$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef318857-8a29-4f7a-ba28-9dc2b503a86f.roa File: ef318857-8a29-4f7a-ba28-9dc2b503a86f.roa (raw, json) Hash identifier: 42o3yAB4st4MN/KP3IZJvHOJjYVb5eKh9y3hRpN38YI= Subject key identifier: FB:C1:97:03:FC:5C:A5:3A:A6:6F:F8:D5:86:1B:FD:E3:66:C9:BB:84 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 535FEEB1B6F44457C70FA89E7C31906B8B465AF4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef318857-8a29-4f7a-ba28-9dc2b503a86f.roa Signing time: Sat 21 Feb 2026 00:51:57 +0000 ROA not before: Sat 21 Feb 2026 00:51:57 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:5f:ee:b1:b6:f4:44:57:c7:0f:a8:9e:7c:31:90:6b:8b:46:5a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:51:57 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=e3c060029c098a7217c5d558fea8e090cef0be5fa501668cffd8195d493be3fb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c9:01:e3:09:ba:18:d3:f6:ab:40:a0:8c:53: 04:5a:e4:54:13:f8:92:01:0a:87:dd:92:46:40:ca: c2:dc:4d:64:48:d9:74:2f:ae:9d:f9:64:e9:58:13: c5:00:89:da:dd:ff:09:23:8d:a7:11:9b:40:32:cc: 24:a2:be:29:ab:38:8a:a0:25:8f:36:fe:b8:ec:e1: fa:de:3a:1c:59:54:85:d1:69:f0:fd:54:fc:e7:7a: 79:09:f9:f7:a4:5e:23:5a:8a:ff:dd:e4:04:2a:c4: 9a:9c:62:b0:b1:9e:68:a5:ae:a0:b7:25:aa:df:35: 4f:a4:ad:27:4d:27:10:82:e0:af:ac:36:b9:33:10: 10:4e:74:b9:36:1c:34:fc:07:04:58:a3:b3:2c:2e: 0c:b3:0d:73:0e:9a:a2:49:84:53:0f:ca:f0:2e:e0: c2:e7:e9:d0:d9:94:ba:32:43:d0:a6:fe:d7:06:9d: 79:8d:6a:84:ef:5b:aa:5e:d5:3c:1b:02:8b:5a:18: 32:88:d7:8c:e2:ab:58:cb:ab:0d:ae:80:f0:6a:56: 99:96:1b:25:df:96:70:b1:69:ea:b1:8d:10:84:ed: ba:93:7e:d5:d7:c4:6a:6c:55:5d:9d:d9:eb:c2:05: cb:ac:ac:38:78:fa:b6:27:02:84:52:1a:ce:e3:0f: 56:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C1:97:03:FC:5C:A5:3A:A6:6F:F8:D5:86:1B:FD:E3:66:C9:BB:84 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef318857-8a29-4f7a-ba28-9dc2b503a86f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.33.0/24 Signature Algorithm: sha256WithRSAEncryption 66:2a:6a:c3:ff:e7:1a:ec:42:d4:3b:fa:88:d2:86:b0:be:9c: 4d:8c:be:24:5a:10:6b:db:84:c3:4a:6c:ee:b4:46:c5:ad:76: 0b:4f:a7:1f:ab:05:f0:d3:1d:c3:9d:eb:36:8c:fc:be:e7:f2: 91:d3:0a:57:10:ea:f2:82:7b:2b:c6:37:5c:d9:21:73:1a:32: b8:a7:ed:11:fa:d4:16:46:95:c2:f8:2d:0b:33:9e:4e:a7:9d: ae:72:02:79:1d:dd:f8:7e:ee:66:64:7a:1a:b0:3c:7b:da:84: 0a:a2:63:90:b5:a8:3f:6b:62:57:38:27:97:27:8f:0d:ed:d3: c9:e7:94:4a:b3:04:2a:fe:31:8c:4f:22:cb:5b:89:93:30:f1: e4:b8:38:3c:21:01:ce:91:c1:53:27:16:37:c6:c9:fc:15:2d: e7:75:d7:27:23:52:09:af:24:a9:de:f6:36:71:56:4d:cb:a5: 62:1e:bd:3f:05:c8:ea:66:4f:3c:fa:7b:c6:2f:71:91:b3:1d: 86:11:ec:8c:d2:9a:c1:ef:06:49:19:2c:af:8a:dd:3b:08:50: 38:7d:87:ef:ca:fc:b6:fb:05:28:a0:8e:70:57:fd:8d:c8:6c: cf:4d:33:3c:1c:15:33:eb:83:44:f9:f1:1c:57:bb:50:2f:c4: 7b:ef:ed:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU1/usbb0RFfHD6iefDGQa4tGWvQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDA1MTU3WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlM2MwNjAwMjljMDk4YTcyMTdjNWQ1NThmZWE4ZTA5MGNl ZjBiZTVmYTUwMTY2OGNmZmQ4MTk1ZDQ5M2JlM2ZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRyQHjCboY0/arQKCMUwRa5FQT+JIBCofdkkZAysLcTWRI 2XQvrp35ZOlYE8UAidrd/wkjjacRm0AyzCSivimrOIqgJY82/rjs4freOhxZVIXR afD9VPznenkJ+fekXiNaiv/d5AQqxJqcYrCxnmilrqC3JarfNU+krSdNJxCC4K+s NrkzEBBOdLk2HDT8BwRYo7MsLgyzDXMOmqJJhFMPyvAu4MLn6dDZlLoyQ9Cm/tcG nXmNaoTvW6pe1TwbAotaGDKI14ziq1jLqw2ugPBqVpmWGyXflnCxaeqxjRCE7bqT ftXXxGpsVV2d2evCBcusrDh4+rYnAoRSGs7jD1YTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+8GXA/xcpTqmb/jVhhv942bJu4QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VmMzE4ODU3LThhMjktNGY3YS1iYTI4LTlkYzJiNTAzYTg2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmCEwDQYJKoZIhvcNAQELBQADggEBAGYqasP/5xrsQtQ7+ojShrC+nE2M viRaEGvbhMNKbO60RsWtdgtPpx+rBfDTHcOd6zaM/L7n8pHTClcQ6vKCeyvGN1zZ IXMaMrin7RH61BZGlcL4LQsznk6nna5yAnkd3fh+7mZkehqwPHvahAqiY5C1qD9r Ylc4J5cnjw3t08nnlEqzBCr+MYxPIstbiZMw8eS4ODwhAc6RwVMnFjfGyfwVLed1 1ycjUgmvJKne9jZxVk3LpWIevT8FyOpmTzz6e8YvcZGzHYYR7IzSmsHvBkkZLK+K 3TsIUDh9h+/K/Lb7BSigjnBX/Y3IbM9NMzwcFTPrg0T58RxXu1AvxHvv7aI= -----END CERTIFICATE-----Generated at Sun Mar 1 22:22:35 2026 by rpki-client