$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d017eeab-e601-4cef-bb4a-c7db1d34b05d.roa File: d017eeab-e601-4cef-bb4a-c7db1d34b05d.roa (raw, json) Hash identifier: Na+OCJTPFVdhXamjaTSjcW8cpaJU9Htbv/B5OJDYCQU= Subject key identifier: 6F:08:B4:D7:8B:80:53:18:CC:16:D0:A2:C9:1C:92:2D:FA:FE:A3:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0B2FB749E7852B421759F9377E9140A558179875 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d017eeab-e601-4cef-bb4a-c7db1d34b05d.roa Signing time: Fri 13 Feb 2026 01:11:04 +0000 ROA not before: Fri 13 Feb 2026 01:11:04 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 8987 IP address blocks: 31.220.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:2f:b7:49:e7:85:2b:42:17:59:f9:37:7e:91:40:a5:58:17:98:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 13 01:11:04 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=1fbf20437941db0cd94ce3c89943d816e8d7e09e9cee9b43a69a66a6d974da80, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:12:c5:11:c1:82:b5:3b:83:a0:68:96:b5:f3: 6e:83:a5:8c:5a:6c:99:50:d8:37:6c:1a:24:c7:a6: d3:2d:9c:ad:cd:25:93:f6:4e:1c:4c:1b:5a:af:18: 1b:e8:7a:0c:72:6d:3e:d8:97:8d:de:43:09:79:3d: 12:7e:65:f4:38:68:8a:b5:cf:be:4f:2a:44:a6:0d: e8:08:6f:3b:33:42:ff:69:73:d4:bc:56:86:b1:2a: 09:eb:b8:6a:c2:34:eb:94:a3:93:ea:1c:8f:a6:2c: eb:7e:d0:f8:9d:ae:1f:54:5d:53:33:7b:54:81:4e: ce:c5:3a:f6:3f:8e:5d:17:03:2f:9b:7d:ee:6f:7e: 86:34:cd:b3:4e:b9:d8:32:0c:87:3d:f7:90:49:18: 78:b5:99:b1:80:92:ca:b9:af:fc:2d:f6:67:ac:39: c8:3c:4b:cd:f4:81:8e:a3:a1:ed:f3:ae:c7:ad:e4: 31:26:e3:19:db:34:d0:ea:68:1e:a0:6b:f8:34:b6: 6d:33:b9:3c:10:dd:de:60:e3:ff:69:b7:07:23:ed: 8a:69:bc:47:c4:40:58:54:08:de:c0:3d:a7:d7:85: ca:5c:1e:23:92:22:a6:6a:64:2e:13:9f:ef:7e:0d: 16:38:b0:26:14:86:d6:a0:3d:80:24:26:02:37:3b: 2c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:08:B4:D7:8B:80:53:18:CC:16:D0:A2:C9:1C:92:2D:FA:FE:A3:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d017eeab-e601-4cef-bb4a-c7db1d34b05d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.252.0/24 Signature Algorithm: sha256WithRSAEncryption 14:16:fc:ce:6d:e3:87:8f:f8:c4:7a:65:8b:bb:5e:e3:68:fc: 71:51:f2:9b:13:c9:c1:1a:f4:9f:bd:db:50:ed:27:2c:59:c2: 86:6b:9b:a8:47:55:88:98:b3:93:a7:63:d7:c3:25:11:57:fd: 60:3c:eb:f2:b7:8a:20:70:fe:15:fd:04:e0:05:1c:15:fd:b4: 59:f9:da:f2:b7:4f:67:25:a4:5c:08:9b:05:1c:49:09:6e:94: 5e:68:eb:d1:54:31:51:b2:ca:ec:0a:e4:d4:bc:9f:50:fe:7f: 17:29:b0:9e:28:83:aa:b7:58:f8:1c:20:a8:21:12:1e:19:7f: cf:1d:98:15:7f:c9:2c:4c:85:64:3b:e1:2a:ca:2c:f2:b3:db: 19:79:28:ed:17:1e:9c:77:94:e9:0b:08:a8:91:ec:54:cd:84: 28:cf:99:79:19:e0:68:60:cb:b8:a9:03:6e:53:db:07:55:85: 5c:bd:03:64:f4:e8:72:87:7d:bc:73:19:de:47:4d:57:03:ad: 88:8d:e2:cf:54:4c:42:98:83:8f:2c:74:b3:34:89:1b:fd:ea: ee:d5:69:cd:a3:fa:1e:d7:4c:5f:97:4b:46:c7:5e:31:30:8b: 7d:4b:a4:e6:b3:20:76:53:b7:ae:2a:5a:bd:37:17:de:44:50: 1f:e5:0d:7d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCy+3SeeFK0IXWfk3fpFApVgXmHUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEzMDExMTA0WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZmJmMjA0Mzc5NDFkYjBjZDk0Y2UzYzg5OTQzZDgxNmU4 ZDdlMDllOWNlZTliNDNhNjlhNjZhNmQ5NzRkYTgwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8EsURwYK1O4OgaJa1826DpYxabJlQ2DdsGiTHptMtnK3N JZP2ThxMG1qvGBvoegxybT7Yl43eQwl5PRJ+ZfQ4aIq1z75PKkSmDegIbzszQv9p c9S8VoaxKgnruGrCNOuUo5PqHI+mLOt+0Pidrh9UXVMze1SBTs7FOvY/jl0XAy+b fe5vfoY0zbNOudgyDIc995BJGHi1mbGAksq5r/wt9mesOcg8S830gY6joe3zrset 5DEm4xnbNNDqaB6ga/g0tm0zuTwQ3d5g4/9ptwcj7YppvEfEQFhUCN7APafXhcpc HiOSIqZqZC4Tn+9+DRY4sCYUhtagPYAkJgI3OywfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbwi014uAUxjMFtCiyRySLfr+o+EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QwMTdlZWFiLWU2MDEtNGNlZi1iYjRhLWM3ZGIxZDM0YjA1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAf3PwwDQYJKoZIhvcNAQELBQADggEBABQW/M5t44eP+MR6ZYu7XuNo/HFR 8psTycEa9J+921DtJyxZwoZrm6hHVYiYs5OnY9fDJRFX/WA86/K3iiBw/hX9BOAF HBX9tFn52vK3T2clpFwImwUcSQlulF5o69FUMVGyyuwK5NS8n1D+fxcpsJ4og6q3 WPgcIKghEh4Zf88dmBV/ySxMhWQ74SrKLPKz2xl5KO0XHpx3lOkLCKiR7FTNhCjP mXkZ4Ghgy7ipA25T2wdVhVy9A2T06HKHfbxzGd5HTVcDrYiN4s9UTEKYg48sdLM0 iRv96u7Vac2j+h7XTF+XS0bHXjEwi31LpOazIHZTt64qWr03F95EUB/lDX0= -----END CERTIFICATE-----Generated at Mon Mar 2 19:56:42 2026 by rpki-client