$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc7acccf-d352-4baa-891a-aa5bf4515372.roa File: dc7acccf-d352-4baa-891a-aa5bf4515372.roa (raw, json) Hash identifier: mYsaxz55XcNKuOXKWUK31m7EGTk/7UjLVPGJuuctmfE= Subject key identifier: 6B:26:1A:90:F9:FA:76:0E:7C:E1:43:01:BA:3B:E2:6F:A8:75:29:50 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 27B93178F3B487064A94961FE07128B477A81C70 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc7acccf-d352-4baa-891a-aa5bf4515372.roa Signing time: Wed 25 Feb 2026 02:30:45 +0000 ROA not before: Wed 25 Feb 2026 02:30:45 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 156.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:b9:31:78:f3:b4:87:06:4a:94:96:1f:e0:71:28:b4:77:a8:1c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 02:30:45 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=5fe73ab733e9802ce41bf738f14d4e2a9dd976c26c46bec84c949a7f7fd37ad7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fb:93:98:e3:e7:65:1a:ab:f1:e2:9e:ab:17: ff:35:55:0b:cd:da:28:8d:41:cc:31:01:78:fe:64: ca:e3:3e:34:1c:71:56:5d:20:fc:fe:e5:9e:a1:0c: 34:24:e8:3a:aa:39:2b:40:13:7e:aa:6a:14:a1:43: d7:73:57:58:5c:e0:a0:56:31:c6:10:87:e1:c6:c7: 08:b2:77:07:18:b4:d5:6b:2a:12:7c:1c:1d:74:97: 22:f2:22:b2:0a:9f:0a:92:5a:90:7c:f1:a3:61:cb: eb:92:40:cf:e5:83:46:d0:e1:d2:6f:77:55:a3:dd: 2a:15:a3:04:0c:78:6c:a2:ca:89:dc:76:21:3d:cd: ee:db:9d:4f:7f:52:d5:77:0b:e4:3d:2f:92:bf:24: ce:7d:5b:05:f2:e0:d4:0b:23:a7:2f:19:e2:ea:07: ad:80:cf:fb:05:84:68:c7:20:fc:4c:eb:e7:2b:f3: ec:77:ec:7a:d1:45:0b:e0:c0:3a:43:ee:98:31:94: 9e:6a:32:30:0f:44:1a:55:59:3f:fb:e9:bd:a3:09: b0:01:c6:a4:43:8e:6f:98:f5:a8:89:a6:90:5a:45: 00:b7:3b:36:7b:18:3c:9f:73:b8:e3:ae:fb:4f:6e: b2:4a:55:7d:2d:2b:cb:55:fc:df:0c:85:f0:21:e6: 17:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:26:1A:90:F9:FA:76:0E:7C:E1:43:01:BA:3B:E2:6F:A8:75:29:50 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc7acccf-d352-4baa-891a-aa5bf4515372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.66.0.0/16 Signature Algorithm: sha256WithRSAEncryption c5:11:81:48:d6:36:59:1d:85:5c:67:b4:5b:33:d7:92:90:f2: 9d:a1:69:61:4c:8e:0e:b7:20:12:7b:97:43:25:cf:d2:25:fc: 90:5f:c8:60:7a:41:f9:de:6e:13:8e:1f:cb:1f:73:49:6d:ad: e9:27:0f:9f:31:97:ff:51:21:0e:2f:e4:cd:03:c7:32:50:10: 7f:2a:b6:b9:14:2b:c8:7a:bc:76:50:63:9a:8f:50:89:c1:1c: 21:40:56:53:52:b2:f0:ac:b2:88:76:f0:de:17:fb:2d:be:3d: 84:b5:d6:86:17:fb:1f:f0:2d:a7:a7:81:93:8e:14:3a:b6:35: 36:c3:5f:a8:af:c3:05:8c:dd:6e:db:e4:26:16:55:4b:ac:36: 81:ff:26:9c:d9:fa:06:d6:5b:f5:3d:14:07:59:7f:dc:66:ef: 08:b3:7f:61:c7:df:4e:5b:bc:f8:9f:59:34:90:d8:99:ea:68: 28:82:90:bc:8b:06:da:e8:41:93:dc:03:e8:5b:62:7b:27:c0: d8:0f:4c:8c:f1:c2:02:2b:ee:18:22:ad:07:0d:81:2e:bf:48: ab:60:84:f7:60:3e:cc:46:3e:d0:4f:45:40:b1:77:e1:25:7a: 86:a7:5f:bc:19:7c:3f:a3:80:08:ce:98:9a:ad:87:ae:98:af: d5:a5:0c:5f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJ7kxePO0hwZKlJYf4HEotHeoHHAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDIzMDQ1WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmU3M2FiNzMzZTk4MDJjZTQxYmY3MzhmMTRkNGUyYTlk ZDk3NmMyNmM0NmJlYzg0Yzk0OWE3ZjdmZDM3YWQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZ+5OY4+dlGqvx4p6rF/81VQvN2iiNQcwxAXj+ZMrjPjQc cVZdIPz+5Z6hDDQk6DqqOStAE36qahShQ9dzV1hc4KBWMcYQh+HGxwiydwcYtNVr KhJ8HB10lyLyIrIKnwqSWpB88aNhy+uSQM/lg0bQ4dJvd1Wj3SoVowQMeGyiyonc diE9ze7bnU9/UtV3C+Q9L5K/JM59WwXy4NQLI6cvGeLqB62Az/sFhGjHIPxM6+cr 8+x37HrRRQvgwDpD7pgxlJ5qMjAPRBpVWT/76b2jCbABxqRDjm+Y9aiJppBaRQC3 OzZ7GDyfc7jjrvtPbrJKVX0tK8tV/N8MhfAh5hebAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUayYakPn6dg584UMBujvib6h1KVAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RjN2FjY2NmLWQzNTItNGJhYS04OTFhLWFhNWJmNDUxNTM3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCcQjANBgkqhkiG9w0BAQsFAAOCAQEAxRGBSNY2WR2FXGe0WzPXkpDynaFp YUyODrcgEnuXQyXP0iX8kF/IYHpB+d5uE44fyx9zSW2t6ScPnzGX/1EhDi/kzQPH MlAQfyq2uRQryHq8dlBjmo9QicEcIUBWU1Ky8KyyiHbw3hf7Lb49hLXWhhf7H/At p6eBk44UOrY1NsNfqK/DBYzdbtvkJhZVS6w2gf8mnNn6BtZb9T0UB1l/3GbvCLN/ YcffTlu8+J9ZNJDYmepoKIKQvIsG2uhBk9wD6FtieyfA2A9MjPHCAivuGCKtBw2B Lr9Iq2CE92A+zEY+0E9FQLF34SV6hqdfvBl8P6OACM6Ymq2Hrpiv1aUMXw== -----END CERTIFICATE-----Generated at Sun Mar 1 22:16:33 2026 by rpki-client