$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa File: aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa (raw, json) Hash identifier: 49K52nq8OKAkmwHKgLmIj+CbxHqQ+ZDwdNSRKO99lJs= Subject key identifier: D8:33:40:BE:F6:E5:80:5D:1E:EA:78:58:3B:05:C0:47:D8:D6:31:A1 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 5950D92A062D52680ABDCFBA08202FF4FE97DC9E Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa Signing time: Wed 25 Feb 2026 00:10:11 +0000 ROA not before: Wed 25 Feb 2026 00:10:11 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 198.41.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:50:d9:2a:06:2d:52:68:0a:bd:cf:ba:08:20:2f:f4:fe:97:dc:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Feb 25 00:10:11 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=0d143f6e29efd1ea7d496ef3cb67caef18972e1fefaac77fb006be02d19eed1d, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3a:e5:10:28:6f:f1:3f:8a:2b:a3:66:47:c2: 17:b4:79:5d:44:1b:10:00:40:9a:4c:fc:d7:14:7b: de:fc:a1:26:3c:a5:f0:c2:35:4e:88:9c:18:c7:0e: 05:d7:fc:12:92:e1:e9:35:1d:d8:c4:b3:ad:56:a3: db:33:f9:6d:7b:24:ea:28:66:fa:d7:b7:aa:8d:57: b1:0e:31:a0:69:ef:a5:7a:74:6e:35:ec:53:7c:5a: 6c:c2:3b:ac:34:0c:66:a3:8b:c8:93:83:e1:1d:d2: 6a:53:f2:5f:8b:2a:7d:ca:53:b2:ef:45:44:5f:a1: 66:19:8d:f8:4b:ae:8b:78:9d:8b:f8:9a:b7:d1:c2: bc:60:1c:f9:b6:ee:9d:a8:65:62:84:0f:ab:51:bd: 30:07:cc:b6:46:3f:f6:b3:06:5f:df:0a:0a:da:dd: e9:ae:fc:1d:98:54:b3:f6:b3:6f:ff:34:80:36:7d: 78:ca:45:91:38:bf:8b:de:12:91:05:55:d7:7e:fd: 0f:69:d3:91:e1:51:e4:dc:45:bf:18:ab:ce:e8:bf: 82:f1:bd:14:0d:d3:04:3d:f9:88:c1:a3:1c:10:f0: 5b:29:ae:14:99:0f:d8:80:c0:76:21:4b:d0:ca:1a: 92:95:03:40:6e:52:20:7e:7c:4a:34:85:1e:bd:c7: be:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:33:40:BE:F6:E5:80:5D:1E:EA:78:58:3B:05:C0:47:D8:D6:31:A1 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.41.101.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:48:b4:73:5c:df:35:94:79:4a:03:9c:54:b0:89:c1:9b:be: 84:7c:bd:d2:c3:9f:e5:89:37:3c:d0:70:d1:2f:71:78:f3:e8: f9:97:4f:61:d0:81:0d:26:e7:11:26:79:f5:c0:2e:23:93:3e: d8:cb:38:b3:f1:2b:80:ba:52:17:6a:5b:5a:3d:9a:cc:44:3e: f9:0b:fa:03:75:75:0f:d7:54:0a:ab:88:15:af:b6:75:a8:c5: f8:16:4a:1b:0b:e9:87:23:88:31:15:f2:c0:50:e2:92:7e:56: 63:34:0e:8e:f3:55:06:c3:8b:08:ac:ed:08:12:3c:e4:97:8f: 46:f0:9a:2d:2c:e4:f6:70:23:36:78:f3:5f:6a:d0:34:51:19: b2:9c:6d:9d:e4:b8:a4:54:dd:7e:8e:92:3b:12:0a:41:ad:c1: d6:13:f9:da:ed:1a:13:ad:7e:f8:bc:4d:09:e9:b7:10:58:e4: 60:2a:73:8b:2d:c1:a6:d1:91:3f:dc:bf:bb:81:e6:4f:7e:40: 42:e9:e4:5a:6f:9e:ea:32:40:81:e2:a6:f8:1d:c8:bc:3d:50: a6:e1:f6:5c:43:19:cb:59:69:87:32:44:55:f8:65:87:74:63: a5:22:f4:08:c0:c5:1b:f9:a5:e2:48:b8:f8:8c:68:37:64:68: 89:e2:83:01 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWVDZKgYtUmgKvc+6CCAv9P6X3J4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjYwMjI1MDAxMDExWhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDE0M2Y2ZTI5ZWZkMWVhN2Q0OTZlZjNjYjY3Y2FlZjE4 OTcyZTFmZWZhYWM3N2ZiMDA2YmUwMmQxOWVlZDFkMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpOuUQKG/xP4oro2ZHwhe0eV1EGxAAQJpM/NcUe978oSY8 pfDCNU6InBjHDgXX/BKS4ek1HdjEs61Wo9sz+W17JOooZvrXt6qNV7EOMaBp76V6 dG417FN8WmzCO6w0DGaji8iTg+Ed0mpT8l+LKn3KU7LvRURfoWYZjfhLrot4nYv4 mrfRwrxgHPm27p2oZWKED6tRvTAHzLZGP/azBl/fCgra3emu/B2YVLP2s2//NIA2 fXjKRZE4v4veEpEFVdd+/Q9p05HhUeTcRb8Yq87ov4LxvRQN0wQ9+YjBoxwQ8Fsp rhSZD9iAwHYhS9DKGpKVA0BuUiB+fEo0hR69x76DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2DNAvvblgF0e6nhYOwXAR9jWMaEwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL2FlZDc2ZjE3LTViNDctNGU1Yy1hOWZiLWIwMWM2MWQyM2M4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhh LTMyMjFkMDFmN2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGKWUwDQYJKoZIhvcNAQELBQADggEBADxItHNc3zWUeUoDnFSwicGbvoR8 vdLDn+WJNzzQcNEvcXjz6PmXT2HQgQ0m5xEmefXALiOTPtjLOLPxK4C6UhdqW1o9 msxEPvkL+gN1dQ/XVAqriBWvtnWoxfgWShsL6YcjiDEV8sBQ4pJ+VmM0Do7zVQbD iwis7QgSPOSXj0bwmi0s5PZwIzZ4819q0DRRGbKcbZ3kuKRU3X6OkjsSCkGtwdYT +drtGhOtfvi8TQnptxBY5GAqc4stwabRkT/cv7uB5k9+QELp5FpvnuoyQIHipvgd yLw9UKbh9lxDGctZaYcyRFX4ZYd0Y6Ui9AjAxRv5peJIuPiMaDdkaInigwE= -----END CERTIFICATE-----Generated at Mon Mar 2 01:00:47 2026 by rpki-client