$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78991a0-a78d-47a1-bcc8-7d0408ee1899.roa File: b78991a0-a78d-47a1-bcc8-7d0408ee1899.roa (raw, json) Hash identifier: wFe6gUGB4671bR7sX8sPKJI3RoFQPaBPNupfR22HLbg= Subject key identifier: 64:67:C6:2C:5D:11:FD:AB:26:8C:2B:D3:3F:E8:16:0D:77:BE:D2:9F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4B3D98D2D1DCAA3FA4E7F4335F5921729A33CAFA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78991a0-a78d-47a1-bcc8-7d0408ee1899.roa Signing time: Mon 16 Feb 2026 22:21:48 +0000 ROA not before: Mon 16 Feb 2026 22:21:48 +0000 ROA not after: Sun 17 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.94.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:3d:98:d2:d1:dc:aa:3f:a4:e7:f4:33:5f:59:21:72:9a:33:ca:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 16 22:21:48 2026 GMT Not After : May 17 23:59:59 2026 GMT Subject: serialNumber=f5f4fe9d07b6952b689ac5ef1b7224a4a65db5ad06f9d2e5231a00b04043ab6e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a1:eb:83:3b:d6:16:b5:d5:cf:e8:d2:63:66: 8f:95:b0:32:02:8a:74:84:19:1d:a5:bc:23:95:de: ab:ad:c6:cf:94:00:52:70:19:72:3a:d6:e8:03:cc: 80:d5:70:5b:3a:c1:3e:a1:1c:4d:70:cc:7f:01:06: 79:09:de:6e:b6:09:34:2d:a5:53:e0:27:8e:05:0d: cb:e4:0a:1b:0a:41:0a:f4:9d:70:06:2e:c5:f0:98: 00:b0:37:d3:7a:4c:5e:73:78:87:70:fe:ae:57:54: be:9f:e7:29:4a:6c:ee:5e:e3:ac:9f:17:d5:a1:da: 48:eb:65:42:bf:d8:13:bf:3c:c1:2e:ad:7b:80:f3: ef:2f:53:29:94:fb:91:40:39:59:49:78:7c:b7:b1: 56:70:bb:33:52:e9:dd:f1:3c:90:35:84:24:68:32: 29:24:24:df:d6:00:48:2f:04:2d:b6:aa:fc:bb:59: d9:12:41:e4:b1:37:8a:3c:4e:6c:6e:5d:37:36:8f: 70:31:52:50:32:88:65:66:c8:7c:bf:f8:bd:6d:f5: b4:9b:95:8b:df:e5:96:f4:b0:92:00:c4:31:0a:85: 21:66:35:d3:83:a3:29:cf:e0:59:8f:42:8f:4d:2e: 17:6d:3e:4c:ad:40:33:fc:e7:af:61:19:ff:e3:54: c4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:67:C6:2C:5D:11:FD:AB:26:8C:2B:D3:3F:E8:16:0D:77:BE:D2:9F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78991a0-a78d-47a1-bcc8-7d0408ee1899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.94.128.0/21 Signature Algorithm: sha256WithRSAEncryption 14:47:89:aa:d8:96:8d:57:d4:a2:b2:14:c1:2c:b5:68:03:90: ca:95:81:c3:7b:73:e8:1a:8c:e1:4b:91:3a:20:5a:c8:26:13: ed:01:48:b8:33:3f:13:6d:99:b4:36:bb:5c:78:02:24:ed:70: 95:5e:dc:e4:f7:b3:b0:3d:d7:ca:97:64:a8:fd:a4:a4:65:54: 52:bc:ca:68:35:19:ff:bd:0c:d3:a0:30:43:9f:1c:4f:f6:e6: f5:2b:04:ac:71:fe:6d:3c:95:f5:bc:03:0b:fe:e5:fe:e4:a5: 44:70:b4:5a:7f:08:a4:26:c5:3a:46:36:76:b3:8a:ca:f0:ba: 5d:e2:98:bc:fe:ab:79:a0:17:43:95:da:12:68:8c:c8:9e:d7: 3d:33:ac:7e:af:13:e5:57:eb:ef:68:50:15:e9:70:38:42:30: f9:ee:58:43:58:b0:06:6d:25:9c:6f:9a:1b:85:be:b5:92:fd: 47:a9:e5:92:7b:28:07:a5:8a:99:bd:14:33:d5:eb:c6:82:e6: ac:b5:03:88:04:b0:1a:a6:9e:74:e3:38:e5:b9:b2:82:74:f8: ec:71:2b:67:ad:06:c0:66:9f:b3:cd:72:71:5e:68:44:2f:33: 5a:cd:52:79:14:4b:5c:c2:0c:5a:2a:20:56:c4:d5:28:38:ab: 97:d9:24:db -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSz2Y0tHcqj+k5/QzX1khcpozyvowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE2MjIyMTQ4WhcNMjYwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNWY0ZmU5ZDA3YjY5NTJiNjg5YWM1ZWYxYjcyMjRhNGE2 NWRiNWFkMDZmOWQyZTUyMzFhMDBiMDQwNDNhYjZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcoeuDO9YWtdXP6NJjZo+VsDICinSEGR2lvCOV3qutxs+U AFJwGXI61ugDzIDVcFs6wT6hHE1wzH8BBnkJ3m62CTQtpVPgJ44FDcvkChsKQQr0 nXAGLsXwmACwN9N6TF5zeIdw/q5XVL6f5ylKbO5e46yfF9Wh2kjrZUK/2BO/PMEu rXuA8+8vUymU+5FAOVlJeHy3sVZwuzNS6d3xPJA1hCRoMikkJN/WAEgvBC22qvy7 WdkSQeSxN4o8TmxuXTc2j3AxUlAyiGVmyHy/+L1t9bSblYvf5Zb0sJIAxDEKhSFm NdODoynP4FmPQo9NLhdtPkytQDP8569hGf/jVMR9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZGfGLF0R/asmjCvTP+gWDXe+0p8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I3ODk5MWEwLWE3OGQtNDdhMS1iY2M4LTdkMDQwOGVlMTg5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANAXoAwDQYJKoZIhvcNAQELBQADggEBABRHiarYlo1X1KKyFMEstWgDkMqV gcN7c+gajOFLkTogWsgmE+0BSLgzPxNtmbQ2u1x4AiTtcJVe3OT3s7A918qXZKj9 pKRlVFK8ymg1Gf+9DNOgMEOfHE/25vUrBKxx/m08lfW8Awv+5f7kpURwtFp/CKQm xTpGNnazisrwul3imLz+q3mgF0OV2hJojMie1z0zrH6vE+VX6+9oUBXpcDhCMPnu WENYsAZtJZxvmhuFvrWS/Uep5ZJ7KAelipm9FDPV68aC5qy1A4gEsBqmnnTjOOW5 soJ0+OxxK2etBsBmn7PNcnFeaEQvM1rNUnkUS1zCDFoqIFbE1Sg4q5fZJNs= -----END CERTIFICATE-----Generated at Mon Mar 2 00:01:19 2026 by rpki-client