$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa584ecf-ee64-448f-82c5-49e959490a9b.roa File: aa584ecf-ee64-448f-82c5-49e959490a9b.roa (raw, json) Hash identifier: jokeRL/yW/dqtFUUNm92bZ0+s+P50UMYt59/ALrgpSw= Subject key identifier: A2:EE:D5:62:32:0C:39:D6:A6:D7:EC:21:4A:73:8E:43:0D:A3:45:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 37ED9F510432D293B40D00D17F8B73FDAF1E84AF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa584ecf-ee64-448f-82c5-49e959490a9b.roa Signing time: Sat 21 Feb 2026 00:20:57 +0000 ROA not before: Sat 21 Feb 2026 00:20:57 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ed:9f:51:04:32:d2:93:b4:0d:00:d1:7f:8b:73:fd:af:1e:84:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:20:57 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=79b7c6774d068a50e800e832e8c0256aa31b8f22cc0fd9cfff77915eb4bb0905, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9f:19:4a:4e:98:1d:b7:24:db:5e:15:bf:70: 7b:58:1b:c4:e2:33:c6:03:2d:47:98:bb:a1:4a:3a: 2d:7c:0e:ba:50:ab:f4:38:f9:15:88:56:27:53:d1: b4:45:b5:24:33:2e:23:d9:2f:34:ad:be:58:27:14: fa:85:2f:af:b3:82:81:5f:16:d9:0e:91:a3:1a:58: 84:ec:58:4f:dd:d2:44:e5:da:3d:3d:d6:f6:56:9e: 53:f1:46:37:52:fa:82:49:4c:e2:a9:52:db:8d:2e: 74:f5:ae:55:98:82:da:1d:45:d9:95:9f:08:f7:24: 4e:65:c3:33:c4:27:14:30:f7:e0:12:3b:c0:6b:dc: ba:60:1e:88:c1:e5:98:91:43:d2:9d:41:ef:ee:4a: a8:fe:0e:59:66:61:f8:e2:58:09:3c:0e:84:e5:a4: 03:e1:48:b5:09:18:46:38:fa:77:96:55:5e:b6:7a: 5c:2c:7e:76:4e:12:b0:1c:19:db:05:ea:2d:d3:dd: 46:86:53:82:e0:30:9d:83:13:b2:25:a2:15:c2:4c: ef:0a:d9:df:8d:ea:31:f2:05:2e:74:9a:42:7e:5e: 88:8f:2e:d3:96:82:4f:26:a7:0d:06:cb:06:c4:e9: aa:62:6f:a7:c7:0d:57:af:23:7b:e4:64:fe:56:4a: 08:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EE:D5:62:32:0C:39:D6:A6:D7:EC:21:4A:73:8E:43:0D:A3:45:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa584ecf-ee64-448f-82c5-49e959490a9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.74.0/24 Signature Algorithm: sha256WithRSAEncryption b6:85:bf:40:9e:bf:f0:7c:d7:bb:a6:06:b5:1b:94:c5:6b:9f: ac:75:2d:2c:9a:ba:43:99:81:35:51:85:c6:68:a7:5e:57:1f: 17:9e:dd:b1:0c:11:9b:1f:49:6e:84:2d:34:4f:e5:fb:1d:0b: f5:9e:00:4e:59:ca:91:b7:9b:82:a9:2b:6c:03:82:58:47:c8: 80:42:0e:b7:51:14:17:66:77:e2:48:97:0f:ba:1f:39:27:98: 3b:35:79:24:bb:18:af:71:3c:52:21:83:ed:44:db:e7:e4:b9: d8:d0:2e:1c:7c:31:cc:0a:d4:c9:2f:a2:fc:95:7b:f4:55:f1: e5:99:c5:98:29:9a:24:cd:b3:0d:b1:a1:ef:7a:20:ae:d2:b8: 22:0c:db:8f:ed:ee:ed:a7:49:db:11:85:41:d4:62:7e:16:24: c3:ca:37:bc:9f:99:c0:d1:d3:83:29:07:05:76:b5:18:45:26: 06:00:83:fc:82:70:55:d7:72:a9:e9:49:fb:ec:18:a0:92:f4: 47:ec:82:96:9c:a4:c5:b0:0d:a2:a7:72:ca:a1:96:00:48:cf: eb:8c:8e:de:93:9b:ef:d0:fd:b0:87:6c:da:17:1a:1d:61:4e: 3e:55:0a:41:d9:98:af:ec:00:b0:c8:b1:d0:f0:fb:b0:8d:0f: d2:b7:a7:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN+2fUQQy0pO0DQDRf4tz/a8ehK8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDAyMDU3WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OWI3YzY3NzRkMDY4YTUwZTgwMGU4MzJlOGMwMjU2YWEz MWI4ZjIyY2MwZmQ5Y2ZmZjc3OTE1ZWI0YmIwOTA1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOnxlKTpgdtyTbXhW/cHtYG8TiM8YDLUeYu6FKOi18DrpQ q/Q4+RWIVidT0bRFtSQzLiPZLzStvlgnFPqFL6+zgoFfFtkOkaMaWITsWE/d0kTl 2j091vZWnlPxRjdS+oJJTOKpUtuNLnT1rlWYgtodRdmVnwj3JE5lwzPEJxQw9+AS O8Br3LpgHojB5ZiRQ9KdQe/uSqj+DllmYfjiWAk8DoTlpAPhSLUJGEY4+neWVV62 elwsfnZOErAcGdsF6i3T3UaGU4LgMJ2DE7IlohXCTO8K2d+N6jHyBS50mkJ+XoiP LtOWgk8mpw0GywbE6apib6fHDVevI3vkZP5WSgh3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUou7VYjIMOdam1+whSnOOQw2jRTswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhNTg0ZWNmLWVlNjQtNDQ4Zi04MmM1LTQ5ZTk1OTQ5MGE5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmEowDQYJKoZIhvcNAQELBQADggEBALaFv0Cev/B817umBrUblMVrn6x1 LSyaukOZgTVRhcZop15XHxee3bEMEZsfSW6ELTRP5fsdC/WeAE5ZypG3m4KpK2wD glhHyIBCDrdRFBdmd+JIlw+6HzknmDs1eSS7GK9xPFIhg+1E2+fkudjQLhx8McwK 1MkvovyVe/RV8eWZxZgpmiTNsw2xoe96IK7SuCIM24/t7u2nSdsRhUHUYn4WJMPK N7yfmcDR04MpBwV2tRhFJgYAg/yCcFXXcqnpSfvsGKCS9EfsgpacpMWwDaKncsqh lgBIz+uMjt6Tm+/Q/bCHbNoXGh1hTj5VCkHZmK/sALDIsdDw+7CND9K3pyY= -----END CERTIFICATE-----Generated at Mon Mar 2 00:06:28 2026 by rpki-client