$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97873d74-2b1b-42d6-9c41-b2870237ac5b.roa File: 97873d74-2b1b-42d6-9c41-b2870237ac5b.roa (raw, json) Hash identifier: 4U4oCF/Fn0zt0h09tDMkZQMGlsCQhA3tfTurSrlfAaI= Subject key identifier: 07:40:79:0F:68:BC:87:99:4D:94:35:66:D0:BB:B4:AC:4E:88:08:68 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6FB5094D3C4F1D3E4468ECBB501F63C293C5B33B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97873d74-2b1b-42d6-9c41-b2870237ac5b.roa Signing time: Sat 14 Feb 2026 00:50:42 +0000 ROA not before: Sat 14 Feb 2026 00:50:42 +0000 ROA not after: Fri 15 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:b5:09:4d:3c:4f:1d:3e:44:68:ec:bb:50:1f:63:c2:93:c5:b3:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 14 00:50:42 2026 GMT Not After : May 15 23:59:59 2026 GMT Subject: serialNumber=c6f5de09543247fd7aaa96a075fc4109779d579bed63c94a36910bc5a1213a31, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:88:77:f6:38:0b:82:33:b1:d8:e6:18:75: d6:8d:22:16:a6:1b:ae:88:51:e9:bd:57:0f:a4:66: bc:8d:fa:ac:8b:34:27:ea:c4:8f:7e:b1:df:01:5c: 3a:43:27:6b:16:74:70:76:26:04:05:3a:6a:e1:a4: db:75:91:7f:31:54:16:fd:e6:85:0f:b0:07:51:93: d0:03:a3:99:34:ad:0f:5a:bf:24:4c:52:f0:c9:05: 1b:38:ab:84:bb:8b:16:07:17:cc:00:23:d3:b1:22: e6:e1:b1:22:fd:b7:cb:31:e1:dd:d3:9d:51:7c:46: 12:c3:1e:09:4e:20:6c:8d:81:2d:e8:c8:ff:49:36: ec:63:50:d0:d0:0a:aa:f9:51:5a:fe:c0:0f:b5:73: b2:a6:c2:94:55:b4:31:02:e0:df:a8:82:a8:cc:7d: d8:9f:66:80:b5:b1:b7:e6:16:9f:b2:cf:d0:6c:a3: 2b:d5:30:cc:6f:54:06:1f:a5:0f:56:89:f4:87:e0: b2:0f:4e:1f:15:32:3c:2b:81:4d:62:25:9c:38:02: b4:9d:ae:ba:2a:a9:81:5f:ca:5a:69:ed:1f:c6:fb: 78:84:72:be:d0:fa:5e:11:b3:66:ae:f3:7a:63:b6: d8:3e:e1:6b:0d:26:d1:e9:28:ff:1c:4f:96:4e:22: 7e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:40:79:0F:68:BC:87:99:4D:94:35:66:D0:BB:B4:AC:4E:88:08:68 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97873d74-2b1b-42d6-9c41-b2870237ac5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.144.0/21 Signature Algorithm: sha256WithRSAEncryption 76:2c:b6:df:f6:2e:45:18:ff:22:57:bb:02:51:a5:04:9a:19: 2f:da:b4:68:03:05:01:4f:7e:76:37:5c:71:7c:ed:06:fc:1b: 0d:62:83:df:92:91:7b:eb:68:da:61:5c:4e:4d:3f:46:0c:bd: 03:2d:58:16:b5:36:77:bc:ea:d4:69:ba:34:89:44:28:05:3a: be:55:fa:c8:5d:6d:4b:89:d5:c9:64:b6:6b:98:74:a4:4f:a0: 47:10:cb:22:64:e4:cc:10:aa:f5:fe:6f:1c:a0:f5:cf:7f:bb: 87:05:ee:d0:42:af:39:67:f5:52:73:2e:d0:78:d6:b2:91:21: 39:14:ee:fe:6c:4e:33:6d:47:23:ba:c6:3f:ef:67:de:7c:26: 63:82:b1:72:00:7a:4c:87:0f:a2:cd:90:1e:72:f9:32:1f:d1: d7:20:d8:f3:7e:be:49:ad:c4:a2:ae:d1:18:d5:11:df:b2:eb: d8:d9:e5:7e:e2:98:f1:c7:2c:34:ed:b8:82:68:45:4a:74:7d: 43:6c:82:bb:97:60:3a:f5:bc:bf:52:cd:91:ed:78:09:c3:d5: 2e:e7:2e:e6:4f:bc:bd:24:91:58:27:16:7f:58:65:3e:33:ac: 97:e4:48:01:60:73:05:d8:ac:81:c7:a2:bf:9e:fd:4e:c9:b9: ca:01:46:20 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb7UJTTxPHT5EaOy7UB9jwpPFszswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE0MDA1MDQyWhcNMjYwNTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNmY1ZGUwOTU0MzI0N2ZkN2FhYTk2YTA3NWZjNDEwOTc3 OWQ1NzliZWQ2M2M5NGEzNjkxMGJjNWExMjEzYTMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7G4h39jgLgjOx2OYYddaNIhamG66IUem9Vw+kZryN+qyL NCfqxI9+sd8BXDpDJ2sWdHB2JgQFOmrhpNt1kX8xVBb95oUPsAdRk9ADo5k0rQ9a vyRMUvDJBRs4q4S7ixYHF8wAI9OxIubhsSL9t8sx4d3TnVF8RhLDHglOIGyNgS3o yP9JNuxjUNDQCqr5UVr+wA+1c7KmwpRVtDEC4N+ogqjMfdifZoC1sbfmFp+yz9Bs oyvVMMxvVAYfpQ9WifSH4LIPTh8VMjwrgU1iJZw4ArSdrroqqYFfylpp7R/G+3iE cr7Q+l4Rs2au83pjttg+4WsNJtHpKP8cT5ZOIn5PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUB0B5D2i8h5lNlDVm0Lu0rE6ICGgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk3ODczZDc0LTJiMWItNDJkNi05YzQxLWIyODcwMjM3YWM1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOIEpAwDQYJKoZIhvcNAQELBQADggEBAHYstt/2LkUY/yJXuwJRpQSaGS/a tGgDBQFPfnY3XHF87Qb8Gw1ig9+SkXvraNphXE5NP0YMvQMtWBa1Nne86tRpujSJ RCgFOr5V+shdbUuJ1clktmuYdKRPoEcQyyJk5MwQqvX+bxyg9c9/u4cF7tBCrzln 9VJzLtB41rKRITkU7v5sTjNtRyO6xj/vZ958JmOCsXIAekyHD6LNkB5y+TIf0dcg 2PN+vkmtxKKu0RjVEd+y69jZ5X7imPHHLDTtuIJoRUp0fUNsgruXYDr1vL9SzZHt eAnD1S7nLuZPvL0kkVgnFn9YZT4zrJfkSAFgcwXYrIHHor+e/U7JucoBRiA= -----END CERTIFICATE-----Generated at Mon Mar 2 04:56:15 2026 by rpki-client