$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af71b0cb-dd42-4c24-a13d-9524e9ee1296.roa File: af71b0cb-dd42-4c24-a13d-9524e9ee1296.roa (raw, json) Hash identifier: /K+Mow1B+iP1YySRQi03BxVztREBz9DS3e/983m1vJc= Subject key identifier: 25:37:3C:DF:4F:78:01:FC:79:D8:69:B9:0A:3E:AC:77:EF:37:C0:9F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6DFDF15FEF42085C6FB6E7A7DBF402067F97766A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af71b0cb-dd42-4c24-a13d-9524e9ee1296.roa Signing time: Sun 15 Feb 2026 00:11:14 +0000 ROA not before: Sun 15 Feb 2026 00:11:14 +0000 ROA not after: Sat 16 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.114.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:fd:f1:5f:ef:42:08:5c:6f:b6:e7:a7:db:f4:02:06:7f:97:76:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 15 00:11:14 2026 GMT Not After : May 16 23:59:59 2026 GMT Subject: serialNumber=3e3b8f4917f002e1ed6649253a295e397f72aecde63ad5134460fc1b5975ae6f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:47:f4:be:0f:42:95:8f:a7:ff:63:6d:55:ab: 46:96:10:74:77:6a:01:d9:a3:0b:bc:0f:9f:8c:5a: d5:df:1d:c6:fc:2e:2e:62:37:0f:c1:fb:13:40:34: 2f:9a:20:1d:be:1f:b6:cf:01:ef:e0:5e:01:f3:a9: 37:41:0b:a7:a9:52:a7:7b:75:47:f7:16:a4:07:6a: 8d:2e:53:9f:b6:0c:07:4f:98:94:c5:56:b1:c9:28: 9f:dd:4b:42:b5:20:55:d5:aa:c6:86:77:f4:55:d0: 47:97:99:1e:05:d7:c3:34:bc:d1:41:e7:9b:c8:c7: 60:5d:f1:45:1c:a2:f2:23:d0:76:9c:bb:6c:10:43: 9d:66:73:8a:f7:b7:12:a1:81:99:19:ab:a6:cc:39: 6d:1f:37:77:23:8e:68:dd:4e:a4:91:71:db:28:77: 5f:f6:0d:64:44:4a:7e:d9:f3:59:67:3f:aa:6e:10: e6:d2:d1:c8:7f:6d:d2:42:85:6a:b2:e3:b7:5c:34: 43:20:a6:9e:5c:a8:42:02:26:60:5c:00:ae:c6:fa: 2d:3b:c1:8f:ad:e5:5a:2c:26:ff:43:a5:47:87:65: e4:5a:d6:34:aa:ae:64:c4:59:4d:48:b7:3c:8d:1b: ed:25:8e:0e:cf:85:ba:8d:37:d9:1f:53:4b:96:7f: 77:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:37:3C:DF:4F:78:01:FC:79:D8:69:B9:0A:3E:AC:77:EF:37:C0:9F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af71b0cb-dd42-4c24-a13d-9524e9ee1296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.114.0.0/16 Signature Algorithm: sha256WithRSAEncryption 67:8d:94:1e:7e:82:a0:53:13:80:7e:fa:33:96:cf:6e:2a:86: 3b:19:14:73:05:72:36:1c:03:86:69:6b:a8:be:c9:1b:96:cd: 56:96:ab:af:42:4a:da:7c:96:3e:62:dd:19:5e:55:50:c5:49: 6e:3a:46:f8:88:07:c4:e7:b1:06:f2:56:1b:51:a9:2d:95:33: 72:84:f5:ac:e2:d7:3c:6b:0a:11:bd:64:7e:86:03:32:f4:6b: bb:e0:68:f5:b6:3b:48:94:f2:9b:0b:35:27:92:10:a6:2b:35: 4e:87:e3:bd:27:a6:d6:51:3a:30:76:62:d7:0b:b5:ae:35:78: 82:bd:90:ff:54:65:d2:43:d3:77:dd:6e:be:ce:d9:d3:e6:8a: e7:f8:65:14:fd:b8:a2:d8:21:c1:50:7e:23:63:ef:02:87:4b: 9b:ad:42:7d:88:58:ba:d5:b0:04:27:4c:48:8b:43:e4:94:f6: 9d:70:3a:f1:5e:bc:62:3a:e3:a2:81:34:32:f9:ee:f0:fd:09: d4:42:41:38:fa:88:b6:f8:b8:71:23:ae:98:5b:25:a1:9f:db: 13:8a:77:95:1d:b7:93:03:7a:24:66:b8:a4:00:8e:75:d7:05: 9c:6b:06:9b:9b:f8:98:6c:53:69:fa:f1:50:8d:e6:6b:1e:7d: 88:3f:51:0b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUbf3xX+9CCFxvtuen2/QCBn+XdmowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE1MDAxMTE0WhcNMjYwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTNiOGY0OTE3ZjAwMmUxZWQ2NjQ5MjUzYTI5NWUzOTdm NzJhZWNkZTYzYWQ1MTM0NDYwZmMxYjU5NzVhZTZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdR/S+D0KVj6f/Y21Vq0aWEHR3agHZowu8D5+MWtXfHcb8 Li5iNw/B+xNANC+aIB2+H7bPAe/gXgHzqTdBC6epUqd7dUf3FqQHao0uU5+2DAdP mJTFVrHJKJ/dS0K1IFXVqsaGd/RV0EeXmR4F18M0vNFB55vIx2Bd8UUcovIj0Hac u2wQQ51mc4r3txKhgZkZq6bMOW0fN3cjjmjdTqSRcdsod1/2DWRESn7Z81lnP6pu EObS0ch/bdJChWqy47dcNEMgpp5cqEICJmBcAK7G+i07wY+t5VosJv9DpUeHZeRa 1jSqrmTEWU1ItzyNG+0ljg7PhbqNN9kfU0uWf3ctAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUJTc83094Afx52Gm5Cj6sd+83wJ8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmNzFiMGNiLWRkNDItNGMyNC1hMTNkLTk1MjRlOWVlMTI5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQcjANBgkqhkiG9w0BAQsFAAOCAQEAZ42UHn6CoFMTgH76M5bPbiqGOxkU cwVyNhwDhmlrqL7JG5bNVparr0JK2nyWPmLdGV5VUMVJbjpG+IgHxOexBvJWG1Gp LZUzcoT1rOLXPGsKEb1kfoYDMvRru+Bo9bY7SJTymws1J5IQpis1TofjvSem1lE6 MHZi1wu1rjV4gr2Q/1Rl0kPTd91uvs7Z0+aK5/hlFP24otghwVB+I2PvAodLm61C fYhYutWwBCdMSItD5JT2nXA68V68YjrjooE0Mvnu8P0J1EJBOPqItvi4cSOumFsl oZ/bE4p3lR23kwN6JGa4pACOddcFnGsGm5v4mGxTafrxUI3max59iD9RCw== -----END CERTIFICATE-----Generated at Mon Mar 2 04:56:41 2026 by rpki-client