$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d52a8dc4-07b0-4ecb-9ae4-7f0a45a014f1.roa File: d52a8dc4-07b0-4ecb-9ae4-7f0a45a014f1.roa (raw, json) Hash identifier: 4FFhmQTdT3PD+7rzeb3U0e9jNWMlAuJNsH8/UO+zSXs= Subject key identifier: 6D:0E:E2:95:38:CD:98:48:70:CD:2F:29:A1:B0:53:D5:47:C5:98:0A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B745793A6B5AE02FA2ED0E38C528E0247245F92 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d52a8dc4-07b0-4ecb-9ae4-7f0a45a014f1.roa Signing time: Thu 26 Feb 2026 00:11:14 +0000 ROA not before: Thu 26 Feb 2026 00:11:14 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 16.49.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:74:57:93:a6:b5:ae:02:fa:2e:d0:e3:8c:52:8e:02:47:24:5f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 26 00:11:14 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=c508211e33b406e0ce957fb7d67611188aa110fa21f50443976b191b1ce78213, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1d:d2:ea:f4:54:21:e1:8e:9f:40:5e:62:e1: 55:45:5b:d8:b6:d3:50:c8:19:66:3c:cc:a5:1c:bc: cc:c4:7b:55:2a:5a:6c:56:c0:87:a0:d5:bc:db:dd: 1a:64:e3:ff:90:e1:dd:03:84:84:0c:73:4d:a9:da: 8b:8c:93:3f:e4:3d:85:44:d0:0f:95:a4:97:1d:ce: 26:4c:15:7b:64:3b:33:69:dc:ec:81:03:d1:3a:48: cc:46:f5:05:58:1c:3e:9f:ec:dd:72:23:d7:6f:00: da:9d:80:2f:ef:7b:eb:c2:21:4a:f2:5d:48:91:bd: e9:60:35:49:84:6a:29:dd:08:f5:d7:01:a9:d5:21: 6b:a8:a6:52:f9:d4:c2:ee:71:6e:dc:e9:19:3d:38: 97:04:93:1c:e4:dd:5c:3f:60:f1:26:1c:b8:5b:ce: 1e:f2:53:94:fc:e2:8d:56:db:92:3f:2a:26:b0:56: 7a:79:14:92:85:91:60:e3:fc:e0:b4:ab:29:f5:0c: 78:9c:70:23:04:49:09:3c:09:18:7d:d3:24:4b:89: c4:d4:c1:58:55:02:c1:c3:ec:1e:18:53:09:1c:5a: 6e:ba:92:56:52:9c:dd:e0:88:e7:f8:b6:3e:73:79: 48:ae:9f:1e:59:d2:b7:de:9b:4e:a1:9f:23:94:9f: c1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0E:E2:95:38:CD:98:48:70:CD:2F:29:A1:B0:53:D5:47:C5:98:0A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d52a8dc4-07b0-4ecb-9ae4-7f0a45a014f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.49.0.0/16 Signature Algorithm: sha256WithRSAEncryption 11:24:3d:51:ef:61:f6:98:60:1d:8c:a4:84:e9:6a:11:21:a2: d9:c0:06:2e:9c:0c:56:02:48:2e:03:2e:73:9f:85:90:e6:b6: 12:7c:66:61:83:b9:67:19:93:a5:33:95:5e:ac:fb:32:92:f3: b0:4f:02:d6:e1:59:43:65:e8:33:a5:c7:56:f4:ba:88:8c:50: 1c:78:98:bd:80:f9:4c:08:88:8e:0a:fe:94:60:85:ff:d8:44: e0:d7:f9:96:52:d3:be:dc:c6:cc:a5:fd:17:6d:ce:e7:89:d5: 91:dc:07:ed:9a:55:a1:40:60:67:7e:2d:50:c5:f3:14:28:11: 79:1b:88:14:ee:3c:71:d2:ce:a0:b4:fa:90:7c:23:3d:59:32: 76:4b:f6:bc:e3:ef:6b:93:2c:2a:07:73:f0:98:52:87:34:ad: 54:94:d9:8f:99:2e:2f:bb:5a:4c:bf:36:10:e4:7e:a8:f8:de: 4f:47:9c:d1:d6:cc:79:67:d4:13:57:98:ad:b1:bb:f9:9c:59: fd:7f:b9:77:27:d0:49:77:ae:95:58:9a:09:49:1f:0c:5d:8f: 99:a6:b8:58:2c:76:bb:b0:b0:d9:fa:32:e0:4d:6c:98:22:96: 81:e6:a2:fb:ff:6c:64:99:19:5c:c1:e9:d9:c1:28:6c:ed:d8: b7:60:90:19 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUG3RXk6a1rgL6LtDjjFKOAkckX5IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI2MDAxMTE0WhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNTA4MjExZTMzYjQwNmUwY2U5NTdmYjdkNjc2MTExODhh YTExMGZhMjFmNTA0NDM5NzZiMTkxYjFjZTc4MjEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuHdLq9FQh4Y6fQF5i4VVFW9i201DIGWY8zKUcvMzEe1Uq WmxWwIeg1bzb3Rpk4/+Q4d0DhIQMc02p2ouMkz/kPYVE0A+VpJcdziZMFXtkOzNp 3OyBA9E6SMxG9QVYHD6f7N1yI9dvANqdgC/ve+vCIUryXUiRvelgNUmEaindCPXX AanVIWuoplL51MLucW7c6Rk9OJcEkxzk3Vw/YPEmHLhbzh7yU5T84o1W25I/Kiaw Vnp5FJKFkWDj/OC0qyn1DHiccCMESQk8CRh90yRLicTUwVhVAsHD7B4YUwkcWm66 klZSnN3giOf4tj5zeUiunx5Z0rfem06hnyOUn8GdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUbQ7ilTjNmEhwzS8pobBT1UfFmAowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q1MmE4ZGM0LTA3YjAtNGVjYi05YWU0LTdmMGE0NWEwMTRmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQMTANBgkqhkiG9w0BAQsFAAOCAQEAESQ9Ue9h9phgHYykhOlqESGi2cAG LpwMVgJILgMuc5+FkOa2EnxmYYO5ZxmTpTOVXqz7MpLzsE8C1uFZQ2XoM6XHVvS6 iIxQHHiYvYD5TAiIjgr+lGCF/9hE4Nf5llLTvtzGzKX9F23O54nVkdwH7ZpVoUBg Z34tUMXzFCgReRuIFO48cdLOoLT6kHwjPVkydkv2vOPva5MsKgdz8JhShzStVJTZ j5kuL7taTL82EOR+qPjeT0ec0dbMeWfUE1eYrbG7+ZxZ/X+5dyfQSXeulViaCUkf DF2Pmaa4WCx2u7Cw2foy4E1smCKWgeai+/9sZJkZXMHp2cEobO3Yt2CQGQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:19:50 2026 by rpki-client