$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c57f3080-c868-4c69-a23e-8d9d7dce91cd.roa File: c57f3080-c868-4c69-a23e-8d9d7dce91cd.roa (raw, json) Hash identifier: IkB/8gsHm3TZ0NRm00BFPP9+R+71Y6fd8EAl0GXp/Qs= Subject key identifier: E4:13:40:3A:CF:8C:8E:93:D2:23:2F:A8:D1:FC:15:AE:15:50:08:35 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1378B4719CC238BF97CEB563840EA6AA60B429B4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c57f3080-c868-4c69-a23e-8d9d7dce91cd.roa Signing time: Sat 07 Feb 2026 00:20:06 +0000 ROA not before: Sat 07 Feb 2026 00:20:06 +0000 ROA not after: Fri 08 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.130.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:78:b4:71:9c:c2:38:bf:97:ce:b5:63:84:0e:a6:aa:60:b4:29:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 7 00:20:06 2026 GMT Not After : May 8 23:59:59 2026 GMT Subject: serialNumber=bb906b26988988a083561e4da3096d06cca7a36867eb781ecc5e5badf03ff7ca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:20:57:63:e1:f2:e4:af:7a:9f:49:75:7c:a1: 33:5a:f1:85:8a:cc:8d:74:d9:ce:67:ee:b5:e2:c1: 66:93:8b:be:55:95:44:28:73:03:43:68:9e:a4:71: cd:8f:9d:9f:14:2e:d6:94:aa:20:ad:73:e4:9f:ec: 08:dc:7a:77:37:11:69:e7:c3:5b:f1:40:9a:c3:02: 56:1a:36:b4:1d:d2:1d:e8:b4:96:51:41:12:45:77: 9f:84:ca:06:ce:a9:dc:82:a8:59:74:6e:e3:ab:df: 12:54:d8:c8:94:87:00:0e:cd:0c:b9:bb:9d:64:1b: 19:92:7a:20:a3:e6:a4:dc:b1:58:07:a5:05:55:9c: 46:5b:e8:96:af:14:df:ae:b8:55:48:03:14:34:70: 4a:d1:6b:56:18:1f:4d:6f:ad:15:5d:8e:2f:93:ed: 12:c8:a6:c5:1b:4e:f4:20:8c:25:d8:1c:05:27:b0: 40:92:68:65:54:fc:9b:e8:08:cb:5e:28:67:e6:ec: 82:7e:e8:e9:b4:2e:03:a9:9b:be:86:ab:b3:01:a9: 57:40:9e:91:42:2e:54:6f:b7:3c:e2:4c:27:09:f7: d6:1e:9b:63:bf:6a:0c:83:7f:a9:6c:ca:b4:ca:70: 96:1b:44:c0:2a:ff:48:ea:3d:ed:4c:d9:1b:a0:05: d0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:13:40:3A:CF:8C:8E:93:D2:23:2F:A8:D1:FC:15:AE:15:50:08:35 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c57f3080-c868-4c69-a23e-8d9d7dce91cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.130.0.0/16 Signature Algorithm: sha256WithRSAEncryption 22:cd:e0:9b:03:a0:af:20:80:de:16:fb:16:08:f6:2f:d1:64: 51:30:be:ac:7f:2c:5a:a0:96:b6:33:ff:8f:c2:8e:0d:d3:78: 5a:66:8d:ca:d5:3c:65:1a:5e:90:17:7c:70:bc:fe:04:be:eb: 0e:df:75:30:3c:90:26:68:72:35:29:94:f4:52:70:ab:74:1b: 26:95:25:f2:f3:15:c6:3e:dd:ee:1e:ca:46:fd:b0:17:a4:46: 69:02:70:2f:34:d5:90:ea:68:76:d7:0c:4e:d6:c3:de:93:5a: 73:bc:c0:c4:5c:0d:83:be:20:fd:60:e7:98:3e:88:81:ae:64: 16:0d:b0:bc:0b:2f:99:7f:ac:6b:e5:61:3b:54:d7:da:ae:a1: 8e:5f:b6:7c:16:b5:e5:05:b5:d9:d8:51:c4:2e:9e:f0:37:39: 7d:32:62:27:1d:05:93:4c:85:9d:ed:99:ff:31:17:e1:e9:43: 7d:0e:41:dc:f3:3f:8c:ad:ed:57:42:02:a7:02:2d:92:64:ad: 4f:c4:68:cf:c8:35:b9:05:38:5a:5e:25:c6:6b:83:44:2c:69: 0a:3e:b2:75:f3:f5:3c:0c:25:e8:4a:48:48:35:09:18:c4:c5: 22:2a:bd:51:fb:e9:18:a0:09:f7:b9:ef:29:d6:c2:5b:81:bb: 66:10:c8:84 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUE3i0cZzCOL+XzrVjhA6mqmC0KbQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA3MDAyMDA2WhcNMjYwNTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjkwNmIyNjk4ODk4OGEwODM1NjFlNGRhMzA5NmQwNmNj YTdhMzY4NjdlYjc4MWVjYzVlNWJhZGYwM2ZmN2NhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGIFdj4fLkr3qfSXV8oTNa8YWKzI102c5n7rXiwWaTi75V lUQocwNDaJ6kcc2PnZ8ULtaUqiCtc+Sf7Ajcenc3EWnnw1vxQJrDAlYaNrQd0h3o tJZRQRJFd5+EygbOqdyCqFl0buOr3xJU2MiUhwAOzQy5u51kGxmSeiCj5qTcsVgH pQVVnEZb6JavFN+uuFVIAxQ0cErRa1YYH01vrRVdji+T7RLIpsUbTvQgjCXYHAUn sECSaGVU/JvoCMteKGfm7IJ+6Om0LgOpm76Gq7MBqVdAnpFCLlRvtzziTCcJ99Ye m2O/agyDf6lsyrTKcJYbRMAq/0jqPe1M2RugBdCpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU5BNAOs+MjpPSIy+o0fwVrhVQCDUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M1N2YzMDgwLWM4NjgtNGM2OS1hMjNlLThkOWQ3ZGNlOTFjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQgjANBgkqhkiG9w0BAQsFAAOCAQEAIs3gmwOgryCA3hb7Fgj2L9FkUTC+ rH8sWqCWtjP/j8KODdN4WmaNytU8ZRpekBd8cLz+BL7rDt91MDyQJmhyNSmU9FJw q3QbJpUl8vMVxj7d7h7KRv2wF6RGaQJwLzTVkOpodtcMTtbD3pNac7zAxFwNg74g /WDnmD6Iga5kFg2wvAsvmX+sa+VhO1TX2q6hjl+2fBa15QW12dhRxC6e8Dc5fTJi Jx0Fk0yFne2Z/zEX4elDfQ5B3PM/jK3tV0ICpwItkmStT8Roz8g1uQU4Wl4lxmuD RCxpCj6ydfP1PAwl6EpISDUJGMTFIiq9UfvpGKAJ97nvKdbCW4G7ZhDIhA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:12:33 2026 by rpki-client