$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7b3bae8-29cb-4e5b-a876-890994ed4203.roa File: d7b3bae8-29cb-4e5b-a876-890994ed4203.roa (raw, json) Hash identifier: z0l5cnIC0kibmt1W4Ho2e9bLMQe2+at6lCS7a9DjCoY= Subject key identifier: 73:C9:96:0B:0D:C3:8A:39:BC:62:FD:68:99:57:E1:EE:04:55:DF:FB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0AEBC0575317E55DC945FCA22C8757B28A95468F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7b3bae8-29cb-4e5b-a876-890994ed4203.roa Signing time: Sun 22 Feb 2026 00:51:14 +0000 ROA not before: Sun 22 Feb 2026 00:51:14 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 205.147.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:eb:c0:57:53:17:e5:5d:c9:45:fc:a2:2c:87:57:b2:8a:95:46:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 22 00:51:14 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=90451aabe174cc5bc1cea201bb74371f7f0cb942d6eda12c74495111f57a8aea, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0f:b9:4e:dc:7f:3d:b7:3d:92:ef:41:ba:37: 39:09:49:28:10:1f:1b:e3:1a:05:b9:fa:f9:0c:c8: 75:c7:d9:bd:38:e6:0f:18:cc:9d:5a:07:4e:27:f6: cf:33:00:06:fa:8c:9a:da:59:0b:44:3a:eb:d2:91: da:5c:9b:9c:f8:44:c9:ee:72:5e:ba:8f:9e:8e:e6: 3e:8a:bb:bb:f0:7e:aa:64:e4:14:0c:b3:c0:df:85: 04:e2:ec:e4:d1:d2:58:3d:ad:c9:c3:9d:c5:fe:5d: f7:f6:7b:8e:9f:36:78:8f:d4:0a:37:40:5e:ce:f7: f3:04:3b:ff:32:f3:f2:a8:b3:69:a6:38:3c:b9:27: eb:f2:d4:0d:b5:67:14:48:40:30:13:02:d6:e1:c9: 62:1b:6d:ec:71:91:23:95:05:92:b6:6c:3e:b4:5d: 55:b9:dd:70:20:cd:09:06:d7:2e:d0:a7:1e:0f:6c: a4:3b:53:3d:24:5b:0e:ee:29:1e:ad:d9:29:96:95: 34:ef:ad:a3:fc:52:e2:c2:a8:27:61:09:2c:ae:86: 96:5d:37:06:18:ff:87:68:5f:a5:1f:e3:da:22:28: 39:03:05:43:53:71:14:50:60:1c:11:1a:c4:df:98: 4c:d5:ee:e2:2b:bb:4e:3a:ac:93:ce:54:bf:da:02: a3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C9:96:0B:0D:C3:8A:39:BC:62:FD:68:99:57:E1:EE:04:55:DF:FB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7b3bae8-29cb-4e5b-a876-890994ed4203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.147.232.0/23 Signature Algorithm: sha256WithRSAEncryption 03:24:4d:10:d4:67:72:5f:cc:03:49:f2:ac:a7:c5:ec:84:99: 0f:c6:19:d8:92:e4:13:9f:60:70:85:42:ab:52:90:85:a5:2d: 5f:e0:af:f5:8f:18:f2:59:a9:7b:f2:81:75:31:fe:04:84:de: af:3f:53:e0:2f:c1:27:43:76:d1:20:76:97:51:49:25:19:ca: 32:2e:77:99:62:ee:5a:4b:70:78:9b:30:14:75:5e:ac:93:4c: 3a:de:8b:1d:74:ae:6e:21:5c:fc:ba:77:eb:3f:08:3d:bc:53: 6f:33:89:af:2a:77:9a:89:bf:d4:be:a8:57:7c:eb:95:ad:fb: 0b:b5:03:ef:3f:88:a0:f1:fe:aa:50:ad:2a:b9:d4:df:92:b0: c7:30:c6:a1:28:b5:2d:0f:0b:32:30:0b:3f:64:2f:df:04:86: c5:cb:51:c7:b2:cf:d0:46:e3:61:29:b0:5f:e0:ac:43:dd:13: ff:09:ea:6f:fd:1b:7c:50:af:d2:68:75:f6:17:9c:bd:6d:1f: bd:f6:04:a9:0a:63:d4:f3:56:8a:2a:ee:a4:dc:c8:35:bd:5a: 0a:8b:d0:39:74:5e:ad:ce:14:82:d9:09:8a:bf:69:88:34:b8: f9:02:28:6f:50:62:30:76:d5:4f:69:16:c9:87:4f:ee:28:3a: 8d:29:2f:c4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCuvAV1MX5V3JRfyiLIdXsoqVRo8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIyMDA1MTE0WhcNMjYwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDQ1MWFhYmUxNzRjYzViYzFjZWEyMDFiYjc0MzcxZjdm MGNiOTQyZDZlZGExMmM3NDQ5NTExMWY1N2E4YWVhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9D7lO3H89tz2S70G6NzkJSSgQHxvjGgW5+vkMyHXH2b04 5g8YzJ1aB04n9s8zAAb6jJraWQtEOuvSkdpcm5z4RMnucl66j56O5j6Ku7vwfqpk 5BQMs8DfhQTi7OTR0lg9rcnDncX+Xff2e46fNniP1Ao3QF7O9/MEO/8y8/Kos2mm ODy5J+vy1A21ZxRIQDATAtbhyWIbbexxkSOVBZK2bD60XVW53XAgzQkG1y7Qpx4P bKQ7Uz0kWw7uKR6t2SmWlTTvraP8UuLCqCdhCSyuhpZdNwYY/4doX6Uf49oiKDkD BUNTcRRQYBwRGsTfmEzV7uIru046rJPOVL/aAqNrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUc8mWCw3Dijm8Yv1omVfh7gRV3/swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q3YjNiYWU4LTI5Y2ItNGU1Yi1hODc2LTg5MDk5NGVkNDIwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHNk+gwDQYJKoZIhvcNAQELBQADggEBAAMkTRDUZ3JfzANJ8qynxeyEmQ/G GdiS5BOfYHCFQqtSkIWlLV/gr/WPGPJZqXvygXUx/gSE3q8/U+AvwSdDdtEgdpdR SSUZyjIud5li7lpLcHibMBR1XqyTTDreix10rm4hXPy6d+s/CD28U28zia8qd5qJ v9S+qFd865Wt+wu1A+8/iKDx/qpQrSq51N+SsMcwxqEotS0PCzIwCz9kL98EhsXL Uceyz9BG42EpsF/grEPdE/8J6m/9G3xQr9JodfYXnL1tH732BKkKY9TzVooq7qTc yDW9WgqL0Dl0Xq3OFILZCYq/aYg0uPkCKG9QYjB21U9pFsmHT+4oOo0pL8Q= -----END CERTIFICATE-----Generated at Sun Mar 1 22:17:34 2026 by rpki-client