$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/bb010abd-f84b-4f47-96e2-ce1a621f8c5e.roa File: bb010abd-f84b-4f47-96e2-ce1a621f8c5e.roa (raw, json) Hash identifier: OIkj4RfnVZqgzjQ1T1Xou6kU+X731amKyzSEOKyHZgg= Subject key identifier: CD:3C:3C:57:FE:01:9E:D2:8A:17:81:EA:CA:56:0F:6A:8C:47:94:90 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 362B18968B4C134E82048DCA797778A0221FD65B Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/bb010abd-f84b-4f47-96e2-ce1a621f8c5e.roa Signing time: Sat 28 Feb 2026 00:30:12 +0000 ROA not before: Sat 28 Feb 2026 00:30:12 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 50.112.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:2b:18:96:8b:4c:13:4e:82:04:8d:ca:79:77:78:a0:22:1f:d6:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: Feb 28 00:30:12 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=24f1844f62a5fc35ef48655cc2b3f878e775a05d326d3f0438a6d9d5648f87f8, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:31:bd:df:0f:23:33:5e:2f:03:79:43:c5:35: 53:bc:f5:35:8e:7b:ef:3b:7b:f4:ef:b6:79:95:fe: a2:9c:fc:5d:02:35:bb:46:f5:d8:fc:42:b3:5d:46: 7b:af:9e:e5:c2:5c:f6:3e:8a:af:21:c8:c6:e7:ae: 18:8c:9e:e5:50:87:d0:ed:a8:d8:ba:01:16:63:25: f6:28:89:c6:01:8f:60:78:10:5e:70:8a:04:a6:b9: 29:91:7e:07:b9:5d:59:b4:a0:3a:6c:f6:4a:e0:9e: 35:6d:d5:8d:bd:d1:48:b5:ae:f0:95:d1:55:3f:c2: 2d:49:b4:4d:7f:a3:13:e0:cf:6d:c9:54:d2:4b:4f: 60:50:44:72:22:15:59:1b:e1:1e:4b:22:15:38:d8: 33:be:37:8e:71:4e:9e:14:36:f5:a3:00:c5:92:ff: 68:fb:a2:07:83:51:08:c7:e5:d8:03:86:45:2b:31: f4:f4:39:dd:f1:07:aa:88:14:6d:a4:4a:61:3b:47: 6e:67:09:07:24:c7:9e:e3:8c:58:b6:3c:4c:df:43: 89:bc:cd:a5:da:97:32:d4:e8:80:81:a2:df:f5:7d: 01:be:fb:cb:8e:46:fa:37:5d:e9:1d:6c:c9:82:55: f3:9f:12:6d:b8:69:fe:8e:88:38:9d:e3:29:ff:f1: 11:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3C:3C:57:FE:01:9E:D2:8A:17:81:EA:CA:56:0F:6A:8C:47:94:90 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/bb010abd-f84b-4f47-96e2-ce1a621f8c5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.112.96.0/19 Signature Algorithm: sha256WithRSAEncryption 79:47:8b:12:1a:ef:d3:dd:c4:08:8d:d2:2c:a2:38:00:71:d8: ee:4a:ea:5f:3f:2b:a7:df:7f:58:fe:1a:8d:af:22:31:45:32: a1:73:3a:67:5d:4b:5d:3a:20:e1:99:bf:ce:72:be:6d:c2:55: 28:a6:7f:0e:7d:0a:ff:23:f1:84:12:7d:13:5f:5b:22:99:12: 20:eb:7a:a8:a9:11:1c:45:80:24:e5:e4:c0:f0:4a:30:92:7b: 50:49:48:2e:f3:5f:32:fe:45:87:fd:82:71:57:4c:42:3d:aa: 45:29:05:d2:33:29:a9:0b:91:79:7c:67:97:24:ad:a0:a0:f0: 48:db:eb:a1:d1:5e:03:6f:53:32:29:aa:d5:b8:56:34:44:f9: 92:42:39:d9:16:2e:2b:c0:11:47:c3:d8:87:39:b6:64:a9:2e: 86:0a:2b:59:59:de:58:f1:62:1f:f2:07:70:43:e0:ef:c5:45: 5a:fc:4f:24:19:66:d3:7a:e3:44:09:2c:a8:6b:bb:4f:1c:64: 5c:48:53:86:23:47:79:49:e1:69:8b:ae:a8:17:91:c9:a4:e4: 71:b6:72:7e:92:1d:1f:5a:b4:31:cc:a2:ec:78:f3:d5:b5:1d: b9:81:df:df:69:c8:7d:3a:eb:83:f4:91:9c:76:3a:b9:f0:19: 66:cb:b9:fd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNisYlotME06CBI3KeXd4oCIf1lswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjYwMjI4MDAzMDEyWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNGYxODQ0ZjYyYTVmYzM1ZWY0ODY1NWNjMmIzZjg3OGU3 NzVhMDVkMzI2ZDNmMDQzOGE2ZDlkNTY0OGY4N2Y4MS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAMb3fDyMzXi8DeUPFNVO89TWOe+87e/TvtnmV/qKc/F0C NbtG9dj8QrNdRnuvnuXCXPY+iq8hyMbnrhiMnuVQh9DtqNi6ARZjJfYoicYBj2B4 EF5wigSmuSmRfge5XVm0oDps9krgnjVt1Y290Ui1rvCV0VU/wi1JtE1/oxPgz23J VNJLT2BQRHIiFVkb4R5LIhU42DO+N45xTp4UNvWjAMWS/2j7ogeDUQjH5dgDhkUr MfT0Od3xB6qIFG2kSmE7R25nCQckx57jjFi2PEzfQ4m8zaXalzLU6ICBot/1fQG+ +8uORvo3XekdbMmCVfOfEm24af6OiDid4yn/8REPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzTw8V/4BntKKF4HqylYPaoxHlJAwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5L2JiMDEwYWJkLWY4NGItNGY0Ny05NmUyLWNlMWE2MjFmOGM1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUycGAwDQYJKoZIhvcNAQELBQADggEBAHlHixIa79PdxAiN0iyiOABx2O5K 6l8/K6fff1j+Go2vIjFFMqFzOmddS106IOGZv85yvm3CVSimfw59Cv8j8YQSfRNf WyKZEiDreqipERxFgCTl5MDwSjCSe1BJSC7zXzL+RYf9gnFXTEI9qkUpBdIzKakL kXl8Z5ckraCg8Ejb66HRXgNvUzIpqtW4VjRE+ZJCOdkWLivAEUfD2Ic5tmSpLoYK K1lZ3ljxYh/yB3BD4O/FRVr8TyQZZtN640QJLKhru08cZFxIU4YjR3lJ4WmLrqgX kcmk5HG2cn6SHR9atDHMoux489W1HbmB399pyH0664P0kZx2OrnwGWbLuf0= -----END CERTIFICATE-----Generated at Mon Mar 2 03:04:12 2026 by rpki-client