$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde47091-f100-4aff-9494-c7b7a4bb9cb9.roa File: bde47091-f100-4aff-9494-c7b7a4bb9cb9.roa (raw, json) Hash identifier: d++JslPWoZlEZ5RRLh6sseNjIVf9Yts0zmVi4r2a9NI= Subject key identifier: 05:98:F2:58:46:48:05:FD:A9:B4:5E:28:DA:25:32:99:89:0D:D5:44 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7EE9405525076AA5284C4DC673A110C1CAB21C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde47091-f100-4aff-9494-c7b7a4bb9cb9.roa Signing time: Thu 26 Feb 2026 00:20:08 +0000 ROA not before: Thu 26 Feb 2026 00:20:08 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.254.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e9:40:55:25:07:6a:a5:28:4c:4d:c6:73:a1:10:c1:ca:b2:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 26 00:20:08 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=58f853f1847df7ca3f4dc8bec350a636564ba0a9a0c8cac0a61e960170d3e375, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:36:32:79:ec:af:59:67:67:6c:47:64:f3: 62:49:3e:42:5f:a5:a9:4f:0c:45:a1:ec:0c:36:79: d8:85:9b:9b:d7:8e:1d:c5:7b:8b:58:a7:a7:61:7c: bf:fc:2d:63:2b:a0:a3:48:9a:ca:3d:04:6d:49:fa: 4e:29:88:95:d5:de:c0:61:4f:d7:11:dc:e1:25:77: f6:1c:58:aa:8f:d4:d8:8d:e9:e8:5f:6d:f6:1a:08: db:09:b9:d4:f4:38:e7:77:12:93:e6:de:72:ff:b6: d1:50:03:5a:07:97:f8:34:21:d6:2b:62:2e:cb:40: 6c:4a:af:35:47:9d:5e:72:ee:7d:1b:28:f1:91:82: 56:22:f4:38:88:9a:b4:04:93:b4:27:6d:42:cd:36: e6:9c:f0:78:99:0e:d1:cb:84:d2:2c:f1:0b:d6:f9: 98:e5:87:12:c0:e0:4b:17:d6:7a:02:24:3f:37:25: df:b4:b4:00:22:ef:ba:30:b5:f3:d8:e7:2e:8e:e0: 3d:61:36:ee:d8:17:a0:30:18:38:ee:b5:77:f0:3b: a8:e5:4c:bc:3e:1e:0b:64:c1:f3:d7:51:2b:56:0e: f6:e3:0d:cb:e0:60:90:b2:51:47:1a:22:7a:dc:81: 7d:ca:84:1b:31:5c:76:1e:3b:8c:2f:90:b6:e4:4b: 56:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:98:F2:58:46:48:05:FD:A9:B4:5E:28:DA:25:32:99:89:0D:D5:44 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde47091-f100-4aff-9494-c7b7a4bb9cb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.254.12.0/24 Signature Algorithm: sha256WithRSAEncryption 91:05:85:4d:b0:00:33:31:cf:48:4d:9a:31:46:67:6a:65:fe: 45:d3:9f:5e:b8:68:6c:64:5c:65:74:08:b0:48:c0:90:0c:01: 34:74:f8:9a:dd:1c:c0:2a:e2:42:c4:e0:db:1a:78:f7:72:1d: 18:fa:6c:ca:89:c9:1d:72:05:cf:4d:73:3b:f7:c3:15:d1:d5: 77:0e:ce:24:5a:fb:2a:a8:14:09:7b:17:c8:56:82:13:22:63: 31:8b:a2:24:76:e6:85:e3:dc:3b:e3:7d:66:ca:d1:23:f5:81: 1f:8a:01:c3:da:68:7e:9b:5d:3b:59:8a:25:cf:59:76:74:1e: 02:ae:d1:9d:e1:e4:88:7d:6f:da:30:f3:cc:33:1f:4b:86:b0: 03:1f:9e:2f:e6:22:9a:08:b6:88:0c:ef:a9:86:03:a3:e4:50: be:b8:ce:30:d3:28:a9:10:0f:81:8c:6f:a3:97:ac:b6:c6:6a: 81:d3:5e:26:0f:c7:56:f8:22:41:f9:d6:44:2b:c2:9a:81:ef: b8:92:df:71:19:98:dd:1b:2a:e1:7c:10:5d:58:e6:d9:ce:0e: 36:a6:d0:57:d3:6d:d1:1e:9c:b5:80:54:8d:f5:90:e4:fc:8d: d8:c7:1d:6b:39:b4:c5:6d:f0:87:99:78:c8:aa:57:89:e5:2f: ff:03:b2:bc -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITfulAVSUHaqUoTE3Gc6EQwcqyHDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjAyMjYwMDIwMDhaFw0yNjA1MjcyMzU5NTla MHoxSTBHBgNVBAUTQDU4Zjg1M2YxODQ3ZGY3Y2EzZjRkYzhiZWMzNTBhNjM2NTY0 YmEwYTlhMGM4Y2FjMGE2MWU5NjAxNzBkM2UzNzUxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALVQNjJ57K9ZZ2dsR2TzYkk+Ql+lqU8MRaHsDDZ52IWbm9eO HcV7i1inp2F8v/wtYyugo0iayj0EbUn6TimIldXewGFP1xHc4SV39hxYqo/U2I3p 6F9t9hoI2wm51PQ453cSk+becv+20VADWgeX+DQh1itiLstAbEqvNUedXnLufRso 8ZGCViL0OIiatASTtCdtQs025pzweJkO0cuE0izxC9b5mOWHEsDgSxfWegIkPzcl 37S0ACLvujC189jnLo7gPWE27tgXoDAYOO61d/A7qOVMvD4eC2TB89dRK1YO9uMN y+BgkLJRRxoietyBfcqEGzFcdh47jC+QtuRLVgkCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQFmPJYRkgF/am0XijaJTKZiQ3VRDAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvYmRlNDcwOTEtZjEwMC00YWZmLTk0OTQtYzdiN2E0YmI5Y2I5LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEABf+DDANBgkqhkiG9w0BAQsFAAOCAQEAkQWFTbAAMzHPSE2aMUZnamX+RdOf XrhobGRcZXQIsEjAkAwBNHT4mt0cwCriQsTg2xp493IdGPpsyonJHXIFz01zO/fD FdHVdw7OJFr7KqgUCXsXyFaCEyJjMYuiJHbmhePcO+N9ZsrRI/WBH4oBw9pofptd O1mKJc9ZdnQeAq7RneHkiH1v2jDzzDMfS4awAx+eL+Yimgi2iAzvqYYDo+RQvrjO MNMoqRAPgYxvo5estsZqgdNeJg/HVvgiQfnWRCvCmoHvuJLfcRmY3Rsq4XwQXVjm 2c4ONqbQV9Nt0R6ctYBUjfWQ5PyN2Mcdazm0xW3wh5l4yKpXieUv/wOyvA== -----END CERTIFICATE-----Generated at Mon Mar 2 02:13:21 2026 by rpki-client