$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b244a5b6-00de-4670-b373-5a50fd91bc2a.roa File: b244a5b6-00de-4670-b373-5a50fd91bc2a.roa (raw, json) Hash identifier: Kg4xuIegueJ6xDGGSj7yCUs4O6sgMU1nSnIgySOhJqA= Subject key identifier: 3E:09:6E:89:D3:B3:09:66:50:1F:DB:BC:9D:AA:92:97:66:A6:5C:C7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 47730A28FBCC5A2B267E3D670E6511E3A7F1676F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b244a5b6-00de-4670-b373-5a50fd91bc2a.roa Signing time: Tue 17 Feb 2026 03:21:48 +0000 ROA not before: Tue 17 Feb 2026 03:21:48 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 69.25.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:73:0a:28:fb:cc:5a:2b:26:7e:3d:67:0e:65:11:e3:a7:f1:67:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 17 03:21:48 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=3676eefd74164c6eca3c69d14b961dc81d3e06671e0819f2f7b4582a40ddc419, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6b:38:e5:ad:b1:1f:1a:37:ec:81:47:53:90: d4:d0:59:9a:94:e6:5c:97:d8:29:83:fe:81:50:eb: 9a:aa:04:b1:72:87:59:93:d4:e2:07:1e:ca:e8:93: 6d:1f:8b:c5:fc:d4:1a:f2:a0:93:bb:9e:2e:e6:f6: 72:2d:ca:c1:b0:c7:30:05:55:68:6b:89:53:b6:c2: 32:76:c1:48:d6:5d:f3:d4:30:8a:a0:c9:e5:17:d7: c9:ae:cd:30:cd:d8:ee:61:89:d6:0d:54:5c:aa:7d: 59:94:04:b2:e2:9f:28:ea:74:76:96:f9:39:24:ad: b8:95:10:2f:4d:fa:0a:b0:b3:2b:73:53:ac:fe:de: 05:56:61:15:2d:f6:2e:f0:70:89:5a:ef:c0:f3:b3: 22:d1:e1:db:a0:d8:9c:5a:10:01:c8:03:17:39:34: f2:9a:1a:7c:3b:29:d5:27:d4:80:62:88:85:81:3d: cb:e3:ff:ad:f6:e3:40:18:72:1f:a1:dd:86:02:1b: 88:d5:15:7b:ce:7c:8b:bc:3d:19:fe:92:fe:d4:68: d3:de:08:49:f5:ee:76:35:e7:e4:33:28:23:ff:75: e7:66:45:ad:96:e3:a8:f0:22:7c:9d:29:f2:19:75: ad:75:15:29:3b:b3:7a:bf:5c:0c:94:a5:5c:5c:1d: 7f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:09:6E:89:D3:B3:09:66:50:1F:DB:BC:9D:AA:92:97:66:A6:5C:C7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b244a5b6-00de-4670-b373-5a50fd91bc2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.25.232.0/21 Signature Algorithm: sha256WithRSAEncryption 7f:1d:29:f9:74:10:ab:2f:73:88:59:46:5f:4c:c0:9d:00:f6: 3a:ef:fb:39:73:ed:f0:85:0b:c4:59:f6:22:a8:b8:c6:c1:dd: 96:83:17:bf:2a:37:fa:5e:d1:60:65:2a:ea:51:71:77:94:09: 87:3f:cf:2b:a6:95:55:24:b7:45:28:5c:90:1b:87:5b:93:07: 9e:23:67:5f:09:88:19:1e:92:4f:1d:54:e7:96:7b:83:b8:ab: 75:d2:3f:f2:70:9b:78:4c:98:42:d7:21:fe:5e:f5:80:dd:ca: 81:9e:da:1b:ce:1a:e2:57:f1:96:21:07:8e:1b:1c:40:05:05: 51:04:44:fd:3f:0d:92:1f:ea:c9:1a:3b:f5:bd:af:77:15:ba: fd:23:b6:67:4f:64:b5:b7:22:80:70:cc:5e:b8:b4:39:bf:f3: 20:6c:15:ca:0f:93:64:ec:72:f9:db:56:4b:55:a8:bd:36:3b: 2d:a2:15:3f:24:01:f5:1a:aa:46:50:59:a0:ed:2e:8b:ce:df: fd:a9:e4:b0:17:9b:ce:bf:a5:81:b6:e2:ee:35:2e:25:ba:c1: b1:3d:8b:ce:98:f1:97:9f:b1:2e:88:49:b9:65:ad:b5:bc:fd: 88:42:99:e1:3c:61:f0:ab:d6:2e:de:e8:f1:aa:a9:f8:3b:95: 5a:af:36:4f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR3MKKPvMWismfj1nDmUR46fxZ28wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE3MDMyMTQ4WhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjc2ZWVmZDc0MTY0YzZlY2EzYzY5ZDE0Yjk2MWRjODFk M2UwNjY3MWUwODE5ZjJmN2I0NTgyYTQwZGRjNDE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsazjlrbEfGjfsgUdTkNTQWZqU5lyX2CmD/oFQ65qqBLFy h1mT1OIHHsrok20fi8X81BryoJO7ni7m9nItysGwxzAFVWhriVO2wjJ2wUjWXfPU MIqgyeUX18muzTDN2O5hidYNVFyqfVmUBLLinyjqdHaW+TkkrbiVEC9N+gqwsytz U6z+3gVWYRUt9i7wcIla78DzsyLR4dug2JxaEAHIAxc5NPKaGnw7KdUn1IBiiIWB Pcvj/63240AYch+h3YYCG4jVFXvOfIu8PRn+kv7UaNPeCEn17nY15+QzKCP/dedm Ra2W46jwInydKfIZda11FSk7s3q/XAyUpVxcHX+hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPgluidOzCWZQH9u8naqSl2amXMcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IyNDRhNWI2LTAwZGUtNDY3MC1iMzczLTVhNTBmZDkxYmMyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANFGegwDQYJKoZIhvcNAQELBQADggEBAH8dKfl0EKsvc4hZRl9MwJ0A9jrv +zlz7fCFC8RZ9iKouMbB3ZaDF78qN/pe0WBlKupRcXeUCYc/zyumlVUkt0UoXJAb h1uTB54jZ18JiBkekk8dVOeWe4O4q3XSP/Jwm3hMmELXIf5e9YDdyoGe2hvOGuJX 8ZYhB44bHEAFBVEERP0/DZIf6skaO/W9r3cVuv0jtmdPZLW3IoBwzF64tDm/8yBs FcoPk2TscvnbVktVqL02Oy2iFT8kAfUaqkZQWaDtLovO3/2p5LAXm86/pYG24u41 LiW6wbE9i86Y8ZefsS6ISbllrbW8/YhCmeE8YfCr1i7e6PGqqfg7lVqvNk8= -----END CERTIFICATE-----Generated at Sun Mar 1 22:05:48 2026 by rpki-client