$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a656ff06-dd61-4a24-a01f-a8fcac8be378.roa File: a656ff06-dd61-4a24-a01f-a8fcac8be378.roa (raw, json) Hash identifier: D00VEO/z5XOQauVW91CnW0akKdafPNxjJU8D1JJAgxQ= Subject key identifier: 02:D5:0C:D7:0D:AB:68:D0:9D:B0:CE:5E:76:4C:BC:57:AB:80:08:A4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 44E6E3C07764EB20EAEA6796379B053C0BEEB40D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a656ff06-dd61-4a24-a01f-a8fcac8be378.roa Signing time: Sun 01 Mar 2026 00:10:07 +0000 ROA not before: Sun 01 Mar 2026 00:10:07 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 70.232.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e6:e3:c0:77:64:eb:20:ea:ea:67:96:37:9b:05:3c:0b:ee:b4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 1 00:10:07 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=f264bb8dd76e32653b1d6998c08d0f6e40f5bcb23e92d7d7dac177d59c92d246, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ee:19:0a:84:a6:49:5a:3e:e4:a2:ab:bd:2f: cc:29:a1:55:8a:e9:9e:97:4d:bb:c5:d5:00:69:c2: 34:d8:0c:f7:42:b8:87:c6:49:5d:04:86:1b:ed:e0: ba:6a:bd:56:6d:e6:44:5b:24:8c:9c:9f:47:1b:1f: 35:9e:1d:f5:43:28:7b:11:ad:08:aa:cc:a9:66:ea: 45:20:59:5f:2d:8c:22:ff:4d:46:7d:e8:9d:79:ce: 5c:19:51:3a:c2:68:d2:fd:5b:83:1f:d5:03:9b:af: 9e:d9:61:9a:9a:7e:ef:ab:b2:66:d8:f8:48:94:3b: 94:ca:ff:6d:39:4c:47:3c:fe:e1:97:1d:38:e8:7e: d8:e5:1c:80:8d:0d:3f:38:53:c5:4f:81:98:0d:e9: 43:e6:3a:45:f3:38:54:24:f3:85:ee:c0:b8:c3:81: ca:c0:66:10:e7:19:19:b0:57:a2:b9:bd:9b:03:e2: ef:4f:e7:4c:86:6f:f1:5e:27:ab:8b:75:e9:cc:42: f7:d7:30:18:d5:13:ea:f4:c7:ae:4d:cc:b1:ec:36: 29:1d:71:ce:c6:89:97:17:02:1b:83:dc:c0:81:3c: 67:9e:eb:56:f8:ca:df:07:b2:2f:ba:2a:c5:56:f0: 3d:c8:21:aa:b3:bb:11:95:7d:01:4d:24:a5:ef:91: c9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D5:0C:D7:0D:AB:68:D0:9D:B0:CE:5E:76:4C:BC:57:AB:80:08:A4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a656ff06-dd61-4a24-a01f-a8fcac8be378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.232.120.0/22 Signature Algorithm: sha256WithRSAEncryption a5:bd:f4:51:b6:24:6e:b4:9a:f2:49:13:18:5b:3a:3b:a4:05: 11:62:d3:0d:40:9c:7d:78:95:01:c8:8f:df:9c:a2:85:21:af: 5e:47:87:e0:e2:ef:38:1c:df:a0:6d:0b:23:bd:b3:0c:9c:60: 8d:02:50:38:e9:57:4b:c1:56:5c:7c:4f:54:0a:87:32:af:bb: f6:9b:3a:4e:9b:ae:0e:86:36:f1:e0:de:92:ee:c9:38:f3:3c: 07:24:62:e4:b5:c2:a5:4c:bb:6b:98:e3:f3:33:dd:ce:7e:fc: 71:a9:04:9e:d7:e7:45:07:72:8f:1a:9f:9a:95:6c:f7:ab:7c: e8:66:81:2d:cb:81:7c:aa:d1:61:20:c0:fc:7d:f2:50:19:11: 0f:3c:a8:40:a1:8a:3a:f7:9c:8c:cd:03:9a:65:ea:4f:ab:ec: 18:ec:c4:ac:34:e6:70:c7:ae:86:c8:0b:37:db:3c:b0:98:ad: 6a:ba:8d:96:cb:41:df:ff:8d:08:b2:4a:33:fd:52:0e:a9:da: e4:e7:47:d2:55:00:90:9c:b6:e9:05:41:dd:9e:4e:8c:40:e8: e9:44:0a:b3:74:b0:3e:ba:cc:bb:2b:e6:12:ab:88:47:f3:82: db:a8:a5:4f:9f:8b:1f:db:4f:2f:6b:d0:78:9b:2c:02:b9:5b: 3b:3c:d8:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURObjwHdk6yDq6meWN5sFPAvutA0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzAxMDAxMDA3WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMjY0YmI4ZGQ3NmUzMjY1M2IxZDY5OThjMDhkMGY2ZTQw ZjViY2IyM2U5MmQ3ZDdkYWMxNzdkNTljOTJkMjQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC87hkKhKZJWj7koqu9L8wpoVWK6Z6XTbvF1QBpwjTYDPdC uIfGSV0Ehhvt4LpqvVZt5kRbJIycn0cbHzWeHfVDKHsRrQiqzKlm6kUgWV8tjCL/ TUZ96J15zlwZUTrCaNL9W4Mf1QObr57ZYZqafu+rsmbY+EiUO5TK/205TEc8/uGX HTjoftjlHICNDT84U8VPgZgN6UPmOkXzOFQk84XuwLjDgcrAZhDnGRmwV6K5vZsD 4u9P50yGb/FeJ6uLdenMQvfXMBjVE+r0x65NzLHsNikdcc7GiZcXAhuD3MCBPGee 61b4yt8Hsi+6KsVW8D3IIaqzuxGVfQFNJKXvkclRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAtUM1w2raNCdsM5edky8V6uACKQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E2NTZmZjA2LWRkNjEtNGEyNC1hMDFmLWE4ZmNhYzhiZTM3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJG6HgwDQYJKoZIhvcNAQELBQADggEBAKW99FG2JG60mvJJExhbOjukBRFi 0w1AnH14lQHIj9+cooUhr15Hh+Di7zgc36BtCyO9swycYI0CUDjpV0vBVlx8T1QK hzKvu/abOk6brg6GNvHg3pLuyTjzPAckYuS1wqVMu2uY4/Mz3c5+/HGpBJ7X50UH co8an5qVbPerfOhmgS3LgXyq0WEgwPx98lAZEQ88qEChijr3nIzNA5pl6k+r7Bjs xKw05nDHrobICzfbPLCYrWq6jZbLQd//jQiySjP9Ug6p2uTnR9JVAJCctukFQd2e ToxA6OlECrN0sD66zLsr5hKriEfzgtuopU+fix/bTy9r0HibLAK5Wzs82OY= -----END CERTIFICATE-----Generated at Mon Mar 2 17:54:50 2026 by rpki-client