$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3494ddd-eeb2-4092-b219-ee8658342ffc.roa File: f3494ddd-eeb2-4092-b219-ee8658342ffc.roa (raw, json) Hash identifier: EpsWIhWsokK4F8PjorJSZWqvNP/RPm2pP5SK4SOqjvE= Subject key identifier: B1:AB:8F:AA:09:58:7E:D6:EB:7A:4B:0C:DB:CD:FE:33:7C:B8:6B:20 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3CD0F86D63D20E2F83275598F6D8CD9DA6575EDD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3494ddd-eeb2-4092-b219-ee8658342ffc.roa Signing time: Sun 22 Feb 2026 00:51:09 +0000 ROA not before: Sun 22 Feb 2026 00:51:09 +0000 ROA not after: Sat 23 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 205.186.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d0:f8:6d:63:d2:0e:2f:83:27:55:98:f6:d8:cd:9d:a6:57:5e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 22 00:51:09 2026 GMT Not After : May 23 23:59:59 2026 GMT Subject: serialNumber=402ddffd5ee474d391e666e77de9c1643b8ce340e32ac6928a0cdc523d276aac, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:0c:ad:5c:cd:ab:59:b8:35:8a:f0:b2:6f: 35:ce:9e:6d:dd:41:06:10:cb:ee:97:85:eb:fc:f0: 13:ea:2a:6b:62:d5:d5:5e:79:f9:8d:70:b5:cc:43: a2:ef:4d:91:5f:ed:d8:39:d4:97:7e:41:92:34:b9: 92:2b:8d:cb:43:3e:b8:8b:9d:92:df:14:ae:78:86: bf:37:62:35:da:d8:f5:a0:23:02:7d:c7:dc:65:86: dd:c9:cf:2f:e0:7c:c8:07:8a:30:ea:ae:e0:90:10: 1a:2e:2d:0f:34:d7:2a:6f:11:4c:32:f9:cd:93:44: fe:94:5f:ae:5b:14:5a:d5:12:56:98:fd:d2:f9:52: 02:3b:6b:68:da:65:26:0a:f4:43:2c:b1:a6:4c:26: ab:36:90:7d:65:8a:d7:5b:46:b4:ae:93:7e:c2:71: 1f:83:2a:fd:6b:6a:96:be:52:4b:0f:82:ca:e7:bc: 6a:54:bd:d9:3b:95:08:1f:fb:e3:69:e7:8c:e9:9b: 1f:ac:4b:99:b1:b5:9c:6f:5e:8c:7e:45:2a:33:ef: 47:8a:66:e9:1c:71:41:10:b7:9c:3d:ec:5a:b3:a3: b2:ca:43:e7:41:c0:d5:a2:24:f8:db:e9:13:ce:42: 2f:d5:38:ff:b2:d6:1a:3e:2e:31:f9:cd:2a:0c:24: db:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AB:8F:AA:09:58:7E:D6:EB:7A:4B:0C:DB:CD:FE:33:7C:B8:6B:20 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3494ddd-eeb2-4092-b219-ee8658342ffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.186.192.0/20 Signature Algorithm: sha256WithRSAEncryption cc:d5:8d:dc:ac:dc:7c:a2:35:d5:bb:79:f6:1a:20:14:2c:f5: f4:19:19:22:60:e1:0b:7a:64:04:ef:da:0c:18:03:7d:89:f2: 76:f6:fe:a6:c5:04:6a:ab:a8:b9:4f:b9:a8:7d:8b:14:f9:e5: 45:cf:d6:64:0e:83:93:7f:19:cb:c6:c4:6f:da:90:60:48:8d: 9d:5f:79:fe:0a:ae:1d:1f:9c:a4:09:bc:cb:f7:75:39:fd:04: 1a:33:3b:19:36:89:34:f5:e6:ae:c1:fa:7e:d9:99:d7:82:fb: b5:f1:8a:0b:96:42:0d:d1:30:ad:4e:45:72:5c:f3:41:27:53: 24:a9:f7:30:89:be:ec:2b:7d:b7:84:33:4c:7c:9d:e5:29:d8: bc:b0:ae:0c:77:ff:cc:4f:5d:bc:23:e8:96:3a:fe:ad:9b:99: ce:33:20:41:47:ed:67:1b:d9:74:36:c0:fe:b7:c5:47:1e:a2: 1f:5b:f9:96:49:a1:bb:67:c0:74:f6:77:2b:98:fe:50:be:81: 39:4c:ba:9d:97:c5:85:1e:82:18:65:68:ed:76:34:13:be:06: 68:66:97:6f:ad:37:cd:11:c4:71:55:b9:61:3c:7e:aa:84:e6: 40:8f:b8:19:71:09:e6:19:31:8d:02:bb:02:06:a4:f1:8d:c7: bb:bf:1b:fb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPND4bWPSDi+DJ1WY9tjNnaZXXt0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIyMDA1MTA5WhcNMjYwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDJkZGZmZDVlZTQ3NGQzOTFlNjY2ZTc3ZGU5YzE2NDNi OGNlMzQwZTMyYWM2OTI4YTBjZGM1MjNkMjc2YWFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4pgytXM2rWbg1ivCybzXOnm3dQQYQy+6Xhev88BPqKmti 1dVeefmNcLXMQ6LvTZFf7dg51Jd+QZI0uZIrjctDPriLnZLfFK54hr83YjXa2PWg IwJ9x9xlht3Jzy/gfMgHijDqruCQEBouLQ801ypvEUwy+c2TRP6UX65bFFrVElaY /dL5UgI7a2jaZSYK9EMssaZMJqs2kH1litdbRrSuk37CcR+DKv1rapa+UksPgsrn vGpUvdk7lQgf++Np54zpmx+sS5mxtZxvXox+RSoz70eKZukccUEQt5w97Fqzo7LK Q+dBwNWiJPjb6RPOQi/VOP+y1ho+LjH5zSoMJNsvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsauPqglYftbreksM283+M3y4ayAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YzNDk0ZGRkLWVlYjItNDA5Mi1iMjE5LWVlODY1ODM0MmZmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATNusAwDQYJKoZIhvcNAQELBQADggEBAMzVjdys3HyiNdW7efYaIBQs9fQZ GSJg4Qt6ZATv2gwYA32J8nb2/qbFBGqrqLlPuah9ixT55UXP1mQOg5N/GcvGxG/a kGBIjZ1fef4Krh0fnKQJvMv3dTn9BBozOxk2iTT15q7B+n7ZmdeC+7XxiguWQg3R MK1ORXJc80EnUySp9zCJvuwrfbeEM0x8neUp2Lywrgx3/8xPXbwj6JY6/q2bmc4z IEFH7Wcb2XQ2wP63xUceoh9b+ZZJobtnwHT2dyuY/lC+gTlMup2XxYUeghhlaO12 NBO+Bmhml2+tN80RxHFVuWE8fqqE5kCPuBlxCeYZMY0CuwIGpPGNx7u/G/s= -----END CERTIFICATE-----Generated at Sun Mar 1 23:55:02 2026 by rpki-client