$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b727064c-07d3-4be3-87a1-dd3468e18230.roa File: b727064c-07d3-4be3-87a1-dd3468e18230.roa (raw, json) Hash identifier: UdvL9H4HB7rJdGUEB75YhWUBQ2IOqe8aoe+joMDsmFY= Subject key identifier: 66:63:77:87:FE:0E:95:47:52:3D:B9:87:B8:9D:71:55:81:71:03:50 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4BA70809792E6E6E29CF0C93AED7FFAF27730682 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b727064c-07d3-4be3-87a1-dd3468e18230.roa Signing time: Sat 07 Feb 2026 00:21:11 +0000 ROA not before: Sat 07 Feb 2026 00:21:11 +0000 ROA not after: Fri 08 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 194.148.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a7:08:09:79:2e:6e:6e:29:cf:0c:93:ae:d7:ff:af:27:73:06:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 7 00:21:11 2026 GMT Not After : May 8 23:59:59 2026 GMT Subject: serialNumber=315d94cf1a6c59c44f2d9bbea5bcce3b789e60baa8fbb38f5734778e0dee4fa0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f1:b1:9f:1e:11:b0:e9:e6:55:f5:39:21:71: e5:9d:84:99:b8:a6:3c:f1:73:ab:7e:e6:be:3a:5a: 26:c9:f2:4b:90:14:7e:cf:27:c6:80:f9:2a:7e:3c: 98:a0:66:df:97:ac:47:ed:13:9e:a7:a7:87:d5:a6: 8d:d6:b7:fc:5b:15:68:fd:f4:15:26:8b:f8:f4:29: a3:2e:e8:30:6d:a1:5c:3e:de:be:cb:a8:5f:2e:4b: dd:10:03:18:c1:b6:b2:ae:ae:10:d1:71:4a:25:f5: 61:d4:38:0c:0e:bf:8f:b5:84:93:d0:95:19:d9:8a: b9:80:f6:0f:d7:77:11:10:a6:7b:a3:f3:bd:dc:ab: 75:37:bc:5c:68:e1:52:ec:cc:d6:79:32:91:30:cf: 55:d4:4e:a8:69:99:c2:76:d5:78:e3:13:7c:4b:16: 7c:b0:47:1b:55:14:0e:fc:27:12:88:bc:13:34:98: 43:50:48:39:6d:9a:c3:c9:6c:30:d4:6b:75:5d:db: b0:02:a3:01:0f:80:64:58:6a:93:5b:80:51:78:47: 4b:0a:91:5e:fc:cf:16:8d:24:e7:97:4c:d1:db:cd: f9:99:3e:de:44:a0:a6:94:54:7b:f9:f2:67:d1:d5: a0:a6:48:2a:9b:8e:ef:88:d9:2f:22:8a:ce:c0:7a: 42:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:63:77:87:FE:0E:95:47:52:3D:B9:87:B8:9D:71:55:81:71:03:50 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b727064c-07d3-4be3-87a1-dd3468e18230.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.148.128.0/17 Signature Algorithm: sha256WithRSAEncryption be:c4:f4:4d:cb:95:8c:89:ef:85:c6:2e:11:02:93:79:50:7d: 51:e5:6b:c3:93:e2:aa:d6:95:54:f5:22:6e:84:46:f8:7c:14: fb:73:06:1c:77:7f:42:ae:58:8a:5d:df:bc:eb:be:d2:b2:52: 71:40:ff:41:f7:b2:03:53:2c:07:df:9b:6f:32:90:33:af:3c: 03:97:6d:d3:1b:54:fe:8e:9b:1f:11:4c:c9:8a:72:1c:d5:26: fa:53:90:e5:79:bf:ed:8d:ee:2a:91:3c:18:4a:59:ca:a4:73: 64:77:14:17:22:dc:74:ab:78:60:4a:71:11:a1:5e:39:c5:24: a0:0d:04:3a:e4:30:0c:a2:2b:35:49:4c:3c:bc:de:7c:e4:a0: 67:f4:15:45:35:b3:51:5c:f6:98:b1:0a:19:98:8e:25:07:a5: 8a:ee:ae:68:4f:b8:d0:31:75:90:e6:66:cb:d4:e4:bd:d7:eb: e0:81:b3:c8:a5:af:cf:97:be:19:28:29:52:e4:0a:17:91:04: df:9f:1c:cf:52:46:29:3f:94:e1:60:db:78:c8:1a:34:aa:ae: dd:82:28:46:45:e1:bb:08:3d:67:a9:9e:1f:e8:8f:73:19:8f: d5:f6:9c:96:f6:31:40:96:4f:e1:ce:fc:fb:15:1f:10:f3:fd: 33:01:30:4d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS6cICXkubm4pzwyTrtf/rydzBoIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA3MDAyMTExWhcNMjYwNTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTVkOTRjZjFhNmM1OWM0NGYyZDliYmVhNWJjY2UzYjc4 OWU2MGJhYThmYmIzOGY1NzM0Nzc4ZTBkZWU0ZmEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCK8bGfHhGw6eZV9TkhceWdhJm4pjzxc6t+5r46WibJ8kuQ FH7PJ8aA+Sp+PJigZt+XrEftE56np4fVpo3Wt/xbFWj99BUmi/j0KaMu6DBtoVw+ 3r7LqF8uS90QAxjBtrKurhDRcUol9WHUOAwOv4+1hJPQlRnZirmA9g/XdxEQpnuj 873cq3U3vFxo4VLszNZ5MpEwz1XUTqhpmcJ21XjjE3xLFnywRxtVFA78JxKIvBM0 mENQSDltmsPJbDDUa3Vd27ACowEPgGRYapNbgFF4R0sKkV78zxaNJOeXTNHbzfmZ Pt5EoKaUVHv58mfR1aCmSCqbju+I2S8iis7AekK1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZmN3h/4OlUdSPbmHuJ1xVYFxA1AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I3MjcwNjRjLTA3ZDMtNGJlMy04N2ExLWRkMzQ2OGUxODIzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfClIAwDQYJKoZIhvcNAQELBQADggEBAL7E9E3LlYyJ74XGLhECk3lQfVHl a8OT4qrWlVT1Im6ERvh8FPtzBhx3f0KuWIpd37zrvtKyUnFA/0H3sgNTLAffm28y kDOvPAOXbdMbVP6Omx8RTMmKchzVJvpTkOV5v+2N7iqRPBhKWcqkc2R3FBci3HSr eGBKcRGhXjnFJKANBDrkMAyiKzVJTDy83nzkoGf0FUU1s1Fc9pixChmYjiUHpYru rmhPuNAxdZDmZsvU5L3X6+CBs8ilr8+XvhkoKVLkCheRBN+fHM9SRik/lOFg23jI GjSqrt2CKEZF4bsIPWepnh/oj3MZj9X2nJb2MUCWT+HO/PsVHxDz/TMBME0= -----END CERTIFICATE-----Generated at Mon Mar 2 00:16:39 2026 by rpki-client