$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a314263a-e247-4fe4-97d5-bef3de25ada0.roa File: a314263a-e247-4fe4-97d5-bef3de25ada0.roa (raw, json) Hash identifier: ThJ8P4aDsv70pzuCXlvfPtFGPU+Mo3JmkqZDJYBKF70= Subject key identifier: 9E:4B:22:C4:03:D9:2E:81:4C:78:8E:9C:26:03:A6:E4:85:6E:E7:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17C62E633D0C47542FD06C08866DF32904DBFA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a314263a-e247-4fe4-97d5-bef3de25ada0.roa Signing time: Fri 06 Feb 2026 00:10:58 +0000 ROA not before: Fri 06 Feb 2026 00:10:58 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 65.9.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c6:2e:63:3d:0c:47:54:2f:d0:6c:08:86:6d:f3:29:04:db:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 6 00:10:58 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=bf57aa8fff68cca98f3a5dbaf983f72c114dd973b14bc4583aca3a47d16a5282, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3a:5b:5f:8e:ee:bc:1f:34:ca:0d:92:9b:8b: 69:14:94:d4:f2:46:6b:cd:59:9e:8c:66:b2:9f:13: 86:cc:84:e9:30:8b:25:94:da:67:9c:7b:8b:21:28: 0b:41:f1:df:68:93:d2:eb:c4:04:7c:03:b0:43:46: b4:c5:38:c3:f2:08:1a:67:f3:de:3c:c1:b2:20:41: c5:13:4d:9a:02:b9:37:fb:69:e0:47:d5:a6:b7:ea: 74:4a:1a:73:82:11:b9:77:dd:2c:f1:ef:4e:a7:e9: 2c:21:b2:c1:c6:a8:9e:78:b4:98:07:20:e0:16:35: e2:a3:2e:fb:b4:67:b3:07:e4:e9:a8:a7:78:96:0c: ed:de:6c:c5:46:f2:72:a5:a8:dc:fb:00:7f:38:14: 4c:2a:ac:0b:5e:19:32:53:89:ae:02:e8:1e:69:88: ae:45:bb:55:23:14:e8:4b:67:73:64:aa:ef:42:5e: 6f:c3:3d:6e:88:f3:eb:7c:40:bb:8e:c9:74:ca:b8: 97:75:e8:37:a8:d8:4c:29:67:43:8b:30:16:da:50: 53:0a:19:9d:42:c9:e3:f5:ee:ab:d6:df:e4:c1:29: 43:6e:b4:90:3e:f2:83:42:d6:86:79:6e:df:02:db: 86:d5:d5:88:c6:56:f8:d4:bd:1f:2a:b6:ce:9a:80: 33:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4B:22:C4:03:D9:2E:81:4C:78:8E:9C:26:03:A6:E4:85:6E:E7:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a314263a-e247-4fe4-97d5-bef3de25ada0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.9.170.0/23 Signature Algorithm: sha256WithRSAEncryption a7:44:57:e5:33:f5:84:ca:5d:99:9e:70:78:9a:a7:b7:34:49: 30:33:63:d7:63:df:90:16:24:25:f0:d0:3f:85:19:de:a1:04: c3:f6:e9:6d:55:3f:ec:c5:f6:ab:4a:c0:38:d0:17:ca:db:05: 72:64:b8:a3:7b:06:10:18:5f:09:59:64:11:2b:89:23:ff:4e: 44:80:06:0a:78:55:37:88:09:b5:a4:5a:2d:9a:5a:2d:9d:d2: ff:42:d8:c7:6c:07:dc:c4:41:13:1d:ab:51:5f:36:47:f3:09: 1b:41:59:14:0a:7b:58:47:ab:50:84:ef:f9:78:62:e3:ae:d0: 19:5d:e1:6f:4b:55:5b:e5:96:9c:1e:7d:35:d1:26:e7:09:ce: 10:66:f3:7e:b5:c5:7e:eb:52:dd:51:5a:4f:ff:c0:1e:98:9b: 2e:74:d7:9d:84:0d:82:d8:36:ff:db:79:77:78:04:d2:60:8a: 35:ba:3e:e2:79:34:64:f6:7b:7e:ce:a3:a3:05:10:6a:46:41: 7d:8a:74:8f:98:e9:df:20:17:c7:a5:48:42:75:b0:93:61:56: dc:8e:e1:d5:f0:af:dd:b5:c4:e2:74:c9:87:90:97:8a:e7:5e: 65:33:3f:86:f2:84:b2:82:37:81:98:e9:5f:65:25:f5:27:eb: 7e:3c:97:f0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITF8YuYz0MR1Qv0GwIhm3zKQTb+jANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjAyMDYwMDEwNThaFw0yNjA1MDcyMzU5NTla MHoxSTBHBgNVBAUTQGJmNTdhYThmZmY2OGNjYTk4ZjNhNWRiYWY5ODNmNzJjMTE0 ZGQ5NzNiMTRiYzQ1ODNhY2EzYTQ3ZDE2YTUyODIxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANg6W1+O7rwfNMoNkpuLaRSU1PJGa81Znoxmsp8ThsyE6TCL JZTaZ5x7iyEoC0Hx32iT0uvEBHwDsENGtMU4w/IIGmfz3jzBsiBBxRNNmgK5N/tp 4EfVprfqdEoac4IRuXfdLPHvTqfpLCGywcaonni0mAcg4BY14qMu+7Rnswfk6ain eJYM7d5sxUbycqWo3PsAfzgUTCqsC14ZMlOJrgLoHmmIrkW7VSMU6Etnc2Sq70Je b8M9bojz63xAu47JdMq4l3XoN6jYTClnQ4swFtpQUwoZnULJ4/Xuq9bf5MEpQ260 kD7yg0LWhnlu3wLbhtXViMZW+NS9Hyq2zpqAM10CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBSeSyLEA9kugUx4jpwmA6bkhW7nszAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvYTMxNDI2M2EtZTI0Ny00ZmU0LTk3ZDUtYmVmM2RlMjVhZGEwLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAUEJqjANBgkqhkiG9w0BAQsFAAOCAQEAp0RX5TP1hMpdmZ5weJqntzRJMDNj 12PfkBYkJfDQP4UZ3qEEw/bpbVU/7MX2q0rAONAXytsFcmS4o3sGEBhfCVlkESuJ I/9ORIAGCnhVN4gJtaRaLZpaLZ3S/0LYx2wH3MRBEx2rUV82R/MJG0FZFAp7WEer UITv+Xhi467QGV3hb0tVW+WWnB59NdEm5wnOEGbzfrXFfutS3VFaT//AHpibLnTX nYQNgtg2/9t5d3gE0mCKNbo+4nk0ZPZ7fs6jowUQakZBfYp0j5jp3yAXx6VIQnWw k2FW3I7h1fCv3bXE4nTJh5CXiudeZTM/hvKEsoI3gZjpX2Ul9SfrfjyX8A== -----END CERTIFICATE-----Generated at Mon Mar 2 07:07:40 2026 by rpki-client