$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f68b3dbc-221f-4842-8c66-1b57186b99bd.roa File: f68b3dbc-221f-4842-8c66-1b57186b99bd.roa (raw, json) Hash identifier: PI1/vU4cUGyB0mJMD2tKqzYhs9Cm7ZKq5Nqyb/Jkkwc= Subject key identifier: D8:D7:54:92:83:54:2F:F8:6B:22:88:51:FA:4C:4B:F3:01:34:4B:50 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E400A783B09F4D903532C72BAF267D04694935D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f68b3dbc-221f-4842-8c66-1b57186b99bd.roa Signing time: Wed 25 Feb 2026 01:10:06 +0000 ROA not before: Wed 25 Feb 2026 01:10:06 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 54.26.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:40:0a:78:3b:09:f4:d9:03:53:2c:72:ba:f2:67:d0:46:94:93:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 01:10:06 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=10c81c54ef560a44f86fd0d30a07185c4c70db43908fbdb5374bca9f8a5c1953, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:96:f6:01:75:ce:6d:be:11:b1:96:96:5b:82: 8f:2b:23:0f:50:da:53:d4:0f:5e:dd:be:8a:11:13: ed:aa:55:76:bb:95:5d:ca:84:9c:47:4a:95:6d:b6: 25:cd:17:b8:b6:5e:dd:71:0e:35:7b:63:2c:83:e8: 7d:e6:e8:f9:fe:78:56:85:6f:1b:f2:b6:4d:d2:86: 25:2f:58:d4:58:fe:68:7a:12:01:82:bf:27:ec:28: fd:bd:3e:72:63:01:72:8c:d4:38:cd:47:9d:b9:82: c5:00:68:18:80:7f:df:a7:fc:00:31:72:a4:32:24: 28:9c:fe:57:80:5a:7b:0c:5d:bf:37:d6:c7:e4:3b: b1:f0:f0:cc:39:9a:eb:60:9f:6e:82:51:d2:ee:f5: 96:af:7f:e3:bb:3a:65:65:56:ed:5f:82:be:48:4c: a8:7c:78:5e:b6:e2:00:1c:a1:0a:d3:b0:5a:69:98: 5a:07:93:96:e9:89:f7:97:16:8e:3b:0c:e6:bb:87: f0:67:07:33:d0:80:a7:60:ba:ca:b8:63:ca:70:f2: 29:db:21:1a:35:12:53:86:71:41:dc:5a:c3:97:3a: f3:c3:1a:b3:62:34:3e:29:b2:ad:fe:0a:75:c2:c3: fb:aa:95:6a:5f:d6:24:1d:50:c4:0f:fb:ff:0f:56: bf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D7:54:92:83:54:2F:F8:6B:22:88:51:FA:4C:4B:F3:01:34:4B:50 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f68b3dbc-221f-4842-8c66-1b57186b99bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.26.166.0/24 Signature Algorithm: sha256WithRSAEncryption c6:26:41:81:42:80:06:b4:83:94:5d:7f:d8:cf:ca:62:40:59: 2c:9f:9b:77:c4:18:5f:2d:4d:85:6a:64:00:13:04:21:d8:78: af:08:9b:e1:7d:af:99:47:6d:bc:91:8a:78:95:30:6a:e6:4c: 67:40:76:34:ca:49:df:a2:d0:ab:47:b6:14:3d:8b:1a:7d:f6: 57:09:22:00:38:4c:08:88:84:72:14:73:59:e3:3a:89:95:95: 19:ed:50:69:cb:76:90:90:da:27:eb:d9:81:b5:81:1c:85:0b: 74:99:6f:7c:1d:5b:ca:07:96:b3:bd:e2:c2:02:46:38:e8:87: 89:65:d7:86:75:4d:4f:d6:32:4a:c3:e2:da:ef:35:8b:1b:56: 67:b4:bc:af:28:6f:2f:33:03:9e:af:66:a1:a8:f3:6c:72:f8: 8c:03:92:c3:68:8f:4b:7c:6b:ee:4e:d2:84:1c:fc:8d:5a:07: 18:c2:45:c7:a0:23:cc:2d:94:8d:73:d4:41:08:65:33:84:ff: e1:aa:5f:45:c4:d3:ee:db:ce:d0:13:f4:44:fd:5e:5e:76:1f: 7a:6b:82:dd:70:0e:9f:e7:5d:e6:f6:6e:be:17:fc:85:2f:68: 9e:2b:fe:19:cc:8d:42:ba:24:42:aa:13:e0:7c:bf:58:12:15: 76:d1:86:f4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULkAKeDsJ9NkDUyxyuvJn0EaUk10wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDExMDA2WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMGM4MWM1NGVmNTYwYTQ0Zjg2ZmQwZDMwYTA3MTg1YzRj NzBkYjQzOTA4ZmJkYjUzNzRiY2E5ZjhhNWMxOTUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCslvYBdc5tvhGxlpZbgo8rIw9Q2lPUD17dvooRE+2qVXa7 lV3KhJxHSpVttiXNF7i2Xt1xDjV7YyyD6H3m6Pn+eFaFbxvytk3ShiUvWNRY/mh6 EgGCvyfsKP29PnJjAXKM1DjNR525gsUAaBiAf9+n/AAxcqQyJCic/leAWnsMXb83 1sfkO7Hw8Mw5mutgn26CUdLu9Zavf+O7OmVlVu1fgr5ITKh8eF624gAcoQrTsFpp mFoHk5bpifeXFo47DOa7h/BnBzPQgKdgusq4Y8pw8inbIRo1ElOGcUHcWsOXOvPD GrNiND4psq3+CnXCw/uqlWpf1iQdUMQP+/8PVr/vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2NdUkoNUL/hrIohR+kxL8wE0S1AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y2OGIzZGJjLTIyMWYtNDg0Mi04YzY2LTFiNTcxODZiOTliZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2GqYwDQYJKoZIhvcNAQELBQADggEBAMYmQYFCgAa0g5Rdf9jPymJAWSyf m3fEGF8tTYVqZAATBCHYeK8Im+F9r5lHbbyRiniVMGrmTGdAdjTKSd+i0KtHthQ9 ixp99lcJIgA4TAiIhHIUc1njOomVlRntUGnLdpCQ2ifr2YG1gRyFC3SZb3wdW8oH lrO94sICRjjoh4ll14Z1TU/WMkrD4trvNYsbVme0vK8oby8zA56vZqGo82xy+IwD ksNoj0t8a+5O0oQc/I1aBxjCRcegI8wtlI1z1EEIZTOE/+GqX0XE0+7bztAT9ET9 Xl52H3prgt1wDp/nXeb2br4X/IUvaJ4r/hnMjUK6JEKqE+B8v1gSFXbRhvQ= -----END CERTIFICATE-----Generated at Sun Mar 1 22:28:30 2026 by rpki-client