$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c20a4339-eb63-46d8-abbf-87327eb50023.roa File: c20a4339-eb63-46d8-abbf-87327eb50023.roa (raw, json) Hash identifier: Z0NqegVcMC9DKeOdnS6cdDcOSzvOelea4OMMMHOx6y4= Subject key identifier: A9:F5:3A:29:32:D9:62:AF:94:AD:44:19:29:86:92:6F:5B:BD:C2:48 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11D6A4005ACB919F7327C80AD4EB0D2E9AAF00CC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c20a4339-eb63-46d8-abbf-87327eb50023.roa Signing time: Wed 25 Feb 2026 02:10:10 +0000 ROA not before: Wed 25 Feb 2026 02:10:10 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 16.193.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d6:a4:00:5a:cb:91:9f:73:27:c8:0a:d4:eb:0d:2e:9a:af:00:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 02:10:10 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=8d15f617b9dc99b9621ed0d9aff7b47feb5a2ac2b7b9957c124379602b5bfe57, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:81:56:13:f1:29:75:d1:fc:45:f3:94:2a:63: 41:3f:0e:b3:9d:14:65:4c:a6:97:a7:e6:76:fb:3e: 3e:a0:09:61:82:ba:f3:71:91:65:4e:a8:8b:e4:ad: e1:a1:59:cc:8f:be:dd:ae:fa:fd:53:ed:df:42:96: b7:b1:14:5e:18:bc:f0:c4:3a:ef:e9:25:c6:77:be: 4e:83:2b:36:5f:68:f7:51:bf:3d:49:97:81:93:e0: 41:26:22:f2:e8:91:21:96:1d:53:ab:0b:2b:2e:84: 61:40:e2:bd:f7:97:4e:d0:ae:c9:af:c9:70:91:5e: 2c:4f:c7:ec:bc:bf:e9:bd:f7:18:89:9d:d1:ba:c8: d6:16:58:41:28:3e:ca:fc:48:42:fb:45:bf:01:d6: 9d:b5:66:64:92:df:f0:76:4b:ba:95:f7:d2:93:67: 3f:ba:35:a1:21:e8:88:ef:5e:a2:a3:52:a6:11:dc: 88:b3:60:34:73:7f:fa:47:fb:fc:5e:a2:8f:c8:cb: b0:25:c9:be:34:07:68:60:1e:14:82:a3:f1:e8:c5: 57:4b:07:28:4d:f2:17:49:b3:8e:71:76:1a:b7:48: c8:94:75:40:65:18:42:4f:13:25:2a:f0:1a:03:12: 59:13:5f:bc:77:2b:58:e2:58:2b:fa:ff:31:db:a3: 1e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F5:3A:29:32:D9:62:AF:94:AD:44:19:29:86:92:6F:5B:BD:C2:48 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c20a4339-eb63-46d8-abbf-87327eb50023.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.193.0.0/16 Signature Algorithm: sha256WithRSAEncryption 78:4e:24:72:b8:5b:94:31:c3:e0:31:dc:22:87:c5:2e:5a:cc: 1d:4f:99:7d:90:28:c2:a5:9c:73:fc:1d:51:66:d6:bf:a2:67: 80:7e:47:eb:a7:74:e4:61:56:62:94:4e:31:60:01:d3:57:5f: bd:91:72:93:3a:84:0b:7f:8e:96:cc:48:45:44:d1:d4:28:61: be:45:19:da:74:80:09:af:8a:69:63:39:5c:4d:47:22:a1:d9: e5:eb:52:0e:1d:ab:9c:f9:2c:56:ff:04:a5:54:8e:1e:56:9b: f4:1d:c2:6f:6a:41:49:e7:eb:cc:e2:38:2a:2e:e7:ed:f7:f9: be:3e:92:78:64:5f:23:26:9c:5f:6e:82:e7:61:7c:ab:03:71: 5d:35:01:a0:74:fa:b5:f8:39:ca:eb:8d:f1:fa:4e:71:44:5f: 4e:fa:f6:ee:78:54:2e:c3:dd:4c:d7:dd:12:0b:e4:20:c9:e6: 93:fb:e1:07:e3:24:6b:0b:f6:b6:e0:d9:2a:2f:cd:aa:3e:fa: f2:c4:df:77:f4:46:9c:75:de:50:45:1c:6f:61:0e:3c:ed:ac: a3:f7:a5:ca:10:83:23:84:84:bf:bf:f6:46:22:11:b7:2b:f7: 47:5d:a7:87:0d:44:a8:74:bd:80:2d:fe:d5:8a:a3:bd:40:db: cf:8e:67:0c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUEdakAFrLkZ9zJ8gK1OsNLpqvAMwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDIxMDEwWhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDE1ZjYxN2I5ZGM5OWI5NjIxZWQwZDlhZmY3YjQ3ZmVi NWEyYWMyYjdiOTk1N2MxMjQzNzk2MDJiNWJmZTU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCogVYT8Sl10fxF85QqY0E/DrOdFGVMppen5nb7Pj6gCWGC uvNxkWVOqIvkreGhWcyPvt2u+v1T7d9ClrexFF4YvPDEOu/pJcZ3vk6DKzZfaPdR vz1Jl4GT4EEmIvLokSGWHVOrCysuhGFA4r33l07QrsmvyXCRXixPx+y8v+m99xiJ ndG6yNYWWEEoPsr8SEL7Rb8B1p21ZmSS3/B2S7qV99KTZz+6NaEh6IjvXqKjUqYR 3IizYDRzf/pH+/xeoo/Iy7Alyb40B2hgHhSCo/HoxVdLByhN8hdJs45xdhq3SMiU dUBlGEJPEyUq8BoDElkTX7x3K1jiWCv6/zHbox5bAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUqfU6KTLZYq+UrUQZKYaSb1u9wkgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MyMGE0MzM5LWViNjMtNDZkOC1hYmJmLTg3MzI3ZWI1MDAyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQwTANBgkqhkiG9w0BAQsFAAOCAQEAeE4kcrhblDHD4DHcIofFLlrMHU+Z fZAowqWcc/wdUWbWv6JngH5H66d05GFWYpROMWAB01dfvZFykzqEC3+OlsxIRUTR 1ChhvkUZ2nSACa+KaWM5XE1HIqHZ5etSDh2rnPksVv8EpVSOHlab9B3Cb2pBSefr zOI4Ki7n7ff5vj6SeGRfIyacX26C52F8qwNxXTUBoHT6tfg5yuuN8fpOcURfTvr2 7nhULsPdTNfdEgvkIMnmk/vhB+Mkawv2tuDZKi/Nqj768sTfd/RGnHXeUEUcb2EO PO2so/elyhCDI4SEv7/2RiIRtyv3R12nhw1EqHS9gC3+1YqjvUDbz45nDA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:26 2026 by rpki-client