$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce802f82-6d5a-453e-b8c9-f5ee559bf8c5.roa File: ce802f82-6d5a-453e-b8c9-f5ee559bf8c5.roa (raw, json) Hash identifier: F7N8YYVtUF8rzQgwx984VZ6+KjaDHeXfCM6JGS1Xxgc= Subject key identifier: 7C:0C:A9:71:56:D5:05:DA:4A:61:FC:3F:D8:2F:A9:AB:BA:54:32:8F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 04D392B83ACC30318AB6001E588AE76E0C435CAF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce802f82-6d5a-453e-b8c9-f5ee559bf8c5.roa Signing time: Sat 07 Feb 2026 00:30:08 +0000 ROA not before: Sat 07 Feb 2026 00:30:08 +0000 ROA not after: Fri 08 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 152.24.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d3:92:b8:3a:cc:30:31:8a:b6:00:1e:58:8a:e7:6e:0c:43:5c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 7 00:30:08 2026 GMT Not After : May 8 23:59:59 2026 GMT Subject: serialNumber=c2bac0879db191f246e7a1a21cc27022aa4bd826467c65e359922a7d3adaade7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:64:eb:0a:de:cd:1d:25:89:d2:8d:3a:60:23: 8d:49:48:aa:bc:e0:6f:eb:0e:7b:ac:ed:f7:02:31: b9:c3:10:e6:ba:98:ee:9e:48:70:dd:ab:6d:89:a9: cb:fa:de:de:bd:11:51:32:b0:65:ba:0c:e4:35:09: 0d:12:ee:90:2b:9c:3b:88:16:d7:e0:c7:7f:c7:08: 55:ff:f5:52:b9:44:51:70:45:46:27:00:d9:41:24: af:22:0e:ac:bb:d1:9b:cc:04:fc:88:b3:c3:d2:dd: 19:d4:71:00:1d:43:97:c9:81:64:b9:7f:6e:54:b6: 6a:13:bc:2f:7b:b0:57:53:3a:3b:95:d3:03:80:46: ba:13:dc:5e:39:31:8a:a1:3d:f5:33:8c:b0:1e:03: 9c:68:34:0c:91:d9:83:00:0f:7b:ff:fa:34:bb:ac: c8:1d:00:99:64:35:76:c5:57:63:ff:6a:44:06:b1: 21:b0:e3:a1:04:18:00:d7:1a:dc:c0:0f:04:d5:67: 11:70:e8:8a:e8:98:ff:8f:fc:ec:a9:ff:f0:fb:12: 85:e7:e3:87:3b:a2:df:aa:78:3e:28:65:e5:26:9a: 16:00:04:f0:0d:cc:4b:b6:96:3c:9f:c8:5d:1a:9a: 7f:ec:b9:c5:32:51:85:a4:8b:bd:ff:cd:98:1d:bb: df:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0C:A9:71:56:D5:05:DA:4A:61:FC:3F:D8:2F:A9:AB:BA:54:32:8F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce802f82-6d5a-453e-b8c9-f5ee559bf8c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.24.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4a:d0:e8:12:7e:4c:12:ed:0d:32:e8:25:55:39:2a:2a:34:91: 8f:96:5a:e0:51:92:81:57:ef:8e:36:6e:d2:ef:05:a5:14:e9: b5:2d:15:e1:06:61:89:99:69:4a:35:8b:e8:44:ca:6c:1d:a8: 82:29:f5:98:b7:4a:13:28:c8:b3:37:f9:2a:ab:21:65:2f:94: 61:51:b4:3c:9f:e7:57:a7:40:91:2d:66:26:9a:17:7b:56:5e: 44:2e:20:a9:59:4f:c7:13:34:f8:ba:43:f5:f1:f4:04:76:9c: 8e:a7:6a:8a:2b:6c:11:d9:24:3d:8f:cf:7d:e9:28:3c:2d:45: 8e:b4:08:1b:f8:fc:c0:b6:76:47:0b:27:6a:d9:f8:c3:f7:d4: a3:ad:5b:3c:30:1d:62:a9:13:a1:c4:7d:c8:60:60:8e:12:35: 79:94:06:a1:3a:7e:61:37:b1:4e:f9:eb:2c:c0:70:0d:51:cb: e6:d8:ef:40:9d:5c:e8:cf:4c:35:99:fd:ac:f6:dc:67:e5:12: f3:00:e8:90:45:2f:0f:1e:1b:00:f7:7c:ab:92:ba:d7:06:03: af:aa:b0:9a:f8:a2:c7:1f:29:03:f7:ae:08:4b:eb:aa:3f:76: 6b:ce:e9:a9:ab:de:a5:9a:8a:3c:7f:50:d5:fa:53:19:f7:c3: 0a:fd:83:d1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUBNOSuDrMMDGKtgAeWIrnbgxDXK8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA3MDAzMDA4WhcNMjYwNTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMmJhYzA4NzlkYjE5MWYyNDZlN2ExYTIxY2MyNzAyMmFh NGJkODI2NDY3YzY1ZTM1OTkyMmE3ZDNhZGFhZGU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxZOsK3s0dJYnSjTpgI41JSKq84G/rDnus7fcCMbnDEOa6 mO6eSHDdq22Jqcv63t69EVEysGW6DOQ1CQ0S7pArnDuIFtfgx3/HCFX/9VK5RFFw RUYnANlBJK8iDqy70ZvMBPyIs8PS3RnUcQAdQ5fJgWS5f25UtmoTvC97sFdTOjuV 0wOARroT3F45MYqhPfUzjLAeA5xoNAyR2YMAD3v/+jS7rMgdAJlkNXbFV2P/akQG sSGw46EEGADXGtzADwTVZxFw6IromP+P/Oyp//D7EoXn44c7ot+qeD4oZeUmmhYA BPANzEu2ljyfyF0amn/sucUyUYWki73/zZgdu9/zAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUfAypcVbVBdpKYfw/2C+pq7pUMo8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlODAyZjgyLTZkNWEtNDUzZS1iOGM5LWY1ZWU1NTliZjhjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCYGDANBgkqhkiG9w0BAQsFAAOCAQEAStDoEn5MEu0NMuglVTkqKjSRj5Za 4FGSgVfvjjZu0u8FpRTptS0V4QZhiZlpSjWL6ETKbB2ogin1mLdKEyjIszf5Kqsh ZS+UYVG0PJ/nV6dAkS1mJpoXe1ZeRC4gqVlPxxM0+LpD9fH0BHacjqdqiitsEdkk PY/PfekoPC1FjrQIG/j8wLZ2Rwsnatn4w/fUo61bPDAdYqkTocR9yGBgjhI1eZQG oTp+YTexTvnrLMBwDVHL5tjvQJ1c6M9MNZn9rPbcZ+US8wDokEUvDx4bAPd8q5K6 1wYDr6qwmviixx8pA/euCEvrqj92a87pqavepZqKPH9Q1fpTGffDCv2D0Q== -----END CERTIFICATE-----Generated at Mon Mar 2 00:16:05 2026 by rpki-client