$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/964203da-7c50-4d09-baca-392bf66c6a79.roa File: 964203da-7c50-4d09-baca-392bf66c6a79.roa (raw, json) Hash identifier: HS2MNTf413Q1a9MW7UiKlKxidT4J2Y9UQejZhKFSzYM= Subject key identifier: 0B:04:48:7B:A6:DB:88:AF:B3:5B:21:E4:35:3B:C3:F6:E1:06:A2:9C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5EDF58FCF525BBF437BE39A79CDBCBCA69E5D815 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/964203da-7c50-4d09-baca-392bf66c6a79.roa Signing time: Wed 25 Feb 2026 01:00:54 +0000 ROA not before: Wed 25 Feb 2026 01:00:54 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 23.22.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:df:58:fc:f5:25:bb:f4:37:be:39:a7:9c:db:cb:ca:69:e5:d8:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 01:00:54 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=a28dfff4c908f02d7e1685279c8a0d6457836944a6d457a8d2a7ac0adbe0d53e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:48:c1:cd:45:09:dd:92:81:b6:a4:be:35:7b: ff:27:62:b2:94:cd:69:94:11:9d:7e:77:87:c8:e1: 89:00:1f:c8:e5:3b:35:7b:cd:d6:94:cd:00:c0:23: af:a5:12:8f:bb:5b:c7:48:4e:89:b5:9e:a1:8c:9a: 87:77:ca:6b:12:82:8f:b9:5f:11:86:21:48:c2:bc: c5:7f:ae:43:7c:01:d6:02:93:3f:5d:a0:52:95:34: db:e2:93:8f:71:59:62:05:b7:f9:f0:03:22:d8:25: 5d:93:b8:b8:a6:2a:40:54:71:1e:37:3d:a8:74:97: ca:62:ec:ec:99:12:60:4f:5b:41:58:40:7f:80:7e: c5:d3:41:5f:b1:96:cd:e4:b4:9d:49:2e:ef:c0:ed: 7f:b3:24:6c:53:ee:6b:67:4a:04:19:fc:d5:52:cc: 18:61:d8:b8:44:5e:ba:02:69:04:88:2e:7f:14:46: e0:19:d2:a3:43:ba:fe:6a:73:18:e9:3e:89:72:37: f0:d2:17:5d:f4:e8:19:6b:0b:46:77:3b:15:32:ed: 38:c6:45:32:1e:01:5a:dc:91:43:5f:01:15:31:89: de:78:bc:17:d1:41:58:01:c9:01:db:5c:9d:8f:ed: 6d:41:21:ac:dd:29:75:9e:1b:57:a0:56:51:d5:7c: 1a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:04:48:7B:A6:DB:88:AF:B3:5B:21:E4:35:3B:C3:F6:E1:06:A2:9C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/964203da-7c50-4d09-baca-392bf66c6a79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.22.76.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:3f:98:9a:ff:96:e2:be:88:e8:fd:53:b5:ea:1e:d4:4a:e8: 66:90:06:78:8b:95:c1:10:f5:fd:05:f7:d1:a3:33:35:97:b0: 5f:26:f3:a5:c6:d8:6e:99:4c:29:94:c2:e8:c6:f4:7c:12:7f: d6:06:71:82:15:ba:5e:17:ff:91:94:33:82:2c:13:21:bf:67: e7:35:65:f6:65:4b:dc:fc:23:0d:5c:7d:cf:db:80:15:58:0d: 7c:af:ab:a1:42:91:50:8c:a7:d7:04:b1:77:38:fb:51:2f:53: 58:8f:03:18:1a:d6:65:4e:cf:e2:ae:50:b1:24:ee:7b:17:72: 48:16:2b:11:39:41:fd:fa:50:7c:c7:3d:f5:f6:34:91:f0:d2: 60:00:dc:5e:2d:9c:e5:e9:9e:a5:8a:69:25:ce:26:0a:d2:03: 33:e2:af:72:64:51:5c:af:de:d2:6f:25:9b:96:67:f2:a9:55: 77:dc:66:ab:8f:75:78:31:25:f3:8d:7f:20:c0:47:14:a5:d0: 0f:2b:a1:9e:41:bb:65:0f:cb:db:dd:63:6d:cd:f2:2f:81:97: 2d:eb:6f:46:47:4a:30:9c:16:2c:46:9f:7d:75:b2:1b:0a:cb: 1d:16:55:ac:18:ff:26:80:99:aa:69:67:82:be:33:5b:35:e1: 48:34:2c:0c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXt9Y/PUlu/Q3vjmnnNvLymnl2BUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDEwMDU0WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjhkZmZmNGM5MDhmMDJkN2UxNjg1Mjc5YzhhMGQ2NDU3 ODM2OTQ0YTZkNDU3YThkMmE3YWMwYWRiZTBkNTNlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqSMHNRQndkoG2pL41e/8nYrKUzWmUEZ1+d4fI4YkAH8jl OzV7zdaUzQDAI6+lEo+7W8dITom1nqGMmod3ymsSgo+5XxGGIUjCvMV/rkN8AdYC kz9doFKVNNvik49xWWIFt/nwAyLYJV2TuLimKkBUcR43Pah0l8pi7OyZEmBPW0FY QH+AfsXTQV+xls3ktJ1JLu/A7X+zJGxT7mtnSgQZ/NVSzBhh2LhEXroCaQSILn8U RuAZ0qNDuv5qcxjpPolyN/DSF1306BlrC0Z3OxUy7TjGRTIeAVrckUNfARUxid54 vBfRQVgByQHbXJ2P7W1BIazdKXWeG1egVlHVfBpHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCwRIe6bbiK+zWyHkNTvD9uEGopwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk2NDIwM2RhLTdjNTAtNGQwOS1iYWNhLTM5MmJmNjZjNmE3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIXFkwwDQYJKoZIhvcNAQELBQADggEBAB8/mJr/luK+iOj9U7XqHtRK6GaQ BniLlcEQ9f0F99GjMzWXsF8m86XG2G6ZTCmUwujG9HwSf9YGcYIVul4X/5GUM4Is EyG/Z+c1ZfZlS9z8Iw1cfc/bgBVYDXyvq6FCkVCMp9cEsXc4+1EvU1iPAxga1mVO z+KuULEk7nsXckgWKxE5Qf36UHzHPfX2NJHw0mAA3F4tnOXpnqWKaSXOJgrSAzPi r3JkUVyv3tJvJZuWZ/KpVXfcZquPdXgxJfONfyDARxSl0A8roZ5Bu2UPy9vdY23N 8i+Bly3rb0ZHSjCcFixGn311shsKyx0WVawY/yaAmappZ4K+M1s14Ug0LAw= -----END CERTIFICATE-----Generated at Sun Mar 1 22:24:09 2026 by rpki-client