$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a180719e-5fd3-4143-88a0-9cbf81c0885d.roa File: a180719e-5fd3-4143-88a0-9cbf81c0885d.roa (raw, json) Hash identifier: KWojRWu+TOwzwT+s9c/S6L2bnWuEl/+mMsnNIRcpwmI= Subject key identifier: CF:33:56:D3:7A:F6:BD:5E:20:9D:9F:E6:DA:8D:5E:3E:BF:1D:CC:74 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 145C62306A7B0E745A02727C2E97A1FB154BC7AC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a180719e-5fd3-4143-88a0-9cbf81c0885d.roa Signing time: Tue 10 Feb 2026 00:41:40 +0000 ROA not before: Tue 10 Feb 2026 00:41:40 +0000 ROA not after: Mon 11 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:5c:62:30:6a:7b:0e:74:5a:02:72:7c:2e:97:a1:fb:15:4b:c7:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 10 00:41:40 2026 GMT Not After : May 11 23:59:59 2026 GMT Subject: serialNumber=424a6393d53f75d067769a8a3730cebfdae475cb7f5a0eada6c6ea11c2f3c4cd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:46:f2:fa:c8:65:e0:dc:63:c6:04:50:c0:44: 36:9c:3f:60:2f:1b:61:0f:49:45:12:7b:0e:af:ae: 72:a4:fe:ba:5b:17:68:d4:72:65:74:17:e9:b1:40: 41:8b:dc:92:1a:48:ee:8b:3b:d2:80:cc:88:79:53: b9:14:1b:67:10:3b:c9:60:5c:6b:4d:ac:e7:30:d5: 66:34:12:c2:7d:39:ad:d4:a5:1a:a6:63:ff:8f:b3: cf:df:5d:1f:c7:69:f5:ea:f5:66:bb:72:36:b5:e7: a9:1b:32:16:e9:17:b6:d9:7f:da:49:31:5f:55:37: 42:e6:57:d1:01:21:d8:e7:26:11:00:c6:6c:01:67: 98:f2:21:68:d6:4c:15:23:e1:e7:3e:55:10:91:65: b8:0a:94:a8:8f:d0:3b:3f:a3:72:66:d3:1a:a0:62: e5:11:8c:74:67:06:4e:10:c8:75:d6:4b:f5:48:a0: 40:4b:32:78:b8:22:df:25:28:20:9b:38:6e:d2:1e: 87:a5:83:5d:01:f9:aa:50:86:80:b5:9b:e0:53:56: b6:7e:a3:97:0c:8e:ce:ea:1e:7d:75:c2:53:27:8e: b1:87:19:99:4c:9c:f9:14:02:5f:37:e3:e7:f1:ec: 48:5a:cd:d2:fb:d3:4d:4c:3e:e9:63:58:2f:2d:0b: a6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:33:56:D3:7A:F6:BD:5E:20:9D:9F:E6:DA:8D:5E:3E:BF:1D:CC:74 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a180719e-5fd3-4143-88a0-9cbf81c0885d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.77.0/24 Signature Algorithm: sha256WithRSAEncryption 32:6b:e8:6a:e4:c1:84:a4:40:9a:ea:9f:da:0c:b5:14:0c:c7: 61:3b:cc:3b:d5:e4:93:ed:7e:7f:c3:aa:f9:27:58:a8:b9:9d: f1:97:b2:5c:79:ca:7e:cb:d6:0d:bf:0a:f7:7a:59:1a:30:69: eb:4f:e9:a2:d8:b8:c4:7a:ef:19:44:ca:f9:12:47:10:45:2a: 05:07:71:ce:28:51:3c:9c:dc:f8:9e:e1:76:52:69:3e:82:0e: ad:bb:1f:25:56:87:eb:a3:12:1d:fb:18:28:ee:b6:81:c8:3b: 35:af:ce:27:f6:05:47:2d:c4:e6:a7:1c:cc:c7:6f:8f:46:8b: f3:41:20:dd:78:72:24:a0:0b:cd:a2:f6:25:94:03:8f:5f:e1: f8:ec:0f:e4:ed:64:02:7f:7a:ca:93:02:94:86:bf:a4:32:c7: 1a:e4:5b:55:03:fa:48:d3:08:a5:6c:f0:4a:ee:b4:a9:1f:a6: 76:6c:67:87:97:1e:1c:2e:40:f1:3e:e2:52:ca:e6:a3:1d:cf: 99:31:88:0d:ff:0a:db:1f:63:f8:8d:f4:b9:0b:f3:c5:c1:43: 72:20:75:aa:47:7b:f9:5d:52:8d:a0:82:31:79:8e:c3:f4:29: 86:ab:02:5a:a0:cc:d1:9c:ab:7b:93:9f:11:9b:a8:87:b2:7c: a2:bc:a7:b4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFFxiMGp7DnRaAnJ8Lpeh+xVLx6wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDA0MTQwWhcNMjYwNTExMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjRhNjM5M2Q1M2Y3NWQwNjc3NjlhOGEzNzMwY2ViZmRh ZTQ3NWNiN2Y1YTBlYWRhNmM2ZWExMWMyZjNjNGNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXRvL6yGXg3GPGBFDARDacP2AvG2EPSUUSew6vrnKk/rpb F2jUcmV0F+mxQEGL3JIaSO6LO9KAzIh5U7kUG2cQO8lgXGtNrOcw1WY0EsJ9Oa3U pRqmY/+Ps8/fXR/HafXq9Wa7cja156kbMhbpF7bZf9pJMV9VN0LmV9EBIdjnJhEA xmwBZ5jyIWjWTBUj4ec+VRCRZbgKlKiP0Ds/o3Jm0xqgYuURjHRnBk4QyHXWS/VI oEBLMni4It8lKCCbOG7SHoelg10B+apQhoC1m+BTVrZ+o5cMjs7qHn11wlMnjrGH GZlMnPkUAl834+fx7EhazdL7001MPuljWC8tC6b5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzzNW03r2vV4gnZ/m2o1ePr8dzHQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ExODA3MTllLTVmZDMtNDE0My04OGEwLTljYmY4MWMwODg1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/E0wDQYJKoZIhvcNAQELBQADggEBADJr6GrkwYSkQJrqn9oMtRQMx2E7 zDvV5JPtfn/DqvknWKi5nfGXslx5yn7L1g2/Cvd6WRowaetP6aLYuMR67xlEyvkS RxBFKgUHcc4oUTyc3Pie4XZSaT6CDq27HyVWh+ujEh37GCjutoHIOzWvzif2BUct xOanHMzHb49Gi/NBIN14ciSgC82i9iWUA49f4fjsD+TtZAJ/esqTApSGv6Qyxxrk W1UD+kjTCKVs8ErutKkfpnZsZ4eXHhwuQPE+4lLK5qMdz5kxiA3/CtsfY/iN9LkL 88XBQ3IgdapHe/ldUo2ggjF5jsP0KYarAlqgzNGcq3uTnxGbqIeyfKK8p7Q= -----END CERTIFICATE-----Generated at Sun Mar 1 22:23:44 2026 by rpki-client