$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/8bae045f-365b-43cf-99fc-12cbcbce5f67.roa File: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (raw, json) Hash identifier: CIFZfmN5KUoU9ZYVqSQX6VPvo9Xhs8yrGttiq5bfNeg= Subject key identifier: 6A:2D:77:9C:F8:7C:A1:A2:C7:25:52:96:D9:EF:40:76:0A:31:BC:BF Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 2E60971CD35467D981AEB0A905F48E6F588CB5E8 Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/8bae045f-365b-43cf-99fc-12cbcbce5f67.roa Signing time: Tue 17 Feb 2026 00:10:08 +0000 ROA not before: Tue 17 Feb 2026 00:10:08 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 62785 IP address blocks: 172.96.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:60:97:1c:d3:54:67:d9:81:ae:b0:a9:05:f4:8e:6f:58:8c:b5:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Feb 17 00:10:08 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=7c1cc063a4f1d014f6c4dfc8356cc19a6f81cf9780df198c191dee3d9c18cb25, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:16:94:b7:9b:cd:6a:1a:94:b2:d9:98:e7:b8: 27:ea:2a:a4:69:9c:20:e6:60:49:18:62:64:1a:f7: ef:c1:c2:ab:18:58:3d:92:c8:9f:90:52:24:fd:40: ab:19:f8:9f:12:ab:45:d7:56:68:e3:42:2f:9d:03: 8b:7b:7d:f9:cb:28:8b:a0:09:fb:5c:18:04:2e:da: 5a:81:ae:25:3e:d2:96:42:63:3e:22:3d:60:81:95: 7f:b8:a5:f6:ce:99:0f:ee:d6:17:95:46:b3:10:c9: 1a:4f:a8:b4:72:b8:8c:e3:22:5a:a5:b3:76:9e:79: b4:d4:e5:c3:b5:c4:26:cd:85:3d:86:5b:cc:d3:73: 44:e3:14:99:b2:a3:9d:eb:a4:91:f9:26:71:39:38: f5:12:e7:5b:bb:83:79:ae:e3:5c:24:c6:36:b4:7d: b2:b0:49:d5:13:5b:4a:cd:68:1a:2d:1a:a6:4a:0d: 96:c1:65:dd:1e:af:98:cc:dd:26:1b:4c:be:77:be: dd:44:f0:2a:d0:cd:e3:c6:af:2d:69:f9:99:79:d3: c1:29:3a:7a:08:92:a6:0e:50:36:7d:33:e0:86:dd: c2:a6:86:2e:84:b2:a1:8e:5e:11:82:46:75:9c:18: 74:9b:e5:6d:4d:57:01:9f:80:f7:37:c1:ec:38:d8: 89:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2D:77:9C:F8:7C:A1:A2:C7:25:52:96:D9:EF:40:76:0A:31:BC:BF X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/8bae045f-365b-43cf-99fc-12cbcbce5f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.96.104.0/21 Signature Algorithm: sha256WithRSAEncryption 12:e4:3a:0b:a6:51:64:1e:19:23:a3:e7:f5:cf:b1:ec:6b:2f: 72:75:a5:af:42:2b:f5:bd:bd:5b:39:6b:a3:99:5d:54:49:d8: 3c:08:aa:2e:19:c6:e1:5c:b4:e4:28:fe:fc:05:e1:bc:c1:9a: f6:38:18:78:aa:76:00:fa:71:f0:61:08:25:bf:db:95:da:8e: 4d:24:f8:2f:ad:3c:2c:0d:85:59:f2:33:28:bb:03:1b:b2:71: 75:89:f8:e7:6f:41:50:cd:ce:01:e1:8a:b3:1a:9a:1e:89:4f: b9:28:11:e1:e6:6a:ea:e5:dd:20:05:24:67:1f:70:a5:dc:50: 33:1f:ee:a1:ce:d1:87:18:3f:1a:e7:d5:5a:71:6b:db:58:66: e4:2d:6d:91:59:a4:f6:4d:6d:ad:0d:0a:6c:d8:8b:e3:c6:aa: ff:8f:8f:90:0d:3c:a9:c2:6b:07:62:61:c3:4f:e6:a8:1c:84: 84:3b:82:ea:cc:56:0d:33:bf:63:13:f9:06:ec:e2:ee:b0:ba: 27:6a:0f:33:da:29:5f:86:1d:72:0c:93:1c:7a:67:a3:fc:c5: bc:c4:20:73:69:7b:ae:39:15:95:82:d0:44:cc:c5:35:eb:35: 1a:a6:4d:2a:61:d8:ea:e1:0d:c6:41:3e:86:64:80:a2:66:ce: 96:ad:52:f5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULmCXHNNUZ9mBrrCpBfSOb1iMtegwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjYwMjE3MDAxMDA4WhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YzFjYzA2M2E0ZjFkMDE0ZjZjNGRmYzgzNTZjYzE5YTZm ODFjZjk3ODBkZjE5OGMxOTFkZWUzZDljMThjYjI1MS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpFpS3m81qGpSy2ZjnuCfqKqRpnCDmYEkYYmQa9+/BwqsY WD2SyJ+QUiT9QKsZ+J8Sq0XXVmjjQi+dA4t7ffnLKIugCftcGAQu2lqBriU+0pZC Yz4iPWCBlX+4pfbOmQ/u1heVRrMQyRpPqLRyuIzjIlqls3aeebTU5cO1xCbNhT2G W8zTc0TjFJmyo53rpJH5JnE5OPUS51u7g3mu41wkxja0fbKwSdUTW0rNaBotGqZK DZbBZd0er5jM3SYbTL53vt1E8CrQzePGry1p+Zl508EpOnoIkqYOUDZ9M+CG3cKm hi6EsqGOXhGCRnWcGHSb5W1NVwGfgPc3wew42IkrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUai13nPh8oaLHJVKW2e9AdgoxvL8wHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzhiYWUwNDVmLTM2NWItNDNjZi05OWZjLTEyY2JjYmNlNWY2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3 LWQwNTJjNTM1Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOsYGgwDQYJKoZIhvcNAQELBQADggEBABLkOgumUWQeGSOj5/XPsexrL3J1 pa9CK/W9vVs5a6OZXVRJ2DwIqi4ZxuFctOQo/vwF4bzBmvY4GHiqdgD6cfBhCCW/ 25Xajk0k+C+tPCwNhVnyMyi7AxuycXWJ+OdvQVDNzgHhirMamh6JT7koEeHmaurl 3SAFJGcfcKXcUDMf7qHO0YcYPxrn1Vpxa9tYZuQtbZFZpPZNba0NCmzYi+PGqv+P j5ANPKnCawdiYcNP5qgchIQ7gurMVg0zv2MT+Qbs4u6wuidqDzPaKV+GHXIMkxx6 Z6P8xbzEIHNpe645FZWC0ETMxTXrNRqmTSph2OrhDcZBPoZkgKJmzpatUvU= -----END CERTIFICATE-----Generated at Mon Mar 2 04:32:56 2026 by rpki-client