$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d881e4df-c091-49aa-9234-ac63a9b33ad8.roa File: d881e4df-c091-49aa-9234-ac63a9b33ad8.roa (raw, json) Hash identifier: Rk6ZYmPJvi6LNHT3JePv8vJNosJU5Kob0xdIJ/kt+xE= Subject key identifier: 62:33:76:46:B1:99:B9:60:5B:BC:E3:CC:16:0B:E3:93:D4:9F:76:EF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2D929340C83F48466B59166AC386F15429B16A53 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d881e4df-c091-49aa-9234-ac63a9b33ad8.roa Signing time: Sun 08 Feb 2026 00:20:11 +0000 ROA not before: Sun 08 Feb 2026 00:20:11 +0000 ROA not after: Sat 09 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:92:93:40:c8:3f:48:46:6b:59:16:6a:c3:86:f1:54:29:b1:6a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 8 00:20:11 2026 GMT Not After : May 9 23:59:59 2026 GMT Subject: serialNumber=794320346a546f4722b386468cc6977fb08c2047acc1f91dab684411fe2e55ed, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ed:e6:db:23:59:2b:f4:95:3e:bd:a3:88:ab: 5e:52:90:c8:46:bd:2b:7c:9f:f5:b0:1c:5d:67:47: c9:0c:b9:61:45:16:ec:0d:f3:35:58:c2:85:bc:4b: 87:61:68:ba:27:46:aa:45:1e:61:46:57:f4:bb:8e: 7f:6a:8c:b2:d8:22:35:de:39:6b:31:37:17:1f:1a: 96:8b:03:15:ba:ec:9e:ee:d7:54:44:bf:6b:6e:17: 36:2c:46:bc:2a:e2:57:5b:cc:ad:79:be:cd:b9:c4: 25:13:b7:60:ff:a4:ee:76:aa:08:8d:58:96:44:da: 07:74:9b:8a:c0:bf:d6:bb:ed:e5:50:44:5b:23:9a: 1f:20:56:ee:88:2d:8a:fc:ba:f5:a2:3e:39:63:7a: c0:d4:e1:e8:e8:2d:e4:6e:cc:3a:ff:5b:94:0b:7f: f4:e7:09:ce:38:31:ff:48:37:1e:c2:fe:3c:b1:9c: bf:2f:4b:6e:30:d1:8a:15:a5:27:7e:73:77:fd:1b: 6a:a0:70:82:bb:c7:d5:b9:be:2a:ab:71:08:ba:1a: 00:53:61:48:01:9c:4b:1a:09:f7:74:1b:e0:6d:80: 85:06:84:14:cb:e2:96:31:ed:be:34:a5:86:0a:eb: 52:38:30:f4:48:c0:59:e1:8d:b2:dc:a6:12:ff:71: 5c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:33:76:46:B1:99:B9:60:5B:BC:E3:CC:16:0B:E3:93:D4:9F:76:EF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d881e4df-c091-49aa-9234-ac63a9b33ad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.75.0/24 Signature Algorithm: sha256WithRSAEncryption 56:89:43:19:cb:9d:e8:2a:0e:d0:1a:f5:8f:eb:c0:10:5f:4a: f1:93:4c:e0:80:92:4f:f9:39:e1:7e:05:80:e1:d0:9d:6e:18: a7:74:02:f1:12:f5:c4:c6:21:6f:de:b2:42:18:20:e4:d3:73: b7:78:21:f6:d7:2d:5b:29:4e:52:b1:3d:28:2b:24:3a:96:50: 32:fa:58:5c:ab:d6:ea:d7:e3:69:c6:1d:f6:dd:cb:ba:b5:5f: 31:d0:a6:22:ae:a7:0a:24:26:93:07:6a:7c:5c:b5:d9:6d:3a: 7f:7b:05:26:72:2f:30:34:78:bf:33:28:84:76:99:3a:a5:ae: 45:8a:f7:8e:45:d6:d6:0b:50:db:4c:c8:a5:5e:fd:cc:41:0b: 4d:03:d9:77:b8:75:22:3b:09:27:6a:23:51:c6:ee:19:8d:e3: 01:6d:5f:dd:ec:7c:1d:86:5d:ce:d1:8e:9d:ca:de:77:0e:2b: 5a:ca:a0:c4:6c:83:2d:db:57:96:4b:67:d5:ba:d7:b1:fa:93: 42:6b:94:b1:72:f9:90:3f:5c:9d:0d:8b:62:8b:77:c2:74:44: c4:82:b0:76:5a:66:52:13:d6:9f:89:3f:a0:9d:bd:28:87:39: 35:28:f9:05:34:49:03:63:40:62:b5:17:1b:dd:cd:11:56:11: 6d:5f:c2:e1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULZKTQMg/SEZrWRZqw4bxVCmxalMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA4MDAyMDExWhcNMjYwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OTQzMjAzNDZhNTQ2ZjQ3MjJiMzg2NDY4Y2M2OTc3ZmIw OGMyMDQ3YWNjMWY5MWRhYjY4NDQxMWZlMmU1NWVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCT7ebbI1kr9JU+vaOIq15SkMhGvSt8n/WwHF1nR8kMuWFF FuwN8zVYwoW8S4dhaLonRqpFHmFGV/S7jn9qjLLYIjXeOWsxNxcfGpaLAxW67J7u 11REv2tuFzYsRrwq4ldbzK15vs25xCUTt2D/pO52qgiNWJZE2gd0m4rAv9a77eVQ RFsjmh8gVu6ILYr8uvWiPjljesDU4ejoLeRuzDr/W5QLf/TnCc44Mf9INx7C/jyx nL8vS24w0YoVpSd+c3f9G2qgcIK7x9W5viqrcQi6GgBTYUgBnEsaCfd0G+BtgIUG hBTL4pYx7b40pYYK61I4MPRIwFnhjbLcphL/cVxRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYjN2RrGZuWBbvOPMFgvjk9Sfdu8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4ODFlNGRmLWMwOTEtNDlhYS05MjM0LWFjNjNhOWIzM2FkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/EswDQYJKoZIhvcNAQELBQADggEBAFaJQxnLnegqDtAa9Y/rwBBfSvGT TOCAkk/5OeF+BYDh0J1uGKd0AvES9cTGIW/eskIYIOTTc7d4IfbXLVspTlKxPSgr JDqWUDL6WFyr1urX42nGHfbdy7q1XzHQpiKupwokJpMHanxctdltOn97BSZyLzA0 eL8zKIR2mTqlrkWK945F1tYLUNtMyKVe/cxBC00D2Xe4dSI7CSdqI1HG7hmN4wFt X93sfB2GXc7Rjp3K3ncOK1rKoMRsgy3bV5ZLZ9W617H6k0JrlLFy+ZA/XJ0Ni2KL d8J0RMSCsHZaZlIT1p+JP6CdvSiHOTUo+QU0SQNjQGK1FxvdzRFWEW1fwuE= -----END CERTIFICATE-----Generated at Mon Mar 2 00:12:29 2026 by rpki-client