$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4eec266-95a0-4bf6-a45b-0b2f551c4598.roa File: f4eec266-95a0-4bf6-a45b-0b2f551c4598.roa (raw, json) Hash identifier: 5eB/lsLSzNRXotHAgfQw5yjNiN8Jp0yG6ufvK5wXA0s= Subject key identifier: B1:FC:64:58:8C:B4:82:F1:C4:A6:89:7D:3D:6D:4F:2F:39:48:A5:22 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4D314553D66FEDFE805328E2E036E86A6E4F991A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4eec266-95a0-4bf6-a45b-0b2f551c4598.roa Signing time: Tue 17 Feb 2026 00:20:08 +0000 ROA not before: Tue 17 Feb 2026 00:20:08 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 75.47.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:31:45:53:d6:6f:ed:fe:80:53:28:e2:e0:36:e8:6a:6e:4f:99:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 17 00:20:08 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=f40854611b773b76cd23c526d412dc8123dec36f8fac5e44c2bf01a6239d5604, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cf:52:25:01:d0:19:8a:f3:b4:8b:09:bb:12: 3b:45:84:32:0a:a8:f3:4f:dc:8b:06:9e:fb:71:81: 34:44:42:27:8b:be:06:1a:4e:88:70:f9:6f:6c:f8: a5:e3:35:e8:25:b4:c4:31:cc:3e:5f:1d:31:25:30: 76:28:29:fa:c3:98:c7:5a:1e:ea:33:24:4d:6c:92: 7a:a7:51:ac:10:53:ad:2c:15:d8:fa:dd:0d:fc:0e: e3:3e:3e:6b:44:1c:62:18:99:62:e7:13:0c:40:73: 27:99:00:6d:e7:ae:55:ce:3b:9e:68:c6:c2:4d:73: e2:cc:66:b0:6a:28:f9:29:64:b6:c9:20:47:9f:ce: af:f0:9d:d5:15:7a:9f:ed:10:e6:8e:b2:ca:c2:28: 7e:07:a9:24:6c:89:1d:97:e2:9b:15:37:40:b6:2d: af:e9:a3:1d:27:37:db:74:bb:fe:8c:68:c1:d0:ae: aa:8c:0e:79:09:3b:7b:86:3b:ee:83:cd:3c:fc:6f: b1:e0:bb:df:c4:3e:bd:6e:0a:53:9e:ff:77:4c:22: cc:f5:39:63:d4:ff:c6:43:48:3b:4b:67:79:b6:cb: 24:72:26:b1:4b:8e:57:22:ff:42:ad:63:8f:17:51: d8:f8:7e:fa:85:64:0f:4e:7f:f6:d2:16:3d:34:1f: b1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FC:64:58:8C:B4:82:F1:C4:A6:89:7D:3D:6D:4F:2F:39:48:A5:22 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4eec266-95a0-4bf6-a45b-0b2f551c4598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 75.47.32.0/19 Signature Algorithm: sha256WithRSAEncryption 57:a3:63:0e:cd:e5:6c:12:23:11:a3:14:d6:e4:ce:11:45:f1: 7c:c7:da:d6:4e:f7:5f:22:45:15:d4:70:02:90:9b:43:e4:79: be:39:0d:9b:f0:d2:f3:13:4e:3f:2f:55:e9:cd:3b:5f:36:d0: 7a:ee:88:b1:f7:f2:70:f1:a4:41:02:f2:e5:e8:15:96:63:2e: 50:0c:9e:54:7c:0a:53:c0:0e:9d:1d:38:6c:b7:07:72:28:4c: 88:9d:61:ea:85:8c:e2:4b:b8:b6:a4:42:b1:50:7d:97:ce:ea: 8c:d0:36:33:17:2a:63:4c:26:36:de:60:87:d6:3a:f2:06:c6: 60:83:8e:95:ca:cf:02:57:a3:6a:a5:59:0c:45:18:78:1d:c3: d3:13:cb:77:58:ee:9d:b8:72:cb:55:76:3a:eb:20:9d:25:f5: 1b:c5:a5:cd:aa:c7:2e:26:66:40:f1:af:35:57:f4:dc:e1:44: 1d:5b:07:08:d3:4f:af:c3:3c:0d:43:55:c2:9d:4d:70:b8:70: f0:ea:d4:c0:17:25:29:ea:cb:4a:68:bc:55:41:28:d1:e1:e2: a5:90:02:83:c3:0c:84:1a:a5:ca:60:d9:67:1c:19:00:3e:52: 36:c9:65:d5:9b:fa:d6:db:0c:f9:36:82:b6:e4:7a:af:6f:48: 2f:cc:65:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTTFFU9Zv7f6AUyji4Dboam5PmRowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE3MDAyMDA4WhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNDA4NTQ2MTFiNzczYjc2Y2QyM2M1MjZkNDEyZGM4MTIz ZGVjMzZmOGZhYzVlNDRjMmJmMDFhNjIzOWQ1NjA0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnz1IlAdAZivO0iwm7EjtFhDIKqPNP3IsGnvtxgTREQieL vgYaTohw+W9s+KXjNegltMQxzD5fHTElMHYoKfrDmMdaHuozJE1sknqnUawQU60s Fdj63Q38DuM+PmtEHGIYmWLnEwxAcyeZAG3nrlXOO55oxsJNc+LMZrBqKPkpZLbJ IEefzq/wndUVep/tEOaOssrCKH4HqSRsiR2X4psVN0C2La/pox0nN9t0u/6MaMHQ rqqMDnkJO3uGO+6DzTz8b7Hgu9/EPr1uClOe/3dMIsz1OWPU/8ZDSDtLZ3m2yyRy JrFLjlci/0KtY48XUdj4fvqFZA9Of/bSFj00H7GjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsfxkWIy0gvHEpol9PW1PLzlIpSIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y0ZWVjMjY2LTk1YTAtNGJmNi1hNDViLTBiMmY1NTFjNDU5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVLLyAwDQYJKoZIhvcNAQELBQADggEBAFejYw7N5WwSIxGjFNbkzhFF8XzH 2tZO918iRRXUcAKQm0Pkeb45DZvw0vMTTj8vVenNO1820HruiLH38nDxpEEC8uXo FZZjLlAMnlR8ClPADp0dOGy3B3IoTIidYeqFjOJLuLakQrFQfZfO6ozQNjMXKmNM JjbeYIfWOvIGxmCDjpXKzwJXo2qlWQxFGHgdw9MTy3dY7p24cstVdjrrIJ0l9RvF pc2qxy4mZkDxrzVX9NzhRB1bBwjTT6/DPA1DVcKdTXC4cPDq1MAXJSnqy0povFVB KNHh4qWQAoPDDIQapcpg2WccGQA+UjbJZdWb+tbbDPk2grbkeq9vSC/MZTE= -----END CERTIFICATE-----Generated at Sun Mar 1 22:17:11 2026 by rpki-client