$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d843d886-eb77-42dc-a7e8-6d1a13513b60.roa File: d843d886-eb77-42dc-a7e8-6d1a13513b60.roa (raw, json) Hash identifier: Sc22+/ADdlkywzSCrzmWUb0ldjwfR7zorb2sqsQ0FVM= Subject key identifier: A7:13:A5:02:6D:B5:40:6F:EB:EC:3C:02:7A:3D:A0:73:49:C5:5B:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1D6A73C2878A244D0F600535AF19B4E4E5A5E26F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d843d886-eb77-42dc-a7e8-6d1a13513b60.roa Signing time: Fri 13 Feb 2026 00:20:52 +0000 ROA not before: Fri 13 Feb 2026 00:20:52 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 44.215.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:6a:73:c2:87:8a:24:4d:0f:60:05:35:af:19:b4:e4:e5:a5:e2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 13 00:20:52 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=0eca2358f4efcfb81a3982bcf792cba03820d1ac222c5f4944aeb7f073243f24, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:70:b6:45:1c:d9:ce:b7:ce:89:ff:88:6c: 4e:97:bf:d5:6f:05:39:ed:0b:a4:b1:80:ff:1e:32: ea:61:f5:f1:f9:e0:f2:75:3f:8b:bb:ef:11:ca:b6: ac:5b:2f:22:b4:54:5d:5d:bb:72:05:91:24:67:da: 60:bc:4f:a9:78:df:3d:67:08:06:64:e6:17:c2:85: 73:51:96:d5:6c:ab:97:8b:4f:45:8c:7f:ba:5d:dd: 4c:e4:27:5a:3d:a0:57:54:23:50:8a:25:ff:ad:77: dc:05:0a:4a:41:d7:14:4a:ab:81:d1:aa:3d:ec:c1: 9a:be:3b:64:c1:97:05:6d:f1:48:f8:0f:81:3f:5d: 16:9f:87:fd:fd:22:94:54:34:90:e2:43:96:36:ca: f2:18:ef:68:bc:dc:7f:df:75:a2:6f:f3:c5:02:e6: 1e:d4:b9:5c:8f:7e:d9:51:51:ec:ac:63:12:ae:b2: 38:17:97:72:f8:c3:48:b0:4e:b2:c9:80:5f:ef:e8: 5d:e3:7b:5b:49:b9:59:56:06:63:5f:25:b6:75:04: 09:5d:5f:99:a2:a7:4d:af:9e:f5:2c:79:d5:c6:86: 32:58:1f:f6:e5:c0:55:74:8d:5d:d7:57:72:4f:e4: f1:07:db:61:84:be:42:c4:31:c8:2a:80:db:45:f3: 4c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:13:A5:02:6D:B5:40:6F:EB:EC:3C:02:7A:3D:A0:73:49:C5:5B:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d843d886-eb77-42dc-a7e8-6d1a13513b60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.215.136.0/22 Signature Algorithm: sha256WithRSAEncryption 77:ac:d4:66:91:26:0f:45:34:47:00:a8:03:7c:ef:fe:4b:0b: 0e:dc:62:a3:ed:fc:74:a8:e8:9c:21:a0:f9:c0:47:b5:94:39: 74:53:d6:6a:de:15:19:6f:82:63:0a:05:73:ad:0d:81:9a:c4: 93:e9:36:23:55:0a:35:34:8d:7c:93:a4:78:28:ac:8a:de:41: 7d:1a:77:d3:23:6f:97:8a:ad:4c:2b:da:ba:45:38:3d:4e:61: df:4c:96:0a:0f:f5:12:e6:2a:4d:67:48:1f:88:50:e0:77:6f: 69:9a:24:19:44:f8:c7:ca:e4:28:79:9a:7a:04:27:11:0d:93: cd:d6:14:5d:19:d2:f1:2c:54:1d:71:e6:b8:a7:59:da:5f:7a: c5:4c:71:e8:a9:2f:d1:da:29:ab:a7:11:7f:2e:90:e7:a7:4d: 8c:24:f6:0c:28:d3:a0:8c:6a:62:67:e4:1b:91:e5:c9:cd:16: 60:31:01:00:b5:e0:7a:53:40:74:b4:28:ec:60:cb:84:2b:a3: 2f:87:99:bc:54:4a:9e:35:ea:33:3e:7c:e6:47:d3:49:0e:6b: 62:11:64:39:bf:bc:a3:19:95:76:61:09:92:9e:cc:19:53:2d: a2:4a:85:4c:39:05:8a:aa:a0:30:25:53:60:e6:90:f8:99:4a: cc:3b:fc:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHWpzwoeKJE0PYAU1rxm05OWl4m8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEzMDAyMDUyWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZWNhMjM1OGY0ZWZjZmI4MWEzOTgyYmNmNzkyY2JhMDM4 MjBkMWFjMjIyYzVmNDk0NGFlYjdmMDczMjQzZjI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/CnC2RRzZzrfOif+IbE6Xv9VvBTntC6SxgP8eMuph9fH5 4PJ1P4u77xHKtqxbLyK0VF1du3IFkSRn2mC8T6l43z1nCAZk5hfChXNRltVsq5eL T0WMf7pd3UzkJ1o9oFdUI1CKJf+td9wFCkpB1xRKq4HRqj3swZq+O2TBlwVt8Uj4 D4E/XRafh/39IpRUNJDiQ5Y2yvIY72i83H/fdaJv88UC5h7UuVyPftlRUeysYxKu sjgXl3L4w0iwTrLJgF/v6F3je1tJuVlWBmNfJbZ1BAldX5mip02vnvUsedXGhjJY H/blwFV0jV3XV3JP5PEH22GEvkLEMcgqgNtF80ydAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpxOlAm21QG/r7DwCej2gc0nFW5kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4NDNkODg2LWViNzctNDJkYy1hN2U4LTZkMWExMzUxM2I2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIs14gwDQYJKoZIhvcNAQELBQADggEBAHes1GaRJg9FNEcAqAN87/5LCw7c YqPt/HSo6JwhoPnAR7WUOXRT1mreFRlvgmMKBXOtDYGaxJPpNiNVCjU0jXyTpHgo rIreQX0ad9Mjb5eKrUwr2rpFOD1OYd9MlgoP9RLmKk1nSB+IUOB3b2maJBlE+MfK 5Ch5mnoEJxENk83WFF0Z0vEsVB1x5rinWdpfesVMceipL9HaKaunEX8ukOenTYwk 9gwo06CMamJn5BuR5cnNFmAxAQC14HpTQHS0KOxgy4Qroy+HmbxUSp416jM+fOZH 00kOa2IRZDm/vKMZlXZhCZKezBlTLaJKhUw5BYqqoDAlU2DmkPiZSsw7/A8= -----END CERTIFICATE-----Generated at Sun Mar 1 22:11:31 2026 by rpki-client