$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e40f5c82-9524-48e5-b78e-4f7d786e567d.roa File: e40f5c82-9524-48e5-b78e-4f7d786e567d.roa (raw, json) Hash identifier: hNw9XSVnGWPx4d0pzQx+saveckftvgGh6i5Unfhojuw= Subject key identifier: 01:5B:6F:2F:0C:8F:5E:28:18:D8:33:10:EA:24:30:CC:59:EF:19:BA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 77CC4504A2F67C605E8B5AAA913A74FDAF6CD12B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e40f5c82-9524-48e5-b78e-4f7d786e567d.roa Signing time: Sat 21 Feb 2026 00:20:58 +0000 ROA not before: Sat 21 Feb 2026 00:20:58 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:cc:45:04:a2:f6:7c:60:5e:8b:5a:aa:91:3a:74:fd:af:6c:d1:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:20:58 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=4e42c9fbc5f19c76941246f708c4be47585af3f17517c96a8f697f3f2b64ebd9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:af:bf:76:f6:8f:eb:01:62:b9:42:3d:02:37: 0a:3f:42:7e:8c:8a:41:30:11:9f:29:4d:ba:09:6b: 2b:dc:50:6b:c9:2f:21:57:e3:fb:b0:e6:b2:e3:3d: db:64:2e:69:46:22:12:02:13:09:16:b0:fd:8d:5c: 88:27:08:92:39:ce:b7:54:47:2c:eb:a3:0a:74:7f: 7f:b8:8c:a9:fb:bd:40:53:1f:59:dc:1f:36:70:7b: 35:2b:a7:04:a7:e0:78:d4:74:ee:b5:6f:44:99:b5: aa:ac:55:5b:54:fd:5a:60:d9:32:6c:43:dc:4e:40: 49:8e:ff:bf:b3:6e:8a:e8:dc:43:49:9b:94:6d:39: ae:d5:b3:62:59:73:2c:9a:c3:25:9f:12:ff:07:d8: 5b:57:2e:84:6e:33:9f:5f:da:be:28:5f:d1:1a:1b: fd:5c:2e:97:64:0e:f9:96:5e:f3:78:96:bd:84:b8: 62:7e:d5:d7:bd:fe:31:46:4a:46:56:76:c1:52:f9: 8d:d7:8a:35:1b:9e:e8:f6:ac:12:0b:ca:8b:21:75: 35:63:9d:e0:e9:3e:7d:27:42:bf:34:d8:f4:90:f3: c1:21:30:32:93:fd:cd:78:79:7a:e4:ae:05:bf:d4: 7d:32:a6:25:05:da:90:ce:78:2f:ea:55:a4:48:f0: 4c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5B:6F:2F:0C:8F:5E:28:18:D8:33:10:EA:24:30:CC:59:EF:19:BA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e40f5c82-9524-48e5-b78e-4f7d786e567d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.68.0/24 Signature Algorithm: sha256WithRSAEncryption 99:70:97:d0:c5:54:23:9d:a3:13:7d:51:52:09:09:fa:e3:23: 5d:91:72:c9:7a:94:0b:67:b7:cf:e6:c4:af:cd:ea:4f:c0:dd: 1a:54:8b:b9:ef:4f:90:67:33:df:fa:55:ae:98:83:b8:ba:c2: 68:a3:dc:fa:fc:f6:0d:4a:76:85:06:69:70:7f:2c:25:0a:66: 28:4d:6f:dd:f7:bf:1a:54:26:20:5f:2e:00:d1:0f:9e:f1:5b: bc:d2:c3:77:51:97:5c:e8:86:55:ad:63:26:1c:a0:a1:0c:57: 3e:38:67:cd:14:4a:0a:9a:f0:1f:b1:a2:12:cb:a5:60:e7:c9: f7:9f:71:fc:81:8a:15:8b:e9:34:b2:92:d9:cb:b1:81:bb:8c: 25:55:b6:cb:c4:4e:03:97:9b:55:9f:fb:b6:b8:d6:d4:12:97: ac:b4:35:29:cc:70:d4:d7:39:b0:10:98:a0:99:a8:3d:62:d1: bd:19:ef:ec:34:06:5c:fa:59:4e:58:39:d5:89:d1:30:69:76: 81:1e:bb:ac:19:b6:b8:73:70:cd:47:1c:1e:c3:bd:0a:e1:14: e5:7f:f1:86:f3:04:9a:6a:b5:b9:3f:a1:89:33:85:43:db:f6: 4e:c2:4e:9c:af:38:b0:a6:2d:73:4f:07:c7:af:2c:33:c6:34: 99:b2:d2:5f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUd8xFBKL2fGBei1qqkTp0/a9s0SswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDAyMDU4WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTQyYzlmYmM1ZjE5Yzc2OTQxMjQ2ZjcwOGM0YmU0NzU4 NWFmM2YxNzUxN2M5NmE4ZjY5N2YzZjJiNjRlYmQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpr7929o/rAWK5Qj0CNwo/Qn6MikEwEZ8pTboJayvcUGvJ LyFX4/uw5rLjPdtkLmlGIhICEwkWsP2NXIgnCJI5zrdURyzrowp0f3+4jKn7vUBT H1ncHzZwezUrpwSn4HjUdO61b0SZtaqsVVtU/Vpg2TJsQ9xOQEmO/7+zboro3ENJ m5RtOa7Vs2JZcyyawyWfEv8H2FtXLoRuM59f2r4oX9EaG/1cLpdkDvmWXvN4lr2E uGJ+1de9/jFGSkZWdsFS+Y3XijUbnuj2rBILyoshdTVjneDpPn0nQr802PSQ88Eh MDKT/c14eXrkrgW/1H0ypiUF2pDOeC/qVaRI8EwBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAVtvLwyPXigY2DMQ6iQwzFnvGbowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U0MGY1YzgyLTk1MjQtNDhlNS1iNzhlLTRmN2Q3ODZlNTY3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmEQwDQYJKoZIhvcNAQELBQADggEBAJlwl9DFVCOdoxN9UVIJCfrjI12R csl6lAtnt8/mxK/N6k/A3RpUi7nvT5BnM9/6Va6Yg7i6wmij3Pr89g1KdoUGaXB/ LCUKZihNb933vxpUJiBfLgDRD57xW7zSw3dRl1zohlWtYyYcoKEMVz44Z80USgqa 8B+xohLLpWDnyfefcfyBihWL6TSyktnLsYG7jCVVtsvETgOXm1Wf+7a41tQSl6y0 NSnMcNTXObAQmKCZqD1i0b0Z7+w0Blz6WU5YOdWJ0TBpdoEeu6wZtrhzcM1HHB7D vQrhFOV/8YbzBJpqtbk/oYkzhUPb9k7CTpyvOLCmLXNPB8evLDPGNJmy0l8= -----END CERTIFICATE-----Generated at Sun Mar 1 22:17:46 2026 by rpki-client