$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd521a01-1b09-4583-84c9-7dba7c86b768.roa File: cd521a01-1b09-4583-84c9-7dba7c86b768.roa (raw, json) Hash identifier: rE2pNmuEYp1rVqYghx8J8Tk4OyGXoXt6Mjx8Guarua8= Subject key identifier: B1:65:C8:05:4B:F7:10:AD:F3:B8:05:8C:A0:B6:BA:FD:86:91:26:F0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2534862B817CE6E06C61A6C744969540D13A8DB3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd521a01-1b09-4583-84c9-7dba7c86b768.roa Signing time: Sat 14 Feb 2026 00:20:49 +0000 ROA not before: Sat 14 Feb 2026 00:20:49 +0000 ROA not after: Fri 15 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 184.72.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:34:86:2b:81:7c:e6:e0:6c:61:a6:c7:44:96:95:40:d1:3a:8d:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 14 00:20:49 2026 GMT Not After : May 15 23:59:59 2026 GMT Subject: serialNumber=cf9cd4f1f4c13b9945bca9a92445cc39d91e60b92825aa8ad9e073ac2f8fc75d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5e:51:bc:c7:9d:6a:53:fb:66:1f:4f:a6:02: b2:22:79:af:31:41:d8:dc:75:e7:63:0e:58:2e:4c: 6e:30:ee:f5:52:9b:87:e5:eb:a3:12:df:32:ee:d4: 61:c8:10:06:01:24:ea:73:8c:26:82:e7:06:d0:03: 50:60:79:fd:5b:69:a6:8b:5f:e2:be:2b:02:d4:16: 98:ca:6d:ae:a5:39:31:2f:ca:36:37:44:b9:6f:5a: 91:6b:08:36:5d:9a:07:24:52:b1:27:ec:ff:2a:a2: b2:0b:93:c0:7e:c8:88:5d:9e:87:5d:39:0e:7e:c0: 63:4e:24:6d:cc:2c:fb:ab:9a:0c:73:46:b0:ae:9c: 8d:b0:6e:0e:b4:06:6d:04:83:55:6d:8e:a7:49:c5: bc:a5:50:f2:54:50:0c:12:17:0a:8b:6d:39:08:96: e6:66:3d:73:aa:32:11:eb:08:b7:da:cf:35:ff:d1: 02:75:90:19:eb:cd:b8:59:ba:20:53:d0:93:70:fc: cb:1a:3b:a9:ad:70:af:60:4e:e6:7b:ff:d3:04:32: 93:f0:d9:cf:fc:26:8e:01:6d:6d:e1:a6:04:a0:85: a0:81:60:85:60:c1:29:7b:26:6a:3f:99:d1:e8:53: d4:47:d4:88:58:3a:75:26:8b:e7:15:fc:51:99:3a: 82:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:65:C8:05:4B:F7:10:AD:F3:B8:05:8C:A0:B6:BA:FD:86:91:26:F0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd521a01-1b09-4583-84c9-7dba7c86b768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.72.94.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:bf:df:8e:cd:f5:31:ab:fb:9e:c2:a5:2a:44:65:ee:f3:c2: 28:88:9b:25:e4:2d:a9:16:71:d3:b7:df:d1:4a:7f:88:af:a0: 2a:2f:55:3f:8d:77:55:26:8e:53:ca:25:3b:d9:19:a0:76:55: 87:61:1e:77:4d:59:c3:2b:b8:92:39:24:29:c5:20:17:90:27: e9:f3:1e:e7:d2:76:f5:26:64:8c:0f:95:ba:2e:6b:37:af:43: 7c:dc:84:22:8d:92:18:88:91:7d:0d:b3:cd:39:ea:57:cd:d4: a1:9d:53:c2:82:07:ca:b8:7a:4d:f4:9a:b5:0c:cf:0e:cd:6b: 4c:62:42:ad:fb:7b:98:f2:02:6d:6a:c3:7f:ef:dc:b6:a2:7d: 90:55:e5:cb:03:bd:3d:e7:a0:72:63:28:07:bc:43:b3:a8:03: 75:12:bc:88:d8:79:96:e1:5c:67:b1:fa:58:e6:ba:a3:8c:57: 72:9d:49:c0:93:2a:6a:c9:9a:75:d5:e8:4c:94:b1:0f:11:ed: e0:c0:5f:ff:06:99:f3:82:54:33:dd:ae:f4:ea:62:d7:fb:39: 50:b7:65:0e:6d:ba:c6:70:c4:3a:ff:63:81:7b:61:dc:4d:0c: be:dd:d7:40:6f:c7:8d:bb:e2:d8:3e:42:b7:eb:b7:78:25:ec: 47:7a:bb:64 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJTSGK4F85uBsYabHRJaVQNE6jbMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE0MDAyMDQ5WhcNMjYwNTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZjljZDRmMWY0YzEzYjk5NDViY2E5YTkyNDQ1Y2MzOWQ5 MWU2MGI5MjgyNWFhOGFkOWUwNzNhYzJmOGZjNzVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqXlG8x51qU/tmH0+mArIiea8xQdjcdedjDlguTG4w7vVS m4fl66MS3zLu1GHIEAYBJOpzjCaC5wbQA1Bgef1baaaLX+K+KwLUFpjKba6lOTEv yjY3RLlvWpFrCDZdmgckUrEn7P8qorILk8B+yIhdnoddOQ5+wGNOJG3MLPurmgxz RrCunI2wbg60Bm0Eg1VtjqdJxbylUPJUUAwSFwqLbTkIluZmPXOqMhHrCLfazzX/ 0QJ1kBnrzbhZuiBT0JNw/MsaO6mtcK9gTuZ7/9MEMpPw2c/8Jo4BbW3hpgSghaCB YIVgwSl7Jmo/mdHoU9RH1IhYOnUmi+cV/FGZOoLvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsWXIBUv3EK3zuAWMoLa6/YaRJvAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkNTIxYTAxLTFiMDktNDU4My04NGM5LTdkYmE3Yzg2Yjc2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC4SF4wDQYJKoZIhvcNAQELBQADggEBAHu/347N9TGr+57CpSpEZe7zwiiI myXkLakWcdO339FKf4ivoCovVT+Nd1UmjlPKJTvZGaB2VYdhHndNWcMruJI5JCnF IBeQJ+nzHufSdvUmZIwPlbouazevQ3zchCKNkhiIkX0Ns8056lfN1KGdU8KCB8q4 ek30mrUMzw7Na0xiQq37e5jyAm1qw3/v3LaifZBV5csDvT3noHJjKAe8Q7OoA3US vIjYeZbhXGex+ljmuqOMV3KdScCTKmrJmnXV6EyUsQ8R7eDAX/8GmfOCVDPdrvTq Ytf7OVC3ZQ5tusZwxDr/Y4F7YdxNDL7d10Bvx4274tg+Qrfrt3gl7Ed6u2Q= -----END CERTIFICATE-----Generated at Mon Mar 2 00:14:42 2026 by rpki-client