$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4d49ad1-da76-4d40-801d-8877c08472a5.roa File: a4d49ad1-da76-4d40-801d-8877c08472a5.roa (raw, json) Hash identifier: mG2QpU27bjZzgOzH30SPUvEEm4khfnWMwPYbWu3V7nE= Subject key identifier: 43:8B:85:7C:08:0F:B8:FB:5E:D4:1C:94:FC:DD:4B:E0:C3:30:9B:96 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2054E0FF79994538E06A4332F49A1146C8D77581 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4d49ad1-da76-4d40-801d-8877c08472a5.roa Signing time: Sat 28 Feb 2026 00:30:15 +0000 ROA not before: Sat 28 Feb 2026 00:30:15 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.194.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:54:e0:ff:79:99:45:38:e0:6a:43:32:f4:9a:11:46:c8:d7:75:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 28 00:30:15 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=dc72b71675b7e03905d003914b6c0c1d0d66f136903231a04c7d9acfe87f72bf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:05:f6:f4:22:d0:e7:15:08:5c:8c:d1:fb:30: ec:59:2a:5d:d5:78:1b:b7:e6:a0:b8:2e:e6:4a:40: f6:f5:e1:8d:ae:de:03:d4:a1:24:c9:c6:72:b6:67: 5a:ef:c0:a3:1f:32:ce:94:93:6d:48:d8:d4:82:b1: 54:97:49:6f:7d:a7:1d:7d:5c:0e:7f:16:54:d3:c0: 7d:f3:79:07:2b:4c:25:c3:2a:f6:fe:34:46:d2:08: 1b:07:e1:94:f7:62:29:10:b6:16:1e:5b:8e:8c:cc: fa:f8:fa:bf:a2:15:b8:21:43:21:2a:f0:cf:ae:f5: a8:6f:48:fc:fc:f7:fa:00:c3:20:d9:65:e7:3c:72: 22:57:b2:49:2d:4d:70:1c:c9:84:68:0f:9b:73:fa: fc:a2:c6:39:f8:fe:2d:a1:77:82:15:9a:72:76:bc: 50:e0:f1:d2:f7:9f:b5:f6:bd:1e:89:83:ec:77:d3: 06:84:24:cb:0f:00:9a:2b:45:93:28:2d:7e:98:90: f4:19:e0:d4:5b:56:44:62:96:5e:f8:67:0f:73:3f: ed:ea:dd:8f:71:8e:3d:d9:bd:b1:8d:dd:db:28:2e: b6:71:48:bb:a2:4d:bc:1e:4f:47:db:0e:04:be:5d: 08:01:b2:15:f9:dd:4a:80:b4:c4:59:ea:70:f1:54: 22:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8B:85:7C:08:0F:B8:FB:5E:D4:1C:94:FC:DD:4B:E0:C3:30:9B:96 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4d49ad1-da76-4d40-801d-8877c08472a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.194.0.0/16 Signature Algorithm: sha256WithRSAEncryption 49:c6:91:62:56:a8:b0:8f:13:86:25:00:3e:08:dd:a3:db:4c: 37:33:74:f2:b8:25:66:93:4d:af:e5:39:73:19:4c:c1:07:94: 57:33:08:79:5b:36:24:d6:8c:58:73:cf:b1:a6:0a:cd:7c:60: f2:50:ee:8b:4f:04:73:b0:f3:87:40:a3:a6:9b:10:4c:f1:d6: 1b:f2:0c:e4:8a:c3:d0:b4:3f:ba:43:0c:7b:cc:c9:5d:4e:50: ef:0e:de:fe:22:d2:28:64:b4:bd:cc:b9:fb:39:b8:89:2a:2a: 65:45:cd:b1:2d:9c:5f:27:96:bb:2f:db:5b:9b:43:75:0f:cf: 70:c4:ce:fa:ef:b3:72:ce:20:ed:34:d0:23:8d:5b:c8:0b:5f: 3a:ff:5c:c3:75:cf:65:cb:6f:13:e7:12:98:6c:eb:36:34:69: 8b:b3:2c:ce:f8:97:63:d4:6b:9a:81:76:f2:03:4f:30:f4:f1: 48:59:be:84:46:30:f9:33:b3:3f:69:d4:50:ac:8c:2f:2d:60: 03:72:f7:99:9f:34:f3:7c:ea:07:46:2f:56:77:a4:24:c5:b2: d9:91:69:d4:e5:60:55:e3:e8:64:69:c6:6a:90:4a:f9:da:91: 8c:ea:a6:e4:a3:2d:3e:66:81:65:8a:bb:9e:12:ff:25:5d:ca: 35:eb:4e:ad -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIFTg/3mZRTjgakMy9JoRRsjXdYEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI4MDAzMDE1WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYzcyYjcxNjc1YjdlMDM5MDVkMDAzOTE0YjZjMGMxZDBk NjZmMTM2OTAzMjMxYTA0YzdkOWFjZmU4N2Y3MmJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnBfb0ItDnFQhcjNH7MOxZKl3VeBu35qC4LuZKQPb14Y2u 3gPUoSTJxnK2Z1rvwKMfMs6Uk21I2NSCsVSXSW99px19XA5/FlTTwH3zeQcrTCXD Kvb+NEbSCBsH4ZT3YikQthYeW46MzPr4+r+iFbghQyEq8M+u9ahvSPz89/oAwyDZ Zec8ciJXskktTXAcyYRoD5tz+vyixjn4/i2hd4IVmnJ2vFDg8dL3n7X2vR6Jg+x3 0waEJMsPAJorRZMoLX6YkPQZ4NRbVkRill74Zw9zP+3q3Y9xjj3ZvbGN3dsoLrZx SLuiTbweT0fbDgS+XQgBshX53UqAtMRZ6nDxVCIpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQ4uFfAgPuPte1ByU/N1L4MMwm5YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E0ZDQ5YWQxLWRhNzYtNGQ0MC04MDFkLTg4NzdjMDg0NzJhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPwjANBgkqhkiG9w0BAQsFAAOCAQEAScaRYlaosI8ThiUAPgjdo9tMNzN0 8rglZpNNr+U5cxlMwQeUVzMIeVs2JNaMWHPPsaYKzXxg8lDui08Ec7Dzh0CjppsQ TPHWG/IM5IrD0LQ/ukMMe8zJXU5Q7w7e/iLSKGS0vcy5+zm4iSoqZUXNsS2cXyeW uy/bW5tDdQ/PcMTO+u+zcs4g7TTQI41byAtfOv9cw3XPZctvE+cSmGzrNjRpi7Ms zviXY9RrmoF28gNPMPTxSFm+hEYw+TOzP2nUUKyMLy1gA3L3mZ8083zqB0YvVnek JMWy2ZFp1OVgVePoZGnGapBK+dqRjOqm5KMtPmaBZYq7nhL/JV3KNetOrQ== -----END CERTIFICATE-----Generated at Mon Mar 2 01:58:00 2026 by rpki-client