$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8a1d699-66bf-4eac-bb45-6e3527625d81.roa File: b8a1d699-66bf-4eac-bb45-6e3527625d81.roa (raw, json) Hash identifier: u457wH75WN2mbYLGG54PVnOvubIreb2TQyZXa0kPM+o= Subject key identifier: 2A:F2:86:35:F9:B3:F0:A5:6F:8A:1F:23:F3:44:34:70:9B:86:5E:8C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C269DC6806227ACB1CA0EEA54E66897EB6C9551 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8a1d699-66bf-4eac-bb45-6e3527625d81.roa Signing time: Tue 24 Feb 2026 00:31:02 +0000 ROA not before: Tue 24 Feb 2026 00:31:02 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 8987 IP address blocks: 192.43.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:26:9d:c6:80:62:27:ac:b1:ca:0e:ea:54:e6:68:97:eb:6c:95:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 00:31:02 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=d6b91be8051f9387c57cf2689c854b398207686a15e3297fd5751db8bd8e78a6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b6:1f:6f:2b:b9:40:b1:d4:f2:b6:3c:e8:dc: 66:55:c8:e7:0d:a1:70:6c:18:a3:08:b9:f4:d5:2e: e0:b9:dc:c2:a0:1c:16:51:70:9d:8b:45:99:c4:ec: 2e:d7:cc:ff:4d:d2:a6:95:7f:87:72:2f:ec:fa:9b: a5:33:b6:58:31:f2:7d:0d:a9:00:c8:67:d7:2e:06: b3:80:ae:22:1b:be:98:c8:17:65:09:7b:c6:00:3a: 59:0b:81:e2:7d:6c:54:e9:77:d8:d4:4a:da:a2:7a: c6:8d:6c:5a:7f:8a:af:27:1b:be:56:15:0e:57:40: b6:c2:1b:49:f5:8e:99:37:00:ab:1d:e9:42:8a:2b: 8e:96:8c:e8:89:02:cd:5c:98:dd:fc:77:98:4c:50: 68:bd:13:61:55:d2:cd:24:39:53:62:41:95:12:38: 4b:6e:65:7e:13:04:b4:6f:5a:46:bd:46:a8:03:03: e0:c5:21:2c:f3:ce:1e:ec:61:d8:8a:7d:22:b7:9d: b3:eb:0d:a9:8e:36:c9:15:4a:4d:a7:70:28:81:e1: e0:16:ab:bb:d9:e3:c8:81:61:db:04:bf:a2:e9:81: 47:9b:0f:70:eb:db:51:b1:ce:32:b2:84:f7:74:89: ec:a6:57:7a:37:f6:5d:4e:c0:10:96:75:80:da:fc: 61:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F2:86:35:F9:B3:F0:A5:6F:8A:1F:23:F3:44:34:70:9B:86:5E:8C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8a1d699-66bf-4eac-bb45-6e3527625d81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.43.184.0/24 Signature Algorithm: sha256WithRSAEncryption 84:6e:03:d1:97:e6:da:b6:82:82:42:dc:75:0f:eb:3b:75:8d: b1:52:a1:e0:87:f8:7f:c5:b6:6a:d9:20:57:b3:80:7f:c5:d5: e6:68:c7:3a:9f:1a:b3:45:de:69:93:91:3d:5a:cf:a5:f3:2a: 01:c3:21:11:9b:5d:c2:19:e7:ab:45:25:c5:39:9c:b7:51:ba: c9:6a:52:a1:f6:68:a2:06:e0:b4:b1:43:8d:8d:d6:f3:44:3a: bc:e2:28:82:8e:f4:65:f0:da:e1:47:23:f2:cd:66:94:bb:49: f0:33:68:b0:ba:0b:15:88:6f:18:34:1e:88:b0:a0:65:e2:85: 9a:e8:7d:ca:f3:50:96:ec:81:cf:c8:e4:90:2f:12:dc:9e:1b: aa:0a:f2:91:86:4d:99:be:6a:4e:49:37:c5:15:52:7a:3a:14: 8c:33:1e:93:f9:dd:5e:8c:5c:51:cd:a3:14:c9:4e:cd:fd:34: 73:f3:8c:c9:67:af:82:3e:7d:22:fa:b5:de:28:dd:06:22:28: 8d:07:fc:c3:06:a5:5b:fd:12:89:75:bf:a6:10:65:80:57:2d: d1:06:b2:33:88:9d:8b:4a:62:65:93:8f:9f:b8:69:3f:c9:dd: 06:27:f6:a4:ed:0c:f5:49:0f:57:4c:d7:23:75:13:cb:d2:37: 44:4b:03:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPCadxoBiJ6yxyg7qVOZol+tslVEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDAzMTAyWhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNmI5MWJlODA1MWY5Mzg3YzU3Y2YyNjg5Yzg1NGIzOTgy MDc2ODZhMTVlMzI5N2ZkNTc1MWRiOGJkOGU3OGE2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRth9vK7lAsdTytjzo3GZVyOcNoXBsGKMIufTVLuC53MKg HBZRcJ2LRZnE7C7XzP9N0qaVf4dyL+z6m6Uztlgx8n0NqQDIZ9cuBrOAriIbvpjI F2UJe8YAOlkLgeJ9bFTpd9jUStqiesaNbFp/iq8nG75WFQ5XQLbCG0n1jpk3AKsd 6UKKK46WjOiJAs1cmN38d5hMUGi9E2FV0s0kOVNiQZUSOEtuZX4TBLRvWka9RqgD A+DFISzzzh7sYdiKfSK3nbPrDamONskVSk2ncCiB4eAWq7vZ48iBYdsEv6LpgUeb D3Dr21GxzjKyhPd0ieymV3o39l1OwBCWdYDa/GFJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKvKGNfmz8KVvih8j80Q0cJuGXowwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4YTFkNjk5LTY2YmYtNGVhYy1iYjQ1LTZlMzUyNzYyNWQ4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADAK7gwDQYJKoZIhvcNAQELBQADggEBAIRuA9GX5tq2goJC3HUP6zt1jbFS oeCH+H/FtmrZIFezgH/F1eZoxzqfGrNF3mmTkT1az6XzKgHDIRGbXcIZ56tFJcU5 nLdRuslqUqH2aKIG4LSxQ42N1vNEOrziKIKO9GXw2uFHI/LNZpS7SfAzaLC6CxWI bxg0HoiwoGXihZrofcrzUJbsgc/I5JAvEtyeG6oK8pGGTZm+ak5JN8UVUno6FIwz HpP53V6MXFHNoxTJTs39NHPzjMlnr4I+fSL6td4o3QYiKI0H/MMGpVv9Eol1v6YQ ZYBXLdEGsjOInYtKYmWTj5+4aT/J3QYn9qTtDPVJD1dM1yN1E8vSN0RLAys= -----END CERTIFICATE-----Generated at Mon Mar 2 00:09:07 2026 by rpki-client