$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/935fd5ca-a41c-492b-ba56-a1d152253f07.roa File: 935fd5ca-a41c-492b-ba56-a1d152253f07.roa (raw, json) Hash identifier: UW0u/OWCaGoXciSZ+APu1C/wcZ8p49m8VWRmEepW4xc= Subject key identifier: DC:7E:5E:DD:E8:BB:24:A8:C8:9C:C6:D0:E2:2F:D6:06:46:B6:42:64 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2385EEE8E6474716F542167330A8F7586A96C0C7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/935fd5ca-a41c-492b-ba56-a1d152253f07.roa Signing time: Sat 07 Feb 2026 00:00:45 +0000 ROA not before: Sat 07 Feb 2026 00:00:45 +0000 ROA not after: Fri 08 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 24.110.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:85:ee:e8:e6:47:47:16:f5:42:16:73:30:a8:f7:58:6a:96:c0:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 7 00:00:45 2026 GMT Not After : May 8 23:59:59 2026 GMT Subject: serialNumber=095b42d1b315b924dee5e19220d0f46e3f0b5daa34e5e767833fb2544663af43, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d7:e9:1d:27:9b:e3:50:29:e7:9f:4b:51:6a: 6c:e7:bc:93:15:5d:3b:87:06:ae:8a:b5:c6:6c:7d: 24:dd:b8:c9:8a:c2:66:a2:1f:65:f1:bf:4b:5e:b9: 5e:6a:02:9e:e4:2b:f6:3f:4f:34:8e:62:81:87:99: 0b:f8:00:01:5b:2f:d7:3a:a3:1a:f8:fb:d7:0f:f0: 6c:bc:ac:85:61:95:01:cc:62:a0:dd:37:85:d4:76: f0:5a:d3:2f:03:a5:ad:c6:cc:38:78:40:ec:d4:ce: 08:1c:da:95:6a:f2:a2:da:4a:68:91:1c:6a:ba:f0: 51:3a:ce:3e:d2:82:02:12:22:ba:10:ef:b1:2c:2a: aa:d8:2d:90:00:94:72:6f:46:ee:53:5a:97:9a:67: 65:78:ef:74:fe:fa:ec:bf:d4:e1:67:4b:fb:75:a6: b2:00:3d:4c:e7:6c:12:e9:0e:db:1c:1d:f1:d8:b5: 17:96:3d:c0:00:a3:16:97:76:b3:b3:e4:d3:1f:7f: 41:d2:36:7a:c4:4b:ac:6c:a6:e2:70:5d:d2:c9:19: 08:46:2c:96:e8:e7:7c:62:a4:59:bc:f8:78:21:50: 9b:4e:8e:40:3e:52:1f:e6:f6:14:a4:d6:5f:ad:47: 2c:22:f6:ec:32:e3:9a:a2:c6:3a:e2:6f:58:73:c9: 64:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7E:5E:DD:E8:BB:24:A8:C8:9C:C6:D0:E2:2F:D6:06:46:B6:42:64 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/935fd5ca-a41c-492b-ba56-a1d152253f07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.110.40.0/24 Signature Algorithm: sha256WithRSAEncryption a5:f4:13:7a:73:95:2d:7f:16:fc:a7:87:a0:c3:8f:8a:9d:d3: 68:93:06:fd:51:b0:2e:ef:e1:96:bb:c8:b6:97:82:51:b1:1a: f5:7e:fa:be:00:c1:01:bf:f7:12:2a:bd:e5:1f:4c:57:ec:2f: 70:1d:cb:61:37:5c:77:2c:f0:09:4d:92:41:f4:dd:c8:e4:68: 76:fc:d7:98:ea:00:c8:b8:13:a9:7d:be:6e:50:5a:c5:36:dd: ec:70:59:d5:d3:8b:35:3c:59:9f:58:c0:77:0a:e2:6c:11:21: a8:bf:10:16:01:49:aa:19:ad:46:64:13:31:9f:e8:51:8c:85: d2:2b:e7:c7:e2:4d:b0:c6:cf:eb:f3:bd:73:53:98:b7:aa:4c: 47:b4:84:18:cc:db:94:d7:31:86:b7:d5:55:9d:e7:91:5e:42: cd:77:4a:00:82:45:f3:89:d5:cc:74:64:9c:ae:09:da:64:76: 10:97:0d:93:60:f8:9f:1a:7d:c6:d7:32:f3:ff:dd:b2:de:c8: b7:50:bd:30:df:71:8d:9a:eb:28:10:47:02:e5:a2:74:50:95: 1c:e7:d2:ee:38:45:3b:51:15:00:33:c6:7b:9d:6f:0f:8e:f9: 6d:6d:d7:a9:2c:eb:f8:e1:88:b2:3d:10:bf:30:ef:21:f4:a8: ec:a6:47:89 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI4Xu6OZHRxb1QhZzMKj3WGqWwMcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA3MDAwMDQ1WhcNMjYwNTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwOTViNDJkMWIzMTViOTI0ZGVlNWUxOTIyMGQwZjQ2ZTNm MGI1ZGFhMzRlNWU3Njc4MzNmYjI1NDQ2NjNhZjQzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt1+kdJ5vjUCnnn0tRamznvJMVXTuHBq6KtcZsfSTduMmK wmaiH2Xxv0teuV5qAp7kK/Y/TzSOYoGHmQv4AAFbL9c6oxr4+9cP8Gy8rIVhlQHM YqDdN4XUdvBa0y8Dpa3GzDh4QOzUzggc2pVq8qLaSmiRHGq68FE6zj7SggISIroQ 77EsKqrYLZAAlHJvRu5TWpeaZ2V473T++uy/1OFnS/t1prIAPUznbBLpDtscHfHY tReWPcAAoxaXdrOz5NMff0HSNnrES6xspuJwXdLJGQhGLJbo53xipFm8+HghUJtO jkA+Uh/m9hSk1l+tRywi9uwy45qixjrib1hzyWS5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3H5e3ei7JKjInMbQ4i/WBka2QmQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkzNWZkNWNhLWE0MWMtNDkyYi1iYTU2LWExZDE1MjI1M2YwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAYbigwDQYJKoZIhvcNAQELBQADggEBAKX0E3pzlS1/Fvynh6DDj4qd02iT Bv1RsC7v4Za7yLaXglGxGvV++r4AwQG/9xIqveUfTFfsL3Ady2E3XHcs8AlNkkH0 3cjkaHb815jqAMi4E6l9vm5QWsU23exwWdXTizU8WZ9YwHcK4mwRIai/EBYBSaoZ rUZkEzGf6FGMhdIr58fiTbDGz+vzvXNTmLeqTEe0hBjM25TXMYa31VWd55FeQs13 SgCCRfOJ1cx0ZJyuCdpkdhCXDZNg+J8afcbXMvP/3bLeyLdQvTDfcY2a6ygQRwLl onRQlRzn0u44RTtRFQAzxnudbw+O+W1t16ks6/jhiLI9EL8w7yH0qOymR4k= -----END CERTIFICATE-----Generated at Mon Mar 2 00:11:11 2026 by rpki-client