$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92877fb1-c4c2-4c32-9a42-12120e6ac015.roa File: 92877fb1-c4c2-4c32-9a42-12120e6ac015.roa (raw, json) Hash identifier: 8RoTD17aNIKcZwKfZANcTZ2AN+tiVcEfc2T6/KXCh2g= Subject key identifier: 6A:7D:34:D2:D7:72:B3:35:22:4E:75:13:2D:25:01:67:5F:98:60:DE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5DD3AA5300B3E32E2AD4924A8EEBB7B04C507BC9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92877fb1-c4c2-4c32-9a42-12120e6ac015.roa Signing time: Tue 24 Feb 2026 01:20:09 +0000 ROA not before: Tue 24 Feb 2026 01:20:09 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 161.193.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d3:aa:53:00:b3:e3:2e:2a:d4:92:4a:8e:eb:b7:b0:4c:50:7b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 01:20:09 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=9d4d7181eb074f0610caa00ed45f536d90b9aa4e8ca084ac79670c4c576a8ebd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3c:78:de:3c:e7:4a:c1:fe:b5:f1:cd:8d:50: ad:48:98:0a:fe:73:19:9a:d5:6b:18:5c:64:01:04: 3a:a0:f2:93:3b:27:74:fc:07:24:d8:2c:ba:dd:a2: c8:18:fd:df:cd:f5:d2:54:77:4d:8c:03:eb:6e:b2: fd:7d:08:8c:b5:c1:2e:c8:ba:8b:ff:fe:83:c7:81: c3:58:e4:7a:71:ea:1d:85:a8:6a:32:79:6f:97:61: f3:cd:50:20:88:8b:09:c0:f0:b0:29:67:e9:8a:3f: c1:5b:98:b1:c6:40:42:ac:8c:5e:6b:8e:e8:37:f5: 41:b2:2d:f4:f6:9e:85:fe:94:bc:61:3f:55:4b:ab: cd:cc:e8:f3:f0:ee:01:46:78:5a:5d:0c:8d:b7:f6: c1:55:06:4e:0c:f1:21:36:5c:53:77:4d:97:bd:b4: d0:fa:23:c1:78:f3:b2:59:09:6a:5d:ec:55:b9:18: 66:b8:03:cf:39:78:27:17:9d:c6:6a:7f:dd:3d:41: 31:66:3f:35:af:fd:2e:23:7c:67:49:6a:2f:ef:33: 27:72:32:09:a4:6e:11:a6:d8:70:7c:c1:80:e4:b5: 96:d2:f7:c7:1f:ea:5d:53:53:bd:5b:10:33:b5:a5: b4:e5:af:5e:3d:71:bc:05:65:8e:04:4b:72:87:a2: a0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7D:34:D2:D7:72:B3:35:22:4E:75:13:2D:25:01:67:5F:98:60:DE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92877fb1-c4c2-4c32-9a42-12120e6ac015.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.193.0.0/18 Signature Algorithm: sha256WithRSAEncryption 1b:92:a9:2f:bd:12:d7:bf:7e:10:5b:74:c6:b5:9a:dd:ca:ab: a1:cd:c5:bb:d2:c1:c9:a4:61:a7:63:6b:8b:89:e4:c2:a1:a0: 06:ce:a4:29:79:74:d3:9c:a2:71:50:33:60:ff:66:0b:e1:45: 4e:76:3a:5c:b0:5b:06:8c:14:38:69:9c:c6:83:46:fe:53:43: ed:af:62:21:8f:05:32:6a:7a:dd:23:dd:ac:74:44:14:fd:23: 3a:fd:ad:8a:3e:8d:f2:b2:d4:e7:71:05:d6:9c:d5:1c:4f:5d: ef:b5:00:53:9f:32:27:b6:72:5e:d5:c3:5c:ce:98:d9:e9:8f: 90:3b:8a:4c:14:3b:ee:83:58:21:93:a6:f1:ac:c4:c6:02:a9: 9e:e0:df:1a:83:b3:22:3a:6c:c8:e1:2b:3b:d2:e0:5e:b6:22: 33:56:47:31:22:0f:41:d0:e7:b2:b7:d3:2a:78:87:13:de:e0: 36:c7:dd:b0:e1:27:9c:ee:4c:6f:28:98:d5:db:32:24:b2:4a: 2f:4f:ac:7a:de:f7:db:32:b6:a9:5d:d8:6a:0b:64:09:76:9a: ce:a2:07:b0:fc:d3:68:52:46:65:7c:ee:ec:99:65:34:12:0b: 60:ea:4a:93:10:95:6b:48:0b:05:d5:10:1f:9a:62:6f:86:08: c7:3d:25:5f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXdOqUwCz4y4q1JJKjuu3sExQe8kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDEyMDA5WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZDRkNzE4MWViMDc0ZjA2MTBjYWEwMGVkNDVmNTM2ZDkw YjlhYTRlOGNhMDg0YWM3OTY3MGM0YzU3NmE4ZWJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOPHjePOdKwf618c2NUK1ImAr+cxma1WsYXGQBBDqg8pM7 J3T8ByTYLLrdosgY/d/N9dJUd02MA+tusv19CIy1wS7Iuov//oPHgcNY5Hpx6h2F qGoyeW+XYfPNUCCIiwnA8LApZ+mKP8FbmLHGQEKsjF5rjug39UGyLfT2noX+lLxh P1VLq83M6PPw7gFGeFpdDI239sFVBk4M8SE2XFN3TZe9tND6I8F487JZCWpd7FW5 GGa4A885eCcXncZqf909QTFmPzWv/S4jfGdJai/vMydyMgmkbhGm2HB8wYDktZbS 98cf6l1TU71bEDO1pbTlr149cbwFZY4ES3KHoqC9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUan000tdyszUiTnUTLSUBZ1+YYN4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkyODc3ZmIxLWM0YzItNGMzMi05YTQyLTEyMTIwZTZhYzAxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAahwQAwDQYJKoZIhvcNAQELBQADggEBABuSqS+9Ete/fhBbdMa1mt3Kq6HN xbvSwcmkYadja4uJ5MKhoAbOpCl5dNOconFQM2D/ZgvhRU52OlywWwaMFDhpnMaD Rv5TQ+2vYiGPBTJqet0j3ax0RBT9Izr9rYo+jfKy1OdxBdac1RxPXe+1AFOfMie2 cl7Vw1zOmNnpj5A7ikwUO+6DWCGTpvGsxMYCqZ7g3xqDsyI6bMjhKzvS4F62IjNW RzEiD0HQ57K30yp4hxPe4DbH3bDhJ5zuTG8omNXbMiSySi9PrHre99sytqld2GoL ZAl2ms6iB7D802hSRmV87uyZZTQSC2DqSpMQlWtICwXVEB+aYm+GCMc9JV8= -----END CERTIFICATE-----Generated at Sun Mar 1 22:30:20 2026 by rpki-client