50:09 +0000 ROA not before: Sun 08 Feb 2026 00:50:09 +0000 ROA not after: Sat 09 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 207.94.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:cf:5f:29:1d:60:40:d8:91:c9:61:57:e3:c1:e7:60:bb:f7:13:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 8 00:50:09 2026 GMT Not After : May 9 23:59:59 2026 GMT Subject: serialNumber=8f3491eb2efa7628a07347d566f0d89b6e932d4532637173b140f602191b529e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:84:4b:23:0d:fe:b2:e2:ac:ac:17:39:62:b7: 0a:9f:db:2a:67:0e:b2:fc:56:1c:f8:f4:b6:f8:28: 8c:3f:38:6a:e7:65:09:b2:32:41:ac:18:40:85:6d: f1:f8:84:81:0f:7f:68:f6:45:ed:b7:29:a7:d3:ff: 8f:18:0a:63:64:0f:6e:83:8b:37:89:c8:3a:ce:7e: bf:cf:74:b6:30:ff:e2:cf:ba:d0:84:b4:b9:9e:9c: 51:ef:ab:f2:08:23:b1:55:f7:5f:1d:a0:af:69:63: a2:08:85:46:50:b0:47:57:a0:f2:16:18:58:54:d3: 0e:42:37:f8:76:6f:d9:f6:bb:90:a5:56:be:f3:e3: e9:9d:18:2f:d6:f0:b3:4c:67:2e:60:c1:f1:4d:2b: fe:21:54:e5:64:ae:21:ad:7d:28:ba:3f:9b:c6:30: ff:7d:45:ca:c8:55:de:9a:ef:11:ac:45:c0:2f:01: 42:09:95:3b:f6:bd:5c:02:e5:95:cf:56:8f:b9:09: dd:4c:30:e2:05:9e:92:08:a5:72:d1:0a:e7:63:bd: 2f:4a:51:cc:6d:0f:58:1f:9b:f5:0c:52:4a:58:07: bb:70:6a:49:54:62:d3:a8:99:31:6f:5a:aa:70:a7: d9:fd:8c:a4:ac:43:b0:d9:6d:56:e5:85:9c:5b:73: 6e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6C:FC:95:9F:B0:8F:AA:82:BE:D2:84:6E:E4:57:57:1E:3F:D4:55 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9164f463-7e8f-44d4-847f-38619ebeb0b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.94.0.0/16 Signature Algorithm: sha256WithRSAEncryption 18:f6:50:79:6c:f6:9a:75:21:5d:72:57:9d:1f:66:b9:2f:b0: bd:aa:29:0b:3f:cc:1b:88:87:2c:ca:49:da:34:5a:6e:56:a0: 87:a1:67:f3:2d:f3:11:30:59:15:fc:31:51:da:c8:83:81:b8: 3a:6b:2b:4e:de:21:1e:ff:0c:29:03:4c:79:d5:0f:ad:75:72: 57:bd:5d:eb:ee:05:34:91:5d:21:28:30:8d:ea:a6:e7:92:86: 5b:f9:43:29:24:33:c2:ff:3b:bd:4a:ad:0e:2b:f0:45:c2:25: 56:36:b8:7b:6a:ac:62:e2:97:e2:92:36:ab:97:40:5e:d1:e7: 3b:d8:ba:0b:22:a3:4a:f1:ff:0c:ba:2e:60:13:14:57:13:fe: 4d:03:10:6e:8e:7f:88:ee:51:ed:05:c7:d2:b9:c4:76:c7:f9: 62:cf:3d:9e:42:80:8f:da:55:0d:1f:86:53:be:d1:36:0a:13: ef:f8:65:ff:ef:d7:b7:d4:58:5c:ee:4d:fc:e2:15:49:e6:5b: fc:6c:d4:e6:e7:7c:91:cc:93:ed:fd:31:77:c6:ab:6f:12:20: ff:e8:6a:a5:00:79:de:1f:26:dc:e5:79:7b:8a:cb:0e:4f:9f: e0:c5:6e:20:d5:75:fa:dd:d1:8f:60:b7:76:fb:cc:27:ed:41: 8f:24:8c:f4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNM9fKR1gQNiRyWFX48HnYLv3ExMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA4MDA1MDA5WhcNMjYwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZjM0OTFlYjJlZmE3NjI4YTA3MzQ3ZDU2NmYwZDg5YjZl OTMyZDQ1MzI2MzcxNzNiMTQwZjYwMjE5MWI1MjllMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCehEsjDf6y4qysFzlitwqf2ypnDrL8Vhz49Lb4KIw/OGrn ZQmyMkGsGECFbfH4hIEPf2j2Re23KafT/48YCmNkD26DizeJyDrOfr/PdLYw/+LP utCEtLmenFHvq/III7FV918doK9pY6IIhUZQsEdXoPIWGFhU0w5CN/h2b9n2u5Cl Vr7z4+mdGC/W8LNMZy5gwfFNK/4hVOVkriGtfSi6P5vGMP99RcrIVd6a7xGsRcAv AUIJlTv2vVwC5ZXPVo+5Cd1MMOIFnpIIpXLRCudjvS9KUcxtD1gfm/UMUkpYB7tw aklUYtOomTFvWqpwp9n9jKSsQ7DZbVblhZxbc26LAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUtWz8lZ+wj6qCvtKEbuRXVx4/1FUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkxNjRmNDYzLTdlOGYtNDRkNC04NDdmLTM4NjE5ZWJlYjBiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDPXjANBgkqhkiG9w0BAQsFAAOCAQEAGPZQeWz2mnUhXXJXnR9muS+wvaop Cz/MG4iHLMpJ2jRablagh6Fn8y3zETBZFfwxUdrIg4G4OmsrTt4hHv8MKQNMedUP rXVyV71d6+4FNJFdISgwjeqm55KGW/lDKSQzwv87vUqtDivwRcIlVja4e2qsYuKX 4pI2q5dAXtHnO9i6CyKjSvH/DLouYBMUVxP+TQMQbo5/iO5R7QXH0rnEdsf5Ys89 nkKAj9pVDR+GU77RNgoT7/hl/+/Xt9RYXO5N/OIVSeZb/GzU5ud8kcyT7f0xd8ar bxIg/+hqpQB53h8m3OV5e4rLDk+f4MVuINV1+t3Rj2C3dvvMJ+1BjySM9A== -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:00 2026 by rpki-client