$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d87c2975-c322-4a99-8af6-32b0d3aa8fe8.roa File: d87c2975-c322-4a99-8af6-32b0d3aa8fe8.roa (raw, json) Hash identifier: nB0NGNrE18TYWYgCI/8YirCnEyLRaB50IuoGkh6W984= Subject key identifier: 5E:DD:E7:95:36:63:09:BE:62:69:D4:EB:41:14:52:49:A3:2C:C5:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 290038B222F9F780FDEBC656FB8353FDD304A704 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d87c2975-c322-4a99-8af6-32b0d3aa8fe8.roa Signing time: Sat 07 Feb 2026 00:20:39 +0000 ROA not before: Sat 07 Feb 2026 00:20:39 +0000 ROA not after: Fri 08 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 192.43.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:00:38:b2:22:f9:f7:80:fd:eb:c6:56:fb:83:53:fd:d3:04:a7:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 7 00:20:39 2026 GMT Not After : May 8 23:59:59 2026 GMT Subject: serialNumber=a27c29c6a6a53bcdec9d3fd03e0453b9c0fc0ab0e8ecc18e5ed418f948f35d96, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4e:13:92:75:a4:94:7a:05:bb:f7:85:7c:0c: fd:b1:01:06:6d:84:e9:3a:9d:b5:a0:a9:a2:ea:8a: 68:7b:02:7a:64:ab:47:2b:82:96:11:fe:93:3e:76: ef:7b:53:64:4b:5c:c7:51:71:1e:cf:fe:5d:68:90: 88:d4:2d:6d:66:db:25:e7:e2:6c:b9:85:cc:61:16: 23:46:4e:9b:58:63:ba:92:e4:bd:f7:15:56:0f:8a: f0:b2:73:d8:d1:c0:58:b6:ab:c4:5f:43:38:ce:d9: 7d:3f:72:1f:96:4a:95:45:55:d5:f6:57:f0:f1:d4: 85:f1:39:22:f3:4b:d7:47:4e:d8:45:fd:35:76:ba: 74:c3:6c:a8:f4:17:1e:b9:f6:54:8f:99:f7:4c:36: d8:e7:ee:29:88:14:e5:e9:39:7a:14:a1:19:f4:ea: 1a:16:77:d2:f5:60:f6:ba:e8:2b:a7:31:c1:55:89: ac:39:e3:a8:17:77:58:ea:4b:f5:14:c4:a4:de:55: b0:e2:a9:27:1c:88:52:40:00:0a:43:45:12:ec:17: b2:ef:8d:6b:40:f8:82:51:1b:92:bc:39:32:b3:b4: 00:c7:3a:6f:ee:bd:db:34:25:6a:c3:5d:d4:9b:28: 19:9d:bc:9f:cd:65:7c:46:b9:8a:42:8f:1d:50:18: 82:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DD:E7:95:36:63:09:BE:62:69:D4:EB:41:14:52:49:A3:2C:C5:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d87c2975-c322-4a99-8af6-32b0d3aa8fe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.43.176.0/21 Signature Algorithm: sha256WithRSAEncryption 8a:5a:ff:16:9a:8e:1b:2d:9a:33:d5:1f:72:4e:c0:9b:cd:0f: f3:d9:8a:9d:74:b6:f6:e7:8f:91:f3:03:6c:a6:cc:7f:c8:ac: 55:fc:1c:ee:a0:dc:99:a7:79:da:54:3e:62:34:5e:52:d2:98: 1f:73:fe:a4:95:e2:17:12:91:8f:d7:05:b2:02:b3:91:e0:65: 32:47:d0:6f:f0:4a:29:96:f3:3a:b6:a2:01:69:12:08:62:a4: b9:e7:54:74:e6:22:d1:7f:1c:98:16:9d:ae:89:99:69:8d:18: 6f:e3:02:40:06:59:6d:ce:50:ec:63:11:0e:c4:9d:10:2b:6f: 7a:32:2e:cf:77:1a:91:34:e6:51:a0:5c:78:24:29:3e:75:6b: bf:1e:44:bb:90:b5:03:13:fa:82:07:0f:35:e2:ff:ea:07:2a: b3:1b:e2:86:30:de:9f:53:14:ff:f3:60:b3:36:c8:ce:15:59: da:9b:3f:d6:e7:d8:e9:f4:99:07:8c:86:f4:98:40:5f:e3:12: 13:ca:52:cf:81:9d:9f:a9:27:17:c7:1b:e1:80:22:36:f7:d6: f5:73:5c:f5:76:c1:4a:9b:27:09:e2:f0:ee:b3:05:a0:bd:79: 42:a0:b9:ae:00:ba:93:9c:7b:0d:1f:d0:34:ca:3f:14:23:c2: d6:09:48:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKQA4siL594D968ZW+4NT/dMEpwQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA3MDAyMDM5WhcNMjYwNTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjdjMjljNmE2YTUzYmNkZWM5ZDNmZDAzZTA0NTNiOWMw ZmMwYWIwZThlY2MxOGU1ZWQ0MThmOTQ4ZjM1ZDk2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQThOSdaSUegW794V8DP2xAQZthOk6nbWgqaLqimh7Anpk q0crgpYR/pM+du97U2RLXMdRcR7P/l1okIjULW1m2yXn4my5hcxhFiNGTptYY7qS 5L33FVYPivCyc9jRwFi2q8RfQzjO2X0/ch+WSpVFVdX2V/Dx1IXxOSLzS9dHTthF /TV2unTDbKj0Fx659lSPmfdMNtjn7imIFOXpOXoUoRn06hoWd9L1YPa66CunMcFV iaw546gXd1jqS/UUxKTeVbDiqScciFJAAApDRRLsF7LvjWtA+IJRG5K8OTKztADH Om/uvds0JWrDXdSbKBmdvJ/NZXxGuYpCjx1QGIJNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXt3nlTZjCb5iadTrQRRSSaMsxQkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4N2MyOTc1LWMzMjItNGE5OS04YWY2LTMyYjBkM2FhOGZlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPAK7AwDQYJKoZIhvcNAQELBQADggEBAIpa/xaajhstmjPVH3JOwJvND/PZ ip10tvbnj5HzA2ymzH/IrFX8HO6g3JmnedpUPmI0XlLSmB9z/qSV4hcSkY/XBbIC s5HgZTJH0G/wSimW8zq2ogFpEghipLnnVHTmItF/HJgWna6JmWmNGG/jAkAGWW3O UOxjEQ7EnRArb3oyLs93GpE05lGgXHgkKT51a78eRLuQtQMT+oIHDzXi/+oHKrMb 4oYw3p9TFP/zYLM2yM4VWdqbP9bn2On0mQeMhvSYQF/jEhPKUs+BnZ+pJxfHG+GA Ijb31vVzXPV2wUqbJwni8O6zBaC9eUKgua4AupOcew0f0DTKPxQjwtYJSA4= -----END CERTIFICATE-----Generated at Mon Mar 2 01:58:28 2026 by rpki-client