$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2f16a4b-5126-421f-944e-1846444cc92e.roa File: c2f16a4b-5126-421f-944e-1846444cc92e.roa (raw, json) Hash identifier: WWsBVn+weE898HM6FpgPV226hqcdlbq06vp0qT+IG0w= Subject key identifier: 53:4B:19:59:1E:E8:C3:B3:D6:4C:71:C2:32:12:DB:18:D4:0E:73:6C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 39CD3F759380660222677067A568FF82D467E58D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2f16a4b-5126-421f-944e-1846444cc92e.roa Signing time: Fri 06 Feb 2026 00:00:05 +0000 ROA not before: Fri 06 Feb 2026 00:00:05 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.25.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:cd:3f:75:93:80:66:02:22:67:70:67:a5:68:ff:82:d4:67:e5:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 6 00:00:05 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=df38453b5a6c65d828089343a785a20d5d0d3512c0b2c01f8c65d25691299620, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:52:5c:87:fe:33:eb:f6:3a:a3:af:d3:2d:86: ce:18:47:e1:f5:ae:89:f0:61:63:86:62:c8:7c:84: 6d:be:1f:ac:8a:0d:fd:55:0d:dc:64:37:b9:a5:fa: e1:05:14:a1:0c:66:89:ca:5d:b2:9b:fc:b0:57:1a: c4:7c:ec:dd:58:0f:f6:6e:ba:2d:37:bb:89:df:a9: 6b:f4:dd:8a:e2:11:45:98:09:cf:5d:c3:45:fa:0b: e1:d1:85:a5:b0:f5:e5:0a:5b:78:0b:fc:78:c1:62: 83:7d:36:ba:d2:d2:32:45:ce:d0:d9:4e:fc:1e:33: 50:bd:3a:25:21:03:87:7e:07:32:2a:93:fe:5f:a3: c9:e8:57:65:31:23:09:7a:c0:7e:73:e5:ef:07:a5: 36:e4:74:5e:ed:7e:3e:91:89:e7:a6:11:5d:16:77: d5:4b:2e:1c:f6:c2:f0:7e:61:ce:0a:ec:c2:1d:4b: 01:99:3d:2e:47:f4:3c:79:4b:9f:3d:60:8a:6d:6f: 8d:e3:45:6e:12:e6:44:94:cd:6a:af:4f:66:d5:ba: 88:96:11:ad:8d:6d:3d:f3:9f:2d:24:22:dd:b4:d2: 19:ed:41:4c:9b:d8:2e:57:bc:cc:37:2f:bf:db:6b: 6e:7c:38:61:41:36:00:23:f5:29:c8:77:74:02:2c: 35:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4B:19:59:1E:E8:C3:B3:D6:4C:71:C2:32:12:DB:18:D4:0E:73:6C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2f16a4b-5126-421f-944e-1846444cc92e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.25.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6f:99:2b:9b:81:36:1a:d7:eb:a1:7d:3e:d5:f2:73:1b:97:c1: 78:79:a6:2d:3e:ea:6b:df:11:86:df:e7:8e:91:07:8c:f8:5e: 07:81:63:ea:58:7c:6d:d8:e9:51:e8:e2:4b:8f:a5:f8:66:08: 09:9c:aa:0e:ef:63:91:ea:a4:1b:81:d6:e2:78:15:6e:45:fa: 56:a4:04:38:09:5f:a5:45:12:32:41:69:62:28:39:aa:71:57: 25:6c:8f:57:44:99:0a:f6:eb:52:eb:73:e1:4b:65:19:1d:67: 49:d4:6d:03:03:5d:89:c2:ac:83:95:bc:9b:88:d7:de:1f:43: ec:ab:1b:95:c7:50:2d:19:11:ab:c0:2d:98:f9:8f:a0:42:7b: 7b:71:00:ec:0b:f7:d0:fb:04:f2:04:a1:cc:bf:65:e7:36:a9: 7c:66:00:1a:69:55:06:00:1d:53:92:ef:69:42:b0:10:e7:5b: 7f:37:13:a3:b8:ec:ea:2d:dd:3b:84:ee:77:04:66:59:08:10: b7:7d:d2:13:63:05:d9:8e:30:ac:52:eb:bd:d0:53:7a:9e:2f: 2d:ab:34:ad:46:18:18:9f:42:74:17:1a:3a:56:cf:f1:e1:e7: dd:a0:33:73:1a:7f:27:4c:60:91:c4:9e:38:8e:7c:7c:ff:aa: 2f:b7:ce:38 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOc0/dZOAZgIiZ3BnpWj/gtRn5Y0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA2MDAwMDA1WhcNMjYwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjM4NDUzYjVhNmM2NWQ4MjgwODkzNDNhNzg1YTIwZDVk MGQzNTEyYzBiMmMwMWY4YzY1ZDI1NjkxMjk5NjIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoUlyH/jPr9jqjr9Mths4YR+H1ronwYWOGYsh8hG2+H6yK Df1VDdxkN7ml+uEFFKEMZonKXbKb/LBXGsR87N1YD/Zuui03u4nfqWv03YriEUWY Cc9dw0X6C+HRhaWw9eUKW3gL/HjBYoN9NrrS0jJFztDZTvweM1C9OiUhA4d+BzIq k/5fo8noV2UxIwl6wH5z5e8HpTbkdF7tfj6RieemEV0Wd9VLLhz2wvB+Yc4K7MId SwGZPS5H9Dx5S589YIptb43jRW4S5kSUzWqvT2bVuoiWEa2NbT3zny0kIt200hnt QUyb2C5XvMw3L7/ba258OGFBNgAj9SnId3QCLDVPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUU0sZWR7ow7PWTHHCMhLbGNQOc2wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MyZjE2YTRiLTUxMjYtNDIxZi05NDRlLTE4NDY0NDRjYzkyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQGTANBgkqhkiG9w0BAQsFAAOCAQEAb5krm4E2GtfroX0+1fJzG5fBeHmm LT7qa98Rht/njpEHjPheB4Fj6lh8bdjpUejiS4+l+GYICZyqDu9jkeqkG4HW4ngV bkX6VqQEOAlfpUUSMkFpYig5qnFXJWyPV0SZCvbrUutz4UtlGR1nSdRtAwNdicKs g5W8m4jX3h9D7KsblcdQLRkRq8AtmPmPoEJ7e3EA7Av30PsE8gShzL9l5zapfGYA GmlVBgAdU5LvaUKwEOdbfzcTo7js6i3dO4TudwRmWQgQt33SE2MF2Y4wrFLrvdBT ep4vLas0rUYYGJ9CdBcaOlbP8eHn3aAzcxp/J0xgkcSeOI58fP+qL7fOOA== -----END CERTIFICATE-----Generated at Mon Mar 2 04:55:03 2026 by rpki-client