$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc653e96-0d95-4eef-a3c8-8e462bde99e4.roa File: bc653e96-0d95-4eef-a3c8-8e462bde99e4.roa (raw, json) Hash identifier: Jhxja5zVgHkwLrIsj86Wu5rgAYHnS5KzqxkcR6vRSnw= Subject key identifier: 48:78:21:E1:19:96:D9:E8:E0:FD:B5:31:42:FA:CF:B6:18:4A:78:0F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 15665C1B6A805D3A1A652B818AB32F91B7D2E6F7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc653e96-0d95-4eef-a3c8-8e462bde99e4.roa Signing time: Thu 26 Feb 2026 00:41:27 +0000 ROA not before: Thu 26 Feb 2026 00:41:27 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 70.224.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:66:5c:1b:6a:80:5d:3a:1a:65:2b:81:8a:b3:2f:91:b7:d2:e6:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 26 00:41:27 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=c826a44ad9b3dbd96894f333accbda4b51e30b9c30ae345799e1677f6d844acb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:df:d9:53:86:c3:42:ff:f4:3d:58:75:25:d8: df:1e:d8:92:a9:1d:90:53:aa:07:8c:59:70:c1:a7: 90:37:c3:51:a2:8f:07:d6:ff:dd:cb:37:d0:fb:90: d8:cf:d9:55:aa:67:fd:b7:01:52:19:07:98:be:8d: ad:76:60:32:b5:e1:2f:46:fa:fb:51:64:ec:a0:b7: 3b:41:38:91:92:d3:47:e6:6e:8d:2d:c1:97:33:a6: 07:60:7c:21:85:4e:c5:c5:e4:a0:c6:d4:b3:f4:4d: a9:88:29:96:ee:92:dd:d1:6a:c3:84:1e:de:9f:90: 83:93:ea:60:17:1c:b9:c4:44:39:d4:ea:98:c7:78: 73:27:a0:51:aa:53:ad:5d:5f:2f:70:ba:49:75:5d: a6:1e:f3:05:e6:54:ab:3f:51:44:6e:97:ff:2c:1a: 63:6e:a9:5a:22:65:e2:db:b5:7e:e9:ad:47:8f:42: 4f:1b:ed:55:d1:7c:c0:c3:8e:8d:2d:e6:d1:89:6c: 2b:9c:03:b0:a4:bd:e0:9c:84:8f:a8:42:25:0c:85: b6:07:1a:99:e4:39:10:ee:5f:f0:87:50:97:d3:16: 03:e6:10:8f:50:68:92:e5:d2:39:ca:f1:07:7a:ad: c9:73:ed:62:48:89:95:39:87:0a:68:6d:2d:31:32: 42:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:78:21:E1:19:96:D9:E8:E0:FD:B5:31:42:FA:CF:B6:18:4A:78:0F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc653e96-0d95-4eef-a3c8-8e462bde99e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.224.224.0/19 Signature Algorithm: sha256WithRSAEncryption 81:de:59:92:51:3d:a6:92:2e:48:c7:0f:36:c7:ad:97:0e:4b: b8:9e:b4:01:66:72:05:01:ba:18:05:63:77:d3:60:37:ca:f5: 80:f0:0f:d1:75:3a:24:32:cf:d1:18:ca:1d:8e:3c:bb:34:1a: 54:d3:c2:fc:a2:37:a5:a6:9a:89:69:aa:09:d2:e5:7a:af:b9: 6c:9b:37:e3:61:ef:d4:31:ce:7d:a5:9b:62:89:58:5e:55:60: 1f:fe:71:33:5f:20:2a:19:0d:4e:c6:4f:2c:80:4d:79:b3:68: 85:a3:91:a1:b2:6b:81:78:63:45:b8:1d:e9:ab:fc:e9:80:49: 44:ff:72:7d:75:64:a2:1d:54:80:fb:18:7b:87:cc:1c:62:19: 7a:85:24:f6:64:49:86:55:df:99:51:d8:52:ca:34:b6:c4:69: 2b:11:17:c9:90:b1:30:72:9a:0d:3e:93:69:4b:da:f1:ee:98: 7f:28:81:6a:f9:c2:2c:d9:cd:36:ce:51:b4:6c:87:7f:f1:0c: 1d:cd:e3:69:19:b1:1e:3a:e3:bc:f2:6c:76:97:67:a5:e1:f6: 65:f7:0f:a9:49:4a:cd:2b:af:1c:f9:e9:d2:e4:cb:6f:10:fe: ff:c4:03:b5:b3:d1:90:8a:b4:a7:5e:44:d4:62:02:ab:84:1b: 54:b0:56:f1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFWZcG2qAXToaZSuBirMvkbfS5vcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI2MDA0MTI3WhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjODI2YTQ0YWQ5YjNkYmQ5Njg5NGYzMzNhY2NiZGE0YjUx ZTMwYjljMzBhZTM0NTc5OWUxNjc3ZjZkODQ0YWNiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCI39lThsNC//Q9WHUl2N8e2JKpHZBTqgeMWXDBp5A3w1Gi jwfW/93LN9D7kNjP2VWqZ/23AVIZB5i+ja12YDK14S9G+vtRZOygtztBOJGS00fm bo0twZczpgdgfCGFTsXF5KDG1LP0TamIKZbukt3RasOEHt6fkIOT6mAXHLnERDnU 6pjHeHMnoFGqU61dXy9wukl1XaYe8wXmVKs/UURul/8sGmNuqVoiZeLbtX7prUeP Qk8b7VXRfMDDjo0t5tGJbCucA7CkveCchI+oQiUMhbYHGpnkORDuX/CHUJfTFgPm EI9QaJLl0jnK8Qd6rclz7WJIiZU5hwpobS0xMkIrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSHgh4RmW2ejg/bUxQvrPthhKeA8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JjNjUzZTk2LTBkOTUtNGVlZi1hM2M4LThlNDYyYmRlOTllNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVG4OAwDQYJKoZIhvcNAQELBQADggEBAIHeWZJRPaaSLkjHDzbHrZcOS7ie tAFmcgUBuhgFY3fTYDfK9YDwD9F1OiQyz9EYyh2OPLs0GlTTwvyiN6WmmolpqgnS 5XqvuWybN+Nh79Qxzn2lm2KJWF5VYB/+cTNfICoZDU7GTyyATXmzaIWjkaGya4F4 Y0W4Hemr/OmASUT/cn11ZKIdVID7GHuHzBxiGXqFJPZkSYZV35lR2FLKNLbEaSsR F8mQsTBymg0+k2lL2vHumH8ogWr5wizZzTbOUbRsh3/xDB3N42kZsR4647zybHaX Z6Xh9mX3D6lJSs0rrxz56dLky28Q/v/EA7Wz0ZCKtKdeRNRiAquEG1SwVvE= -----END CERTIFICATE-----Generated at Sun Mar 1 23:40:40 2026 by rpki-client