$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c71c7203-a977-40d5-a22f-95e3ab24db4f.roa File: c71c7203-a977-40d5-a22f-95e3ab24db4f.roa (raw, json) Hash identifier: M1AlI6qVR318CFGLuh2e2nLtxd27Cvbh7Jvs9n11P60= Subject key identifier: A2:E6:67:72:2B:FA:B3:AE:11:BB:BE:6A:AE:50:C2:63:1F:9F:F8:A0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1DBEDDE4024B120D52FF5F834FF398145D66B6E8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c71c7203-a977-40d5-a22f-95e3ab24db4f.roa Signing time: Tue 24 Feb 2026 01:40:44 +0000 ROA not before: Tue 24 Feb 2026 01:40:44 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 108.166.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:be:dd:e4:02:4b:12:0d:52:ff:5f:83:4f:f3:98:14:5d:66:b6:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 01:40:44 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=e710994a6443800072f0b1c6b8fdac544594f1c14c809a1880e839946ece75ab, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2d:56:5e:4c:8c:cf:e3:cf:5f:16:a0:1d:1b: a6:df:23:7b:38:1e:72:1a:14:b5:c0:99:a3:bd:f0: 74:60:3b:17:59:7b:0f:0d:24:85:2e:bc:2e:e8:a2: 7a:1d:5c:bd:fc:be:dd:69:45:87:fe:33:c6:7d:fc: 09:dd:c9:14:53:6a:e9:51:d9:36:e2:37:f8:db:87: b1:b6:a9:47:35:50:bc:44:bb:85:2d:63:d4:7a:a3: ac:52:d8:ee:bf:6c:b6:0f:89:c8:ee:ad:99:3e:6c: f7:91:79:61:18:b2:28:43:a6:80:65:bf:dc:a1:46: 85:a2:3a:b1:32:f8:cf:10:9a:41:d8:0d:1c:02:52: 60:20:60:2e:bb:71:58:5f:7e:82:07:b2:92:e3:45: 0c:c0:92:f9:0e:4f:03:a3:9c:3b:a8:6b:81:57:73: ea:ed:1a:37:b6:0b:f8:e6:f2:76:3a:2d:57:33:aa: 8e:45:f9:9b:bf:20:cb:e5:b8:7f:8d:19:54:d0:72: 3c:75:f9:af:10:65:c6:37:d3:8f:78:8c:cd:a1:49: 37:fd:b0:0e:c4:8f:17:b4:10:be:5a:e3:61:27:63: e2:ee:5e:4d:89:39:d7:86:51:87:fc:2d:2f:af:6d: 2a:ee:32:49:ad:32:c4:54:13:01:a9:99:ce:33:5e: 4d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E6:67:72:2B:FA:B3:AE:11:BB:BE:6A:AE:50:C2:63:1F:9F:F8:A0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c71c7203-a977-40d5-a22f-95e3ab24db4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.166.224.0/19 Signature Algorithm: sha256WithRSAEncryption bd:99:68:5c:75:be:fc:ab:2c:78:23:63:12:d4:9a:94:27:ce: c0:e9:14:f8:04:87:c3:03:20:d9:83:5f:05:97:e6:04:fd:5f: 03:51:7b:cd:04:0a:97:8a:58:ca:12:ea:aa:da:af:28:9d:2f: c0:f1:6c:f8:fb:72:a7:fa:80:db:b1:64:28:3e:05:9a:6b:c5: e3:8b:13:6b:8d:d3:ab:8b:d6:5e:24:d6:14:28:4f:b0:49:92: 17:80:f7:58:30:29:7d:a8:ed:f1:3c:8c:01:9a:af:b6:45:37: d9:c6:94:4a:da:b1:80:06:8c:d8:7f:c8:fa:f9:9b:b1:87:fa: 3c:bd:e8:35:6f:db:83:0e:78:d4:31:6c:22:29:b0:af:2a:bd: b9:f1:e4:70:e7:a2:85:e5:81:27:85:42:76:fa:02:28:67:0f: 20:1a:fa:96:60:f0:01:fb:0d:37:b8:ff:03:93:29:eb:bd:38: 95:41:81:95:1c:c7:df:78:87:49:4e:70:08:d6:33:da:89:c1: 79:61:c9:8d:6f:15:85:4e:ed:08:72:45:96:d3:55:22:45:6a: b5:80:ea:d8:37:fb:ea:1b:05:5c:08:a2:94:02:9c:d1:17:6c: 0c:77:ad:b8:ec:20:de:58:08:70:7f:c6:ef:34:38:6a:d8:d4: 41:9b:c7:d4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHb7d5AJLEg1S/1+DT/OYFF1mtugwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDE0MDQ0WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNzEwOTk0YTY0NDM4MDAwNzJmMGIxYzZiOGZkYWM1NDQ1 OTRmMWMxNGM4MDlhMTg4MGU4Mzk5NDZlY2U3NWFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiLVZeTIzP489fFqAdG6bfI3s4HnIaFLXAmaO98HRgOxdZ ew8NJIUuvC7oonodXL38vt1pRYf+M8Z9/AndyRRTaulR2TbiN/jbh7G2qUc1ULxE u4UtY9R6o6xS2O6/bLYPicjurZk+bPeReWEYsihDpoBlv9yhRoWiOrEy+M8QmkHY DRwCUmAgYC67cVhffoIHspLjRQzAkvkOTwOjnDuoa4FXc+rtGje2C/jm8nY6LVcz qo5F+Zu/IMvluH+NGVTQcjx1+a8QZcY30494jM2hSTf9sA7Ejxe0EL5a42EnY+Lu Xk2JOdeGUYf8LS+vbSruMkmtMsRUEwGpmc4zXk31AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUouZnciv6s64Ru75qrlDCYx+f+KAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M3MWM3MjAzLWE5NzctNDBkNS1hMjJmLTk1ZTNhYjI0ZGI0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVspuAwDQYJKoZIhvcNAQELBQADggEBAL2ZaFx1vvyrLHgjYxLUmpQnzsDp FPgEh8MDINmDXwWX5gT9XwNRe80ECpeKWMoS6qraryidL8DxbPj7cqf6gNuxZCg+ BZprxeOLE2uN06uL1l4k1hQoT7BJkheA91gwKX2o7fE8jAGar7ZFN9nGlErasYAG jNh/yPr5m7GH+jy96DVv24MOeNQxbCIpsK8qvbnx5HDnooXlgSeFQnb6AihnDyAa +pZg8AH7DTe4/wOTKeu9OJVBgZUcx994h0lOcAjWM9qJwXlhyY1vFYVO7QhyRZbT VSJFarWA6tg3++obBVwIopQCnNEXbAx3rbjsIN5YCHB/xu80OGrY1EGbx9Q= -----END CERTIFICATE-----Generated at Sun Mar 1 22:27:23 2026 by rpki-client