$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4745733-2600-4627-8fbe-3ab8ab0b9769.roa File: f4745733-2600-4627-8fbe-3ab8ab0b9769.roa (raw, json) Hash identifier: fTEqYK25fxIqzgNzOI8H7rKYozrJQUXEgT2KhUkSovM= Subject key identifier: 98:7F:CF:5D:40:DE:4D:BB:DF:92:F5:DC:16:27:33:44:C9:2A:08:8F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7AD3A16046E9952C96E0142D606521D89F4F129B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4745733-2600-4627-8fbe-3ab8ab0b9769.roa Signing time: Sat 14 Feb 2026 00:30:53 +0000 ROA not before: Sat 14 Feb 2026 00:30:53 +0000 ROA not after: Fri 15 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 50.17.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d3:a1:60:46:e9:95:2c:96:e0:14:2d:60:65:21:d8:9f:4f:12:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 14 00:30:53 2026 GMT Not After : May 15 23:59:59 2026 GMT Subject: serialNumber=b82ecf8a08af92532b2f1f9a1ccce577e0ddc752b6bba800238436400d05fa5d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:67:f6:a2:46:9c:3e:47:40:52:a6:1d:a0:06: 4a:b2:e1:7a:4e:2e:57:86:00:72:62:8d:4e:d5:9f: 17:0f:7f:68:6e:cf:f5:6a:50:02:4a:c4:cc:39:22: 4d:15:67:0a:22:06:be:8b:16:07:31:f0:a5:85:52: 5d:e1:13:96:db:44:18:0c:2e:f8:db:d0:1e:05:1a: f6:e4:29:cf:0e:e9:13:9b:14:87:8e:47:6f:eb:25: 19:c0:25:99:c7:05:48:aa:7e:76:cd:1f:56:3b:f7: 51:d7:4d:f6:0a:df:34:60:9f:eb:f4:53:d2:c9:81: 5c:41:ee:2b:cf:77:78:54:8d:e9:fb:b3:d7:b0:bf: ca:5a:15:0a:40:6c:b0:4e:30:22:da:2b:95:27:12: 89:8b:c6:46:74:e4:37:53:80:33:7e:5c:8c:07:c7: 39:b8:d2:5c:a6:04:3b:b1:f1:8c:43:1c:90:47:c8: e0:4c:83:d6:bd:74:07:a2:3f:06:92:82:4d:21:4d: 64:56:c8:ec:07:7b:80:47:5d:ae:fd:9a:ad:cb:17: f9:2f:a1:79:d7:9c:59:e4:34:43:d0:7b:56:98:1d: 56:0b:ab:46:7a:3a:a2:df:76:98:1b:01:a4:aa:47: 47:51:d6:5e:d7:f2:d2:a7:a6:99:31:44:e7:17:30: 72:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7F:CF:5D:40:DE:4D:BB:DF:92:F5:DC:16:27:33:44:C9:2A:08:8F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4745733-2600-4627-8fbe-3ab8ab0b9769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.17.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2f:3c:9d:f0:82:3a:70:97:9c:1f:e8:cb:86:2b:ab:ef:4a:9a: 7f:66:c8:e2:31:55:54:e0:9d:21:33:08:f2:51:4b:95:c9:63: b4:48:d5:7b:cf:bf:aa:75:c7:d5:17:a9:be:80:d7:46:a7:80: 73:23:69:cf:7c:9b:d0:3d:67:b6:c6:84:5c:63:b1:03:49:30: fb:60:f5:76:ef:18:07:37:c4:f0:f6:9f:ec:6b:ab:b6:b0:f7: 74:91:7a:e7:15:a6:38:a5:72:b2:dc:a7:c4:3a:f5:e4:00:d4: a0:16:7a:10:95:a5:15:37:0b:60:24:30:49:1f:91:53:9b:0a: 6c:4e:b6:a1:0e:61:78:ad:88:40:a8:aa:73:f7:4a:66:db:9c: a3:ca:6a:c0:27:ee:c0:bb:1d:f6:a8:08:5a:f7:93:3b:16:f7: 09:30:95:7c:eb:02:41:df:b5:1e:c7:fa:c8:05:bf:91:76:47: 2f:e9:9a:ab:5e:2b:a3:d2:a5:ea:93:22:79:93:ae:8a:d5:8d: 24:85:72:29:f6:74:48:6d:3a:4b:59:d1:7a:a5:83:ce:b1:55: 22:4f:d8:f4:90:64:13:25:ea:ed:4a:04:e6:e4:6b:d2:97:ff: 2c:3b:61:94:88:0f:f1:d6:96:3a:49:b4:3a:6c:f8:05:e8:59: 69:66:49:fa -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUetOhYEbplSyW4BQtYGUh2J9PEpswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE0MDAzMDUzWhcNMjYwNTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiODJlY2Y4YTA4YWY5MjUzMmIyZjFmOWExY2NjZTU3N2Uw ZGRjNzUyYjZiYmE4MDAyMzg0MzY0MDBkMDVmYTVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQZ/aiRpw+R0BSph2gBkqy4XpOLleGAHJijU7VnxcPf2hu z/VqUAJKxMw5Ik0VZwoiBr6LFgcx8KWFUl3hE5bbRBgMLvjb0B4FGvbkKc8O6ROb FIeOR2/rJRnAJZnHBUiqfnbNH1Y791HXTfYK3zRgn+v0U9LJgVxB7ivPd3hUjen7 s9ewv8paFQpAbLBOMCLaK5UnEomLxkZ05DdTgDN+XIwHxzm40lymBDux8YxDHJBH yOBMg9a9dAeiPwaSgk0hTWRWyOwHe4BHXa79mq3LF/kvoXnXnFnkNEPQe1aYHVYL q0Z6OqLfdpgbAaSqR0dR1l7X8tKnppkxROcXMHLZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUmH/PXUDeTbvfkvXcFiczRMkqCI8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y0NzQ1NzMzLTI2MDAtNDYyNy04ZmJlLTNhYjhhYjBiOTc2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAyETANBgkqhkiG9w0BAQsFAAOCAQEALzyd8II6cJecH+jLhiur70qaf2bI 4jFVVOCdITMI8lFLlcljtEjVe8+/qnXH1RepvoDXRqeAcyNpz3yb0D1ntsaEXGOx A0kw+2D1du8YBzfE8Paf7GurtrD3dJF65xWmOKVystynxDr15ADUoBZ6EJWlFTcL YCQwSR+RU5sKbE62oQ5heK2IQKiqc/dKZtuco8pqwCfuwLsd9qgIWveTOxb3CTCV fOsCQd+1Hsf6yAW/kXZHL+maq14ro9Kl6pMieZOuitWNJIVyKfZ0SG06S1nReqWD zrFVIk/Y9JBkEyXq7UoE5uRr0pf/LDthlIgP8daWOkm0Omz4BehZaWZJ+g== -----END CERTIFICATE-----Generated at Sun Mar 1 22:34:13 2026 by rpki-client