$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae676a97-17e8-43c8-b032-522076c501aa.roa File: ae676a97-17e8-43c8-b032-522076c501aa.roa (raw, json) Hash identifier: CyoV/zCRabd7SSzx4YnLBDR+AXFaY2VwwZX+Irvg+Sg= Subject key identifier: FC:31:75:3A:3E:4E:FB:12:08:14:21:DA:BD:1A:39:40:7E:B6:B3:95 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 532EE427E3E8D38A0FE1280638205DDFACE7D95E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae676a97-17e8-43c8-b032-522076c501aa.roa Signing time: Thu 26 Feb 2026 00:50:11 +0000 ROA not before: Thu 26 Feb 2026 00:50:11 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 70.224.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:2e:e4:27:e3:e8:d3:8a:0f:e1:28:06:38:20:5d:df:ac:e7:d9:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 26 00:50:11 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=44d28f7ea0a765eebb3d88d85185a8bc91878cd92e70738f7a821615b216e05b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:7a:82:30:d1:a4:78:09:c1:ae:5e:9d:b6: d8:c0:0d:c7:fd:3d:db:ad:5e:1b:74:6a:ed:e8:61: 30:21:4c:0c:32:77:5b:10:e9:fc:a9:1c:ce:37:ac: 0b:d5:88:3f:a2:6b:f4:ec:3f:67:61:2b:61:62:72: 3d:38:2c:1a:c0:2b:38:71:56:e0:78:37:85:cf:d4: d6:88:43:5b:05:1c:6b:de:46:6d:c0:49:b8:9d:3c: fc:81:0e:a3:e1:78:03:7c:fe:f8:80:00:9d:fb:8a: 5f:11:13:3b:4c:32:e6:8e:42:cb:42:e1:36:ef:88: e0:a9:57:e9:c0:4c:05:6b:49:5d:15:46:8b:e1:77: dd:33:61:e3:b2:cb:f3:9b:24:d9:b0:5a:79:1a:33: 7f:cf:d0:21:26:d1:c0:65:0a:3d:d3:88:fa:57:f1: 18:3d:b5:8e:d5:77:b4:d7:cc:29:cc:51:c9:01:09: 74:75:b5:d5:49:49:3e:e1:b3:a2:2b:56:63:f5:21: 17:1b:b1:0e:2f:a8:2e:5f:14:4a:f0:5c:4d:6d:ee: 95:6c:78:80:fc:24:49:25:77:aa:75:0d:30:2e:f4: 46:d6:ff:8a:40:82:e2:a0:dd:f4:ee:84:19:e5:3b: 15:b6:bc:4a:0e:c3:04:10:98:83:4f:ee:a9:88:fc: 9d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:31:75:3A:3E:4E:FB:12:08:14:21:DA:BD:1A:39:40:7E:B6:B3:95 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae676a97-17e8-43c8-b032-522076c501aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.224.192.0/18 Signature Algorithm: sha256WithRSAEncryption 32:b4:b0:81:be:2a:d0:d1:b7:74:13:f4:dc:0e:86:fe:33:73: 16:08:23:31:33:22:3c:31:e9:8e:be:bc:c9:0c:93:c4:b8:0e: 56:3b:9d:cc:96:3d:62:f8:34:7a:fb:da:ce:49:7e:77:2f:2b: d4:98:28:25:69:ef:34:2a:0a:d0:63:dd:e7:21:72:19:d1:5a: 96:ba:52:4d:fb:ee:1d:6c:2a:83:20:1b:78:65:97:cf:be:59: 4c:1e:8e:e8:00:fd:de:9d:40:83:ab:32:54:2e:6d:e5:1b:71: 31:27:b5:de:14:60:1f:03:69:fb:23:1f:91:33:9d:af:1b:92: 87:5f:31:96:e6:02:31:8b:af:53:05:d3:a0:5b:c8:8f:6e:80: be:28:3a:b6:da:92:e7:9a:9c:9d:f7:f0:15:8f:1e:0b:7d:f3: f5:4e:97:0a:67:29:dc:65:14:be:21:6b:7c:cc:97:b0:dc:aa: 58:47:3c:fd:2d:79:fd:ca:06:8d:1d:61:b6:71:6f:1c:39:13: d8:b8:99:b3:e4:e3:44:c5:d9:26:6d:90:57:8a:f2:b9:03:85: ea:a7:97:0d:08:f6:f6:24:cb:92:89:fc:b7:c4:dd:8f:cd:45: 2e:7c:95:d0:53:c5:59:0d:66:72:c2:c9:73:6c:53:35:ea:b1: 23:55:1b:71 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUy7kJ+Po04oP4SgGOCBd36zn2V4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI2MDA1MDExWhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NGQyOGY3ZWEwYTc2NWVlYmIzZDg4ZDg1MTg1YThiYzkx ODc4Y2Q5MmU3MDczOGY3YTgyMTYxNWIyMTZlMDViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE53qCMNGkeAnBrl6dttjADcf9PdutXht0au3oYTAhTAwy d1sQ6fypHM43rAvViD+ia/TsP2dhK2Ficj04LBrAKzhxVuB4N4XP1NaIQ1sFHGve Rm3ASbidPPyBDqPheAN8/viAAJ37il8REztMMuaOQstC4TbviOCpV+nATAVrSV0V Rovhd90zYeOyy/ObJNmwWnkaM3/P0CEm0cBlCj3TiPpX8Rg9tY7Vd7TXzCnMUckB CXR1tdVJST7hs6IrVmP1IRcbsQ4vqC5fFErwXE1t7pVseID8JEkld6p1DTAu9EbW /4pAguKg3fTuhBnlOxW2vEoOwwQQmINP7qmI/J0PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/DF1Oj5O+xIIFCHavRo5QH62s5UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlNjc2YTk3LTE3ZTgtNDNjOC1iMDMyLTUyMjA3NmM1MDFhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZG4MAwDQYJKoZIhvcNAQELBQADggEBADK0sIG+KtDRt3QT9NwOhv4zcxYI IzEzIjwx6Y6+vMkMk8S4DlY7ncyWPWL4NHr72s5JfncvK9SYKCVp7zQqCtBj3ech chnRWpa6Uk377h1sKoMgG3hll8++WUwejugA/d6dQIOrMlQubeUbcTEntd4UYB8D afsjH5Ezna8bkodfMZbmAjGLr1MF06BbyI9ugL4oOrbakueanJ338BWPHgt98/VO lwpnKdxlFL4ha3zMl7DcqlhHPP0tef3KBo0dYbZxbxw5E9i4mbPk40TF2SZtkFeK 8rkDheqnlw0I9vYky5KJ/LfE3Y/NRS58ldBTxVkNZnLCyXNsUzXqsSNVG3E= -----END CERTIFICATE-----Generated at Sun Mar 1 22:18:49 2026 by rpki-client