$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1a5f9bd-ede4-4387-85bf-7fdfd794a298.roa File: d1a5f9bd-ede4-4387-85bf-7fdfd794a298.roa (raw, json) Hash identifier: rx5cvCOrUlw04zwsNBypOwQSQtpElc9vKtlw7962284= Subject key identifier: F6:C3:51:CB:44:AE:CA:62:94:A4:4E:6D:A7:A6:36:AC:93:5E:2D:83 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 35C560160A92E71A7116DEA163375730ACC64608 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1a5f9bd-ede4-4387-85bf-7fdfd794a298.roa Signing time: Wed 25 Feb 2026 00:40:07 +0000 ROA not before: Wed 25 Feb 2026 00:40:07 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 54.26.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c5:60:16:0a:92:e7:1a:71:16:de:a1:63:37:57:30:ac:c6:46:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 00:40:07 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=7e1a4cc5f8bc1fd48c255904ce74b63d371d8cfe24b4468ecc1cec4a9b986d6a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0a:56:b3:82:38:1b:d0:38:0e:9a:e6:d7:04: 44:9b:e7:db:ff:8f:12:e1:8b:d0:a0:07:76:79:c8: 2e:6d:40:d0:60:bf:4d:91:8a:65:1c:17:dc:a2:13: 46:4e:bc:0f:34:52:d2:3d:6c:cb:4c:95:e1:1a:c4: 02:9c:da:c2:19:82:a6:1a:42:65:ec:36:2c:ff:f5: dc:3b:d8:8a:bc:43:48:60:ae:ca:08:62:a3:41:5d: 77:6c:7b:1e:0c:b9:5c:f5:7c:50:2c:48:8f:9a:62: c3:ca:03:d6:a3:91:6d:73:f0:60:07:f4:f0:b6:c5: df:5d:cd:2d:0a:8e:4f:09:c9:1d:7e:31:d9:53:67: 6f:19:16:dd:7b:27:d9:6c:73:0f:20:1c:d4:42:02: 78:bd:aa:b1:3d:eb:3e:50:2c:7c:51:22:53:56:ba: e3:66:5c:d7:5e:b4:ea:75:b6:6f:c5:53:6a:74:75: e4:d4:b3:d6:bf:d7:25:f7:5b:ac:cb:5f:1f:02:64: 73:39:e9:0e:13:f4:e0:88:33:ac:7d:27:4f:ab:0b: e5:63:53:48:55:31:90:7e:67:f8:2e:40:e6:3b:6e: bb:99:a6:ce:2b:34:de:78:b1:ae:50:b2:1d:49:ca: e7:7e:cd:db:a6:35:51:2f:ce:07:44:94:04:0b:eb: d0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C3:51:CB:44:AE:CA:62:94:A4:4E:6D:A7:A6:36:AC:93:5E:2D:83 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1a5f9bd-ede4-4387-85bf-7fdfd794a298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.26.0.0/16 Signature Algorithm: sha256WithRSAEncryption ca:95:4c:9f:0b:41:b1:88:a8:1b:50:ba:86:8e:27:6d:bb:21: ba:14:92:35:8b:2e:c4:e6:c7:93:ab:6d:1c:91:20:ab:5d:d5: 45:16:3b:2c:75:10:cb:a9:66:31:22:25:61:f9:8e:37:24:58: 8b:1c:2d:88:57:c9:a8:a5:b1:a9:71:a7:8f:60:39:73:6e:8c: bb:8e:f0:2e:19:34:5b:c5:ac:f7:46:27:dc:9d:d3:e1:1a:78: 1e:0d:41:b6:ae:78:10:f7:ad:5a:8d:50:ad:cc:89:4c:09:30: c8:21:0b:42:50:da:1e:03:ba:75:28:e6:87:1c:83:0d:fb:16: fa:0a:10:dd:45:ab:4a:81:2a:44:3d:a5:b4:1b:a2:09:54:7b: eb:76:68:52:98:63:c4:0f:0c:42:67:97:ec:38:42:e5:71:c0: f6:18:cd:1e:2e:a8:bf:8d:bf:20:b7:36:1c:06:49:5e:40:59: dd:0e:cd:60:95:6c:3d:0f:bf:d1:08:31:e5:58:17:d1:2a:56: cf:53:db:6a:36:63:bb:f3:33:71:54:75:80:4c:ca:da:f6:8c: 95:91:19:fc:41:df:8f:35:e8:70:dc:95:19:c4:36:71:8e:7a: ba:f3:e1:16:7c:af:fd:d1:de:82:72:87:30:3c:23:24:d2:17: 18:fa:ee:2e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNcVgFgqS5xpxFt6hYzdXMKzGRggwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDA0MDA3WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTFhNGNjNWY4YmMxZmQ0OGMyNTU5MDRjZTc0YjYzZDM3 MWQ4Y2ZlMjRiNDQ2OGVjYzFjZWM0YTliOTg2ZDZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOClazgjgb0DgOmubXBESb59v/jxLhi9CgB3Z5yC5tQNBg v02RimUcF9yiE0ZOvA80UtI9bMtMleEaxAKc2sIZgqYaQmXsNiz/9dw72Iq8Q0hg rsoIYqNBXXdsex4MuVz1fFAsSI+aYsPKA9ajkW1z8GAH9PC2xd9dzS0Kjk8JyR1+ MdlTZ28ZFt17J9lscw8gHNRCAni9qrE96z5QLHxRIlNWuuNmXNdetOp1tm/FU2p0 deTUs9a/1yX3W6zLXx8CZHM56Q4T9OCIM6x9J0+rC+VjU0hVMZB+Z/guQOY7bruZ ps4rNN54sa5Qsh1Jyud+zdumNVEvzgdElAQL69AlAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU9sNRy0SuymKUpE5tp6Y2rJNeLYMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QxYTVmOWJkLWVkZTQtNDM4Ny04NWJmLTdmZGZkNzk0YTI5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2GjANBgkqhkiG9w0BAQsFAAOCAQEAypVMnwtBsYioG1C6ho4nbbshuhSS NYsuxObHk6ttHJEgq13VRRY7LHUQy6lmMSIlYfmONyRYixwtiFfJqKWxqXGnj2A5 c26Mu47wLhk0W8Ws90Yn3J3T4Rp4Hg1Btq54EPetWo1QrcyJTAkwyCELQlDaHgO6 dSjmhxyDDfsW+goQ3UWrSoEqRD2ltBuiCVR763ZoUphjxA8MQmeX7DhC5XHA9hjN Hi6ov42/ILc2HAZJXkBZ3Q7NYJVsPQ+/0Qgx5VgX0SpWz1PbajZju/MzcVR1gEzK 2vaMlZEZ/EHfjzXocNyVGcQ2cY56uvPhFnyv/dHegnKHMDwjJNIXGPruLg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:13:23 2026 by rpki-client