$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdb704b6-b401-4fcf-a13c-0891a9c175c2.roa File: cdb704b6-b401-4fcf-a13c-0891a9c175c2.roa (raw, json) Hash identifier: tI+JEkiGIP4ZPpiYSoAcxau8zZwLbmmWwp0+icYS3F4= Subject key identifier: 49:33:37:F9:A7:99:9A:41:E4:34:BE:EA:5F:B8:96:4E:30:FA:88:C9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7C0C937AD8663BF0E561FC672FBFAC1FC5BF710D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdb704b6-b401-4fcf-a13c-0891a9c175c2.roa Signing time: Wed 25 Feb 2026 01:20:06 +0000 ROA not before: Wed 25 Feb 2026 01:20:06 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 23.22.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:0c:93:7a:d8:66:3b:f0:e5:61:fc:67:2f:bf:ac:1f:c5:bf:71:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 01:20:06 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=b58579fc229db7b63cb83f4c3ca07be66a7f4c9bec163017370d712474079016, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:34:f5:15:8b:de:64:1e:ab:40:44:78:24:3a: 08:91:53:5a:ab:71:6b:47:7f:bd:83:dd:48:86:f3: a2:42:6c:dd:f2:e5:6c:3a:3e:d3:53:7b:05:1d:24: 16:36:6d:b9:2f:21:a4:b3:b1:34:4a:61:05:c7:64: 1f:7f:88:74:66:55:dc:94:5c:18:bb:cd:76:8e:63: 8b:4b:61:a5:14:df:ad:d6:cb:08:74:14:c3:1c:db: d0:bb:19:62:df:5a:39:64:5c:41:48:90:ff:78:f8: cc:2f:a8:f1:65:2d:39:07:ac:3b:c9:7c:b5:07:c6: 12:a3:64:d5:14:a5:16:96:a1:7c:f2:74:f3:d7:af: 5e:9d:a9:71:0d:6d:7c:83:c3:5e:1e:e8:12:d5:20: 92:9b:60:d8:a2:91:27:f3:60:9d:6d:74:6f:14:fd: b4:0f:d0:b4:94:86:8e:b5:ac:0a:e6:3d:1e:cc:d3: 9e:e6:f9:26:15:6b:bc:5f:c7:07:30:7d:07:02:aa: 2d:6b:ef:d5:15:19:77:56:87:40:42:76:39:1c:a5: 64:c2:63:b5:1c:af:4f:fd:bd:7f:db:b7:9d:b6:ac: c2:8f:43:7a:f6:aa:de:c4:ae:5a:2b:bb:c3:b1:d8: 6a:b9:03:83:97:84:71:c2:23:5e:6b:cd:09:cd:8f: b9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:33:37:F9:A7:99:9A:41:E4:34:BE:EA:5F:B8:96:4E:30:FA:88:C9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdb704b6-b401-4fcf-a13c-0891a9c175c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.22.0.0/15 Signature Algorithm: sha256WithRSAEncryption 2a:21:a6:6f:85:94:f8:46:59:2c:cd:2c:4d:fa:fd:c2:f9:1d: 0e:00:ec:81:bc:ce:54:09:74:45:6f:4b:4b:41:ae:68:82:7c: 38:8a:13:f3:10:7b:ec:0a:7f:1c:90:bb:b5:94:b5:1b:7b:f8: d2:08:30:9f:8c:e0:bd:45:43:9f:37:9e:39:b1:26:54:04:0d: f4:2c:cb:c4:8d:68:5d:d0:9e:92:ba:c8:a4:10:a7:6a:12:3b: cb:2f:d6:ca:bd:dd:68:62:49:af:b8:64:e9:b8:cd:70:92:db: 08:df:ba:d3:2f:87:74:39:47:86:26:2c:3d:77:5b:86:87:e7: 34:03:ef:89:ee:06:3f:33:49:a5:4a:0d:03:9d:67:99:21:41: 1f:75:ef:08:42:57:5d:c2:3e:86:b8:50:e0:a8:63:b5:ce:62: 9d:88:5d:c0:b5:fe:7a:97:ce:5f:ab:d2:50:ce:5f:57:70:36: af:d9:1e:62:b2:db:87:e8:af:98:a1:25:91:c9:f3:f4:fd:52: b0:f5:4e:f2:e4:5b:bb:5c:e9:29:ea:7e:0e:9d:ee:b2:4a:f9: d6:92:8b:64:56:30:b3:3e:ff:e5:11:62:05:fa:ee:c6:dc:75: 5c:8e:09:ad:97:71:7c:5c:9d:4a:5e:7b:e7:46:91:da:31:31: 5e:ee:3b:14 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfAyTethmO/DlYfxnL7+sH8W/cQ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDEyMDA2WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTg1NzlmYzIyOWRiN2I2M2NiODNmNGMzY2EwN2JlNjZh N2Y0YzliZWMxNjMwMTczNzBkNzEyNDc0MDc5MDE2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyNPUVi95kHqtARHgkOgiRU1qrcWtHf72D3UiG86JCbN3y 5Ww6PtNTewUdJBY2bbkvIaSzsTRKYQXHZB9/iHRmVdyUXBi7zXaOY4tLYaUU363W ywh0FMMc29C7GWLfWjlkXEFIkP94+MwvqPFlLTkHrDvJfLUHxhKjZNUUpRaWoXzy dPPXr16dqXENbXyDw14e6BLVIJKbYNiikSfzYJ1tdG8U/bQP0LSUho61rArmPR7M 057m+SYVa7xfxwcwfQcCqi1r79UVGXdWh0BCdjkcpWTCY7Ucr0/9vX/bt522rMKP Q3r2qt7Erloru8Ox2Gq5A4OXhHHCI15rzQnNj7llAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUSTM3+aeZmkHkNL7qX7iWTjD6iMkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkYjcwNGI2LWI0MDEtNGZjZi1hMTNjLTA4OTFhOWMxNzVjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEXFjANBgkqhkiG9w0BAQsFAAOCAQEAKiGmb4WU+EZZLM0sTfr9wvkdDgDs gbzOVAl0RW9LS0GuaIJ8OIoT8xB77Ap/HJC7tZS1G3v40ggwn4zgvUVDnzeeObEm VAQN9CzLxI1oXdCekrrIpBCnahI7yy/Wyr3daGJJr7hk6bjNcJLbCN+60y+HdDlH hiYsPXdbhofnNAPvie4GPzNJpUoNA51nmSFBH3XvCEJXXcI+hrhQ4Khjtc5inYhd wLX+epfOX6vSUM5fV3A2r9keYrLbh+ivmKElkcnz9P1SsPVO8uRbu1zpKep+Dp3u skr51pKLZFYwsz7/5RFiBfruxtx1XI4JrZdxfFydSl5750aR2jExXu47FA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:20:13 2026 by rpki-client