$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e541b1d1-d624-4ed3-a35b-eb257b0a449b.roa File: e541b1d1-d624-4ed3-a35b-eb257b0a449b.roa (raw, json) Hash identifier: iVkUg97vSCXGIY98E5gnn9AZH9rtXxulieys2kfRc5o= Subject key identifier: 9B:DE:12:E1:EC:25:1C:AD:F4:14:86:26:A6:45:4D:AE:11:FD:EB:CE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6746376EE83ED957CC37B03805EC740D915524BB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e541b1d1-d624-4ed3-a35b-eb257b0a449b.roa Signing time: Fri 20 Feb 2026 00:40:37 +0000 ROA not before: Fri 20 Feb 2026 00:40:37 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 44.224.0.0/11 maxlen: 11 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:46:37:6e:e8:3e:d9:57:cc:37:b0:38:05:ec:74:0d:91:55:24:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 20 00:40:37 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=8f31c6493e2d0a4e38183cdfd8a20e4beed82b36ec6780d0128428109a2ab166, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c3:88:94:e0:1c:fb:ff:b1:69:38:c4:e0:fb: 7a:4a:3d:ec:32:83:24:c8:69:95:fe:e6:6e:d9:00: 68:83:46:40:58:84:40:cd:9d:e8:5b:80:eb:b0:d0: 21:e7:a0:1b:47:11:b2:40:88:6d:bc:28:0a:d5:a7: d7:7a:d8:ac:db:5a:b4:40:fd:44:d9:d9:97:b4:69: 6f:51:d9:58:fb:4f:77:76:01:14:46:08:19:79:09: ff:7e:40:fb:7c:e0:69:8b:f1:6a:bc:ab:6a:64:52: 7c:ac:a4:0c:78:31:07:08:5f:b2:2d:ab:5a:59:67: 36:b6:d8:d9:52:75:f0:a4:61:29:8f:48:36:1d:19: fa:85:2c:cb:5f:a8:02:5e:8c:04:f0:3b:8c:bd:64: 70:21:72:57:2c:e2:06:2b:d9:6e:a2:c6:53:c8:0c: d9:62:88:2e:82:0d:e9:0c:7f:10:2f:34:05:7b:31: ac:b0:f8:38:6d:a7:2f:10:f6:65:eb:99:da:5f:af: 27:ad:a8:88:c0:7f:aa:4c:bf:1f:07:41:ac:aa:be: d5:39:26:cd:8f:32:8c:fd:cb:88:74:08:43:b3:85: bb:a9:99:18:75:47:91:00:ed:ce:36:06:6e:ba:cc: ae:5e:99:fd:76:db:50:4c:c6:ec:22:e6:ac:6e:b6: 33:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DE:12:E1:EC:25:1C:AD:F4:14:86:26:A6:45:4D:AE:11:FD:EB:CE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e541b1d1-d624-4ed3-a35b-eb257b0a449b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.224.0.0/11 Signature Algorithm: sha256WithRSAEncryption b0:81:e8:e3:65:34:aa:cc:38:74:7d:63:77:3d:00:b3:67:d3: 34:cb:c4:96:dd:18:b6:f5:2c:f3:a5:39:26:4f:45:cd:d7:d5: 9d:61:ba:02:8d:63:36:be:49:34:b7:20:fd:a3:92:74:f5:43: f6:20:44:d7:2c:7e:05:2f:22:a3:b9:a7:95:e0:09:87:aa:0f: c9:1b:f0:35:e2:0c:6e:07:98:af:76:35:64:97:b5:f7:7f:89: 8d:a7:49:d2:f9:b4:46:ab:6e:d1:21:ce:97:79:5c:0e:ce:30: 6c:b1:82:39:ae:51:30:d3:51:cf:c6:d6:6b:ee:b3:1f:c6:c0: 47:d9:20:e1:ec:98:05:7a:0f:37:af:db:93:c2:31:ef:de:75: 9c:14:a1:43:e8:55:5f:2d:d6:c7:be:f1:fa:17:36:cd:bf:9c: d3:4b:b6:cb:f6:2a:9a:7d:af:bb:c2:87:89:9c:b7:97:b4:df: a5:20:ce:c0:d5:dd:9b:cf:20:98:5d:1f:d0:6e:16:b2:dc:cb: 15:f4:c4:c5:28:d5:2d:68:b3:64:c1:94:5b:34:16:2a:26:16: fb:ea:76:c1:aa:17:b3:1d:6e:29:1d:19:ab:29:13:3d:6b:c0: 97:53:7d:bc:40:8f:55:5c:7a:f8:e3:7a:96:70:fa:d9:01:7e: 2b:88:4c:19 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZ0Y3bug+2VfMN7A4Bex0DZFVJLswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIwMDA0MDM3WhcNMjYwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZjMxYzY0OTNlMmQwYTRlMzgxODNjZGZkOGEyMGU0YmVl ZDgyYjM2ZWM2NzgwZDAxMjg0MjgxMDlhMmFiMTY2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEw4iU4Bz7/7FpOMTg+3pKPewygyTIaZX+5m7ZAGiDRkBY hEDNnehbgOuw0CHnoBtHEbJAiG28KArVp9d62KzbWrRA/UTZ2Ze0aW9R2Vj7T3d2 ARRGCBl5Cf9+QPt84GmL8Wq8q2pkUnyspAx4MQcIX7Itq1pZZza22NlSdfCkYSmP SDYdGfqFLMtfqAJejATwO4y9ZHAhclcs4gYr2W6ixlPIDNliiC6CDekMfxAvNAV7 Mayw+Dhtpy8Q9mXrmdpfryetqIjAf6pMvx8HQayqvtU5Js2PMoz9y4h0CEOzhbup mRh1R5EA7c42Bm66zK5emf1221BMxuwi5qxutjNdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUm94S4ewlHK30FIYmpkVNrhH9684wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U1NDFiMWQxLWQ2MjQtNGVkMy1hMzViLWViMjU3YjBhNDQ5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwUs4DANBgkqhkiG9w0BAQsFAAOCAQEAsIHo42U0qsw4dH1jdz0As2fTNMvE lt0YtvUs86U5Jk9FzdfVnWG6Ao1jNr5JNLcg/aOSdPVD9iBE1yx+BS8io7mnleAJ h6oPyRvwNeIMbgeYr3Y1ZJe193+JjadJ0vm0Rqtu0SHOl3lcDs4wbLGCOa5RMNNR z8bWa+6zH8bAR9kg4eyYBXoPN6/bk8Ix7951nBShQ+hVXy3Wx77x+hc2zb+c00u2 y/Yqmn2vu8KHiZy3l7TfpSDOwNXdm88gmF0f0G4WstzLFfTExSjVLWizZMGUWzQW KiYW++p2waoXsx1uKR0ZqykTPWvAl1N9vECPVVx6+ON6lnD62QF+K4hMGQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:21:48 2026 by rpki-client