$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f648d5db-f067-4e11-bd60-faef2d5a5e37.roa File: f648d5db-f067-4e11-bd60-faef2d5a5e37.roa (raw, json) Hash identifier: T5Rd02dpx394wdFUIA6BAJ9RlHZKreKc3hOK1g+ofhA= Subject key identifier: 62:89:53:24:26:5C:F7:8D:80:92:A6:23:F0:49:25:50:28:2B:7D:F1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1E7F92793BC2C09EDE52DE14A76E070A310BBE18 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f648d5db-f067-4e11-bd60-faef2d5a5e37.roa Signing time: Mon 23 Feb 2026 00:00:41 +0000 ROA not before: Mon 23 Feb 2026 00:00:41 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 184.32.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:7f:92:79:3b:c2:c0:9e:de:52:de:14:a7:6e:07:0a:31:0b:be:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 23 00:00:41 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=f29502a4590d5e1a0e324eaf57c11a9d80488bee86d884b640f39dffb65d810b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0a:8e:e3:71:b2:fd:a2:da:bb:a4:5d:f2:03: d2:00:bc:af:d8:33:64:ce:2c:24:97:6e:fc:bb:c4: c8:01:1b:4f:38:58:ad:f3:03:2a:2c:f0:11:98:44: e9:18:ed:84:7a:4e:81:11:e0:f9:4e:71:0b:9a:dd: 0e:1e:b5:e1:e5:2c:3c:7f:cf:ed:57:84:9d:2c:f9: 50:32:ee:b4:c6:9f:ea:63:0d:d0:e9:7f:97:44:c3: 8f:dc:b8:0c:47:06:e1:24:f6:4c:48:7b:c1:f5:4d: ab:da:87:76:db:52:e7:cf:03:2b:f9:28:31:30:44: b1:6a:5f:70:5e:50:2d:99:a5:22:cb:99:cc:d1:f8: 79:bb:eb:0f:ed:51:bf:fb:41:65:b3:11:d0:77:3d: 18:6d:85:38:65:33:40:a8:c5:3b:ab:d9:d6:2e:a8: c2:66:57:9a:d5:56:70:87:5c:ad:1a:43:11:a0:1b: 5e:2b:a5:55:a9:01:31:c2:c1:31:c3:ee:43:ff:e0: 66:22:be:07:1b:d4:03:90:d0:e1:94:02:a3:af:4e: e8:93:82:d6:34:cb:97:bc:4e:61:25:d1:63:88:24: 8e:a5:a2:2f:29:72:4d:ee:5d:45:50:66:ce:f2:e0: 38:0b:8f:2a:9b:49:ff:33:70:b4:ac:77:b5:e3:8c: 21:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:89:53:24:26:5C:F7:8D:80:92:A6:23:F0:49:25:50:28:2B:7D:F1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f648d5db-f067-4e11-bd60-faef2d5a5e37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.32.0.0/12 Signature Algorithm: sha256WithRSAEncryption 32:ba:73:5b:a9:a0:68:c9:2e:9e:31:f7:8c:c3:51:d3:de:1c: c0:9a:12:3c:9f:9e:9b:3d:17:f8:ed:92:c1:6f:71:9a:bc:dc: 5b:e1:38:fe:6f:bf:bf:76:91:9e:ad:fb:5c:96:67:17:b4:d2: 46:b0:80:0c:cc:70:1b:a5:85:74:2b:57:51:25:6f:54:8b:20: 51:fe:8c:7d:87:5b:04:f6:87:45:80:bb:a2:d7:da:23:4a:f5: 20:cb:48:4f:90:0d:fe:2a:c0:01:7e:0b:8f:b0:93:44:d8:b6: 41:94:08:54:7f:a6:32:7f:39:2f:06:0b:2d:29:15:71:06:30: df:47:0e:3a:1d:e6:54:7d:fc:bb:87:80:55:a3:23:fc:d3:0f: c1:90:63:83:75:6c:d0:94:83:1c:6e:19:78:66:fe:ef:84:2b: 4e:97:d2:ce:0f:92:9d:2a:c5:fa:a7:1b:ca:12:53:c7:2c:4a: 75:ac:32:8e:4b:39:6b:0a:da:75:25:47:57:a2:bb:cd:03:b1: 76:05:71:fe:a4:74:0e:78:a5:45:45:03:0d:9b:06:af:b6:5e: 02:78:1a:bd:5c:60:e2:6e:ad:dc:30:f5:b3:bb:9c:a9:cd:ef: b6:a0:3b:44:21:40:4d:c7:22:c8:df:ff:dd:a4:ff:9f:c9:50: 59:d4:1f:49 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHn+SeTvCwJ7eUt4Up24HCjELvhgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIzMDAwMDQxWhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMjk1MDJhNDU5MGQ1ZTFhMGUzMjRlYWY1N2MxMWE5ZDgw NDg4YmVlODZkODg0YjY0MGYzOWRmZmI2NWQ4MTBiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHCo7jcbL9otq7pF3yA9IAvK/YM2TOLCSXbvy7xMgBG084 WK3zAyos8BGYROkY7YR6ToER4PlOcQua3Q4eteHlLDx/z+1XhJ0s+VAy7rTGn+pj DdDpf5dEw4/cuAxHBuEk9kxIe8H1Tavah3bbUufPAyv5KDEwRLFqX3BeUC2ZpSLL mczR+Hm76w/tUb/7QWWzEdB3PRhthThlM0CoxTur2dYuqMJmV5rVVnCHXK0aQxGg G14rpVWpATHCwTHD7kP/4GYivgcb1AOQ0OGUAqOvTuiTgtY0y5e8TmEl0WOIJI6l oi8pck3uXUVQZs7y4DgLjyqbSf8zcLSsd7XjjCHxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUYolTJCZc942AkqYj8EklUCgrffEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y2NDhkNWRiLWYwNjctNGUxMS1iZDYwLWZhZWYyZDVhNWUzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwS4IDANBgkqhkiG9w0BAQsFAAOCAQEAMrpzW6mgaMkunjH3jMNR094cwJoS PJ+emz0X+O2SwW9xmrzcW+E4/m+/v3aRnq37XJZnF7TSRrCADMxwG6WFdCtXUSVv VIsgUf6MfYdbBPaHRYC7otfaI0r1IMtIT5AN/irAAX4Lj7CTRNi2QZQIVH+mMn85 LwYLLSkVcQYw30cOOh3mVH38u4eAVaMj/NMPwZBjg3Vs0JSDHG4ZeGb+74QrTpfS zg+SnSrF+qcbyhJTxyxKdawyjks5awradSVHV6K7zQOxdgVx/qR0DnilRUUDDZsG r7ZeAngavVxg4m6t3DD1s7ucqc3vtqA7RCFATcciyN//3aT/n8lQWdQfSQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:17:39 2026 by rpki-client