$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd93d939-7566-4f6e-8c33-44e81bf0514a.roa File: cd93d939-7566-4f6e-8c33-44e81bf0514a.roa (raw, json) Hash identifier: mhoCOQMMrksjUBpo5p/T+Q6wWyhK2IsjDATYGIOfT1k= Subject key identifier: 09:71:98:87:90:F5:5D:A7:12:64:40:B2:18:A5:E0:EC:06:49:04:85 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17F4916EB7D117084FD0EA2051FC97531FE25FE4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd93d939-7566-4f6e-8c33-44e81bf0514a.roa Signing time: Sun 08 Feb 2026 00:20:59 +0000 ROA not before: Sun 08 Feb 2026 00:20:59 +0000 ROA not after: Sat 09 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 216.83.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f4:91:6e:b7:d1:17:08:4f:d0:ea:20:51:fc:97:53:1f:e2:5f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 8 00:20:59 2026 GMT Not After : May 9 23:59:59 2026 GMT Subject: serialNumber=a01f26b8feed8b79f993213677aa543d3435da61d47d73596ce922bafd07d3d1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6d:26:16:ab:df:4c:c3:ec:78:b1:5c:82:75: 98:b4:99:c0:b0:2c:e7:fa:71:95:93:82:d2:3d:94: 7d:e7:e0:bf:eb:41:66:d2:b2:9c:5a:cf:f7:c7:f3: 15:82:81:bf:57:9f:08:e7:27:f7:cf:e7:2e:90:5a: 27:7b:8a:7d:68:63:bc:c3:1f:71:98:ec:9c:71:05: ae:eb:7b:07:e2:30:82:7e:67:63:0f:6a:a7:0d:82: 5c:82:01:1c:be:55:6d:ff:87:c9:08:a1:05:85:a5: a9:cd:1a:e0:98:7d:44:f5:40:42:44:90:31:15:9a: 9c:d1:14:70:28:c5:47:3e:4b:f1:c3:0d:2d:c9:2b: b3:ae:53:16:c8:60:42:f8:0d:69:5f:88:13:ef:cf: 36:10:1e:d2:a7:95:a5:8b:2c:40:3d:ef:72:d2:b9: 93:af:3d:0f:77:26:4b:ea:a6:fa:ed:78:e3:3f:a3: 5f:f3:cc:af:b6:fd:e0:4e:59:73:38:23:e8:de:c9: 20:3e:bd:fd:c9:09:17:b2:5e:9b:0a:2c:80:e0:e8: 4b:e2:76:72:5c:c3:08:77:ef:7d:8f:7b:f0:17:70: ce:48:c1:f6:df:ab:9b:bd:77:6a:66:e4:4c:2c:88: 6e:89:94:fe:31:a2:10:ea:e9:52:4a:b1:5c:c9:60: 09:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:71:98:87:90:F5:5D:A7:12:64:40:B2:18:A5:E0:EC:06:49:04:85 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd93d939-7566-4f6e-8c33-44e81bf0514a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.83.224.0/19 Signature Algorithm: sha256WithRSAEncryption 12:dd:36:e1:5a:41:fd:98:69:58:63:ae:1a:c1:fd:26:cd:8d: 17:56:96:2f:0a:f2:4b:79:6e:52:84:13:3b:98:5e:88:2e:6c: 0e:69:55:62:1f:92:5d:ad:0a:71:8e:fc:f5:df:87:38:6d:5c: 03:07:d9:8b:f5:43:05:8f:55:e8:c9:37:85:ac:82:f1:29:e5: 1d:fc:e2:50:f3:fb:2c:c1:61:0f:8c:d3:62:ce:7a:99:b2:3d: 73:e2:bf:ce:62:fd:fc:24:3e:9f:0f:c8:9c:11:64:96:cc:fe: 28:75:83:c7:e1:95:ad:88:58:db:b8:e3:be:db:28:47:40:9d: 83:ba:71:7a:81:35:05:80:86:23:08:53:e7:d7:d6:08:51:ba: fd:4e:7a:f3:c7:28:83:2e:09:99:b3:e2:ac:71:e5:a1:9f:e3: 09:27:24:a3:b8:7f:8c:12:09:2b:b5:1e:67:9d:1a:c7:fe:1e: 7d:0e:d5:48:db:c1:77:ab:4e:3b:dd:74:84:f8:95:cb:f8:bf: dc:55:d6:73:f9:84:29:8e:90:9d:53:9d:b6:a8:21:97:8a:49: 11:0a:b2:20:29:51:18:07:22:56:8c:85:96:ec:55:49:b6:64: e3:96:22:82:94:77:f3:f6:1a:8e:25:8b:31:c3:32:3b:4c:6a: 12:70:d9:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF/SRbrfRFwhP0OogUfyXUx/iX+QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA4MDAyMDU5WhcNMjYwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDFmMjZiOGZlZWQ4Yjc5Zjk5MzIxMzY3N2FhNTQzZDM0 MzVkYTYxZDQ3ZDczNTk2Y2U5MjJiYWZkMDdkM2QxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3bSYWq99Mw+x4sVyCdZi0mcCwLOf6cZWTgtI9lH3n4L/r QWbSspxaz/fH8xWCgb9XnwjnJ/fP5y6QWid7in1oY7zDH3GY7JxxBa7rewfiMIJ+ Z2MPaqcNglyCARy+VW3/h8kIoQWFpanNGuCYfUT1QEJEkDEVmpzRFHAoxUc+S/HD DS3JK7OuUxbIYEL4DWlfiBPvzzYQHtKnlaWLLEA973LSuZOvPQ93JkvqpvrteOM/ o1/zzK+2/eBOWXM4I+jeySA+vf3JCReyXpsKLIDg6EvidnJcwwh3732Pe/AXcM5I wfbfq5u9d2pm5EwsiG6JlP4xohDq6VJKsVzJYAlpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCXGYh5D1XacSZECyGKXg7AZJBIUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkOTNkOTM5LTc1NjYtNGY2ZS04YzMzLTQ0ZTgxYmYwNTE0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXYU+AwDQYJKoZIhvcNAQELBQADggEBABLdNuFaQf2YaVhjrhrB/SbNjRdW li8K8kt5blKEEzuYXogubA5pVWIfkl2tCnGO/PXfhzhtXAMH2Yv1QwWPVejJN4Ws gvEp5R384lDz+yzBYQ+M02LOepmyPXPiv85i/fwkPp8PyJwRZJbM/ih1g8fhla2I WNu4477bKEdAnYO6cXqBNQWAhiMIU+fX1ghRuv1OevPHKIMuCZmz4qxx5aGf4wkn JKO4f4wSCSu1HmedGsf+Hn0O1UjbwXerTjvddIT4lcv4v9xV1nP5hCmOkJ1Tnbao IZeKSREKsiApURgHIlaMhZbsVUm2ZOOWIoKUd/P2Go4lizHDMjtMahJw2ZI= -----END CERTIFICATE-----Generated at Mon Mar 2 05:40:41 2026 by rpki-client