$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa9b2c74-44be-4506-8c26-0e262e9213ae.roa File: aa9b2c74-44be-4506-8c26-0e262e9213ae.roa (raw, json) Hash identifier: Hj6fL+PbXXuh9502DnQ9rYVhiPMrn37U+2G15W7x0hg= Subject key identifier: 66:5D:25:5E:05:96:5F:8B:86:F6:A7:54:DC:BA:D8:40:69:B4:6A:BE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B7B38AD05546269EBD987E522EB5706C6730D16 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa9b2c74-44be-4506-8c26-0e262e9213ae.roa Signing time: Wed 18 Feb 2026 00:21:07 +0000 ROA not before: Wed 18 Feb 2026 00:21:07 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 207.21.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:7b:38:ad:05:54:62:69:eb:d9:87:e5:22:eb:57:06:c6:73:0d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 18 00:21:07 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=c2639cf022d7a5ace193252aeb7fc938e2a353ce1fa00d0391d3943f48aa87f5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:db:56:09:88:5c:14:ee:93:7d:a6:6f:b4:a7: 26:4c:88:af:74:f3:e5:3c:6e:a9:fc:a8:fa:e2:00: 6d:01:12:8a:c8:16:b5:b8:71:c2:f7:5b:21:e7:60: 62:13:b2:78:0d:33:8f:d4:e1:78:61:d4:4f:a4:b7: 67:12:15:a2:09:5a:fe:2a:6f:dc:65:8d:e6:62:4a: f7:14:ea:b6:8a:5a:4b:6a:c5:da:25:69:b0:0e:cb: ed:25:f8:63:bc:12:c1:7d:a8:31:59:28:1f:db:53: b3:c2:9f:a7:0f:1d:c7:fb:92:c4:65:18:a8:fc:44: 0d:95:d1:b9:0e:f9:69:8f:54:00:6c:56:3c:1d:fc: 5c:c3:84:e7:41:fb:6f:e9:64:2f:03:c8:c1:71:57: 34:7d:07:a4:76:87:cc:85:8e:7b:50:78:41:7b:d7: 1b:65:ec:c5:23:aa:e0:5a:7b:ca:1c:d7:1e:65:a4: 4d:78:e4:76:ff:76:d5:f0:7b:c2:e5:dc:66:ad:b9: 83:61:93:24:4e:70:95:87:1e:59:0b:b0:29:75:3f: 95:46:86:45:f5:d8:60:09:64:7a:8f:31:d7:a4:cf: 77:72:62:22:02:dc:87:7a:cb:00:43:ae:a2:ca:f8: a5:36:60:a3:90:7e:d6:6d:68:69:fb:cd:67:b2:a4: ac:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5D:25:5E:05:96:5F:8B:86:F6:A7:54:DC:BA:D8:40:69:B4:6A:BE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa9b2c74-44be-4506-8c26-0e262e9213ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.21.248.0/21 Signature Algorithm: sha256WithRSAEncryption 97:4c:75:42:f4:fa:2c:6f:c3:73:94:f7:6f:9d:f0:61:22:4c: 2b:46:6f:44:09:69:7a:84:60:40:9e:e2:47:f7:0f:54:7e:0e: e1:23:52:0c:82:27:a3:aa:f8:4a:ab:39:90:a1:86:26:8d:02: 20:e4:ac:8f:e6:a9:f9:cf:bd:6e:9c:70:9a:af:6c:02:14:02: 1a:71:7e:7d:b7:a8:ed:b1:16:0b:13:6e:bc:07:f5:63:38:1b: d6:35:a5:d0:3a:ec:91:26:e1:14:c3:9e:1f:57:71:87:cb:3c: 6a:7d:4d:02:e2:73:b0:9e:7e:7a:76:d7:1c:89:ed:04:3f:49: b9:7e:c7:04:81:26:76:1c:f1:d7:f1:e2:01:08:af:40:a7:7a: 19:63:ae:2b:2e:db:06:92:83:48:5c:44:43:e9:11:c9:0f:9e: f4:3c:5b:c6:c9:23:34:8d:f7:9e:51:16:ed:a6:a9:29:6e:6e: 76:77:cc:5f:bb:8f:07:8b:36:9b:ac:d1:40:eb:e2:3e:08:10: 1e:8d:c9:f9:b6:f2:f1:61:11:72:c1:16:29:f7:a1:50:49:7c: 13:3f:b5:f5:38:a3:85:bd:63:54:65:c8:f7:82:c7:93:e7:74: 97:a5:55:fc:76:66:28:f3:10:60:28:11:76:e7:4b:cc:7d:69: 41:df:13:f5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW3s4rQVUYmnr2YflIutXBsZzDRYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE4MDAyMTA3WhcNMjYwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMjYzOWNmMDIyZDdhNWFjZTE5MzI1MmFlYjdmYzkzOGUy YTM1M2NlMWZhMDBkMDM5MWQzOTQzZjQ4YWE4N2Y1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCR21YJiFwU7pN9pm+0pyZMiK908+U8bqn8qPriAG0BEorI FrW4ccL3WyHnYGITsngNM4/U4Xhh1E+kt2cSFaIJWv4qb9xljeZiSvcU6raKWktq xdolabAOy+0l+GO8EsF9qDFZKB/bU7PCn6cPHcf7ksRlGKj8RA2V0bkO+WmPVABs Vjwd/FzDhOdB+2/pZC8DyMFxVzR9B6R2h8yFjntQeEF71xtl7MUjquBae8oc1x5l pE145Hb/dtXwe8Ll3GatuYNhkyROcJWHHlkLsCl1P5VGhkX12GAJZHqPMdekz3dy YiIC3Id6ywBDrqLK+KU2YKOQftZtaGn7zWeypKyFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZl0lXgWWX4uG9qdU3LrYQGm0ar4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhOWIyYzc0LTQ0YmUtNDUwNi04YzI2LTBlMjYyZTkyMTNhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPPFfgwDQYJKoZIhvcNAQELBQADggEBAJdMdUL0+ixvw3OU92+d8GEiTCtG b0QJaXqEYECe4kf3D1R+DuEjUgyCJ6Oq+EqrOZChhiaNAiDkrI/mqfnPvW6ccJqv bAIUAhpxfn23qO2xFgsTbrwH9WM4G9Y1pdA67JEm4RTDnh9XcYfLPGp9TQLic7Ce fnp21xyJ7QQ/Sbl+xwSBJnYc8dfx4gEIr0Cnehljrisu2waSg0hcREPpEckPnvQ8 W8bJIzSN955RFu2mqSlubnZ3zF+7jweLNpus0UDr4j4IEB6Nyfm28vFhEXLBFin3 oVBJfBM/tfU4o4W9Y1RlyPeCx5PndJelVfx2ZijzEGAoEXbnS8x9aUHfE/U= -----END CERTIFICATE-----Generated at Sun Mar 1 22:26:18 2026 by rpki-client