$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1c6bd36-a997-4d55-bb71-521a72eafe33.roa File: b1c6bd36-a997-4d55-bb71-521a72eafe33.roa (raw, json) Hash identifier: 9sgqhbRN9kejuCwkIv/XL5ZD6FfgLT1pMmn2QocZrFg= Subject key identifier: D0:64:8F:08:03:EB:7A:35:0E:D7:AD:3F:8C:FB:6A:79:B0:B9:7D:75 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 402557CABB2D0B230FFDEC2172582DBDAA352C53 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1c6bd36-a997-4d55-bb71-521a72eafe33.roa Signing time: Sun 22 Feb 2026 00:40:06 +0000 ROA not before: Sun 22 Feb 2026 00:40:06 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 209.92.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:25:57:ca:bb:2d:0b:23:0f:fd:ec:21:72:58:2d:bd:aa:35:2c:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 22 00:40:06 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=39d8f56ee55f19a3f069a40a169b1f77b5b13d70713da8537337da38cd95ffc2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b2:f0:62:de:b3:0d:8c:bd:39:04:eb:fb:9a: 06:7a:e7:bf:b5:61:e5:79:46:18:72:62:d2:67:cc: 91:9b:9c:86:21:9d:78:60:21:f3:c4:28:f8:53:86: 00:69:07:91:50:ac:7a:83:aa:7d:b5:2c:72:f4:16: ed:2f:a2:be:49:2f:98:88:ae:c5:d6:2f:ef:3c:7d: d9:80:f9:d9:b0:e3:7e:6e:2f:44:42:a1:98:d3:14: 10:ce:20:07:15:da:85:65:ca:1c:f1:d7:4d:6b:95: 46:2e:95:90:76:9e:9b:ff:bd:92:4e:9f:26:6c:c8: 6d:64:3f:f7:a1:57:1c:cb:ee:19:6c:9e:eb:46:5e: fa:2c:e4:14:8f:dd:9e:b5:97:e5:34:8e:d5:07:11: e7:9d:52:e8:74:e1:a8:d8:95:6b:77:d4:9f:58:ca: 9b:f1:15:96:06:5c:92:1b:89:07:f4:96:82:ce:05: 1c:16:4d:3f:1e:06:af:66:04:b2:b4:b2:44:02:ae: 4e:ea:4f:69:93:f0:dd:6a:b6:1e:03:11:36:7b:e5: 93:15:55:2e:d8:49:2c:52:45:88:65:13:1b:53:dc: 09:09:db:06:fb:5d:c6:14:51:65:31:c7:e3:fa:a9: 49:35:eb:1b:eb:66:09:5e:db:6a:8e:f6:9a:0d:b1: 72:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:64:8F:08:03:EB:7A:35:0E:D7:AD:3F:8C:FB:6A:79:B0:B9:7D:75 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1c6bd36-a997-4d55-bb71-521a72eafe33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.92.60.0/23 Signature Algorithm: sha256WithRSAEncryption ae:e8:b5:f2:6b:95:79:cf:e5:59:0c:e5:ab:ed:2d:c0:93:86: 0f:53:32:82:39:88:04:8b:ba:1a:58:77:66:70:67:8a:13:4b: 41:61:0f:d3:45:60:58:6b:ef:b5:7f:2c:56:74:44:5d:70:fa: f9:fb:0f:f5:72:89:e3:1c:87:a3:e8:b6:f2:10:49:26:bf:4f: 90:e3:d4:b7:2e:f3:d5:2d:63:25:81:7b:33:04:6f:c1:c4:2f: d5:58:9c:3b:0a:99:e9:b5:d5:ee:3e:98:d3:83:e6:2a:03:a9: 4d:67:7c:c1:d3:22:7d:35:2d:4c:30:19:df:e5:25:c3:da:da: 5d:fd:2a:c3:f9:7a:f3:98:28:8f:ce:d5:07:32:ab:7d:06:7a: 21:7b:e9:5e:dc:a9:77:11:fb:74:98:a6:cf:87:8c:d9:c1:24: ee:c2:1f:ef:4a:26:b6:39:f2:ad:96:b5:ed:e4:bb:12:09:0d: 5f:5f:da:58:ef:24:17:ad:46:6d:49:fc:f6:e8:d3:5e:6a:ee: 5f:9c:6c:98:31:05:46:ce:6b:c5:3f:d2:4e:be:31:b6:e3:ff: d0:f8:6e:b0:a5:8c:3a:ab:f5:2d:f6:e6:e0:7d:f1:cd:67:39: a1:b7:4e:cd:18:37:83:f3:59:58:f0:1a:2c:d1:a5:d1:09:39: f8:9d:96:ae -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQCVXyrstCyMP/ewhclgtvao1LFMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIyMDA0MDA2WhcNMjYwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzOWQ4ZjU2ZWU1NWYxOWEzZjA2OWE0MGExNjliMWY3N2I1 YjEzZDcwNzEzZGE4NTM3MzM3ZGEzOGNkOTVmZmMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCGsvBi3rMNjL05BOv7mgZ657+1YeV5RhhyYtJnzJGbnIYh nXhgIfPEKPhThgBpB5FQrHqDqn21LHL0Fu0vor5JL5iIrsXWL+88fdmA+dmw435u L0RCoZjTFBDOIAcV2oVlyhzx101rlUYulZB2npv/vZJOnyZsyG1kP/ehVxzL7hls nutGXvos5BSP3Z61l+U0jtUHEeedUuh04ajYlWt31J9YypvxFZYGXJIbiQf0loLO BRwWTT8eBq9mBLK0skQCrk7qT2mT8N1qth4DETZ75ZMVVS7YSSxSRYhlExtT3AkJ 2wb7XcYUUWUxx+P6qUk16xvrZgle22qO9poNsXKXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0GSPCAPrejUO160/jPtqebC5fXUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IxYzZiZDM2LWE5OTctNGQ1NS1iYjcxLTUyMWE3MmVhZmUzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHRXDwwDQYJKoZIhvcNAQELBQADggEBAK7otfJrlXnP5VkM5avtLcCThg9T MoI5iASLuhpYd2ZwZ4oTS0FhD9NFYFhr77V/LFZ0RF1w+vn7D/VyieMch6PotvIQ SSa/T5Dj1Lcu89UtYyWBezMEb8HEL9VYnDsKmem11e4+mNOD5ioDqU1nfMHTIn01 LUwwGd/lJcPa2l39KsP5evOYKI/O1Qcyq30GeiF76V7cqXcR+3SYps+HjNnBJO7C H+9KJrY58q2Wte3kuxIJDV9f2ljvJBetRm1J/Pbo015q7l+cbJgxBUbOa8U/0k6+ Mbbj/9D4brCljDqr9S325uB98c1nOaG3Ts0YN4PzWVjwGizRpdEJOfidlq4= -----END CERTIFICATE-----Generated at Sun Mar 1 22:23:24 2026 by rpki-client