$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cba30568-d8e3-41f2-9c51-3e432e1d1e70.roa File: cba30568-d8e3-41f2-9c51-3e432e1d1e70.roa (raw, json) Hash identifier: EXzCtt+/8wtnacL2K7AuzqEeqJlhEEPLx/sN3eLDEEE= Subject key identifier: F4:50:C9:97:45:E0:99:3C:B1:D4:00:91:36:97:93:48:07:88:C8:8F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 42D4A3B734DB822A79B5321A4556CCCA3299602C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cba30568-d8e3-41f2-9c51-3e432e1d1e70.roa Signing time: Tue 17 Feb 2026 17:36:50 +0000 ROA not before: Tue 17 Feb 2026 17:36:50 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 24.110.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d4:a3:b7:34:db:82:2a:79:b5:32:1a:45:56:cc:ca:32:99:60:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 17 17:36:50 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=6f161f45cc8d01e9cc1802161cf4a904cf7a186abe2a3ed32d3c7cc6ec290bcb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0b:fa:53:78:13:c8:d0:80:4f:ab:95:20:e9: 69:45:fe:89:7b:6a:80:f0:1a:52:26:54:10:f3:da: 98:01:b9:d1:d0:cd:74:3e:7e:6b:35:62:fe:96:a9: 2a:70:9a:58:f2:4c:3a:ef:98:41:0a:4c:f1:4f:46: 98:7f:23:d8:7b:e2:ed:fb:43:44:6e:77:c7:71:ca: 36:c3:b6:3d:6d:b0:8d:80:d0:ce:44:31:b0:19:a7: 8c:62:37:c3:9d:f7:29:de:87:c2:79:7b:f7:9f:56: 58:6c:ae:ec:e9:77:6c:a0:45:1d:fd:f0:ee:3c:32: 59:ce:18:88:01:b4:8d:bf:15:ad:74:13:f1:ce:bf: 2b:5d:02:a6:6a:2a:a0:c9:43:ad:75:43:e7:c8:e8: 37:64:ef:63:4d:66:19:28:37:a9:60:52:ae:0c:4d: ee:5d:a7:01:5e:7c:68:7f:ca:a0:76:ea:62:b2:00: 5c:54:62:44:a9:7a:79:3d:99:e9:0a:51:7e:24:aa: a9:54:e3:0c:db:53:dd:d8:fb:ca:70:bf:fc:4e:e8: 5f:be:e7:02:43:ad:cc:e3:c0:97:16:5d:7c:6c:fd: 36:a7:dc:71:ff:7d:f3:9c:48:0f:fc:b1:1e:38:35: b6:bf:86:b9:ed:a8:82:b2:c7:f2:9b:88:61:02:2c: 6f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:50:C9:97:45:E0:99:3C:B1:D4:00:91:36:97:93:48:07:88:C8:8F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cba30568-d8e3-41f2-9c51-3e432e1d1e70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.110.3.0/24 Signature Algorithm: sha256WithRSAEncryption 37:8f:64:30:0f:a9:74:c3:8f:23:1f:ec:58:a6:d7:49:72:eb: 76:bb:e5:a5:bc:f6:4d:c0:7d:53:bb:09:e6:56:02:62:7f:42: 10:aa:f8:02:c0:a4:d6:09:ea:cf:63:29:6d:f4:62:95:c5:8f: fd:3b:d9:70:5a:6e:00:b6:04:e0:86:96:db:82:67:22:a8:c1: 6d:5f:fb:88:5e:e9:27:ee:bf:e7:ef:6e:2c:35:75:9c:41:a1: 34:05:78:a7:0d:d6:26:75:18:b3:e8:70:b6:25:81:90:40:47: 95:15:e5:71:a8:a8:78:6c:bf:ab:24:fd:43:75:3a:41:d4:ee: b6:80:00:21:59:02:ed:6a:28:dd:bc:d6:e2:17:30:cd:ab:4c: ec:60:51:52:8e:30:c2:bb:38:d2:dc:95:45:f0:a8:b3:26:b0: d2:46:0e:f9:69:77:51:61:93:3d:05:99:4d:0c:9d:d3:8e:df: ad:a5:67:37:f2:3a:6b:92:30:a1:ea:77:51:4d:a0:da:52:af: 82:79:64:34:7e:d6:91:0b:84:02:0a:13:02:91:f8:db:0a:55: 9d:e5:66:3d:89:05:a5:4b:ac:a9:cc:57:0d:24:95:de:ca:97: 84:1f:a5:d6:ce:69:d5:3f:b0:82:59:77:5a:a5:46:98:85:01: 51:6e:b0:4a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQtSjtzTbgip5tTIaRVbMyjKZYCwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE3MTczNjUwWhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZjE2MWY0NWNjOGQwMWU5Y2MxODAyMTYxY2Y0YTkwNGNm N2ExODZhYmUyYTNlZDMyZDNjN2NjNmVjMjkwYmNiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZC/pTeBPI0IBPq5Ug6WlF/ol7aoDwGlImVBDz2pgBudHQ zXQ+fms1Yv6WqSpwmljyTDrvmEEKTPFPRph/I9h74u37Q0Rud8dxyjbDtj1tsI2A 0M5EMbAZp4xiN8Od9yneh8J5e/efVlhsruzpd2ygRR398O48MlnOGIgBtI2/Fa10 E/HOvytdAqZqKqDJQ611Q+fI6Ddk72NNZhkoN6lgUq4MTe5dpwFefGh/yqB26mKy AFxUYkSpenk9mekKUX4kqqlU4wzbU93Y+8pwv/xO6F++5wJDrczjwJcWXXxs/Tan 3HH/ffOcSA/8sR44Nba/hrntqIKyx/KbiGECLG9ZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9FDJl0XgmTyx1ACRNpeTSAeIyI8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiYTMwNTY4LWQ4ZTMtNDFmMi05YzUxLTNlNDMyZTFkMWU3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAYbgMwDQYJKoZIhvcNAQELBQADggEBADePZDAPqXTDjyMf7Fim10ly63a7 5aW89k3AfVO7CeZWAmJ/QhCq+ALApNYJ6s9jKW30YpXFj/072XBabgC2BOCGltuC ZyKowW1f+4he6Sfuv+fvbiw1dZxBoTQFeKcN1iZ1GLPocLYlgZBAR5UV5XGoqHhs v6sk/UN1OkHU7raAACFZAu1qKN281uIXMM2rTOxgUVKOMMK7ONLclUXwqLMmsNJG Dvlpd1Fhkz0FmU0MndOO362lZzfyOmuSMKHqd1FNoNpSr4J5ZDR+1pELhAIKEwKR +NsKVZ3lZj2JBaVLrKnMVw0kld7Kl4QfpdbOadU/sIJZd1qlRpiFAVFusEo= -----END CERTIFICATE-----Generated at Sun Mar 1 22:06:36 2026 by rpki-client