$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbe90832-aff1-474a-82ec-d348fdf66fea.roa File: dbe90832-aff1-474a-82ec-d348fdf66fea.roa (raw, json) Hash identifier: F+M2DZPQyiXLXztDnSSdLIguKs3znwlEy3I8bpT500s= Subject key identifier: 5F:2E:C9:C9:98:7A:3A:E1:86:21:3A:EF:53:BA:A0:5F:F7:25:65:FD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40060D1DDC4B2C0D334D662CFF1E02F88EE6032A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbe90832-aff1-474a-82ec-d348fdf66fea.roa Signing time: Thu 26 Feb 2026 01:00:54 +0000 ROA not before: Thu 26 Feb 2026 01:00:54 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.85.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:06:0d:1d:dc:4b:2c:0d:33:4d:66:2c:ff:1e:02:f8:8e:e6:03:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 26 01:00:54 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=785ff6c20e830f0a289babefff87a76f041a139b4f876643d3573acee06aaf19, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c2:b2:32:00:1f:63:7f:c6:52:c9:30:3c:64: 9f:7c:70:11:f0:bc:3d:6d:77:34:ac:b3:b8:cc:35: 3c:d4:38:ba:f5:c8:cd:1f:45:29:6e:2c:b2:03:63: cf:62:3d:b7:87:42:67:8b:76:5d:97:2f:29:81:be: b9:f8:bb:50:4b:30:35:8a:17:f1:2f:b9:bd:f1:91: 32:d8:fc:19:c6:6e:c9:78:08:a7:59:15:3e:48:b6: a1:00:eb:e7:e2:9a:b1:e3:0e:6e:52:52:f9:96:c4: 3b:13:c8:ea:0f:87:8e:c5:9e:e4:f2:23:bf:06:2d: bf:47:52:20:3b:7f:9c:8c:4f:74:7d:f0:15:d8:4b: 8c:2c:d2:f2:10:84:91:10:10:d6:e1:c8:0a:73:86: e5:52:d5:63:ee:bb:f8:64:2c:1b:ef:c2:a5:7f:89: e2:34:97:84:7d:8f:f7:fc:f9:fd:3d:53:02:6e:2a: 49:b8:1d:a3:89:13:69:b5:63:6a:f5:f3:a7:d3:30: 2a:59:16:37:31:cb:ed:c5:7c:f9:88:82:47:da:8d: 15:84:a9:26:d7:89:1c:a6:5d:6a:a0:6d:23:c5:83: ac:15:36:34:43:98:f4:90:c8:35:4c:9f:d3:eb:21: 8c:e7:c7:a4:58:08:75:62:eb:a3:8f:0d:7b:da:5a: 70:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2E:C9:C9:98:7A:3A:E1:86:21:3A:EF:53:BA:A0:5F:F7:25:65:FD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbe90832-aff1-474a-82ec-d348fdf66fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.85.0.0/16 Signature Algorithm: sha256WithRSAEncryption 88:bd:5d:2b:40:60:a4:99:a7:79:52:8f:26:b1:62:d3:01:64: a8:6f:c9:95:1d:5b:c2:c2:cf:64:56:51:12:c1:5d:5b:bb:d0: 97:49:d4:a8:85:73:89:f1:ce:71:1b:c8:68:01:0f:73:0e:1e: b7:c2:da:f3:5a:17:35:d6:b6:11:19:5a:28:9e:45:52:86:dc: c6:64:8b:86:39:df:a8:a4:05:c0:24:61:b9:30:b8:e7:53:36: 70:11:ca:38:04:27:9c:ff:d2:7a:ac:48:fd:fa:74:84:16:cc: 84:07:21:d2:ed:41:e4:be:20:d6:aa:09:fb:e8:dc:71:db:c6: f4:12:8b:87:30:8b:b9:82:6e:8b:c2:c3:e2:aa:7b:d7:1f:c7: 46:1b:53:d1:d9:9f:7f:cc:18:bd:00:54:85:0f:d1:e2:72:f8: cf:fe:16:84:72:3a:0e:9b:89:d1:86:6c:89:50:c8:07:7d:4f: af:e7:7d:1b:49:cd:14:1e:72:b1:1f:c0:2b:c6:63:77:4d:d8: bc:f1:20:b9:de:43:bf:b3:66:ca:f2:ef:5e:df:30:ed:bc:c1: 8f:33:fc:7f:92:02:f5:98:1b:88:10:13:20:33:51:57:94:11: 9c:06:18:5c:c5:08:ce:f0:ec:2a:9b:3e:c9:a2:d3:f8:47:fe: e0:76:22:9f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQAYNHdxLLA0zTWYs/x4C+I7mAyowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI2MDEwMDU0WhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODVmZjZjMjBlODMwZjBhMjg5YmFiZWZmZjg3YTc2ZjA0 MWExMzliNGY4NzY2NDNkMzU3M2FjZWUwNmFhZjE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXwrIyAB9jf8ZSyTA8ZJ98cBHwvD1tdzSss7jMNTzUOLr1 yM0fRSluLLIDY89iPbeHQmeLdl2XLymBvrn4u1BLMDWKF/Evub3xkTLY/BnGbsl4 CKdZFT5ItqEA6+fimrHjDm5SUvmWxDsTyOoPh47FnuTyI78GLb9HUiA7f5yMT3R9 8BXYS4ws0vIQhJEQENbhyApzhuVS1WPuu/hkLBvvwqV/ieI0l4R9j/f8+f09UwJu Kkm4HaOJE2m1Y2r186fTMCpZFjcxy+3FfPmIgkfajRWEqSbXiRymXWqgbSPFg6wV NjRDmPSQyDVMn9PrIYznx6RYCHVi66OPDXvaWnALAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUXy7JyZh6OuGGITrvU7qgX/clZf0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RiZTkwODMyLWFmZjEtNDc0YS04MmVjLWQzNDhmZGY2NmZlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4VTANBgkqhkiG9w0BAQsFAAOCAQEAiL1dK0BgpJmneVKPJrFi0wFkqG/J lR1bwsLPZFZREsFdW7vQl0nUqIVzifHOcRvIaAEPcw4et8La81oXNda2ERlaKJ5F UobcxmSLhjnfqKQFwCRhuTC451M2cBHKOAQnnP/SeqxI/fp0hBbMhAch0u1B5L4g 1qoJ++jccdvG9BKLhzCLuYJui8LD4qp71x/HRhtT0dmff8wYvQBUhQ/R4nL4z/4W hHI6DpuJ0YZsiVDIB31Pr+d9G0nNFB5ysR/AK8Zjd03YvPEgud5Dv7NmyvLvXt8w 7bzBjzP8f5IC9ZgbiBATIDNRV5QRnAYYXMUIzvDsKps+yaLT+Ef+4HYinw== -----END CERTIFICATE-----Generated at Mon Mar 2 03:07:02 2026 by rpki-client