$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3cc54db-2c57-4ae1-9d9d-ad429355093b.roa File: c3cc54db-2c57-4ae1-9d9d-ad429355093b.roa (raw, json) Hash identifier: XSu2/89EsxGwxlD9f0UY3FTitgfmOUqRNY1UidBmGWQ= Subject key identifier: 33:4D:30:44:79:E7:27:7B:7A:F6:3A:B9:F3:A4:47:2F:48:55:1C:81 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 24DA4B5556AD591E9C2D1DEBF867CCB4C37FC042 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3cc54db-2c57-4ae1-9d9d-ad429355093b.roa Signing time: Tue 24 Feb 2026 01:40:49 +0000 ROA not before: Tue 24 Feb 2026 01:40:49 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 216.72.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:da:4b:55:56:ad:59:1e:9c:2d:1d:eb:f8:67:cc:b4:c3:7f:c0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 01:40:49 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=237aa992d47e6b6e103b1b46ec69375aacb56bd7d27d6ad444fd68c601f1b135, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d1:49:7b:f6:0e:7e:1a:9a:f2:71:de:e6:25: 87:30:13:00:39:20:7b:4f:31:8b:46:f5:90:9d:7e: 64:65:b9:36:a0:ed:02:03:0e:01:2b:f6:c9:95:22: 8e:b6:72:0c:a3:5b:4f:4b:90:8d:d3:17:12:36:6d: d3:e8:8f:5d:78:99:bc:63:b6:2a:af:93:35:08:a8: 13:6b:27:53:db:1f:ce:4b:2e:7f:e0:95:de:e9:3e: 34:3b:e2:7f:7e:51:eb:67:c1:31:d2:c2:49:63:e3: dc:36:8e:26:de:24:51:56:e0:33:ab:51:27:ae:f7: 39:cb:ba:a5:86:a6:c6:36:64:28:f7:1d:da:b1:3e: c9:28:ba:53:33:97:02:d9:cb:1b:02:be:83:70:04: 50:69:46:40:d5:23:77:d0:aa:2e:ad:0a:71:49:51: 0e:4d:6c:25:91:1f:d8:0c:84:bf:23:a5:7c:81:79: e1:66:4b:46:6a:c9:0a:d8:7f:9a:fa:dd:af:93:31: 3a:5d:66:3d:d4:75:53:d0:cd:a6:b7:38:3d:47:5d: 91:8a:3a:2c:b6:7d:4a:06:97:4c:82:05:57:0f:87: b4:6a:29:0b:a7:c1:87:63:16:ac:98:15:79:d7:a3: 0d:b1:b6:2f:37:24:c0:59:bd:14:e5:82:fb:ea:3c: 23:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4D:30:44:79:E7:27:7B:7A:F6:3A:B9:F3:A4:47:2F:48:55:1C:81 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3cc54db-2c57-4ae1-9d9d-ad429355093b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.72.0.0/16 Signature Algorithm: sha256WithRSAEncryption 01:92:78:14:7c:e6:bd:2e:b8:64:38:78:7f:d1:5c:e5:d6:29: df:1d:b1:96:24:e9:a4:7a:f3:73:cd:d9:7a:31:a6:0f:bf:ee: c2:07:d9:68:46:26:1f:b2:c3:24:94:61:f9:55:a0:b4:8d:2a: 06:63:ff:08:e4:3e:b8:9f:b5:2f:5b:4f:1e:83:11:6d:66:f9: 10:db:91:1b:04:2a:ee:f9:40:9d:ca:72:7c:37:50:b9:d7:b9: 45:cc:81:b0:92:3e:a5:a7:30:2e:d4:8c:d3:36:cf:85:61:5c: 33:75:ec:08:d8:f2:14:4f:1a:a4:9c:64:10:11:37:d1:ba:ad: ff:a0:2a:89:de:6f:c7:20:a4:b7:36:a2:6f:f5:d8:6b:22:86: 59:90:dc:18:0e:ad:c4:16:be:49:51:4b:da:d5:73:42:b7:20: e7:cd:85:f2:35:17:b1:b6:3f:b2:40:d5:4d:5b:9a:42:8a:35: bc:42:21:69:f2:5f:f7:be:e0:ae:4f:aa:40:fa:0a:94:f9:73: e5:a8:43:8b:34:66:c9:02:21:fb:00:f0:38:f7:d7:b1:c5:d9: aa:49:f0:56:04:a1:ff:59:37:72:d7:08:b0:e3:34:15:e8:7d: 5a:5f:4a:bc:83:64:5d:ee:8f:a0:4b:ae:75:e7:a0:36:82:56: 5f:e6:5a:fc -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJNpLVVatWR6cLR3r+GfMtMN/wEIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDE0MDQ5WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzdhYTk5MmQ0N2U2YjZlMTAzYjFiNDZlYzY5Mzc1YWFj YjU2YmQ3ZDI3ZDZhZDQ0NGZkNjhjNjAxZjFiMTM1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy0Ul79g5+Gprycd7mJYcwEwA5IHtPMYtG9ZCdfmRluTag 7QIDDgEr9smVIo62cgyjW09LkI3TFxI2bdPoj114mbxjtiqvkzUIqBNrJ1PbH85L Ln/gld7pPjQ74n9+UetnwTHSwklj49w2jibeJFFW4DOrUSeu9znLuqWGpsY2ZCj3 HdqxPskoulMzlwLZyxsCvoNwBFBpRkDVI3fQqi6tCnFJUQ5NbCWRH9gMhL8jpXyB eeFmS0ZqyQrYf5r63a+TMTpdZj3UdVPQzaa3OD1HXZGKOiy2fUoGl0yCBVcPh7Rq KQunwYdjFqyYFXnXow2xti83JMBZvRTlgvvqPCM9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUM00wRHnnJ3t69jq586RHL0hVHIEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MzY2M1NGRiLTJjNTctNGFlMS05ZDlkLWFkNDI5MzU1MDkzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDYSDANBgkqhkiG9w0BAQsFAAOCAQEAAZJ4FHzmvS64ZDh4f9Fc5dYp3x2x liTppHrzc83ZejGmD7/uwgfZaEYmH7LDJJRh+VWgtI0qBmP/COQ+uJ+1L1tPHoMR bWb5ENuRGwQq7vlAncpyfDdQude5RcyBsJI+pacwLtSM0zbPhWFcM3XsCNjyFE8a pJxkEBE30bqt/6Aqid5vxyCktzaib/XYayKGWZDcGA6txBa+SVFL2tVzQrcg582F 8jUXsbY/skDVTVuaQoo1vEIhafJf977grk+qQPoKlPlz5ahDizRmyQIh+wDwOPfX scXZqknwVgSh/1k3ctcIsOM0Feh9Wl9KvINkXe6PoEuudeegNoJWX+Za/A== -----END CERTIFICATE-----Generated at Mon Mar 2 04:54:26 2026 by rpki-client