$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ad2b65-bee0-4429-a46c-6a261fba811b.roa File: f9ad2b65-bee0-4429-a46c-6a261fba811b.roa (raw, json) Hash identifier: i8HnmAnL+ltKMlglJtJnbFUoYuio+9jW8ORTnz1InGA= Subject key identifier: 65:3B:A1:69:07:8A:1A:B0:BA:7F:95:D9:76:B6:B4:57:1A:D7:CC:C8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A7F03F99EFA4B07325B2AB03AFF56264C40AE7C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ad2b65-bee0-4429-a46c-6a261fba811b.roa Signing time: Sun 15 Feb 2026 00:40:51 +0000 ROA not before: Sun 15 Feb 2026 00:40:51 +0000 ROA not after: Sat 16 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 216.173.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:7f:03:f9:9e:fa:4b:07:32:5b:2a:b0:3a:ff:56:26:4c:40:ae:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 15 00:40:51 2026 GMT Not After : May 16 23:59:59 2026 GMT Subject: serialNumber=c920e3ce1279c1b2c3d9a5db6f2554f8cbf332bafc5adf9479395a6e085ddcd1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:01:b2:ff:9c:14:d4:89:ea:f9:96:c7:cc:d9: d8:ab:7f:d1:45:ce:34:8b:f6:93:a2:90:c0:4f:bb: 1c:f8:91:91:61:2e:d8:00:fc:c5:c8:0d:cf:45:c8: 35:89:98:81:9f:bf:3b:ac:27:0d:70:31:6f:85:37: ca:bd:4a:a7:ad:2f:be:96:9f:c3:57:1b:2d:7c:bf: 22:15:39:30:e0:d5:96:51:82:63:35:b9:e1:88:9f: 52:5c:85:26:4b:ac:a4:22:41:54:74:92:63:4d:e8: 40:cd:5f:24:10:fe:63:e9:08:b8:35:75:7c:22:5d: 28:6f:4d:85:8a:60:af:ff:b7:4e:84:74:63:ed:93: 27:9d:8a:60:cd:46:3a:ae:d8:bd:ad:5c:ba:8b:ad: 61:51:f7:ca:a4:db:3c:65:f9:ac:a5:1b:2d:bc:20: b6:1d:aa:e8:b7:f3:b7:cf:8c:b4:2d:e3:5f:fa:b2: 99:87:1a:02:b1:0c:c9:30:fd:18:37:78:4f:e5:d9: 89:a0:cf:fa:1d:cd:63:f9:5e:82:e1:30:58:a7:76: 29:bc:18:1b:53:05:2b:b4:a4:9b:1a:3b:57:39:a5: 1d:d8:67:0f:bf:ea:03:47:6b:3c:7c:3a:d3:44:18: 98:b2:01:a5:5a:dd:26:f1:20:2f:e9:c0:25:26:31: 4f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3B:A1:69:07:8A:1A:B0:BA:7F:95:D9:76:B6:B4:57:1A:D7:CC:C8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ad2b65-bee0-4429-a46c-6a261fba811b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.173.0.0/18 Signature Algorithm: sha256WithRSAEncryption 3f:b2:b6:eb:f0:13:9c:68:f7:b1:7d:2a:df:8b:73:d2:cc:12: 49:5d:aa:01:57:9e:95:07:fd:1c:d2:e1:6d:2d:7b:fd:41:f8: 29:8e:2e:53:47:23:8b:a1:23:bf:45:3d:52:6a:8d:f4:21:97: 43:30:b4:0d:4e:26:2c:75:43:63:6c:76:19:3b:a9:44:60:02: 5a:ed:81:8c:b3:b7:e6:ef:09:6d:d6:ad:4f:f3:3d:f6:2f:db: f0:7a:b3:66:67:f6:78:63:e8:11:ed:e1:0f:27:1a:2f:ea:59: e8:13:f5:1e:14:3f:4a:b8:6d:1d:28:e4:ae:62:e1:0a:46:6d: dd:e4:90:6a:0d:8c:57:a9:92:df:0a:c2:07:59:29:e5:ff:01: 37:31:06:0c:44:cc:25:6f:50:8e:d0:97:38:e2:01:ad:aa:08: 06:c5:f9:f4:41:74:5b:41:cf:c6:c8:c7:c9:da:86:a8:5d:10: 8e:c8:d5:c9:26:15:18:96:20:6b:b2:c8:5f:70:6b:f8:6a:35: 58:55:ef:c8:7e:71:60:cc:05:aa:8f:a6:63:4e:36:e7:ed:09: 00:7c:d4:b7:f3:d4:fe:c4:3a:3e:db:f1:f5:06:6b:1e:64:c7: f2:7e:05:51:44:a3:d3:d2:d8:d5:e5:84:35:fe:eb:90:30:71: 39:69:3d:61 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWn8D+Z76SwcyWyqwOv9WJkxArnwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE1MDA0MDUxWhcNMjYwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjOTIwZTNjZTEyNzljMWIyYzNkOWE1ZGI2ZjI1NTRmOGNi ZjMzMmJhZmM1YWRmOTQ3OTM5NWE2ZTA4NWRkY2QxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpAbL/nBTUier5lsfM2dirf9FFzjSL9pOikMBPuxz4kZFh LtgA/MXIDc9FyDWJmIGfvzusJw1wMW+FN8q9SqetL76Wn8NXGy18vyIVOTDg1ZZR gmM1ueGIn1JchSZLrKQiQVR0kmNN6EDNXyQQ/mPpCLg1dXwiXShvTYWKYK//t06E dGPtkyedimDNRjqu2L2tXLqLrWFR98qk2zxl+aylGy28ILYdqui387fPjLQt41/6 spmHGgKxDMkw/Rg3eE/l2Ymgz/odzWP5XoLhMFindim8GBtTBSu0pJsaO1c5pR3Y Zw+/6gNHazx8OtNEGJiyAaVa3SbxIC/pwCUmMU+PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZTuhaQeKGrC6f5XZdra0VxrXzMgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y5YWQyYjY1LWJlZTAtNDQyOS1hNDZjLTZhMjYxZmJhODExYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbYrQAwDQYJKoZIhvcNAQELBQADggEBAD+ytuvwE5xo97F9Kt+Lc9LMEkld qgFXnpUH/RzS4W0te/1B+CmOLlNHI4uhI79FPVJqjfQhl0MwtA1OJix1Q2Nsdhk7 qURgAlrtgYyzt+bvCW3WrU/zPfYv2/B6s2Zn9nhj6BHt4Q8nGi/qWegT9R4UP0q4 bR0o5K5i4QpGbd3kkGoNjFepkt8KwgdZKeX/ATcxBgxEzCVvUI7QlzjiAa2qCAbF +fRBdFtBz8bIx8nahqhdEI7I1ckmFRiWIGuyyF9wa/hqNVhV78h+cWDMBaqPpmNO NuftCQB81Lfz1P7EOj7b8fUGax5kx/J+BVFEo9PS2NXlhDX+65AwcTlpPWE= -----END CERTIFICATE-----Generated at Sun Mar 1 22:24:36 2026 by rpki-client