$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c52ef999-1380-4105-b9d4-1133b6115804.roa File: c52ef999-1380-4105-b9d4-1133b6115804.roa (raw, json) Hash identifier: 3DU6Sk75q6rTPqfzYmI9RurkdgslS+6pzIhw0tv7GeE= Subject key identifier: 35:FB:15:40:D7:22:90:BD:5E:BB:F2:66:48:23:F5:95:6D:14:8C:A2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4AF1C524280C1CA33019B006037807F19FA6DC95 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c52ef999-1380-4105-b9d4-1133b6115804.roa Signing time: Sat 28 Feb 2026 00:11:31 +0000 ROA not before: Sat 28 Feb 2026 00:11:31 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.143.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f1:c5:24:28:0c:1c:a3:30:19:b0:06:03:78:07:f1:9f:a6:dc:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 28 00:11:31 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=1dd40ae2c5c716ed5ab264d85a0ff0bcdbea5731b83b2aed8cf287e7e88d41bd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b4:18:6b:45:cd:65:1d:57:66:df:2d:e2:e5: 56:d5:fb:77:cd:f3:b5:e7:9f:19:6a:8b:9d:42:1b: 11:c1:c9:ff:df:aa:07:5f:fc:f8:31:af:23:27:89: 2e:01:1a:e3:91:3a:65:47:bc:e2:8c:46:ad:4d:be: fb:88:b6:d6:77:b5:fa:1d:73:4a:62:13:25:82:f5: 6e:6c:58:f2:64:57:dd:15:41:13:40:dd:16:d6:07: e8:d6:35:e5:cf:fb:ac:20:8f:ca:b3:8d:f7:d7:7d: 2f:55:a1:59:e9:33:2f:44:35:70:fd:36:9e:62:b3: 84:6d:7d:2e:49:dc:56:46:ee:47:74:b7:34:ff:ba: 3d:02:25:74:33:8b:b4:ef:19:8b:c3:97:f7:0c:0a: d1:e9:a3:a0:e0:66:1a:19:65:a4:d6:a1:13:8d:c0: aa:c6:b1:e5:9b:c7:83:52:1b:08:d4:8c:4c:f6:cb: d4:96:c2:03:b4:dc:31:52:77:dd:fb:c1:ab:4f:b8: 86:93:c0:f1:a5:ce:2c:bc:05:f8:8d:00:cd:2e:73: 9e:9d:43:6b:f3:10:f2:9c:89:c0:fe:08:dc:aa:1f: 19:4a:e4:6e:e2:3d:e1:48:f5:a7:05:58:ec:1b:fe: f2:21:db:14:b9:fe:45:09:fe:3f:bc:ad:91:4d:46: 03:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FB:15:40:D7:22:90:BD:5E:BB:F2:66:48:23:F5:95:6D:14:8C:A2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c52ef999-1380-4105-b9d4-1133b6115804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.143.0.0/18 Signature Algorithm: sha256WithRSAEncryption 9f:3d:4b:b1:d6:a5:00:70:e9:25:ef:20:2e:28:06:77:3a:5a: e2:18:e7:4f:60:4a:4e:f0:f5:f4:ee:f4:01:fb:0b:c3:9c:46: 12:3e:01:9f:27:32:9e:92:59:5a:b6:cd:ed:f6:be:d7:3e:11: c5:6b:e1:7b:0a:cf:4e:a6:8e:bb:10:e9:d2:d8:f4:4f:5a:6e: f1:38:f4:96:11:52:68:2d:a3:51:4d:fc:4f:86:75:55:a4:2a: c8:53:35:34:66:c7:e5:42:2f:ad:61:9b:33:39:c2:8e:be:30: f6:82:e8:7c:03:d6:22:0e:cb:ff:7f:ca:77:87:67:de:c0:4e: f7:30:5f:57:e8:26:fb:cf:75:2c:d4:56:10:58:3f:bf:15:b6: 7d:48:a2:47:2a:42:41:b8:bc:68:a5:90:fd:cd:be:0e:b1:48: 9e:be:3b:ab:05:ab:2a:e8:6f:4e:91:6e:e7:bc:72:49:85:85: b1:07:e2:34:3b:2a:f3:4a:53:cd:04:6e:a3:65:67:20:22:ef: 21:92:8c:0d:a8:18:82:cd:74:16:bd:e3:b0:6e:f4:bd:79:42: 94:d0:b3:ce:94:fb:d0:f2:96:c7:73:05:15:15:9c:4b:f1:15: 56:72:23:21:23:b5:40:09:91:1e:9f:0b:ce:28:14:8e:82:84: 78:f6:27:71 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSvHFJCgMHKMwGbAGA3gH8Z+m3JUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI4MDAxMTMxWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZGQ0MGFlMmM1YzcxNmVkNWFiMjY0ZDg1YTBmZjBiY2Ri ZWE1NzMxYjgzYjJhZWQ4Y2YyODdlN2U4OGQ0MWJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCptBhrRc1lHVdm3y3i5VbV+3fN87Xnnxlqi51CGxHByf/f qgdf/PgxryMniS4BGuOROmVHvOKMRq1NvvuIttZ3tfodc0piEyWC9W5sWPJkV90V QRNA3RbWB+jWNeXP+6wgj8qzjffXfS9VoVnpMy9ENXD9Np5is4RtfS5J3FZG7kd0 tzT/uj0CJXQzi7TvGYvDl/cMCtHpo6DgZhoZZaTWoRONwKrGseWbx4NSGwjUjEz2 y9SWwgO03DFSd937watPuIaTwPGlziy8BfiNAM0uc56dQ2vzEPKcicD+CNyqHxlK 5G7iPeFI9acFWOwb/vIh2xS5/kUJ/j+8rZFNRgO7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNfsVQNcikL1eu/JmSCP1lW0UjKIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M1MmVmOTk5LTEzODAtNDEwNS1iOWQ0LTExMzNiNjExNTgwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZHjwAwDQYJKoZIhvcNAQELBQADggEBAJ89S7HWpQBw6SXvIC4oBnc6WuIY 509gSk7w9fTu9AH7C8OcRhI+AZ8nMp6SWVq2ze32vtc+EcVr4XsKz06mjrsQ6dLY 9E9abvE49JYRUmgto1FN/E+GdVWkKshTNTRmx+VCL61hmzM5wo6+MPaC6HwD1iIO y/9/yneHZ97ATvcwX1foJvvPdSzUVhBYP78Vtn1IokcqQkG4vGilkP3Nvg6xSJ6+ O6sFqyrob06Rbue8ckmFhbEH4jQ7KvNKU80EbqNlZyAi7yGSjA2oGILNdBa947Bu 9L15QpTQs86U+9DylsdzBRUVnEvxFVZyIyEjtUAJkR6fC84oFI6ChHj2J3E= -----END CERTIFICATE-----Generated at Sun Mar 1 22:39:59 2026 by rpki-client