$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce589e22-a82f-4e68-a4ae-6f844c4d9437.roa File: ce589e22-a82f-4e68-a4ae-6f844c4d9437.roa (raw, json) Hash identifier: ELuWQsaiLaMG42Ef2BFaqwFvHve7gX3Sek05wAeAYxU= Subject key identifier: A5:C8:46:B0:19:22:F0:B9:2E:56:B6:12:38:DB:B1:10:36:C8:4E:A7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 57B45A44006980D3BA4F13EC847687DFD5E9893C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce589e22-a82f-4e68-a4ae-6f844c4d9437.roa Signing time: Tue 10 Feb 2026 00:41:43 +0000 ROA not before: Tue 10 Feb 2026 00:41:43 +0000 ROA not after: Mon 11 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b4:5a:44:00:69:80:d3:ba:4f:13:ec:84:76:87:df:d5:e9:89:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 10 00:41:43 2026 GMT Not After : May 11 23:59:59 2026 GMT Subject: serialNumber=c10e476afc80ea4f15ac34c9530ab4a71377ee0f6a7adf7fdfbd39b429cfff60, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ae:f3:ff:7b:68:e2:c1:f4:12:ae:bb:b8:5e: a1:f7:e2:a8:f5:4d:11:42:f1:cf:8a:77:aa:dc:1a: 27:78:49:7e:79:85:cf:bd:69:74:ac:be:f4:61:64: ce:55:52:0a:e2:dc:eb:cb:73:a7:64:88:a4:a7:51: 0c:c9:39:5d:46:32:4f:32:75:14:13:66:39:13:ce: cb:b8:86:e5:eb:df:fc:f4:91:a6:fa:19:15:73:95: 23:a6:42:5c:4c:3f:b8:7e:32:94:26:6a:ac:57:d5: f6:9e:bf:35:e0:0a:5e:97:f3:bf:44:fe:f4:11:31: 70:df:41:7e:79:12:9c:d2:76:42:2e:ae:72:84:2e: c6:45:69:a1:71:7d:f3:07:20:d8:cb:b4:14:46:20: 27:57:e8:f1:71:d6:21:94:9f:87:ff:e5:92:5e:6d: c6:0d:9b:a3:1d:06:cf:64:70:85:e2:58:ca:18:6e: 52:ca:9d:3c:de:cb:9e:e2:f2:ff:b5:44:42:5c:4e: 4f:e5:ce:c5:d7:05:a4:53:8f:0b:6e:b5:a0:c7:e6: 0b:0f:b2:8e:44:d7:63:b6:61:3d:31:79:d7:25:0f: c7:91:21:c4:00:e6:0e:c2:e3:16:be:07:a8:f6:2c: fa:b0:b4:41:c6:29:6a:84:f4:2a:87:77:e6:95:32: 40:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C8:46:B0:19:22:F0:B9:2E:56:B6:12:38:DB:B1:10:36:C8:4E:A7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce589e22-a82f-4e68-a4ae-6f844c4d9437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.78.0/24 Signature Algorithm: sha256WithRSAEncryption b5:f8:e7:85:2a:01:7f:d8:4f:47:d8:39:81:c8:1f:0b:1e:95: 40:7b:34:47:cd:21:dc:04:ba:44:f0:d3:53:0f:59:a0:36:4f: c9:c0:bc:95:51:58:66:46:06:e6:5b:b8:b3:e5:9c:20:ec:b3: df:4c:4a:ad:f7:ec:79:5c:8a:fb:fa:dc:0e:aa:d9:12:83:e5: 11:bb:16:22:c5:02:74:8d:e5:7a:f8:3f:13:fd:6b:5f:e6:70: 1b:61:9f:8b:25:3b:23:52:29:51:6a:3c:de:f9:31:33:f3:9f: 80:db:12:0c:e6:fd:13:06:d2:22:e5:32:57:3c:27:c8:07:b9: 22:78:5e:b8:8e:cf:cf:5b:81:79:43:a6:b7:34:3c:59:5a:6e: a3:1e:a8:0c:fe:d0:15:f0:e5:e6:eb:bb:15:a0:85:3e:a6:6d: 25:a7:31:5b:5e:55:36:77:f3:06:44:fc:35:ef:d1:1a:4a:34: bc:c6:f0:0b:29:2a:e2:38:db:0b:ba:4c:13:c3:0c:67:a5:13: da:0c:c8:04:4e:bf:ec:5a:62:3f:73:0e:b2:dc:35:9f:2c:30: 1a:5e:f6:48:1d:c8:5e:47:4d:d1:77:51:97:a4:b7:45:e3:8c: e4:ec:c9:25:84:64:b6:bd:d7:82:d2:e0:5d:66:73:51:78:58: 60:91:10:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV7RaRABpgNO6TxPshHaH39XpiTwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDA0MTQzWhcNMjYwNTExMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMTBlNDc2YWZjODBlYTRmMTVhYzM0Yzk1MzBhYjRhNzEz NzdlZTBmNmE3YWRmN2ZkZmJkMzliNDI5Y2ZmZjYwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2rvP/e2jiwfQSrru4XqH34qj1TRFC8c+Kd6rcGid4SX55 hc+9aXSsvvRhZM5VUgri3OvLc6dkiKSnUQzJOV1GMk8ydRQTZjkTzsu4huXr3/z0 kab6GRVzlSOmQlxMP7h+MpQmaqxX1faevzXgCl6X879E/vQRMXDfQX55EpzSdkIu rnKELsZFaaFxffMHINjLtBRGICdX6PFx1iGUn4f/5ZJebcYNm6MdBs9kcIXiWMoY blLKnTzey57i8v+1REJcTk/lzsXXBaRTjwtutaDH5gsPso5E12O2YT0xedclD8eR IcQA5g7C4xa+B6j2LPqwtEHGKWqE9CqHd+aVMkDJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpchGsBki8LkuVrYSONuxEDbITqcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlNTg5ZTIyLWE4MmYtNGU2OC1hNGFlLTZmODQ0YzRkOTQzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/E4wDQYJKoZIhvcNAQELBQADggEBALX454UqAX/YT0fYOYHIHwselUB7 NEfNIdwEukTw01MPWaA2T8nAvJVRWGZGBuZbuLPlnCDss99MSq337Hlcivv63A6q 2RKD5RG7FiLFAnSN5Xr4PxP9a1/mcBthn4slOyNSKVFqPN75MTPzn4DbEgzm/RMG 0iLlMlc8J8gHuSJ4XriOz89bgXlDprc0PFlabqMeqAz+0BXw5ebruxWghT6mbSWn MVteVTZ38wZE/DXv0RpKNLzG8AspKuI42wu6TBPDDGelE9oMyAROv+xaYj9zDrLc NZ8sMBpe9kgdyF5HTdF3UZekt0XjjOTsySWEZLa914LS4F1mc1F4WGCREDI= -----END CERTIFICATE-----Generated at Sun Mar 1 22:16:31 2026 by rpki-client