$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dce774fb-7083-4b97-a7b4-a1059c4ea9cf.roa File: dce774fb-7083-4b97-a7b4-a1059c4ea9cf.roa (raw, json) Hash identifier: YlEhML22BwBVMNKYAZxAUPQF78PqVn/+1ezjQeslmcM= Subject key identifier: DC:15:80:76:A4:3B:8D:5E:9F:F0:2D:D4:D0:1D:AE:BA:D8:C6:02:FD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 74AE8369F0792A3CC87D815B3689AF0B0776E5ED Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dce774fb-7083-4b97-a7b4-a1059c4ea9cf.roa Signing time: Wed 11 Feb 2026 00:50:42 +0000 ROA not before: Wed 11 Feb 2026 00:50:42 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 16.141.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ae:83:69:f0:79:2a:3c:c8:7d:81:5b:36:89:af:0b:07:76:e5:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 11 00:50:42 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=1bcbf1e6521fd8fc2efbd36bf03c11591f397fc352387fc1cbdc6c94a95c9704, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d9:d0:5f:30:e4:e2:0f:2c:49:84:17:35:61: b6:34:e4:e1:68:d3:0b:76:0e:24:38:bb:a5:6e:e2: 4d:a7:f2:ce:e7:c3:ea:1f:ff:14:92:94:4b:90:1c: 8a:8e:74:fd:e9:b0:5d:70:f5:0a:be:5c:d4:e9:ee: ad:c8:85:37:39:63:7b:7e:31:d0:62:00:aa:fb:c7: d9:ca:d9:c4:d2:f2:02:1f:06:c1:46:61:27:5e:e6: 5e:26:cc:19:ee:e5:2e:c9:ab:dc:f5:45:8b:be:4c: 7b:2e:76:e6:24:43:a8:8d:23:c8:20:10:e1:4e:f8: 02:29:8e:46:39:1e:a2:95:c2:cb:09:f3:9f:c9:3a: ee:12:ab:b6:c4:a1:27:48:77:69:66:18:b3:30:19: 60:7b:1e:30:80:f4:b2:68:2b:95:62:5b:87:8f:ed: 06:57:0e:b9:7f:ec:17:66:42:e2:47:b6:a9:b0:14: 0c:eb:5f:bd:1b:5c:96:40:2d:27:e8:d9:3c:61:a6: 02:d7:1a:5c:5b:fa:6c:c3:f8:b7:a0:75:93:db:14: 22:4a:08:71:bc:03:44:d7:00:eb:bc:04:51:b9:a7: 82:44:14:dd:e9:56:f6:12:6b:6e:17:0d:3d:15:f4: 03:86:9f:6f:a9:c1:38:04:48:f9:42:ad:bc:ff:5b: e4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:15:80:76:A4:3B:8D:5E:9F:F0:2D:D4:D0:1D:AE:BA:D8:C6:02:FD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dce774fb-7083-4b97-a7b4-a1059c4ea9cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.141.0.0/16 Signature Algorithm: sha256WithRSAEncryption 55:04:3c:07:ba:ed:ce:d3:e3:67:81:a7:bd:91:d0:1c:0b:05: e7:36:ad:82:1e:4d:cd:c2:70:7e:fe:78:36:69:02:a0:ea:f8: 61:12:44:be:76:24:d9:aa:01:5a:74:5c:93:f9:67:e5:20:72: 4b:ac:53:44:19:67:1d:58:1c:49:5e:50:63:8c:47:7a:be:03: 60:12:95:fa:49:a1:f0:5e:d7:3a:0a:4f:f5:86:da:8e:72:19: 15:24:80:6c:f8:e0:9d:02:70:29:3a:11:30:df:6f:8e:f0:87: 2e:81:cc:33:5a:90:e0:ac:ba:27:28:21:90:6c:0f:30:2c:91: eb:d1:88:fa:72:63:77:ff:b8:2c:08:89:55:a1:72:31:5a:fd: 0b:f4:c3:15:92:78:9c:8b:70:fb:bc:14:0b:aa:b0:3c:19:d2: 5d:ff:53:e5:bd:48:51:a5:29:be:95:73:f9:79:71:0c:2d:3a: f2:5f:a2:c2:a1:ec:b6:a0:05:ae:f0:d1:cb:46:e2:2f:58:77: e3:7f:b2:12:dc:c1:c5:3a:bb:4a:3f:e8:3c:58:b8:f0:e2:a1: 69:73:8e:68:53:5d:94:23:52:ba:76:3b:32:17:93:cb:d7:3c: f7:da:56:7b:cb:70:6c:91:8b:61:27:0d:b0:72:7d:1b:ee:c7: 8e:94:26:a6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdK6DafB5KjzIfYFbNomvCwd25e0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjExMDA1MDQyWhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYmNiZjFlNjUyMWZkOGZjMmVmYmQzNmJmMDNjMTE1OTFm Mzk3ZmMzNTIzODdmYzFjYmRjNmM5NGE5NWM5NzA0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCd2dBfMOTiDyxJhBc1YbY05OFo0wt2DiQ4u6Vu4k2n8s7n w+of/xSSlEuQHIqOdP3psF1w9Qq+XNTp7q3IhTc5Y3t+MdBiAKr7x9nK2cTS8gIf BsFGYSde5l4mzBnu5S7Jq9z1RYu+THsuduYkQ6iNI8ggEOFO+AIpjkY5HqKVwssJ 85/JOu4Sq7bEoSdId2lmGLMwGWB7HjCA9LJoK5ViW4eP7QZXDrl/7BdmQuJHtqmw FAzrX70bXJZALSfo2TxhpgLXGlxb+mzD+LegdZPbFCJKCHG8A0TXAOu8BFG5p4JE FN3pVvYSa24XDT0V9AOGn2+pwTgESPlCrbz/W+QfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU3BWAdqQ7jV6f8C3U0B2uutjGAv0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RjZTc3NGZiLTcwODMtNGI5Ny1hN2I0LWExMDU5YzRlYTljZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQjTANBgkqhkiG9w0BAQsFAAOCAQEAVQQ8B7rtztPjZ4GnvZHQHAsF5zat gh5NzcJwfv54NmkCoOr4YRJEvnYk2aoBWnRck/ln5SByS6xTRBlnHVgcSV5QY4xH er4DYBKV+kmh8F7XOgpP9YbajnIZFSSAbPjgnQJwKToRMN9vjvCHLoHMM1qQ4Ky6 JyghkGwPMCyR69GI+nJjd/+4LAiJVaFyMVr9C/TDFZJ4nItw+7wUC6qwPBnSXf9T 5b1IUaUpvpVz+XlxDC068l+iwqHstqAFrvDRy0biL1h343+yEtzBxTq7Sj/oPFi4 8OKhaXOOaFNdlCNSunY7MheTy9c899pWe8twbJGLYScNsHJ9G+7HjpQmpg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:16:21 2026 by rpki-client