$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0677c68-3681-4e3c-b63a-e2dfdd5e0779.roa File: e0677c68-3681-4e3c-b63a-e2dfdd5e0779.roa (raw, json) Hash identifier: zyEJkZQYzCja7sC5Lg0htYaFNAHI7yTR8+vTfYz9Mr8= Subject key identifier: 5C:72:75:56:10:D3:84:EF:42:02:9A:80:AD:7B:85:1B:FF:89:5B:A7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 34758EBD89C83F107B338C82126953AAD0869107 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0677c68-3681-4e3c-b63a-e2dfdd5e0779.roa Signing time: Wed 11 Feb 2026 01:10:39 +0000 ROA not before: Wed 11 Feb 2026 01:10:39 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 64.252.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:75:8e:bd:89:c8:3f:10:7b:33:8c:82:12:69:53:aa:d0:86:91:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 11 01:10:39 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=12f5917073a3945903126c14f4aec3b893d18c36cbd00ce2bc42a4c03d218117, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e3:2f:44:f2:9b:cc:51:70:f4:ee:82:01:f8: 53:84:cc:07:e5:67:6d:6a:b7:9d:37:d6:b2:f7:62: 73:9c:1f:0f:9d:80:11:c9:4b:53:30:4c:f6:18:e4: ea:89:4f:c2:fa:e0:40:1f:b8:6a:d8:af:13:60:c6: a4:2e:75:84:fc:1a:40:6c:84:df:5b:4f:10:b5:5c: 00:53:9a:b8:16:b2:a1:8a:22:ad:6a:0d:c0:33:76: d1:8b:aa:8d:65:da:ab:34:9c:91:70:40:b4:57:a2: ff:2f:cd:19:05:10:99:21:b2:07:fd:14:3d:30:28: df:8a:b6:37:1d:9c:1c:90:c3:5b:0d:31:df:e3:93: d9:25:d7:3b:22:1e:1b:ae:54:4c:44:35:7b:1a:a4: 32:75:f9:de:4d:a0:98:de:91:31:80:da:32:17:f8: e8:38:a6:7e:cc:3a:13:c9:cb:2a:ca:b8:03:67:b0: fd:ee:62:ce:f4:f3:bd:c6:87:5c:61:7a:55:cf:8f: ca:30:7c:ce:e5:90:b4:53:66:01:8a:b9:70:d8:fe: 47:78:1c:d1:03:d3:24:a7:68:82:1e:40:60:60:47: cb:9d:54:25:93:4d:29:c3:47:ac:32:3e:80:1a:d4: 46:42:47:d1:39:db:15:15:0c:63:eb:66:53:85:52: b1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:72:75:56:10:D3:84:EF:42:02:9A:80:AD:7B:85:1B:FF:89:5B:A7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0677c68-3681-4e3c-b63a-e2dfdd5e0779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.125.0/24 Signature Algorithm: sha256WithRSAEncryption 83:61:0d:e4:55:7c:55:fb:6a:1d:e0:4a:db:f9:a6:3e:01:22: c3:4d:d8:c5:61:d7:43:f7:28:1f:fa:23:22:1e:7e:94:55:15: 94:84:c1:a1:dc:55:ab:cc:c8:86:35:43:a9:16:52:49:8e:69: dc:0c:d6:8e:a0:6b:64:01:6d:26:0d:03:bb:3a:4e:8c:02:02: 01:de:f3:cb:cb:bf:75:44:61:bb:a3:41:b0:f2:74:c0:72:f6: ff:d9:d3:74:cd:9c:7d:f0:d9:77:9e:c8:22:ec:95:5e:66:7f: 16:4f:d1:ad:55:b3:0a:8e:48:65:7f:c4:6a:b7:64:3c:b9:06: 8f:81:b9:bf:6b:4f:35:cc:02:85:b0:6d:ea:c1:b6:e4:bb:05: 08:10:c7:b3:15:c8:e2:81:28:42:16:38:b5:97:fc:e3:20:b4: 14:b8:c9:37:bb:46:99:91:07:b6:fa:77:42:67:17:ca:97:49: 3c:9f:40:c3:e8:97:be:1d:7f:af:07:f3:e6:ac:cc:2c:52:49: 45:e7:d5:3b:d4:39:73:c7:dd:e5:d0:45:12:ef:8d:17:33:52: 79:02:36:8a:37:0f:16:e1:9a:a7:7f:df:7f:3f:0e:7f:d1:5e: e9:07:80:5d:e9:18:82:6b:58:1e:9c:5b:6a:f4:3a:71:d0:0f: 07:6d:35:3f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNHWOvYnIPxB7M4yCEmlTqtCGkQcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjExMDExMDM5WhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMmY1OTE3MDczYTM5NDU5MDMxMjZjMTRmNGFlYzNiODkz ZDE4YzM2Y2JkMDBjZTJiYzQyYTRjMDNkMjE4MTE3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDO4y9E8pvMUXD07oIB+FOEzAflZ21qt5031rL3YnOcHw+d gBHJS1MwTPYY5OqJT8L64EAfuGrYrxNgxqQudYT8GkBshN9bTxC1XABTmrgWsqGK Iq1qDcAzdtGLqo1l2qs0nJFwQLRXov8vzRkFEJkhsgf9FD0wKN+KtjcdnByQw1sN Md/jk9kl1zsiHhuuVExENXsapDJ1+d5NoJjekTGA2jIX+Og4pn7MOhPJyyrKuANn sP3uYs70873Gh1xhelXPj8owfM7lkLRTZgGKuXDY/kd4HNED0ySnaIIeQGBgR8ud VCWTTSnDR6wyPoAa1EZCR9E52xUVDGPrZlOFUrGHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXHJ1VhDThO9CApqArXuFG/+JW6cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UwNjc3YzY4LTM2ODEtNGUzYy1iNjNhLWUyZGZkZDVlMDc3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/H0wDQYJKoZIhvcNAQELBQADggEBAINhDeRVfFX7ah3gStv5pj4BIsNN 2MVh10P3KB/6IyIefpRVFZSEwaHcVavMyIY1Q6kWUkmOadwM1o6ga2QBbSYNA7s6 TowCAgHe88vLv3VEYbujQbDydMBy9v/Z03TNnH3w2XeeyCLslV5mfxZP0a1VswqO SGV/xGq3ZDy5Bo+Bub9rTzXMAoWwberBtuS7BQgQx7MVyOKBKEIWOLWX/OMgtBS4 yTe7RpmRB7b6d0JnF8qXSTyfQMPol74df68H8+aszCxSSUXn1TvUOXPH3eXQRRLv jRczUnkCNoo3Dxbhmqd/338/Dn/RXukHgF3pGIJrWB6cW2r0OnHQDwdtNT8= -----END CERTIFICATE-----Generated at Mon Mar 2 17:39:28 2026 by rpki-client