$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af26cb48-f252-4748-8895-3681196bc385.roa File: af26cb48-f252-4748-8895-3681196bc385.roa (raw, json) Hash identifier: OUgJQG/NdUMD2npJEgrXQNesJAkqeK+V1yw/vmGf6mc= Subject key identifier: 88:31:7E:78:C4:33:78:84:C0:37:1A:7C:6A:59:87:46:23:96:53:45 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E3BB60B3BA5832688F1D5F2B84E1CAB1EE13332 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af26cb48-f252-4748-8895-3681196bc385.roa Signing time: Thu 26 Feb 2026 01:01:32 +0000 ROA not before: Thu 26 Feb 2026 01:01:32 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.217.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:3b:b6:0b:3b:a5:83:26:88:f1:d5:f2:b8:4e:1c:ab:1e:e1:33:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 26 01:01:32 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=2a17b9c262350c482a5e85149cb269c124353b98b982c8070c1922b9297833b4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7d:d5:e8:c3:00:03:98:cb:0c:d1:6e:f8:1b: ed:d5:73:d7:dd:ac:84:98:ce:c9:8c:ae:2a:ff:03: 16:58:32:7b:62:65:46:6a:44:e5:84:03:bb:9a:02: c1:4b:6f:2b:07:c4:36:1e:8c:67:3c:32:48:e4:19: df:18:02:c7:23:0c:7d:f3:45:60:28:4c:53:ab:76: 26:a8:63:2f:16:06:cf:97:a6:e0:23:7e:ac:de:54: e6:27:07:13:3e:b8:9f:14:b4:90:b1:aa:42:42:3a: 2c:0e:6e:3f:26:6f:21:4c:2c:55:83:39:a9:11:23: 0c:ce:49:2a:03:56:c2:17:95:6e:80:77:b9:bb:cc: eb:2a:b8:35:0e:71:65:79:53:d6:04:e2:b5:ff:31: 81:20:dd:d6:a7:10:fd:65:30:08:16:d7:23:a3:e7: 18:24:ed:47:76:76:58:7c:cf:cd:cc:78:cd:88:af: d5:cd:df:d9:43:5e:be:ce:a1:8b:26:e4:82:a1:2d: 19:b3:99:99:2c:72:30:cf:93:fd:1a:c9:c0:68:92: be:ba:06:e4:c8:fe:67:57:a5:5b:4f:08:3b:fe:63: 95:c8:75:5d:42:3f:f8:9b:ae:0f:59:54:93:c3:e4: 15:30:b3:8b:12:a0:71:ee:17:fd:de:70:b7:af:8c: 29:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:31:7E:78:C4:33:78:84:C0:37:1A:7C:6A:59:87:46:23:96:53:45 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af26cb48-f252-4748-8895-3681196bc385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.217.0.0/16 Signature Algorithm: sha256WithRSAEncryption b6:cd:de:38:f1:38:e2:4b:50:ba:9d:0a:9d:3d:f8:7d:9b:bc: 60:07:f1:0c:db:19:d2:17:f5:10:22:8c:7c:7c:06:13:d6:38: bd:46:a1:1c:b9:db:9e:a9:7c:d2:66:5f:3a:3a:5d:28:06:b8: d3:0e:77:4f:6b:58:75:e4:e9:56:a1:34:2d:60:48:60:5a:5d: 4c:99:6c:50:9b:c3:13:8f:15:b7:eb:a9:01:33:41:aa:50:d3: 39:2b:da:3d:9c:48:96:c6:4e:23:33:f3:cd:af:bb:4b:64:52: fb:73:e3:52:76:2e:08:3f:db:79:cf:44:4d:f4:26:de:45:02: bb:bd:1a:83:a4:c4:28:89:d1:a2:78:cd:15:5c:10:de:9f:b6: 7b:92:bb:a5:da:ed:13:2a:1e:31:c3:62:f1:39:b9:ca:92:e2: 08:fc:79:1a:4a:37:1b:15:3b:df:d0:e9:f0:df:a1:fa:4a:74: b9:73:4d:aa:97:28:78:a0:84:1a:4a:6d:59:ad:bd:99:4b:fb: 00:fc:83:60:64:44:ac:cb:6e:06:69:f8:aa:cf:9a:b1:b1:16: 40:74:b5:2c:ad:af:bc:a9:ed:5f:c6:de:76:fb:5b:5d:39:f7: 30:a2:dc:00:f8:b7:ea:4b:e8:4a:f2:11:c3:ca:da:8c:71:67: 86:02:a0:a7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULju2CzulgyaI8dXyuE4cqx7hMzIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI2MDEwMTMyWhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTE3YjljMjYyMzUwYzQ4MmE1ZTg1MTQ5Y2IyNjljMTI0 MzUzYjk4Yjk4MmM4MDcwYzE5MjJiOTI5NzgzM2I0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTfdXowwADmMsM0W74G+3Vc9fdrISYzsmMrir/AxZYMnti ZUZqROWEA7uaAsFLbysHxDYejGc8MkjkGd8YAscjDH3zRWAoTFOrdiaoYy8WBs+X puAjfqzeVOYnBxM+uJ8UtJCxqkJCOiwObj8mbyFMLFWDOakRIwzOSSoDVsIXlW6A d7m7zOsquDUOcWV5U9YE4rX/MYEg3danEP1lMAgW1yOj5xgk7Ud2dlh8z83MeM2I r9XN39lDXr7OoYsm5IKhLRmzmZkscjDPk/0aycBokr66BuTI/mdXpVtPCDv+Y5XI dV1CP/ibrg9ZVJPD5BUws4sSoHHuF/3ecLevjCnfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUiDF+eMQzeITANxp8almHRiOWU0UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmMjZjYjQ4LWYyNTItNDc0OC04ODk1LTM2ODExOTZiYzM4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA42TANBgkqhkiG9w0BAQsFAAOCAQEAts3eOPE44ktQup0KnT34fZu8YAfx DNsZ0hf1ECKMfHwGE9Y4vUahHLnbnql80mZfOjpdKAa40w53T2tYdeTpVqE0LWBI YFpdTJlsUJvDE48Vt+upATNBqlDTOSvaPZxIlsZOIzPzza+7S2RS+3PjUnYuCD/b ec9ETfQm3kUCu70ag6TEKInRonjNFVwQ3p+2e5K7pdrtEyoeMcNi8Tm5ypLiCPx5 Gko3GxU739Dp8N+h+kp0uXNNqpcoeKCEGkptWa29mUv7APyDYGRErMtuBmn4qs+a sbEWQHS1LK2vvKntX8bedvtbXTn3MKLcAPi36kvoSvIRw8rajHFnhgKgpw== -----END CERTIFICATE-----Generated at Sun Mar 1 22:56:02 2026 by rpki-client