$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8fadca1-ece1-4fd9-8c0c-44964044b286.roa File: d8fadca1-ece1-4fd9-8c0c-44964044b286.roa (raw, json) Hash identifier: 2zzdvgU4KUynz4Jaq3okRoye+b2fnCj6ZHXE/uuiFWc= Subject key identifier: AA:58:14:4A:7E:62:B2:53:09:AB:87:BF:CB:B6:F4:A5:2C:A7:A0:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 01EEB5BC75454EDC8D2076B0D2DB2E1C350602AA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8fadca1-ece1-4fd9-8c0c-44964044b286.roa Signing time: Sat 28 Feb 2026 00:11:35 +0000 ROA not before: Sat 28 Feb 2026 00:11:35 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 142.54.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ee:b5:bc:75:45:4e:dc:8d:20:76:b0:d2:db:2e:1c:35:06:02:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 28 00:11:35 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=c37ce8863c6e69ab029b53aba30beb407c01e5e5cbad42ab8ddaf3d67527d436, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:09:64:c6:51:57:01:74:f9:4a:13:32:ac:7e: f8:4b:a6:45:2f:64:3d:bb:06:34:b1:de:04:a6:16: 17:3f:0a:a2:aa:b2:9f:0d:77:8e:1a:38:f6:09:7f: 0c:47:b2:da:55:30:29:2e:e6:7f:cd:66:0b:93:14: 41:84:e7:2e:28:60:94:fa:35:a8:d7:a9:44:e0:ea: 67:8a:f5:99:62:40:78:46:33:f9:04:2c:0e:40:bc: 99:ae:72:37:23:93:2e:20:33:0a:47:0a:b0:fb:96: 67:18:2d:86:51:68:80:c6:75:a3:a0:4f:2d:d7:43: c3:57:c5:3f:87:4a:5a:97:f2:4a:79:2f:c3:34:ec: 59:e9:89:ee:0b:e0:aa:97:e5:17:db:16:53:ba:85: 95:bc:72:db:8f:7b:31:21:46:a2:75:fa:8f:7f:5e: 2f:6c:94:16:d0:4e:ae:19:95:e8:0d:bf:dd:98:e2: 47:ca:70:57:6a:a1:c8:aa:5b:61:28:bc:4c:ba:cc: f9:93:ab:36:73:56:2f:38:9b:44:29:88:2a:19:df: 3c:f5:99:b6:b8:00:90:25:17:97:c9:4d:23:4e:1c: 32:f8:2c:7f:aa:af:53:d7:79:17:96:be:a3:c6:88: 0f:af:3e:7a:07:e2:d9:0f:2b:ee:9c:d2:12:e3:6f: 04:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:58:14:4A:7E:62:B2:53:09:AB:87:BF:CB:B6:F4:A5:2C:A7:A0:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8fadca1-ece1-4fd9-8c0c-44964044b286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 142.54.128.0/19 Signature Algorithm: sha256WithRSAEncryption a6:e9:40:13:81:c8:82:2f:5c:7e:39:04:4b:c9:e1:c5:c4:67: f4:56:52:c2:fe:b9:43:f2:d0:10:86:26:81:ac:e1:29:02:e1: 9e:88:6f:3e:b8:a5:a0:fa:69:91:ee:5e:0c:13:5d:db:26:86: e5:cf:89:11:a2:10:89:2e:b9:cc:12:33:11:c6:a6:d1:01:91: 96:74:4c:0c:05:02:6b:33:d1:5b:da:d8:c1:3b:91:21:10:2d: ce:48:c0:53:e3:2c:2c:9c:09:4b:67:f7:d7:e0:92:5b:2f:43: ce:e1:00:fc:12:b9:a3:9c:3c:a4:3b:9c:40:d8:99:fd:c1:86: d4:16:9b:3b:48:54:78:6d:b8:cd:09:d1:51:d5:61:61:a3:7c: 81:4f:0f:bb:6d:ed:4f:cd:b7:0e:2a:9e:56:3f:87:f3:f9:b2: 15:bf:c8:6f:82:47:0d:6f:6a:65:45:2d:1a:21:6e:c2:b6:32: 35:89:80:3c:c0:f6:f7:4f:21:9b:2e:9d:2d:a6:6b:48:4f:44: f0:bc:d4:85:94:e9:72:ac:cf:b2:8d:55:e0:e0:69:e4:f6:46: 98:f0:d2:c7:c0:97:26:83:a0:a9:67:f5:f3:ef:3e:ee:a1:22: 91:4f:02:46:b0:43:f0:91:42:e4:37:2e:e6:da:f2:08:00:39: 0d:e7:ab:82 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAe61vHVFTtyNIHaw0tsuHDUGAqowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI4MDAxMTM1WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMzdjZTg4NjNjNmU2OWFiMDI5YjUzYWJhMzBiZWI0MDdj MDFlNWU1Y2JhZDQyYWI4ZGRhZjNkNjc1MjdkNDM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5CWTGUVcBdPlKEzKsfvhLpkUvZD27BjSx3gSmFhc/CqKq sp8Nd44aOPYJfwxHstpVMCku5n/NZguTFEGE5y4oYJT6NajXqUTg6meK9ZliQHhG M/kELA5AvJmucjcjky4gMwpHCrD7lmcYLYZRaIDGdaOgTy3XQ8NXxT+HSlqX8kp5 L8M07Fnpie4L4KqX5RfbFlO6hZW8ctuPezEhRqJ1+o9/Xi9slBbQTq4ZlegNv92Y 4kfKcFdqociqW2EovEy6zPmTqzZzVi84m0QpiCoZ3zz1mba4AJAlF5fJTSNOHDL4 LH+qr1PXeReWvqPGiA+vPnoH4tkPK+6c0hLjbwSTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqlgUSn5islMJq4e/y7b0pSynoLgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4ZmFkY2ExLWVjZTEtNGZkOS04YzBjLTQ0OTY0MDQ0YjI4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWONoAwDQYJKoZIhvcNAQELBQADggEBAKbpQBOByIIvXH45BEvJ4cXEZ/RW UsL+uUPy0BCGJoGs4SkC4Z6Ibz64paD6aZHuXgwTXdsmhuXPiRGiEIkuucwSMxHG ptEBkZZ0TAwFAmsz0Vva2ME7kSEQLc5IwFPjLCycCUtn99fgklsvQ87hAPwSuaOc PKQ7nEDYmf3BhtQWmztIVHhtuM0J0VHVYWGjfIFPD7tt7U/Ntw4qnlY/h/P5shW/ yG+CRw1vamVFLRohbsK2MjWJgDzA9vdPIZsunS2ma0hPRPC81IWU6XKsz7KNVeDg aeT2Rpjw0sfAlyaDoKln9fPvPu6hIpFPAkawQ/CRQuQ3Luba8ggAOQ3nq4I= -----END CERTIFICATE-----Generated at Sun Mar 1 22:12:43 2026 by rpki-client