$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfa47097-52bc-4989-842a-2cceba90b7a6.roa File: cfa47097-52bc-4989-842a-2cceba90b7a6.roa (raw, json) Hash identifier: a0nAW+k+nYwNi8V8mvIY83zFxtUVlfPIEfp+5I8vM+A= Subject key identifier: 88:11:B5:51:EC:37:E6:F7:C8:E2:79:CA:EF:4F:20:17:1B:D7:53:27 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7F3220BFD5CA5F3458EFFA6E123F6F6C12BC86A3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfa47097-52bc-4989-842a-2cceba90b7a6.roa Signing time: Thu 05 Feb 2026 00:00:07 +0000 ROA not before: Thu 05 Feb 2026 00:00:07 +0000 ROA not after: Wed 06 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 182.24.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:32:20:bf:d5:ca:5f:34:58:ef:fa:6e:12:3f:6f:6c:12:bc:86:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 5 00:00:07 2026 GMT Not After : May 6 23:59:59 2026 GMT Subject: serialNumber=dad5b00e987bcfb19e1c16a8889545d67d5e4184627432382bed9bed50a9780f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:22:03:35:77:36:a6:38:fc:d7:ec:e4:60: 3f:d7:3c:f3:bc:c9:95:38:cc:59:85:09:72:e8:7d: 2e:2a:11:d1:61:13:3f:9b:f5:c6:d6:2e:e3:4f:b7: bc:0d:10:5a:35:62:65:39:11:6a:17:10:5b:03:0f: 14:81:c9:90:7d:1f:ab:a0:70:b7:1b:14:ae:b5:ac: a6:18:c6:8b:5c:24:0c:e9:72:38:15:4b:0e:b5:dc: 82:03:24:1f:02:18:a0:b5:5c:fa:a1:9b:e6:a6:c8: 51:cf:5a:f6:21:5f:8f:b6:9f:7a:6e:95:f5:b2:7c: 48:12:f3:fc:ba:4f:bb:5b:7e:9e:c9:66:25:0f:9a: 99:66:bd:e2:73:d8:ac:7c:26:d4:8e:8b:5e:16:ff: ec:18:6d:cc:d0:9d:fd:b7:dd:31:29:22:b6:f1:40: df:87:73:44:05:90:6d:b5:e5:42:17:c6:a5:95:f1: bc:95:95:c9:3a:86:2b:1b:95:73:20:a7:b7:ee:54: 90:84:f7:75:72:f0:a4:c0:7b:69:57:25:e8:77:81: 58:89:ee:44:e6:5b:1e:8c:f8:26:b2:97:10:06:d8: 54:5e:1c:ec:cd:90:30:12:1b:8d:dc:95:cd:7a:79: c9:19:80:de:3a:fe:0c:6d:ca:d6:a3:eb:af:80:1a: e7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:11:B5:51:EC:37:E6:F7:C8:E2:79:CA:EF:4F:20:17:1B:D7:53:27 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfa47097-52bc-4989-842a-2cceba90b7a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 182.24.0.0/14 Signature Algorithm: sha256WithRSAEncryption 00:a9:6a:4d:ce:7e:cb:14:05:9c:b3:b2:ec:ff:b7:81:79:71: 87:65:54:2b:c7:95:b2:0f:f3:e4:5c:60:5d:8f:62:08:1c:8f: 4e:7a:d8:b2:cb:6e:92:8a:65:b8:00:bc:bd:23:5b:3f:20:9a: 2e:89:2d:c7:71:49:8b:18:6c:ee:39:e6:6b:9e:da:77:bd:fd: 64:86:59:30:ef:ba:c1:24:11:07:8b:b9:bf:b1:4b:f5:22:88: ba:56:2c:69:80:24:6c:2f:65:49:4b:61:4b:df:ba:83:4d:b2: 53:96:19:70:7e:8b:51:c7:71:ce:20:73:b6:7b:3e:63:b7:11: 55:db:a3:3d:30:e1:00:46:98:89:22:1a:7d:9c:7e:0e:0b:35: b6:c9:e6:2f:ee:95:75:af:d7:39:b6:d4:9d:a9:e1:e1:d3:d4: 5e:9b:00:0b:44:18:0f:04:04:08:c6:87:d1:dc:f2:56:e6:29: f2:e7:65:67:a2:fa:54:f1:e2:48:77:e9:4b:a6:fc:18:f8:dd: c6:39:4f:49:8f:c0:dc:d3:e9:ea:6f:ea:f2:04:19:16:f2:6c: ae:f0:df:0b:57:9a:e5:0d:e9:78:93:b7:67:3a:94:e3:11:b4: 4f:26:13:d5:8e:62:c1:8d:8f:5c:a9:e5:36:77:2d:af:29:e9: 5f:98:71:73 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfzIgv9XKXzRY7/puEj9vbBK8hqMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA1MDAwMDA3WhcNMjYwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYWQ1YjAwZTk4N2JjZmIxOWUxYzE2YTg4ODk1NDVkNjdk NWU0MTg0NjI3NDMyMzgyYmVkOWJlZDUwYTk3ODBmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNgSIDNXc2pjj81+zkYD/XPPO8yZU4zFmFCXLofS4qEdFh Ez+b9cbWLuNPt7wNEFo1YmU5EWoXEFsDDxSByZB9H6ugcLcbFK61rKYYxotcJAzp cjgVSw613IIDJB8CGKC1XPqhm+amyFHPWvYhX4+2n3pulfWyfEgS8/y6T7tbfp7J ZiUPmplmveJz2Kx8JtSOi14W/+wYbczQnf233TEpIrbxQN+Hc0QFkG215UIXxqWV 8byVlck6hisblXMgp7fuVJCE93Vy8KTAe2lXJeh3gViJ7kTmWx6M+CaylxAG2FRe HOzNkDASG43clc16eckZgN46/gxtytaj66+AGudTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUiBG1Uew35vfI4nnK708gFxvXUycwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NmYTQ3MDk3LTUyYmMtNDk4OS04NDJhLTJjY2ViYTkwYjdhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwK2GDANBgkqhkiG9w0BAQsFAAOCAQEAAKlqTc5+yxQFnLOy7P+3gXlxh2VU K8eVsg/z5FxgXY9iCByPTnrYsstukopluAC8vSNbPyCaLoktx3FJixhs7jnma57a d739ZIZZMO+6wSQRB4u5v7FL9SKIulYsaYAkbC9lSUthS9+6g02yU5YZcH6LUcdx ziBztns+Y7cRVdujPTDhAEaYiSIafZx+Dgs1tsnmL+6Vda/XObbUnanh4dPUXpsA C0QYDwQECMaH0dzyVuYp8udlZ6L6VPHiSHfpS6b8GPjdxjlPSY/A3NPp6m/q8gQZ FvJsrvDfC1ea5Q3peJO3ZzqU4xG0TyYT1Y5iwY2PXKnlNnctrynpX5hxcw== -----END CERTIFICATE-----Generated at Sun Mar 1 22:27:03 2026 by rpki-client