$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da29a997-0e47-4721-ba0c-ccfed50a5876.roa File: da29a997-0e47-4721-ba0c-ccfed50a5876.roa (raw, json) Hash identifier: 0/9aufTAkJjwxSkIfYDF9BP6and/xCIhhUFJK1GZMk4= Subject key identifier: F6:41:A1:DC:40:DA:48:22:86:E7:DD:8F:1E:03:D1:88:3B:8D:AE:A7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7790D8C8C177E8C6381FEAA083F32CBF15D5CC1C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da29a997-0e47-4721-ba0c-ccfed50a5876.roa Signing time: Thu 26 Feb 2026 00:20:05 +0000 ROA not before: Thu 26 Feb 2026 00:20:05 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 74.233.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:90:d8:c8:c1:77:e8:c6:38:1f:ea:a0:83:f3:2c:bf:15:d5:cc:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 26 00:20:05 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=f9205e64857776b7dec16a5eb9fcb4be9efce4f96ae1272745a6b04cfb73e90c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ef:5f:c8:c6:2e:65:5c:82:3a:ed:59:23:04: 91:93:81:f7:65:e2:0f:86:15:03:a6:2b:5c:5f:cf: 66:ea:f8:e5:76:86:50:4e:4b:02:8c:eb:1b:25:fd: 7b:01:0b:10:fa:76:a8:9d:a1:31:39:d3:71:7a:d1: de:31:11:68:1f:a8:c4:32:c6:ad:4a:b2:47:9b:37: a3:88:2a:a7:7b:52:d9:c1:29:8f:3f:ef:1f:eb:ea: b2:28:bf:60:dd:0e:f1:eb:e4:24:24:ce:8d:ba:5f: ea:e7:3a:0d:87:75:3b:1b:17:c0:9c:90:d9:03:57: d2:27:74:0d:a3:86:1e:af:a0:08:85:2c:a3:de:fb: 5b:8b:b1:78:91:0f:b1:a0:d8:7b:26:ea:bd:43:6d: a6:59:c6:66:10:64:8e:46:17:26:a6:98:a1:98:0e: 25:d9:96:aa:f3:f3:8e:1e:9c:00:53:a9:a9:6d:98: a7:6b:fc:1b:66:4b:36:80:15:38:11:b4:a2:2f:70: 63:88:af:38:9d:b5:0e:da:3a:ed:71:3b:40:02:65: e4:e8:e4:88:56:dc:22:bb:af:dd:d4:0f:7d:80:07: b3:86:44:a1:47:f3:b5:07:05:54:cc:53:58:20:90: 38:28:c0:36:87:57:47:61:df:32:eb:7b:fc:1f:d7: 4a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:41:A1:DC:40:DA:48:22:86:E7:DD:8F:1E:03:D1:88:3B:8D:AE:A7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da29a997-0e47-4721-ba0c-ccfed50a5876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.233.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8b:57:95:50:d2:1c:7a:13:f0:7d:9c:cf:ee:81:de:a1:dd:a7: 0f:ff:19:64:a1:9d:f4:44:f2:06:7d:e7:81:8c:ab:c4:85:8d: 46:77:b3:8a:ea:be:b4:9f:7f:d5:8d:f9:30:a1:56:9b:df:b5: 47:8a:56:c7:1a:c1:b5:48:ca:b9:c5:b7:28:16:b7:f7:8b:a3: 1e:fc:78:c3:d8:7d:42:50:df:2e:b6:03:aa:51:22:d3:b4:41: e8:dc:d2:25:c8:aa:4c:d1:dc:a2:c9:dc:01:ac:83:38:4d:ab: ac:12:d0:8b:06:1c:5e:24:9d:84:fd:84:2f:59:04:ac:e5:fe: fa:21:8a:72:4a:4a:a3:7a:1c:0d:76:db:44:38:87:61:05:27: 9c:a2:f4:7b:c2:53:ae:80:63:6c:60:58:34:44:53:7f:f7:7c: 32:66:48:21:4b:f0:c7:f8:54:03:4a:c5:d5:22:c5:eb:ac:13: 01:23:49:28:07:45:0d:48:9b:c0:34:52:7c:28:e0:55:8f:3a: ab:ec:54:93:5d:3d:cc:c1:28:af:94:e2:b2:d2:a5:8b:88:fc: d8:88:a1:44:83:6b:3c:5e:76:7f:f6:07:0b:3a:3f:bd:31:d7: 74:c0:4a:7a:05:fc:3d:80:83:cd:39:ea:76:28:73:1e:64:c9: d6:f3:2e:59 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUd5DYyMF36MY4H+qgg/MsvxXVzBwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI2MDAyMDA1WhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTIwNWU2NDg1Nzc3NmI3ZGVjMTZhNWViOWZjYjRiZTll ZmNlNGY5NmFlMTI3Mjc0NWE2YjA0Y2ZiNzNlOTBjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf71/Ixi5lXII67VkjBJGTgfdl4g+GFQOmK1xfz2bq+OV2 hlBOSwKM6xsl/XsBCxD6dqidoTE503F60d4xEWgfqMQyxq1KskebN6OIKqd7UtnB KY8/7x/r6rIov2DdDvHr5CQkzo26X+rnOg2HdTsbF8CckNkDV9IndA2jhh6voAiF LKPe+1uLsXiRD7Gg2Hsm6r1DbaZZxmYQZI5GFyammKGYDiXZlqrz844enABTqalt mKdr/BtmSzaAFTgRtKIvcGOIrzidtQ7aOu1xO0ACZeTo5IhW3CK7r93UD32AB7OG RKFH87UHBVTMU1ggkDgowDaHV0dh3zLre/wf10q1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU9kGh3EDaSCKG592PHgPRiDuNrqcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RhMjlhOTk3LTBlNDctNDcyMS1iYTBjLWNjZmVkNTBhNTg3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBK6TANBgkqhkiG9w0BAQsFAAOCAQEAi1eVUNIcehPwfZzP7oHeod2nD/8Z ZKGd9ETyBn3ngYyrxIWNRneziuq+tJ9/1Y35MKFWm9+1R4pWxxrBtUjKucW3KBa3 94ujHvx4w9h9QlDfLrYDqlEi07RB6NzSJciqTNHcosncAayDOE2rrBLQiwYcXiSd hP2EL1kErOX++iGKckpKo3ocDXbbRDiHYQUnnKL0e8JTroBjbGBYNERTf/d8MmZI IUvwx/hUA0rF1SLF66wTASNJKAdFDUibwDRSfCjgVY86q+xUk109zMEor5TistKl i4j82IihRINrPF52f/YHCzo/vTHXdMBKegX8PYCDzTnqdihzHmTJ1vMuWQ== -----END CERTIFICATE-----Generated at Mon Mar 2 00:11:34 2026 by rpki-client