$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff28ff32-8589-40e1-8f07-cacdbffd05b8.roa File: ff28ff32-8589-40e1-8f07-cacdbffd05b8.roa (raw, json) Hash identifier: cUo/Z9X5EL8/0u8S+jUoNOuFlzA+/nqVIRW2Id34Iec= Subject key identifier: B4:AD:8A:11:51:10:D4:3E:C9:FE:9B:98:2A:FF:EF:0E:0E:61:3E:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4EC7898DF6CE4BF3E8B82300B165EA9FFD49366E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff28ff32-8589-40e1-8f07-cacdbffd05b8.roa Signing time: Sun 15 Feb 2026 00:21:03 +0000 ROA not before: Sun 15 Feb 2026 00:21:03 +0000 ROA not after: Sat 16 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 159.20.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c7:89:8d:f6:ce:4b:f3:e8:b8:23:00:b1:65:ea:9f:fd:49:36:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 15 00:21:03 2026 GMT Not After : May 16 23:59:59 2026 GMT Subject: serialNumber=b86e19f4bf408fcfe1dab5e4d0ad6b1188ad153f7ac33cc5c1b556bf8fdb0ed8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:18:16:ab:23:a2:a6:bf:25:df:54:d8:af:b1: da:ba:77:5b:e6:e8:f4:21:3c:c2:fb:0c:a3:28:c2: 58:12:11:f1:f7:62:df:62:d9:0b:5b:4f:60:c8:ff: fb:f4:ce:99:3b:92:bf:98:7e:7e:bf:f0:06:fb:be: 75:ac:4e:33:7a:89:f8:14:ea:22:f0:3c:f1:b7:19: 98:fe:fc:7f:f2:14:52:51:9a:c5:fd:4a:c9:9c:20: 02:2e:1e:a7:f6:1b:49:42:e9:11:3c:e4:78:e3:3d: b2:ce:72:02:7a:da:66:c3:93:74:a8:bd:92:20:60: 36:ab:14:86:9f:fe:67:e1:2e:93:da:d7:28:29:4a: 82:49:d5:92:5c:85:98:3b:d1:e2:a2:58:a0:a5:2f: f2:a2:07:72:26:76:a1:9a:96:24:90:eb:15:be:2e: 15:d1:af:17:64:21:ab:33:ed:5e:35:10:4e:b4:2b: 86:8d:4d:a9:c5:47:9f:7c:7e:91:21:b7:2f:7a:6e: 61:6e:25:07:33:ad:1f:3f:de:3c:94:5b:5a:79:d4: b1:6c:26:81:ab:03:99:35:95:fb:6d:4b:e6:88:a1: 5b:f6:0f:ce:83:bf:53:10:a8:e2:27:0e:1c:49:a6: 8d:3f:29:00:09:06:fc:ed:2e:b7:b9:9c:bf:c1:72: 5e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AD:8A:11:51:10:D4:3E:C9:FE:9B:98:2A:FF:EF:0E:0E:61:3E:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff28ff32-8589-40e1-8f07-cacdbffd05b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.20.128.0/17 Signature Algorithm: sha256WithRSAEncryption 22:e0:73:02:a6:e2:1c:24:8c:20:66:c8:cf:32:11:0a:dd:d9: 13:53:a9:d2:24:5e:95:cf:50:e5:de:4e:fa:6c:50:c2:9c:c3: f3:84:41:b6:bf:44:c4:c4:b9:29:5a:a6:32:4f:f7:54:d4:68: f2:93:01:58:5a:8a:fa:23:29:2f:d8:f5:ef:15:f7:f7:e8:d2: 65:b1:8c:08:f1:27:a6:4b:12:c7:cb:67:50:15:65:7e:1a:2b: 21:ae:51:be:00:59:eb:64:1d:1e:7e:cc:87:e9:7b:42:9c:71: 7b:ae:97:ee:b5:44:9c:b1:c6:a8:57:11:88:0d:73:92:54:68: 65:d4:0c:6d:49:f3:04:27:05:41:2c:ae:d7:13:02:f8:dc:5c: 0a:4b:92:97:51:de:ba:06:51:a4:14:7a:27:d9:0a:ba:62:a0: 6e:bf:0b:29:67:d1:a2:ef:36:b2:02:19:88:4f:0f:bb:af:9c: b2:1f:74:6f:7d:60:70:27:a4:ed:59:68:6a:51:66:0e:d5:87: 79:25:a8:17:11:cf:12:7a:7e:a8:f8:00:26:18:b0:5a:16:4e: 4e:9f:7c:18:9e:2a:79:45:e3:46:06:46:db:10:bc:7f:48:24: 30:52:10:3d:f4:6d:d2:e0:a4:2b:02:71:00:bf:1d:5e:bb:b5: 99:6b:98:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTseJjfbOS/PouCMAsWXqn/1JNm4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE1MDAyMTAzWhcNMjYwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiODZlMTlmNGJmNDA4ZmNmZTFkYWI1ZTRkMGFkNmIxMTg4 YWQxNTNmN2FjMzNjYzVjMWI1NTZiZjhmZGIwZWQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpGBarI6KmvyXfVNivsdq6d1vm6PQhPML7DKMowlgSEfH3 Yt9i2QtbT2DI//v0zpk7kr+Yfn6/8Ab7vnWsTjN6ifgU6iLwPPG3GZj+/H/yFFJR msX9SsmcIAIuHqf2G0lC6RE85HjjPbLOcgJ62mbDk3SovZIgYDarFIaf/mfhLpPa 1ygpSoJJ1ZJchZg70eKiWKClL/KiB3ImdqGaliSQ6xW+LhXRrxdkIasz7V41EE60 K4aNTanFR598fpEhty96bmFuJQczrR8/3jyUW1p51LFsJoGrA5k1lfttS+aIoVv2 D86Dv1MQqOInDhxJpo0/KQAJBvztLre5nL/Bcl7RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtK2KEVEQ1D7J/puYKv/vDg5hPpEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZmMjhmZjMyLTg1ODktNDBlMS04ZjA3LWNhY2RiZmZkMDViOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAefFIAwDQYJKoZIhvcNAQELBQADggEBACLgcwKm4hwkjCBmyM8yEQrd2RNT qdIkXpXPUOXeTvpsUMKcw/OEQba/RMTEuSlapjJP91TUaPKTAVhaivojKS/Y9e8V 9/fo0mWxjAjxJ6ZLEsfLZ1AVZX4aKyGuUb4AWetkHR5+zIfpe0KccXuul+61RJyx xqhXEYgNc5JUaGXUDG1J8wQnBUEsrtcTAvjcXApLkpdR3roGUaQUeifZCrpioG6/ Cyln0aLvNrICGYhPD7uvnLIfdG99YHAnpO1ZaGpRZg7Vh3klqBcRzxJ6fqj4ACYY sFoWTk6ffBieKnlF40YGRtsQvH9IJDBSED30bdLgpCsCcQC/HV67tZlrmIQ= -----END CERTIFICATE-----Generated at Sun Mar 1 22:18:08 2026 by rpki-client