$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2bc0dab-66dc-4743-9675-5d85dafc89ff.roa File: f2bc0dab-66dc-4743-9675-5d85dafc89ff.roa (raw, json) Hash identifier: 80icCnN8X3C7jpsOYWSW4KF9S7ryQFYjJooyHEPphhE= Subject key identifier: 38:B2:DC:B5:1A:BA:B8:C1:68:0A:52:52:81:E1:6A:11:7C:BB:8C:2E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2481149DE4774E4903DA455D7D99A36CB7535315 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2bc0dab-66dc-4743-9675-5d85dafc89ff.roa Signing time: Fri 20 Feb 2026 00:30:18 +0000 ROA not before: Fri 20 Feb 2026 00:30:18 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.91.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:81:14:9d:e4:77:4e:49:03:da:45:5d:7d:99:a3:6c:b7:53:53:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 20 00:30:18 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=e47f50cd8cff12dfd279b58be23ed95f20279e99282340f0869b78b193af3856, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:26:11:8e:21:8b:a4:51:ae:f5:07:00:a4: e9:b2:87:e5:b2:f1:78:37:04:de:f4:5b:57:20:4a: 73:4c:9a:78:bf:9f:74:72:50:b3:63:78:99:a9:c6: b1:d6:32:68:8e:70:54:18:28:35:70:99:32:f0:b7: 31:bd:4c:a1:0d:da:dc:ae:2c:ec:2c:10:12:85:40: 01:e6:74:01:35:59:ef:be:40:2f:69:44:7e:5c:e8: 85:fd:56:5c:97:04:e4:ff:39:cc:a7:de:b7:1e:f1: 71:69:a5:5c:65:8f:11:85:b2:d3:77:ba:6c:56:7c: f7:be:7b:8c:99:15:ef:7a:32:9a:80:61:38:61:dc: 64:c5:0b:c0:fc:be:79:26:9a:9e:e4:30:73:2f:5f: bd:12:fa:e2:dc:0f:8b:f9:86:ee:bd:8c:20:f3:ef: 24:05:68:f7:bd:73:88:73:a2:7e:dd:7a:be:31:c3: 69:f9:12:e2:22:ea:12:82:e0:f3:60:06:d1:12:64: c5:5c:1e:dc:b0:4c:8b:86:6f:ab:9a:66:0d:16:bd: df:57:bc:94:55:bf:50:b6:2a:4f:ae:f5:65:1f:5c: f3:87:1e:75:3f:b8:f1:bc:6b:2c:e5:90:97:54:78: 30:b7:64:b5:86:65:56:3a:16:70:50:e7:2d:de:33: 17:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B2:DC:B5:1A:BA:B8:C1:68:0A:52:52:81:E1:6A:11:7C:BB:8C:2E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2bc0dab-66dc-4743-9675-5d85dafc89ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.91.29.0/24 Signature Algorithm: sha256WithRSAEncryption d4:d6:29:45:64:6f:cc:ca:aa:c8:fd:fd:b8:1a:6b:bf:2d:ed: e3:2a:96:9c:47:b3:c8:f0:a3:92:52:3d:7e:93:94:54:0b:48: c3:a8:cd:94:72:d7:e8:d0:bb:9f:bf:55:cc:a0:2a:c4:41:f7: 1d:e9:fb:63:be:b0:db:f6:db:51:d1:df:62:f5:79:55:25:7e: a0:0d:47:59:34:0c:42:03:41:43:f0:92:85:6e:5b:7f:ce:30: 6b:95:a4:b2:53:15:34:d9:9e:9f:8b:0b:98:85:3d:06:ae:94: e0:e2:5d:f7:1f:4b:67:df:2e:92:81:1a:1e:03:84:7f:fa:d8: d1:37:ab:75:bc:f0:5e:3c:c2:75:56:63:9f:d1:a1:7c:66:69: d3:c6:7a:ef:3c:ca:26:e4:87:00:14:79:45:69:cb:9a:fa:24: 3b:7a:03:45:fd:9d:66:e7:3e:60:98:a1:9e:51:5d:e2:0c:c8: 71:2e:5b:8c:eb:ed:1a:10:b1:b2:df:d0:c6:b1:1f:60:2a:b1: 79:89:4a:03:22:a9:72:8e:61:75:fe:f2:9f:99:53:10:98:d8: 61:4c:d8:f3:01:41:9c:08:b5:81:ab:ef:60:6f:4e:0d:d7:14: 7d:ce:df:34:a5:dd:d9:ae:52:b3:16:d0:79:9e:3f:31:90:c5: 3b:d2:c7:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJIEUneR3TkkD2kVdfZmjbLdTUxUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIwMDAzMDE4WhcNMjYwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDdmNTBjZDhjZmYxMmRmZDI3OWI1OGJlMjNlZDk1ZjIw Mjc5ZTk5MjgyMzQwZjA4NjliNzhiMTkzYWYzODU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8RSYRjiGLpFGu9QcApOmyh+Wy8Xg3BN70W1cgSnNMmni/ n3RyULNjeJmpxrHWMmiOcFQYKDVwmTLwtzG9TKEN2tyuLOwsEBKFQAHmdAE1We++ QC9pRH5c6IX9VlyXBOT/Ocyn3rce8XFppVxljxGFstN3umxWfPe+e4yZFe96MpqA YThh3GTFC8D8vnkmmp7kMHMvX70S+uLcD4v5hu69jCDz7yQFaPe9c4hzon7der4x w2n5EuIi6hKC4PNgBtESZMVcHtywTIuGb6uaZg0Wvd9XvJRVv1C2Kk+u9WUfXPOH HnU/uPG8ayzlkJdUeDC3ZLWGZVY6FnBQ5y3eMxdDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOLLctRq6uMFoClJSgeFqEXy7jC4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyYmMwZGFiLTY2ZGMtNDc0My05Njc1LTVkODVkYWZjODlmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAXWx0wDQYJKoZIhvcNAQELBQADggEBANTWKUVkb8zKqsj9/bgaa78t7eMq lpxHs8jwo5JSPX6TlFQLSMOozZRy1+jQu5+/VcygKsRB9x3p+2O+sNv221HR32L1 eVUlfqANR1k0DEIDQUPwkoVuW3/OMGuVpLJTFTTZnp+LC5iFPQaulODiXfcfS2ff LpKBGh4DhH/62NE3q3W88F48wnVWY5/RoXxmadPGeu88yibkhwAUeUVpy5r6JDt6 A0X9nWbnPmCYoZ5RXeIMyHEuW4zr7RoQsbLf0MaxH2AqsXmJSgMiqXKOYXX+8p+Z UxCY2GFM2PMBQZwItYGr72BvTg3XFH3O3zSl3dmuUrMW0HmePzGQxTvSx1I= -----END CERTIFICATE-----Generated at Sun Mar 1 22:18:06 2026 by rpki-client