$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2c5698f-7efa-47dc-a2cd-3c4bfc467615.roa File: d2c5698f-7efa-47dc-a2cd-3c4bfc467615.roa (raw, json) Hash identifier: gpXyoCqZO4eTQ+Uv1jqtlSMyttoxds5FqDunWM3yyXo= Subject key identifier: 06:E0:35:28:45:66:74:27:00:E1:0C:98:6E:79:E1:63:15:3E:38:6E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E2522A5D9870D706711D36CBC429EEAA86DF295 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2c5698f-7efa-47dc-a2cd-3c4bfc467615.roa Signing time: Mon 09 Feb 2026 00:00:07 +0000 ROA not before: Mon 09 Feb 2026 00:00:07 +0000 ROA not after: Sun 10 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 194.97.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:25:22:a5:d9:87:0d:70:67:11:d3:6c:bc:42:9e:ea:a8:6d:f2:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 9 00:00:07 2026 GMT Not After : May 10 23:59:59 2026 GMT Subject: serialNumber=18645eeb8f6be25bcbd941a3a7c29577c075310e0374320ffbf6664705ba1059, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:99:0c:b3:46:4d:79:ec:01:30:9c:01:89:96: f1:d8:cc:f3:03:e7:b2:aa:dc:3c:ce:e6:6c:43:f2: ad:63:9d:66:6e:ec:be:cf:39:a8:52:2a:10:9c:51: 2f:5d:12:23:e5:52:85:76:ef:40:11:56:28:f6:88: f5:fe:40:32:a4:ee:d5:fd:86:03:7b:b1:be:60:92: b5:e4:cd:e8:e2:37:f4:f7:8c:90:5a:cf:b1:47:41: e3:22:4e:94:e3:0f:d7:8c:37:10:21:65:4c:d2:dc: 66:9a:9b:99:6c:41:9e:8f:f2:b7:79:33:95:05:b3: ae:10:aa:7e:11:9c:95:37:e9:d0:f7:8f:73:2b:dd: bc:69:99:14:2d:fc:68:4c:37:68:38:87:bc:a2:28: 22:56:f4:32:c8:fd:88:82:9d:67:cd:96:07:32:7e: f5:01:7a:5c:6c:5c:93:79:01:5e:19:0a:03:ac:94: 30:0e:21:d9:e0:a5:fa:f7:8a:88:5c:f2:88:68:b6: 31:57:d2:b8:10:6e:fa:2f:c5:b1:52:b4:ca:ad:45: 22:2c:50:11:64:b3:c2:cf:73:56:72:39:c0:16:ed: 5d:3d:0b:ec:45:47:40:a7:a9:f6:86:0d:ff:d1:3e: 4c:08:b1:99:e4:1f:7d:b0:7e:da:13:fc:4b:5b:b5: ec:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E0:35:28:45:66:74:27:00:E1:0C:98:6E:79:E1:63:15:3E:38:6E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2c5698f-7efa-47dc-a2cd-3c4bfc467615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.97.32.0/19 Signature Algorithm: sha256WithRSAEncryption d1:98:c8:ca:aa:38:e1:52:0c:db:6d:90:db:94:49:42:e8:4d: 93:c6:ca:cf:5b:80:ac:d8:1d:ed:7c:68:4e:b6:8e:93:0a:d4: 16:1a:31:a8:34:00:96:f0:99:34:1b:eb:1d:66:16:1e:a0:f7: e9:ea:bc:62:0a:a7:f3:1b:d5:60:81:ae:20:aa:2d:31:c2:1c: 10:13:54:4c:32:97:35:74:37:34:5e:a4:44:c5:a4:35:2e:ca: f8:ef:67:4c:f6:0b:3b:85:12:d2:7c:c1:c7:15:0a:5d:96:80: ff:21:78:d3:e8:22:ba:eb:2b:9d:ff:d7:15:d2:27:b4:70:c1: 71:92:a7:80:86:42:74:bf:e1:23:34:34:dd:cd:8a:1d:28:98: 73:78:f5:39:7a:8e:c9:41:d2:3a:92:0c:a4:3f:1d:29:3c:10: b8:67:65:bc:57:da:38:df:84:4a:07:a9:43:68:82:10:1f:e1: 87:50:83:d6:72:7f:a5:7c:bd:58:4e:ee:b1:df:d8:ef:67:69: 96:f9:43:7b:de:4a:68:dd:17:d2:26:3b:e6:36:81:a3:ac:34: 0f:97:a6:3d:8c:88:c2:9c:97:00:49:31:5b:a4:4a:a4:58:8b: fe:d3:03:61:33:b6:9e:5c:ec:9b:ae:22:23:fd:e5:33:38:ad: 3c:8f:ee:b8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDiUipdmHDXBnEdNsvEKe6qht8pUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA5MDAwMDA3WhcNMjYwNTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxODY0NWVlYjhmNmJlMjViY2JkOTQxYTNhN2MyOTU3N2Mw NzUzMTBlMDM3NDMyMGZmYmY2NjY0NzA1YmExMDU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsmQyzRk157AEwnAGJlvHYzPMD57Kq3DzO5mxD8q1jnWZu 7L7POahSKhCcUS9dEiPlUoV270ARVij2iPX+QDKk7tX9hgN7sb5gkrXkzejiN/T3 jJBaz7FHQeMiTpTjD9eMNxAhZUzS3Gaam5lsQZ6P8rd5M5UFs64Qqn4RnJU36dD3 j3Mr3bxpmRQt/GhMN2g4h7yiKCJW9DLI/YiCnWfNlgcyfvUBelxsXJN5AV4ZCgOs lDAOIdngpfr3iohc8ohotjFX0rgQbvovxbFStMqtRSIsUBFks8LPc1ZyOcAW7V09 C+xFR0CnqfaGDf/RPkwIsZnkH32wftoT/EtbteyPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBuA1KEVmdCcA4QyYbnnhYxU+OG4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QyYzU2OThmLTdlZmEtNDdkYy1hMmNkLTNjNGJmYzQ2NzYxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXCYSAwDQYJKoZIhvcNAQELBQADggEBANGYyMqqOOFSDNttkNuUSULoTZPG ys9bgKzYHe18aE62jpMK1BYaMag0AJbwmTQb6x1mFh6g9+nqvGIKp/Mb1WCBriCq LTHCHBATVEwylzV0NzRepETFpDUuyvjvZ0z2CzuFEtJ8wccVCl2WgP8heNPoIrrr K53/1xXSJ7RwwXGSp4CGQnS/4SM0NN3Nih0omHN49Tl6jslB0jqSDKQ/HSk8ELhn ZbxX2jjfhEoHqUNoghAf4YdQg9Zyf6V8vVhO7rHf2O9naZb5Q3veSmjdF9ImO+Y2 gaOsNA+Xpj2MiMKclwBJMVukSqRYi/7TA2Eztp5c7JuuIiP95TM4rTyP7rg= -----END CERTIFICATE-----Generated at Sun Mar 1 22:07:57 2026 by rpki-client