$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5e1c7c6-f48f-4f18-ac34-c78f1650e60d.roa File: f5e1c7c6-f48f-4f18-ac34-c78f1650e60d.roa (raw, json) Hash identifier: DsYMWO7f0tNGankU/4ncDw+eCynNP4djluVaK8w6snE= Subject key identifier: 39:4F:46:49:B3:F2:57:8E:2B:7D:14:14:BC:21:DD:A4:99:A5:E7:89 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11A85A6359801F7504E1DE3595C52E3F39F04CD2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5e1c7c6-f48f-4f18-ac34-c78f1650e60d.roa Signing time: Sat 28 Feb 2026 00:30:09 +0000 ROA not before: Sat 28 Feb 2026 00:30:09 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 16.56.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a8:5a:63:59:80:1f:75:04:e1:de:35:95:c5:2e:3f:39:f0:4c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 28 00:30:09 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=eef76973ae9a5714d302d1f5b3886fc068b2a0e543409ce6426b53ba2633b86c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:85:ab:62:6a:e6:d8:19:1c:d0:f5:f7:8c:72: e0:3e:89:7f:a7:b7:84:da:3f:d6:c7:50:11:ab:1c: 97:2d:2d:3a:28:ae:de:26:60:b1:67:13:77:cb:75: d1:ae:ed:7f:66:ba:e1:54:28:3a:ee:f1:01:96:da: e8:ca:a6:c6:e1:4e:8e:06:b8:11:02:b6:ec:c2:8f: 7e:38:69:76:d5:bd:31:86:89:08:3f:b2:d1:2c:04: 4d:43:43:fa:5c:1f:a7:34:93:e1:c1:bc:91:62:57: 9a:d5:80:b6:62:91:38:87:17:5b:e9:ec:66:57:0b: ec:e1:f9:48:65:b0:b0:4d:22:f9:86:e4:2e:db:aa: 7f:b4:bd:e8:20:a7:61:28:83:b0:43:74:26:2e:e7: 01:f6:fa:75:5e:2c:7d:da:bd:88:1b:50:97:4c:6c: 0d:35:84:86:f2:48:fd:cd:a3:0f:95:bd:f4:27:89: 59:e5:ec:49:1c:3f:c0:61:43:4e:2c:9b:37:51:47: b5:26:17:41:11:af:d5:92:40:3a:70:d9:9b:bb:1f: 3c:82:af:49:69:7d:84:39:47:5f:7d:93:dd:33:c0: 23:39:d1:a7:17:b4:bd:90:96:4a:8d:16:1c:66:cd: ac:79:d8:81:9a:83:04:d2:a8:f0:96:25:4b:5b:19: 06:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4F:46:49:B3:F2:57:8E:2B:7D:14:14:BC:21:DD:A4:99:A5:E7:89 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5e1c7c6-f48f-4f18-ac34-c78f1650e60d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.56.192.0/18 Signature Algorithm: sha256WithRSAEncryption 51:09:ea:f0:fe:aa:d1:e0:2b:26:06:c7:a9:b8:cc:58:e8:1c: b7:07:b1:89:f6:10:10:db:57:15:b6:f3:74:be:71:6a:59:93: 76:61:ef:1d:0b:c2:41:6b:02:16:fa:fa:5e:2e:7c:4a:33:0c: f4:e2:d8:78:e2:7b:2f:67:df:c6:19:94:0d:70:54:e8:1c:29: a8:27:f1:fb:ad:1d:a5:41:fe:b0:cd:5b:3c:a6:1d:cb:20:48: 58:85:bb:9d:ad:06:3a:fd:73:f5:14:5c:9b:82:11:6a:03:05: 38:94:71:7d:8e:51:22:dc:6a:99:56:9b:6f:71:2b:ed:77:dd: 37:b7:ba:e9:be:3e:0a:24:6c:af:99:0f:e0:f2:93:b1:b7:f2: da:98:04:f3:86:ec:08:06:55:ef:d8:cd:b1:18:1d:af:9c:21: 60:0f:96:c4:f0:d5:8d:80:f9:7b:96:60:70:35:d0:fd:1f:3f: 2f:45:d9:10:f9:70:48:b1:ec:2b:0f:29:49:1e:39:af:42:0b: 50:d1:52:2f:5e:b5:fb:42:0b:f7:34:64:18:12:ad:17:94:83: f5:29:d5:1b:38:7a:4c:fc:2d:5b:95:90:70:77:fe:7a:92:9b: af:df:72:9c:a7:84:65:46:38:2c:35:61:03:df:d2:75:3f:c8: 62:26:cf:6e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEahaY1mAH3UE4d41lcUuPznwTNIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI4MDAzMDA5WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZWY3Njk3M2FlOWE1NzE0ZDMwMmQxZjViMzg4NmZjMDY4 YjJhMGU1NDM0MDljZTY0MjZiNTNiYTI2MzNiODZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYhatiaubYGRzQ9feMcuA+iX+nt4TaP9bHUBGrHJctLToo rt4mYLFnE3fLddGu7X9muuFUKDru8QGW2ujKpsbhTo4GuBECtuzCj344aXbVvTGG iQg/stEsBE1DQ/pcH6c0k+HBvJFiV5rVgLZikTiHF1vp7GZXC+zh+UhlsLBNIvmG 5C7bqn+0veggp2Eog7BDdCYu5wH2+nVeLH3avYgbUJdMbA01hIbySP3Now+VvfQn iVnl7EkcP8BhQ04smzdRR7UmF0ERr9WSQDpw2Zu7HzyCr0lpfYQ5R199k90zwCM5 0acXtL2QlkqNFhxmzax52IGagwTSqPCWJUtbGQalAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOU9GSbPyV44rfRQUvCHdpJml54kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y1ZTFjN2M2LWY0OGYtNGYxOC1hYzM0LWM3OGYxNjUwZTYwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYQOMAwDQYJKoZIhvcNAQELBQADggEBAFEJ6vD+qtHgKyYGx6m4zFjoHLcH sYn2EBDbVxW283S+cWpZk3Zh7x0LwkFrAhb6+l4ufEozDPTi2Hjiey9n38YZlA1w VOgcKagn8futHaVB/rDNWzymHcsgSFiFu52tBjr9c/UUXJuCEWoDBTiUcX2OUSLc aplWm29xK+133Te3uum+PgokbK+ZD+Dyk7G38tqYBPOG7AgGVe/YzbEYHa+cIWAP lsTw1Y2A+XuWYHA10P0fPy9F2RD5cEix7CsPKUkeOa9CC1DRUi9etftCC/c0ZBgS rReUg/Up1Rs4ekz8LVuVkHB3/nqSm6/fcpynhGVGOCw1YQPf0nU/yGImz24= -----END CERTIFICATE-----Generated at Mon Mar 2 05:52:01 2026 by rpki-client