$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf086bb2-87a2-4bec-bc28-c6b10890cf0b.roa File: bf086bb2-87a2-4bec-bc28-c6b10890cf0b.roa (raw, json) Hash identifier: wWuwlc6QkpguHGh0y5Ix/HCnmRc8cP4rlz2sD19/z10= Subject key identifier: 6C:C4:E9:70:D8:EC:52:62:12:01:1E:F6:40:1B:F1:82:EE:9F:D9:87 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 388FF48B336223DE1B7E83CA6CA900371FD14DB2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf086bb2-87a2-4bec-bc28-c6b10890cf0b.roa Signing time: Mon 09 Feb 2026 00:00:56 +0000 ROA not before: Mon 09 Feb 2026 00:00:56 +0000 ROA not after: Sun 10 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 150.247.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:8f:f4:8b:33:62:23:de:1b:7e:83:ca:6c:a9:00:37:1f:d1:4d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 9 00:00:56 2026 GMT Not After : May 10 23:59:59 2026 GMT Subject: serialNumber=a397405671155cae64e959138010c09ec23fcc27c319bfd41858988d2168ce6f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:43:2a:09:27:b1:45:ce:6d:cf:e3:06:2f:f7: 3a:84:17:35:df:9d:f9:0d:c9:5a:35:67:8a:da:88: b1:60:58:87:27:58:56:f0:2f:c7:51:bd:23:c7:e3: f9:05:c4:26:6b:38:cf:0c:3b:fd:bf:12:2b:a5:65: 08:10:57:8a:99:90:51:a6:2b:b5:e7:2f:09:a0:71: 8c:ad:83:25:72:03:29:df:65:f0:cc:95:f3:84:fc: 99:54:81:82:f2:f6:0f:c3:ea:c0:98:93:3c:f8:7f: 70:11:fb:65:ae:9e:1b:13:ea:3e:42:cf:d4:36:d7: c0:c1:a6:f6:f2:dc:78:c8:88:3b:50:6f:88:35:60: 5c:78:a8:a3:c5:80:00:aa:7b:4c:24:47:33:52:0d: da:a1:98:33:a5:40:9f:15:23:b5:87:e1:1a:38:06: 36:5d:41:28:bc:54:97:a4:26:8f:4d:bc:33:04:20: 87:55:1a:e9:71:a2:78:94:83:c7:e9:33:d4:14:30: a0:95:5b:0d:d4:2c:e6:5c:12:ae:cb:01:a8:e5:66: fe:65:37:f4:bc:79:d5:26:b6:d3:36:36:32:3c:30: 26:b4:f4:1f:5a:d4:d7:e1:bb:b6:83:3e:8d:d0:21: a9:1c:b8:65:95:e7:9c:62:bc:4e:3b:82:e1:fb:fd: 1f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C4:E9:70:D8:EC:52:62:12:01:1E:F6:40:1B:F1:82:EE:9F:D9:87 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf086bb2-87a2-4bec-bc28-c6b10890cf0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.247.43.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:72:54:a6:1c:d6:55:c0:24:d3:e7:30:f6:fe:d5:8f:17:26: ca:b3:ef:c7:25:dd:6d:2f:98:87:60:16:7b:42:91:8c:0b:1d: bd:d0:fa:fb:96:8d:d4:e4:c3:d5:fe:dd:6e:0c:9f:4f:8a:9d: 11:dd:03:a1:04:a7:a3:e9:47:23:b4:3c:22:ba:eb:27:ae:d0: b2:a4:8b:66:3b:55:00:95:44:1d:a4:7b:82:1e:04:8c:73:a1: 85:7f:f4:7a:5d:bb:81:50:09:33:01:d5:c0:e2:e6:02:5d:b9: b4:0d:e7:e5:86:5d:8f:26:c5:06:85:e9:08:9b:5e:7d:5b:15: 7a:22:8d:0f:d0:0a:76:4a:4d:9a:f8:b9:f0:02:ce:f7:cf:60: 35:3c:d8:6d:5e:fd:17:0a:4a:d8:e3:a0:97:84:a1:bd:ae:8b: 95:1f:66:2c:b9:4d:3f:09:c1:f6:c8:5c:f3:7d:0c:11:bb:c2: be:e5:9e:5a:72:f9:9c:59:39:f1:d8:13:13:5d:8a:c1:84:0d: 55:6d:df:34:6e:1f:f1:fa:79:b0:5d:ba:71:bd:d6:e8:41:28: 91:05:d1:e2:54:5b:10:51:81:b7:36:39:d6:9e:a5:32:21:fd: ca:a3:1a:91:ef:55:be:aa:12:b1:f6:be:bd:20:2c:35:32:e6: 82:dc:2e:2d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOI/0izNiI94bfoPKbKkANx/RTbIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA5MDAwMDU2WhcNMjYwNTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzk3NDA1NjcxMTU1Y2FlNjRlOTU5MTM4MDEwYzA5ZWMy M2ZjYzI3YzMxOWJmZDQxODU4OTg4ZDIxNjhjZTZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjQyoJJ7FFzm3P4wYv9zqEFzXfnfkNyVo1Z4raiLFgWIcn WFbwL8dRvSPH4/kFxCZrOM8MO/2/EiulZQgQV4qZkFGmK7XnLwmgcYytgyVyAynf ZfDMlfOE/JlUgYLy9g/D6sCYkzz4f3AR+2WunhsT6j5Cz9Q218DBpvby3HjIiDtQ b4g1YFx4qKPFgACqe0wkRzNSDdqhmDOlQJ8VI7WH4Ro4BjZdQSi8VJekJo9NvDME IIdVGulxoniUg8fpM9QUMKCVWw3ULOZcEq7LAajlZv5lN/S8edUmttM2NjI8MCa0 9B9a1Nfhu7aDPo3QIakcuGWV55xivE47guH7/R8TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbMTpcNjsUmISAR72QBvxgu6f2YcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmMDg2YmIyLTg3YTItNGJlYy1iYzI4LWM2YjEwODkwY2YwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW9yswDQYJKoZIhvcNAQELBQADggEBAF5yVKYc1lXAJNPnMPb+1Y8XJsqz 78cl3W0vmIdgFntCkYwLHb3Q+vuWjdTkw9X+3W4Mn0+KnRHdA6EEp6PpRyO0PCK6 6yeu0LKki2Y7VQCVRB2ke4IeBIxzoYV/9Hpdu4FQCTMB1cDi5gJdubQN5+WGXY8m xQaF6QibXn1bFXoijQ/QCnZKTZr4ufACzvfPYDU82G1e/RcKStjjoJeEob2ui5Uf Ziy5TT8JwfbIXPN9DBG7wr7lnlpy+ZxZOfHYExNdisGEDVVt3zRuH/H6ebBdunG9 1uhBKJEF0eJUWxBRgbc2OdaepTIh/cqjGpHvVb6qErH2vr0gLDUy5oLcLi0= -----END CERTIFICATE-----Generated at Sun Mar 1 22:13:30 2026 by rpki-client