$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2f87879-6b97-4c65-aad0-f64bdcf78081.roa File: a2f87879-6b97-4c65-aad0-f64bdcf78081.roa (raw, json) Hash identifier: v8TI3KjqDFPmJzV8doXiRYXGsIqMic3KO9wcJJrTPNk= Subject key identifier: E7:CD:5E:B0:2E:76:7D:43:22:8D:38:20:70:24:B4:6B:AF:90:C4:B0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C3B56376DB11D7D6EA84C8087B629B7E7706AB2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2f87879-6b97-4c65-aad0-f64bdcf78081.roa Signing time: Sat 14 Feb 2026 00:30:48 +0000 ROA not before: Sat 14 Feb 2026 00:30:48 +0000 ROA not after: Fri 15 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 172.106.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:3b:56:37:6d:b1:1d:7d:6e:a8:4c:80:87:b6:29:b7:e7:70:6a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 14 00:30:48 2026 GMT Not After : May 15 23:59:59 2026 GMT Subject: serialNumber=901c3384adf8cb5acd0ab456f32a1656e9593aab6fd887d861f9cd2674955df8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5a:dc:18:76:f9:ed:33:b7:87:86:76:50:08: 8c:85:d6:ed:eb:9e:6a:97:eb:9b:68:95:65:a3:f1: ff:5d:3f:f6:73:8b:98:40:38:5f:24:11:86:bd:a0: dc:18:ac:7c:7f:b1:ce:53:63:0a:46:e1:b5:61:9a: 5a:02:39:17:d7:a7:ba:d6:c7:de:9d:37:1a:34:0a: 81:b7:e8:49:df:ee:f3:75:14:97:b6:c5:98:0c:93: 2b:f8:4d:8c:45:15:0b:82:90:81:ea:03:a9:6f:81: bd:9e:15:3c:b6:9c:17:30:f1:61:72:29:87:f5:29: a0:81:91:12:e4:13:01:c6:9e:c5:52:02:c2:73:83: cf:be:60:7d:39:45:be:bb:da:33:41:4b:22:f0:44: 75:e1:e2:a8:3f:73:0a:f9:75:88:07:bc:47:53:b4: 3f:9f:c5:3d:e4:3f:38:44:c0:f8:da:29:80:9e:4a: 0f:75:51:2f:26:e6:50:c4:31:bb:3d:26:84:6e:a0: 41:3b:92:58:2b:53:0b:c4:4a:ba:97:72:60:84:fd: 16:96:51:d2:2a:83:68:15:19:ea:ed:2c:43:5d:05: 6c:65:f1:c5:1c:bf:47:8a:9a:6b:51:5f:a4:1a:58: 0a:12:97:c3:9c:b8:f4:85:05:7a:43:03:07:ed:66: 6d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CD:5E:B0:2E:76:7D:43:22:8D:38:20:70:24:B4:6B:AF:90:C4:B0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2f87879-6b97-4c65-aad0-f64bdcf78081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.106.0.0/15 Signature Algorithm: sha256WithRSAEncryption 7f:f5:a6:c2:3e:3f:35:c4:c4:01:d3:15:10:db:26:e6:89:cb: b5:a6:23:cd:dc:b1:b2:1e:44:00:7c:ae:01:1b:7d:bd:7a:e0: cf:3c:12:3a:7d:9a:84:df:e4:d2:04:6b:c9:3a:8c:e0:9e:70: f8:03:35:ee:54:44:9f:97:cf:be:64:4c:8c:64:2c:a1:8b:95: bd:ca:ec:df:eb:fb:4c:c7:37:ec:3d:82:2e:30:d1:57:6c:64: 93:aa:a9:bf:8d:e9:ae:ed:db:64:4d:2a:17:c1:e6:3b:2e:4b: 75:22:7f:95:29:ac:b5:34:85:8d:3d:a8:e8:7c:06:2f:3f:b9: ce:51:c9:87:a1:e9:6a:32:39:2f:0c:6b:be:cc:a4:1f:e8:9c: 21:24:5c:74:61:96:dc:b1:f8:6a:50:61:7d:31:ad:23:74:27: 4a:df:74:39:00:13:d5:81:cf:dc:49:54:1b:6b:ad:98:7e:58: df:c4:2d:e2:ff:6b:d4:83:30:14:62:89:a3:61:e1:e6:ff:0e: 4d:60:f7:bd:1c:7f:98:27:a6:5a:07:e2:98:ce:14:5e:f0:4f: 08:c5:fa:de:94:54:d8:6e:f9:a4:2d:98:17:9c:bc:23:58:87: 26:9d:38:86:b8:20:75:1a:e1:17:40:73:75:30:e7:17:06:1b: 0f:b6:20:a0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPDtWN22xHX1uqEyAh7Ypt+dwarIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE0MDAzMDQ4WhcNMjYwNTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDFjMzM4NGFkZjhjYjVhY2QwYWI0NTZmMzJhMTY1NmU5 NTkzYWFiNmZkODg3ZDg2MWY5Y2QyNjc0OTU1ZGY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOWtwYdvntM7eHhnZQCIyF1u3rnmqX65tolWWj8f9dP/Zz i5hAOF8kEYa9oNwYrHx/sc5TYwpG4bVhmloCORfXp7rWx96dNxo0CoG36Enf7vN1 FJe2xZgMkyv4TYxFFQuCkIHqA6lvgb2eFTy2nBcw8WFyKYf1KaCBkRLkEwHGnsVS AsJzg8++YH05Rb672jNBSyLwRHXh4qg/cwr5dYgHvEdTtD+fxT3kPzhEwPjaKYCe Sg91US8m5lDEMbs9JoRuoEE7klgrUwvESrqXcmCE/RaWUdIqg2gVGertLENdBWxl 8cUcv0eKmmtRX6QaWAoSl8OcuPSFBXpDAwftZm3tAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU581esC52fUMijTggcCS0a6+QxLAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyZjg3ODc5LTZiOTctNGM2NS1hYWQwLWY2NGJkY2Y3ODA4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwGsajANBgkqhkiG9w0BAQsFAAOCAQEAf/Wmwj4/NcTEAdMVENsm5onLtaYj zdyxsh5EAHyuARt9vXrgzzwSOn2ahN/k0gRryTqM4J5w+AM17lREn5fPvmRMjGQs oYuVvcrs3+v7TMc37D2CLjDRV2xkk6qpv43pru3bZE0qF8HmOy5LdSJ/lSmstTSF jT2o6HwGLz+5zlHJh6HpajI5LwxrvsykH+icISRcdGGW3LH4alBhfTGtI3QnSt90 OQAT1YHP3ElUG2utmH5Y38Qt4v9r1IMwFGKJo2Hh5v8OTWD3vRx/mCemWgfimM4U XvBPCMX63pRU2G75pC2YF5y8I1iHJp04hrggdRrhF0BzdTDnFwYbD7YgoA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:37:07 2026 by rpki-client