$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abb7a40f-6237-40f4-a2b2-34645feeb43a.roa File: abb7a40f-6237-40f4-a2b2-34645feeb43a.roa (raw, json) Hash identifier: iOg4caMYt5gL0+8szTXHjGECEU72EHfWQpiWzEj+vEM= Subject key identifier: 43:1E:BE:4D:AD:A3:B8:AD:1C:CC:86:F4:A0:5F:F9:9F:7B:6E:68:C5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54DEDC75859B72A369123B7D775DB5A252EA7FF4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abb7a40f-6237-40f4-a2b2-34645feeb43a.roa Signing time: Wed 11 Feb 2026 00:41:49 +0000 ROA not before: Wed 11 Feb 2026 00:41:49 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 205.184.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:de:dc:75:85:9b:72:a3:69:12:3b:7d:77:5d:b5:a2:52:ea:7f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 11 00:41:49 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=112fc4b60ad8ca1e13d1221970458dec207d9c21c884bbfa2ac596786fbe9637, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:97:f1:62:f6:9b:b7:6c:25:14:c0:19:0c: 13:30:f1:31:31:10:ed:f6:cd:32:46:77:34:d5:eb: 98:70:8c:e8:a7:29:13:e9:a8:c1:2e:72:78:07:46: 45:5e:20:47:83:b7:3d:0a:c1:a4:30:76:e9:1f:23: c9:9d:03:d3:11:4e:93:be:54:08:54:8e:62:a8:cf: 69:b0:83:00:dd:e1:3f:75:85:e7:98:d7:13:3d:9d: fe:48:d7:c4:bc:ff:b9:f9:c4:e8:a9:bf:b5:9c:95: b6:d6:bb:69:3b:56:84:05:1c:5c:31:88:bb:31:3b: 1a:10:bf:46:f7:a2:85:62:f8:c7:df:54:b0:17:ca: 0f:d4:be:69:72:08:b8:4a:54:5a:f7:f6:a9:b3:0c: ea:04:8e:c0:7c:8f:d6:4b:01:ad:3c:b4:b7:32:a3: 9e:59:57:a0:8f:32:52:46:c6:07:ba:b1:98:5a:44: d4:cf:66:c7:31:40:04:8c:14:91:d3:39:85:4e:b0: c2:41:38:11:a8:46:a9:2c:4d:11:69:44:65:74:3f: 52:20:19:31:ef:19:45:ec:0a:c2:e3:e7:ae:5c:53: 73:92:64:2e:af:bf:84:3d:8b:27:16:4b:c8:fa:5e: 4e:82:39:55:9e:63:31:c9:1f:d9:52:83:ec:22:eb: af:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1E:BE:4D:AD:A3:B8:AD:1C:CC:86:F4:A0:5F:F9:9F:7B:6E:68:C5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abb7a40f-6237-40f4-a2b2-34645feeb43a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.184.96.0/19 Signature Algorithm: sha256WithRSAEncryption 61:da:45:e0:d4:f2:5f:20:e9:d0:de:36:78:76:9f:dc:00:02: aa:2b:9b:21:02:fe:3f:86:ad:08:bf:7f:ea:2c:31:cd:53:98: 7c:7b:7d:58:71:66:75:50:2c:eb:42:fd:31:98:51:76:d8:76: ed:47:7d:30:9f:d5:b3:53:b6:fd:a5:70:05:bc:56:a3:ab:db: 63:94:67:68:47:51:27:cb:67:b3:61:00:2a:79:1b:47:41:75: e1:be:48:8a:ab:fb:d8:c4:d2:d0:ee:36:e2:f0:a3:86:88:77: 18:94:02:d4:94:fb:00:70:db:d6:f9:2a:c6:7b:8b:9e:94:85: 29:c3:b1:97:a5:85:43:16:a9:14:c2:13:a4:42:dc:16:6a:40: aa:47:36:0e:62:e1:27:8d:36:4e:bb:2e:f4:d2:85:ec:a6:be: 5d:d9:4d:16:23:bb:a7:36:d4:fb:bd:35:1e:df:e4:e0:19:f7: 74:ec:38:e2:77:af:f2:91:58:c7:6e:93:18:64:ba:8d:81:f3: c2:01:aa:b9:a6:13:49:b8:91:93:ad:fc:95:9e:6e:b2:f4:fc: ce:17:5a:30:2b:bd:48:e7:76:e1:94:75:48:6a:f8:6b:9c:06: fc:07:5c:2b:33:2f:e2:04:bc:de:4e:da:e3:47:1a:ba:91:35: 8c:5c:76:c8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVN7cdYWbcqNpEjt9d121olLqf/QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjExMDA0MTQ5WhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTJmYzRiNjBhZDhjYTFlMTNkMTIyMTk3MDQ1OGRlYzIw N2Q5YzIxYzg4NGJiZmEyYWM1OTY3ODZmYmU5NjM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAVZfxYvabt2wlFMAZDBMw8TExEO32zTJGdzTV65hwjOin KRPpqMEucngHRkVeIEeDtz0KwaQwdukfI8mdA9MRTpO+VAhUjmKoz2mwgwDd4T91 heeY1xM9nf5I18S8/7n5xOipv7WclbbWu2k7VoQFHFwxiLsxOxoQv0b3ooVi+Mff VLAXyg/UvmlyCLhKVFr39qmzDOoEjsB8j9ZLAa08tLcyo55ZV6CPMlJGxge6sZha RNTPZscxQASMFJHTOYVOsMJBOBGoRqksTRFpRGV0P1IgGTHvGUXsCsLj565cU3OS ZC6vv4Q9iycWS8j6Xk6COVWeYzHJH9lSg+wi6689AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQx6+Ta2juK0czIb0oF/5n3tuaMUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FiYjdhNDBmLTYyMzctNDBmNC1hMmIyLTM0NjQ1ZmVlYjQzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXNuGAwDQYJKoZIhvcNAQELBQADggEBAGHaReDU8l8g6dDeNnh2n9wAAqor myEC/j+GrQi/f+osMc1TmHx7fVhxZnVQLOtC/TGYUXbYdu1HfTCf1bNTtv2lcAW8 VqOr22OUZ2hHUSfLZ7NhACp5G0dBdeG+SIqr+9jE0tDuNuLwo4aIdxiUAtSU+wBw 29b5KsZ7i56UhSnDsZelhUMWqRTCE6RC3BZqQKpHNg5i4SeNNk67LvTSheymvl3Z TRYju6c21Pu9NR7f5OAZ93TsOOJ3r/KRWMdukxhkuo2B88IBqrmmE0m4kZOt/JWe brL0/M4XWjArvUjnduGUdUhq+GucBvwHXCszL+IEvN5O2uNHGrqRNYxcdsg= -----END CERTIFICATE-----Generated at Sun Mar 1 22:11:59 2026 by rpki-client