$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fd6e153-7f6c-4cbe-8f3d-3a6d57b986ec.roa File: 9fd6e153-7f6c-4cbe-8f3d-3a6d57b986ec.roa (raw, json) Hash identifier: L+/WgEd8rkmMFBrWJZKDA7a6rRfV7cgJSQNEEHcc1sg= Subject key identifier: 42:94:88:E8:12:30:55:CF:39:B2:5F:E3:73:1C:16:A9:DF:BD:74:1B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5489433C2F49B2773FCF87A93A5AAD5B187FE43F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fd6e153-7f6c-4cbe-8f3d-3a6d57b986ec.roa Signing time: Tue 10 Feb 2026 01:10:06 +0000 ROA not before: Tue 10 Feb 2026 01:10:06 +0000 ROA not after: Mon 11 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 108.156.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:89:43:3c:2f:49:b2:77:3f:cf:87:a9:3a:5a:ad:5b:18:7f:e4:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 10 01:10:06 2026 GMT Not After : May 11 23:59:59 2026 GMT Subject: serialNumber=2dded77a01b0f09a56e215124b0838a2836501a45bcee9aba5ea9705981b6dd1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:33:56:f3:3c:e6:fc:16:7e:29:4f:85:2a:4a: ab:1f:7d:2e:e1:31:b3:ca:c7:db:5e:fe:54:c0:64: b1:92:47:cb:57:8a:79:3f:98:8b:1f:f7:25:80:68: c5:f9:ad:13:7d:59:74:75:27:31:3f:f9:49:e9:60: d3:1c:26:5a:ed:9b:01:24:6f:97:f1:f5:f6:e0:71: c8:d0:e8:af:9f:0c:69:04:29:38:5f:d5:54:a0:af: 37:00:ae:99:88:45:43:63:56:5e:65:ba:79:2f:a5: b8:63:5b:ec:7f:13:15:82:2a:bf:17:98:0a:e5:66: eb:bf:28:ca:7d:65:02:c3:c6:e9:72:11:37:d2:5d: 92:44:bb:0e:1c:a0:39:5d:69:72:01:51:b9:6e:6b: 48:d5:b6:67:77:e2:a1:c2:fe:03:89:a7:1d:30:12: e5:20:7b:de:3e:9e:08:30:d7:39:13:6d:ec:e2:dc: 37:fd:72:4b:39:5d:2d:cf:9d:9d:f1:1e:9d:43:c5: 36:0d:9d:44:fa:40:e8:b9:88:be:15:b3:74:2f:49: fe:3d:f8:79:0c:95:d9:66:dd:1b:a5:96:1a:9c:14: c5:fa:c0:2c:15:b5:78:f6:0c:0a:11:03:1b:e3:d3: 3b:df:47:12:a0:da:48:96:01:28:9a:89:0f:16:55: f3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:94:88:E8:12:30:55:CF:39:B2:5F:E3:73:1C:16:A9:DF:BD:74:1B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fd6e153-7f6c-4cbe-8f3d-3a6d57b986ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.156.0.0/14 Signature Algorithm: sha256WithRSAEncryption b8:8e:55:62:4e:13:d0:68:1c:2b:dd:cf:ed:66:17:f7:a2:fa: 7f:3e:86:d4:6b:09:08:50:e8:58:36:7c:4a:6e:ae:ee:ec:17: e8:c5:ca:ef:d6:24:62:7f:ce:8b:d7:b6:d3:1f:86:80:b9:c9: e0:c3:e7:26:c9:c5:ba:49:a3:3a:d2:f2:2b:d7:94:03:fa:7b: 8a:bc:be:cd:d0:79:2d:ab:7b:6a:47:62:4e:bc:18:4b:a9:9d: df:7b:57:02:55:40:32:9f:f1:88:2c:13:ef:49:60:d6:e0:79: d7:30:7f:95:54:d0:e8:da:ad:c0:a8:3b:df:ba:4c:f6:8b:a5: 17:1c:8d:8f:25:ff:6d:00:11:cf:39:d2:63:20:a6:6b:f3:f3: 25:7e:42:e4:32:6a:a4:c9:f7:d7:68:c3:e8:66:77:b4:3d:43: b5:67:b8:6e:8f:ab:6c:63:d0:02:42:a4:39:fb:c7:3b:34:86: b9:f5:f7:08:14:dc:62:b0:67:ee:a5:f8:5a:04:bf:1d:ad:19: 1a:0b:fc:2d:66:d4:58:36:9c:83:32:12:12:a1:52:83:70:fd: 4a:94:9d:67:1b:7a:63:75:fa:bb:09:ab:35:4a:8b:dc:5c:b3: db:0f:9d:3b:f4:41:20:05:89:cc:3b:ec:c5:7b:74:f2:c5:0c: aa:b6:29:3f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVIlDPC9Jsnc/z4epOlqtWxh/5D8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDExMDA2WhcNMjYwNTExMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZGRlZDc3YTAxYjBmMDlhNTZlMjE1MTI0YjA4MzhhMjgz NjUwMWE0NWJjZWU5YWJhNWVhOTcwNTk4MWI2ZGQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6M1bzPOb8Fn4pT4UqSqsffS7hMbPKx9te/lTAZLGSR8tX ink/mIsf9yWAaMX5rRN9WXR1JzE/+UnpYNMcJlrtmwEkb5fx9fbgccjQ6K+fDGkE KThf1VSgrzcArpmIRUNjVl5lunkvpbhjW+x/ExWCKr8XmArlZuu/KMp9ZQLDxuly ETfSXZJEuw4coDldaXIBUblua0jVtmd34qHC/gOJpx0wEuUge94+nggw1zkTbezi 3Df9cks5XS3PnZ3xHp1DxTYNnUT6QOi5iL4Vs3QvSf49+HkMldlm3RullhqcFMX6 wCwVtXj2DAoRAxvj0zvfRxKg2kiWASiaiQ8WVfP5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQpSI6BIwVc85sl/jcxwWqd+9dBswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlmZDZlMTUzLTdmNmMtNGNiZS04ZjNkLTNhNmQ1N2I5ODZlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwJsnDANBgkqhkiG9w0BAQsFAAOCAQEAuI5VYk4T0GgcK93P7WYX96L6fz6G 1GsJCFDoWDZ8Sm6u7uwX6MXK79YkYn/Oi9e20x+GgLnJ4MPnJsnFukmjOtLyK9eU A/p7iry+zdB5Lat7akdiTrwYS6md33tXAlVAMp/xiCwT70lg1uB51zB/lVTQ6Nqt wKg737pM9oulFxyNjyX/bQARzznSYyCma/PzJX5C5DJqpMn312jD6GZ3tD1DtWe4 bo+rbGPQAkKkOfvHOzSGufX3CBTcYrBn7qX4WgS/Ha0ZGgv8LWbUWDacgzISEqFS g3D9SpSdZxt6Y3X6uwmrNUqL3Fyz2w+dO/RBIAWJzDvsxXt08sUMqrYpPw== -----END CERTIFICATE-----Generated at Mon Mar 2 04:55:03 2026 by rpki-client