$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ae9d595-e46f-4b50-99d6-0707f0dd0ff0.roa File: 9ae9d595-e46f-4b50-99d6-0707f0dd0ff0.roa (raw, json) Hash identifier: YBpMP2Y8+Sc0kVhTz5ct1wdSdwNUQP9oH/NUpbavuWs= Subject key identifier: DB:8D:25:1C:9D:6D:0B:FA:7C:0A:3B:5A:24:F2:CF:DF:25:64:12:CB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4A983C6A1F3242E0B5875D8B7E5B11B5778B0C74 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ae9d595-e46f-4b50-99d6-0707f0dd0ff0.roa Signing time: Sat 28 Feb 2026 00:10:09 +0000 ROA not before: Sat 28 Feb 2026 00:10:09 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 149.186.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:98:3c:6a:1f:32:42:e0:b5:87:5d:8b:7e:5b:11:b5:77:8b:0c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 28 00:10:09 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=1510d0887126bfe6a5fbbf82f41d0f9d6936e0cdb7a0c269de8dfc15155267c2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:95:aa:4d:f4:8a:2e:d5:49:fa:d5:76:e4:df: fb:d3:03:48:df:83:4d:ca:2f:80:5b:03:5d:e1:d3: 93:05:85:d0:93:f6:ab:5b:dc:da:0a:64:02:ac:d5: 60:e2:f6:ca:19:59:39:cb:26:32:41:c7:8e:c9:00: 81:09:0f:a0:20:1e:50:81:2c:59:85:71:69:cc:75: f7:32:39:90:4b:dc:b0:1c:e7:92:0f:c9:3b:29:84: 16:04:21:88:39:b4:14:09:d5:c9:fe:d4:4b:d8:d1: 3a:69:40:a9:fb:f9:1e:40:ae:ab:41:db:42:ef:32: 98:67:87:f0:ae:ca:67:fd:95:45:75:3c:9a:ae:89: 99:7d:42:94:8b:da:1b:f3:7b:08:5a:75:fc:ac:67: 27:f1:35:d4:8b:7f:3b:ee:e5:a6:37:79:56:83:64: ca:a0:c3:bc:5c:ad:2b:3e:b9:17:24:c9:b9:00:01: 42:18:3f:5e:0c:97:f3:3e:da:ef:a7:96:e6:01:1e: c2:93:eb:08:11:02:d9:50:db:85:19:ff:8d:5e:97: c9:0c:1c:b9:09:cd:28:c8:f0:e6:75:5a:5c:1e:f5: 13:e4:03:6b:82:24:73:72:84:9e:97:b8:da:ba:6c: 21:39:33:89:57:7a:3f:ee:7d:1d:1b:6e:18:b3:75: 64:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8D:25:1C:9D:6D:0B:FA:7C:0A:3B:5A:24:F2:CF:DF:25:64:12:CB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ae9d595-e46f-4b50-99d6-0707f0dd0ff0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.186.0.0/16 Signature Algorithm: sha256WithRSAEncryption c6:91:f6:8d:e6:34:12:f6:41:5b:93:fa:67:09:84:a2:e6:81: c6:b2:da:41:8b:18:e9:b8:d3:3c:8e:80:aa:77:27:eb:12:6c: 5d:ec:39:09:fb:ad:ea:78:bd:a0:c5:22:22:81:75:2f:d4:27: b2:d1:e4:41:99:55:7b:14:25:c7:bc:7d:65:22:25:45:33:b2: 02:a9:59:aa:d0:81:7d:12:ed:69:ce:77:b3:b0:61:d1:55:62: 88:a5:34:6e:84:f4:70:85:63:d2:e9:dd:85:d9:8b:80:cb:1b: 9e:e6:67:28:31:b1:76:d2:82:a0:7d:d0:7b:b8:3b:73:15:a6: 4c:15:d6:c5:5f:ed:36:fd:67:1c:9c:4d:b1:03:68:0a:5e:76: 4a:46:3e:ad:1c:82:b4:98:63:b3:12:2a:c4:5b:7a:a9:f5:eb: 13:7e:7f:09:1a:fc:d9:ed:24:34:c6:1b:f1:bd:d0:dd:e3:b1: 31:9e:a5:67:3a:5d:f9:4c:09:1b:0d:06:50:99:44:ed:d4:fa: 8c:bc:44:6d:3a:9f:bf:80:0e:58:1a:0f:4e:86:55:17:db:ea: 28:3e:70:89:93:b2:81:a5:64:43:8a:e5:f0:6b:78:d0:7a:d0: a1:18:40:76:57:de:29:27:63:5a:ce:b9:cb:b7:c9:17:bc:6d: 11:f7:33:51 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSpg8ah8yQuC1h12LflsRtXeLDHQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI4MDAxMDA5WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNTEwZDA4ODcxMjZiZmU2YTVmYmJmODJmNDFkMGY5ZDY5 MzZlMGNkYjdhMGMyNjlkZThkZmMxNTE1NTI2N2MyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSlapN9Iou1Un61Xbk3/vTA0jfg03KL4BbA13h05MFhdCT 9qtb3NoKZAKs1WDi9soZWTnLJjJBx47JAIEJD6AgHlCBLFmFcWnMdfcyOZBL3LAc 55IPyTsphBYEIYg5tBQJ1cn+1EvY0TppQKn7+R5ArqtB20LvMphnh/Cuymf9lUV1 PJquiZl9QpSL2hvzewhadfysZyfxNdSLfzvu5aY3eVaDZMqgw7xcrSs+uRckybkA AUIYP14Ml/M+2u+nluYBHsKT6wgRAtlQ24UZ/41el8kMHLkJzSjI8OZ1Wlwe9RPk A2uCJHNyhJ6XuNq6bCE5M4lXej/ufR0bbhizdWQvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU240lHJ1tC/p8CjtaJPLP3yVkEsswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlhZTlkNTk1LWU0NmYtNGI1MC05OWQ2LTA3MDdmMGRkMGZmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCVujANBgkqhkiG9w0BAQsFAAOCAQEAxpH2jeY0EvZBW5P6ZwmEouaBxrLa QYsY6bjTPI6Aqncn6xJsXew5Cfut6ni9oMUiIoF1L9QnstHkQZlVexQlx7x9ZSIl RTOyAqlZqtCBfRLtac53s7Bh0VViiKU0boT0cIVj0undhdmLgMsbnuZnKDGxdtKC oH3Qe7g7cxWmTBXWxV/tNv1nHJxNsQNoCl52SkY+rRyCtJhjsxIqxFt6qfXrE35/ CRr82e0kNMYb8b3Q3eOxMZ6lZzpd+UwJGw0GUJlE7dT6jLxEbTqfv4AOWBoPToZV F9vqKD5wiZOygaVkQ4rl8Gt40HrQoRhAdlfeKSdjWs65y7fJF7xtEfczUQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:18:45 2026 by rpki-client