$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c384066-9e4e-421a-a450-0c2a637d05e3.roa File: 9c384066-9e4e-421a-a450-0c2a637d05e3.roa (raw, json) Hash identifier: he1Cvfdmn/jNJkCRgryQQRBXH+kj6PA6PJhM8YqQhYw= Subject key identifier: 0F:27:D4:AB:74:56:83:62:04:E8:5C:9E:09:AC:DD:A7:2B:DC:B7:A4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E7BE717BEEE5D9568AFF5B40E9CDE0CDF609C1A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c384066-9e4e-421a-a450-0c2a637d05e3.roa Signing time: Sun 15 Feb 2026 00:20:11 +0000 ROA not before: Sun 15 Feb 2026 00:20:11 +0000 ROA not after: Sat 16 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 66.178.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:7b:e7:17:be:ee:5d:95:68:af:f5:b4:0e:9c:de:0c:df:60:9c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 15 00:20:11 2026 GMT Not After : May 16 23:59:59 2026 GMT Subject: serialNumber=868390a7d1d9b67f2f8ecfbefb53395fe4fe7661d505e58f1fb797d3e3fdb2c3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:44:e5:5b:8b:90:db:e2:4c:58:27:a8:58:c7: d6:84:e1:3e:c9:9d:11:b5:04:b6:8d:99:00:b5:8e: d7:02:24:80:96:1b:03:7f:89:f1:5e:57:08:e9:39: 32:f7:8e:94:72:8a:7f:c4:25:cf:79:bf:fe:aa:20: 23:39:36:d8:2c:91:9d:b4:a4:01:a7:52:48:b1:80: 12:53:44:ec:a2:4a:17:8d:25:a4:d7:0e:b1:51:ee: d4:c2:2d:7a:1b:67:af:6b:52:1c:d4:65:aa:3a:cf: cd:18:9d:19:0f:8b:a7:31:f7:c6:38:cb:c7:c7:1d: 3f:07:77:1b:13:e8:9b:f9:72:61:77:b1:d3:59:d0: ec:c5:62:34:57:e0:59:eb:7f:32:8c:07:81:a1:8e: fd:d7:84:38:8e:77:64:3b:ef:10:e6:9f:7a:78:6e: c1:10:37:98:80:b7:78:7c:4f:34:6c:3f:ba:3a:ac: 32:05:6c:7f:ba:66:c2:ab:fd:c7:b5:87:4a:f8:5e: db:7e:d1:65:10:cd:a9:3f:e3:46:63:6f:15:20:8f: 96:a9:d8:1c:b3:28:7a:d7:c0:be:8a:83:45:75:f9: 2e:81:bc:a3:1a:42:8e:be:fe:a6:58:c9:eb:57:03: 4b:94:2f:39:63:d0:49:3b:13:31:ed:e3:1a:83:00: c6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:27:D4:AB:74:56:83:62:04:E8:5C:9E:09:AC:DD:A7:2B:DC:B7:A4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c384066-9e4e-421a-a450-0c2a637d05e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.178.192.0/18 Signature Algorithm: sha256WithRSAEncryption 64:d0:d0:e3:a2:57:31:b4:06:93:67:b2:ce:6d:92:91:bf:1a: a4:73:8d:39:cc:f9:d0:05:fd:62:38:0c:74:ec:86:66:47:5a: 58:a9:f5:a3:8e:b4:99:bb:e2:0a:a3:80:8e:b4:ce:5c:b6:06: 5a:83:39:c0:9e:b3:c9:12:db:31:e0:98:92:22:11:3e:c3:94: 69:4d:c2:d7:21:e8:c5:83:d5:7c:9a:15:1a:a2:ef:87:d2:b5: 67:aa:b8:78:0a:c2:48:0a:cb:da:df:84:b2:06:cd:fc:d1:67: 8a:81:ce:f1:a4:1f:bb:b1:92:71:45:a8:83:71:36:7c:42:8d: 5a:4b:27:10:90:b3:d8:cb:49:0c:11:16:b4:7b:c5:80:94:33: 3c:79:bc:17:f2:20:6e:d2:29:25:ab:4b:46:44:4a:04:5b:9d: 78:59:de:56:ca:c5:4f:41:6b:fd:ce:e8:25:11:4b:35:cc:7a: 94:51:f1:1b:b6:fd:6d:9c:1f:c0:0c:00:4f:61:4d:1a:8a:2c: 38:67:7a:ec:00:28:5c:35:66:10:c7:ae:62:f4:d5:af:c0:d5: 6e:7e:65:20:c1:63:3c:39:17:01:99:2a:ab:69:13:d0:b6:d4: a4:20:fa:76:a4:25:3c:d7:d4:7c:b8:91:3f:7b:9d:d4:7c:3c: 0d:63:04:de -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDnvnF77uXZVor/W0DpzeDN9gnBowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE1MDAyMDExWhcNMjYwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjgzOTBhN2QxZDliNjdmMmY4ZWNmYmVmYjUzMzk1ZmU0 ZmU3NjYxZDUwNWU1OGYxZmI3OTdkM2UzZmRiMmMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHROVbi5Db4kxYJ6hYx9aE4T7JnRG1BLaNmQC1jtcCJICW GwN/ifFeVwjpOTL3jpRyin/EJc95v/6qICM5NtgskZ20pAGnUkixgBJTROyiSheN JaTXDrFR7tTCLXobZ69rUhzUZao6z80YnRkPi6cx98Y4y8fHHT8HdxsT6Jv5cmF3 sdNZ0OzFYjRX4FnrfzKMB4Ghjv3XhDiOd2Q77xDmn3p4bsEQN5iAt3h8TzRsP7o6 rDIFbH+6ZsKr/ce1h0r4Xtt+0WUQzak/40ZjbxUgj5ap2ByzKHrXwL6Kg0V1+S6B vKMaQo6+/qZYyetXA0uULzlj0Ek7EzHt4xqDAMYXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDyfUq3RWg2IE6FyeCazdpyvct6QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzljMzg0MDY2LTllNGUtNDIxYS1hNDUwLTBjMmE2MzdkMDVlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZCssAwDQYJKoZIhvcNAQELBQADggEBAGTQ0OOiVzG0BpNnss5tkpG/GqRz jTnM+dAF/WI4DHTshmZHWlip9aOOtJm74gqjgI60zly2BlqDOcCes8kS2zHgmJIi ET7DlGlNwtch6MWD1XyaFRqi74fStWequHgKwkgKy9rfhLIGzfzRZ4qBzvGkH7ux knFFqINxNnxCjVpLJxCQs9jLSQwRFrR7xYCUMzx5vBfyIG7SKSWrS0ZESgRbnXhZ 3lbKxU9Ba/3O6CURSzXMepRR8Ru2/W2cH8AMAE9hTRqKLDhneuwAKFw1ZhDHrmL0 1a/A1W5+ZSDBYzw5FwGZKqtpE9C21KQg+nakJTzX1Hy4kT97ndR8PA1jBN4= -----END CERTIFICATE-----Generated at Sun Mar 1 22:19:40 2026 by rpki-client