$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad9fb4ea-22d5-4a32-99f8-ad10c34451e8.roa File: ad9fb4ea-22d5-4a32-99f8-ad10c34451e8.roa (raw, json) Hash identifier: J49wQ2LfHrJOlSZtH+9iPFIPddWqzLXOYvSDGqrYd5Q= Subject key identifier: BC:59:CD:36:61:7C:E1:41:35:DE:C4:05:EB:4D:8E:BB:6F:A3:A4:2F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4372FC9C8A71512AF283A8AE98FBF01115C555DB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad9fb4ea-22d5-4a32-99f8-ad10c34451e8.roa Signing time: Sat 21 Feb 2026 00:40:52 +0000 ROA not before: Sat 21 Feb 2026 00:40:52 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:72:fc:9c:8a:71:51:2a:f2:83:a8:ae:98:fb:f0:11:15:c5:55:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:40:52 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=32f74e9bc7469f15ae500bcf1f6eb5ee516f15cc91f8a1ba69f0699e851b55b3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:bc:6b:65:fb:b5:1a:62:fa:61:d6:85:59: 17:75:fc:d7:37:1f:b6:a4:16:13:0b:88:2f:91:85: 94:e8:37:61:72:ed:f4:ec:a8:65:f8:78:4e:80:57: aa:4e:34:86:6a:a8:56:cd:5a:b3:70:3e:34:cc:39: 81:45:fe:38:81:ab:cf:1e:d7:54:28:e4:e9:1b:cd: 2d:d1:6a:49:06:b9:50:4c:43:97:86:a0:0b:ac:32: 5a:7e:73:6a:fe:bb:d9:55:02:b3:4c:72:c6:ad:4f: ee:8e:1a:e5:a9:3d:f1:1b:4b:6c:29:a9:b3:3b:b1: 35:3d:cf:f1:2e:1f:1b:93:d0:33:e9:c1:2e:4e:30: 2e:34:34:8a:c9:20:95:61:2f:4a:51:2b:12:5a:5a: c7:3a:26:02:9b:f0:cf:70:1c:37:dd:d5:5e:2e:d8: 92:b8:3f:15:9a:69:40:c4:5e:d4:e3:04:a2:03:9e: ab:17:11:8d:6d:0e:29:2f:30:2c:21:a4:7e:aa:3d: 91:20:05:8a:bd:14:ca:4e:b0:d2:6a:95:16:b6:f8: 8c:52:0c:36:a8:63:ae:ac:21:c2:8d:51:10:a4:a8: 59:47:02:b1:f2:2c:0c:4a:46:20:a8:51:13:d2:c1: 48:aa:a4:f1:10:1a:33:e3:62:97:27:07:6d:01:03: 5b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:59:CD:36:61:7C:E1:41:35:DE:C4:05:EB:4D:8E:BB:6F:A3:A4:2F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad9fb4ea-22d5-4a32-99f8-ad10c34451e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.70.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:89:10:6e:df:16:af:df:11:77:1f:8a:12:4a:ac:c9:7c:8c: de:88:3f:e1:4c:04:c6:fd:2b:df:1b:be:5a:a6:97:ab:a9:d0: 82:6f:4f:34:9b:8a:a2:66:7f:14:75:2d:fd:ec:d0:e9:19:55: 96:b8:9a:62:db:ef:b9:39:f1:c0:33:43:b0:3d:43:2f:fb:64: a2:59:c8:44:4f:dd:cb:b9:d2:4b:47:8b:47:87:e5:e7:25:a7: 9a:4f:33:30:b1:5f:4e:d9:25:c0:c2:42:d8:7a:b8:7f:f9:ff: d4:29:42:0d:27:c8:87:f9:c9:f5:01:97:97:20:82:74:89:e4: 85:c2:4e:e7:ce:41:70:21:db:b8:29:5b:2e:3b:29:62:3d:af: d8:83:5a:6d:7f:59:6a:f9:37:63:37:82:4a:01:5a:e3:8c:05: 64:6d:f8:99:6d:95:e6:48:d9:21:7b:c9:a8:99:1c:18:b3:95: fa:01:d7:80:e8:8d:e6:47:1f:f7:9b:e1:e6:69:e7:a1:a5:71: f0:19:ce:f1:67:75:d8:c7:23:49:c0:97:12:25:af:a3:e1:a8: 1a:2f:9b:19:e1:8c:08:42:41:1a:de:23:f6:8b:6a:bd:08:8c: 1c:a6:5c:a0:72:de:55:42:21:bb:d3:cd:8e:20:28:20:ff:55: 1d:71:54:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ3L8nIpxUSryg6iumPvwERXFVdswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDA0MDUyWhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMmY3NGU5YmM3NDY5ZjE1YWU1MDBiY2YxZjZlYjVlZTUx NmYxNWNjOTFmOGExYmE2OWYwNjk5ZTg1MWI1NWIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPArxrZfu1GmL6YdaFWRd1/Nc3H7akFhMLiC+RhZToN2Fy 7fTsqGX4eE6AV6pONIZqqFbNWrNwPjTMOYFF/jiBq88e11Qo5OkbzS3RakkGuVBM Q5eGoAusMlp+c2r+u9lVArNMcsatT+6OGuWpPfEbS2wpqbM7sTU9z/EuHxuT0DPp wS5OMC40NIrJIJVhL0pRKxJaWsc6JgKb8M9wHDfd1V4u2JK4PxWaaUDEXtTjBKID nqsXEY1tDikvMCwhpH6qPZEgBYq9FMpOsNJqlRa2+IxSDDaoY66sIcKNURCkqFlH ArHyLAxKRiCoURPSwUiqpPEQGjPjYpcnB20BA1uLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvFnNNmF84UE13sQF602Ou2+jpC8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FkOWZiNGVhLTIyZDUtNGEzMi05OWY4LWFkMTBjMzQ0NTFlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmEYwDQYJKoZIhvcNAQELBQADggEBAD2JEG7fFq/fEXcfihJKrMl8jN6I P+FMBMb9K98bvlqml6up0IJvTzSbiqJmfxR1Lf3s0OkZVZa4mmLb77k58cAzQ7A9 Qy/7ZKJZyERP3cu50ktHi0eH5eclp5pPMzCxX07ZJcDCQth6uH/5/9QpQg0nyIf5 yfUBl5cggnSJ5IXCTufOQXAh27gpWy47KWI9r9iDWm1/WWr5N2M3gkoBWuOMBWRt +JltleZI2SF7yaiZHBizlfoB14DojeZHH/eb4eZp56GlcfAZzvFnddjHI0nAlxIl r6PhqBovmxnhjAhCQRreI/aLar0IjBymXKBy3lVCIbvTzY4gKCD/VR1xVGw= -----END CERTIFICATE-----Generated at Mon Mar 2 05:37:31 2026 by rpki-client