$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8a2e2a6-180a-4119-9dab-dc386bebfad1.roa File: c8a2e2a6-180a-4119-9dab-dc386bebfad1.roa (raw, json) Hash identifier: c3KFJZ4SQavgx3LYh/Iuj54BUZ7HHLMwkISV2ld4CD8= Subject key identifier: C1:F7:6E:2E:67:4E:EF:41:CF:8B:DD:66:43:4E:2A:56:F9:78:5A:40 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D064B49339130AD55307DD3172FF09DA812A3FF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8a2e2a6-180a-4119-9dab-dc386bebfad1.roa Signing time: Sat 07 Feb 2026 00:10:58 +0000 ROA not before: Sat 07 Feb 2026 00:10:58 +0000 ROA not after: Fri 08 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.180.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:06:4b:49:33:91:30:ad:55:30:7d:d3:17:2f:f0:9d:a8:12:a3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 7 00:10:58 2026 GMT Not After : May 8 23:59:59 2026 GMT Subject: serialNumber=514b3ddf33700b68b31505b24006d67494fa728f579a344813b1fdb4c3f8cc9c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:21:53:53:37:32:5d:35:80:d8:1b:79:d5:b2: 98:53:61:bc:02:c9:64:c0:4b:4f:98:29:e9:4d:64: 16:56:9f:50:aa:5b:22:21:c5:35:08:1c:18:50:05: 57:41:dd:cc:c7:85:2f:b6:69:c0:9e:c0:37:de:6d: da:60:d3:f4:6c:81:55:53:c3:28:9c:5e:a4:f6:fc: 42:01:6d:3e:85:88:86:4c:88:6a:a7:83:41:df:8f: 61:3e:6f:d2:a8:63:78:3e:d1:5d:b3:06:9f:12:e7: f7:80:9e:a4:32:3d:e5:85:d4:a9:b3:8f:e6:9d:a6: 57:8e:59:29:6e:11:28:bb:17:6c:7a:92:7e:1e:98: 5d:d7:5f:f2:3d:fd:ef:23:c4:20:96:e3:06:52:b4: 8e:f1:bf:d4:b7:1b:89:1c:73:4f:c3:3c:87:60:43: bc:41:1d:20:d0:9f:0b:58:2a:b9:64:40:a2:cd:01: f3:a2:c9:e2:14:8c:26:58:92:b7:5a:7e:37:0e:09: 7a:0e:1e:74:ef:f3:17:17:71:f3:90:5f:c1:9f:e2: 31:23:21:2c:ee:32:ef:b8:31:2a:38:e2:14:f3:30: a6:f4:5c:1a:08:58:d3:cb:58:65:2b:af:bf:a2:cb: 8d:55:93:b0:b4:c2:15:ee:69:07:9f:fa:97:f8:43: 91:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F7:6E:2E:67:4E:EF:41:CF:8B:DD:66:43:4E:2A:56:F9:78:5A:40 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8a2e2a6-180a-4119-9dab-dc386bebfad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.180.0.0/16 Signature Algorithm: sha256WithRSAEncryption b3:4a:d8:e6:db:75:54:db:df:a8:9e:5e:2e:ac:b5:6b:5a:e1: 6e:67:e1:83:06:ce:9c:f0:09:66:b4:63:b6:d1:24:48:78:dd: 45:99:0e:8a:6a:36:02:6c:83:18:d7:f6:64:25:30:5c:6f:4c: 47:c9:42:c6:69:31:2f:ff:0a:61:7d:dc:c3:5f:51:63:f5:38: a1:6c:cc:ac:c6:fc:d6:09:1b:8d:8e:ee:29:60:6a:78:a8:7c: 8c:54:dc:c0:e2:13:9e:64:d6:34:cb:9f:0e:18:98:77:da:f7: 48:5d:06:0c:aa:43:4a:8a:44:1d:6e:70:76:89:08:72:0c:1f: ea:06:82:24:22:9f:96:7d:70:16:79:e7:87:91:83:a5:28:e8: 67:09:14:f2:44:c3:60:e3:16:fb:b3:01:3c:0a:e3:12:db:c8: 06:20:87:96:5c:f7:3e:cd:7b:da:b5:b1:ea:af:96:63:ef:55: d5:8a:44:7c:fe:e3:7e:45:e0:12:f4:c3:ca:d3:18:37:22:14: 39:3e:b5:06:19:a8:ef:2c:fe:d0:03:1f:24:e9:89:6b:3b:24: f3:0a:b7:05:2a:aa:7b:95:ea:00:cd:97:c1:85:56:3a:db:3d: de:fd:79:d5:36:c0:69:a9:e6:2f:1f:05:64:2f:5e:fd:52:63: e8:ca:f1:a8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPQZLSTORMK1VMH3TFy/wnagSo/8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA3MDAxMDU4WhcNMjYwNTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MTRiM2RkZjMzNzAwYjY4YjMxNTA1YjI0MDA2ZDY3NDk0 ZmE3MjhmNTc5YTM0NDgxM2IxZmRiNGMzZjhjYzljMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXIVNTNzJdNYDYG3nVsphTYbwCyWTAS0+YKelNZBZWn1Cq WyIhxTUIHBhQBVdB3czHhS+2acCewDfebdpg0/RsgVVTwyicXqT2/EIBbT6FiIZM iGqng0Hfj2E+b9KoY3g+0V2zBp8S5/eAnqQyPeWF1Kmzj+adpleOWSluESi7F2x6 kn4emF3XX/I9/e8jxCCW4wZStI7xv9S3G4kcc0/DPIdgQ7xBHSDQnwtYKrlkQKLN AfOiyeIUjCZYkrdafjcOCXoOHnTv8xcXcfOQX8Gf4jEjISzuMu+4MSo44hTzMKb0 XBoIWNPLWGUrr7+iy41Vk7C0whXuaQef+pf4Q5EJAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUwfduLmdO70HPi91mQ04qVvl4WkAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4YTJlMmE2LTE4MGEtNDExOS05ZGFiLWRjMzg2YmViZmFkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQtDANBgkqhkiG9w0BAQsFAAOCAQEAs0rY5tt1VNvfqJ5eLqy1a1rhbmfh gwbOnPAJZrRjttEkSHjdRZkOimo2AmyDGNf2ZCUwXG9MR8lCxmkxL/8KYX3cw19R Y/U4oWzMrMb81gkbjY7uKWBqeKh8jFTcwOITnmTWNMufDhiYd9r3SF0GDKpDSopE HW5wdokIcgwf6gaCJCKfln1wFnnnh5GDpSjoZwkU8kTDYOMW+7MBPArjEtvIBiCH llz3Ps172rWx6q+WY+9V1YpEfP7jfkXgEvTDytMYNyIUOT61Bhmo7yz+0AMfJOmJ azsk8wq3BSqqe5XqAM2XwYVWOts93v151TbAaanmLx8FZC9e/VJj6MrxqA== -----END CERTIFICATE-----Generated at Sun Mar 1 23:53:40 2026 by rpki-client