$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3de67697-a7ff-4029-a12c-9e1d02c2bc78.roa File: 3de67697-a7ff-4029-a12c-9e1d02c2bc78.roa (raw, json) Hash identifier: 3pdWWyaBQOrlQEKRDh3tgWxyhwqtFWeS/oGS4zsbk3I= Subject key identifier: 1E:66:3D:F2:4C:D0:41:7F:C3:49:DD:86:4B:5C:21:E5:CC:84:21:B6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0858617AEDC109079EA388B071C4082C413F0156 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3de67697-a7ff-4029-a12c-9e1d02c2bc78.roa Signing time: Mon 02 Mar 2026 00:00:08 +0000 ROA not before: Mon 02 Mar 2026 00:00:08 +0000 ROA not after: Sun 31 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:58:61:7a:ed:c1:09:07:9e:a3:88:b0:71:c4:08:2c:41:3f:01:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 2 00:00:08 2026 GMT Not After : May 31 23:59:59 2026 GMT Subject: serialNumber=f2a524af4cfc33fc96d0726f4d4d32a50115c32e3c2d4021784ab97a56b53c11, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d0:df:fd:11:7d:f2:01:58:9c:d5:62:42:02: 13:67:bd:6b:fd:c4:d6:ef:11:87:d6:43:66:43:67: 85:35:45:7b:f6:db:a0:6e:87:59:8c:90:13:b9:91: 03:3b:f2:09:82:ce:b3:cb:61:c9:fe:d2:df:37:dd: a6:5e:7c:af:89:bd:76:0c:b7:bf:5b:98:42:4b:de: 28:3d:9a:44:86:8d:05:21:e0:d4:69:2e:77:b1:33: 21:3a:b3:09:7c:bf:3a:2a:08:cf:56:08:4e:23:3f: 7a:58:5c:79:f9:e3:4f:90:bc:c4:6c:d5:9e:c6:d7: 6d:f1:f3:c7:8b:44:09:ef:42:48:8c:5e:a2:74:62: 8d:35:e2:b1:c9:50:fc:42:02:05:bc:eb:31:f5:8f: b5:5b:73:58:e0:7d:d8:2d:f4:12:ff:24:79:40:92: 43:57:0c:7b:7b:bc:34:98:d7:61:bc:2e:5e:ba:2d: 4b:7d:6b:f9:63:5d:48:3e:e7:a7:f8:43:94:42:eb: 11:54:74:20:3f:a2:cb:2b:a0:66:0a:59:75:7f:e0: cd:cc:08:c8:45:c1:a6:27:99:13:33:31:a4:1a:07: 08:b3:ad:bc:12:52:9d:72:ba:22:6d:a8:cf:85:e0: d3:06:1a:84:20:23:34:4a:1f:5d:db:75:c1:0b:24: 56:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:66:3D:F2:4C:D0:41:7F:C3:49:DD:86:4B:5C:21:E5:CC:84:21:B6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3de67697-a7ff-4029-a12c-9e1d02c2bc78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.128.0/18 Signature Algorithm: sha256WithRSAEncryption b4:dc:2b:4b:07:76:74:21:f7:88:2b:79:c8:c5:64:40:ae:da: 2c:cb:61:62:e1:40:4f:b2:15:ae:1a:38:5d:9e:de:63:21:08: c1:0d:2f:7a:b1:5f:09:3d:75:8d:34:a8:94:7d:19:e4:18:ef: 0e:48:14:3f:cf:63:dd:b2:0d:c7:b2:86:ae:9a:04:91:af:97: 1d:0e:e8:7a:87:fa:5f:b5:09:13:41:bd:35:69:e8:13:ad:03: b6:e4:bd:85:0b:59:ba:d3:92:dd:ef:1f:26:5c:e9:f6:15:cc: 59:ca:3c:73:db:fa:13:a5:8b:97:f8:5c:78:28:6f:c2:33:2b: 2e:55:ec:33:62:15:17:6f:c4:75:ef:d5:c2:52:6d:e1:73:c9: 96:a1:0d:af:c5:dc:43:92:72:50:50:bb:ca:15:43:99:8a:30: bf:30:c4:7b:54:1c:59:b7:4e:2d:35:8f:5f:59:0a:0d:b8:e0: 17:9e:07:e8:58:f6:b7:c6:cd:df:de:90:f7:c7:0f:97:56:08: 4d:e0:d2:b1:39:17:53:fc:d6:d9:bc:a8:48:bf:19:b3:1e:3b: 16:05:d1:0c:7b:51:5c:bf:bd:80:af:18:1c:65:fd:2f:61:30: 9b:26:5b:58:23:b4:1a:5a:52:78:f6:fd:83:17:04:68:b6:bd: 62:cb:dd:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCFhheu3BCQeeo4iwccQILEE/AVYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzAyMDAwMDA4WhcNMjYwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMmE1MjRhZjRjZmMzM2ZjOTZkMDcyNmY0ZDRkMzJhNTAx MTVjMzJlM2MyZDQwMjE3ODRhYjk3YTU2YjUzYzExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl0N/9EX3yAVic1WJCAhNnvWv9xNbvEYfWQ2ZDZ4U1RXv2 26Buh1mMkBO5kQM78gmCzrPLYcn+0t833aZefK+JvXYMt79bmEJL3ig9mkSGjQUh 4NRpLnexMyE6swl8vzoqCM9WCE4jP3pYXHn540+QvMRs1Z7G123x88eLRAnvQkiM XqJ0Yo014rHJUPxCAgW86zH1j7Vbc1jgfdgt9BL/JHlAkkNXDHt7vDSY12G8Ll66 LUt9a/ljXUg+56f4Q5RC6xFUdCA/ossroGYKWXV/4M3MCMhFwaYnmRMzMaQaBwiz rbwSUp1yuiJtqM+F4NMGGoQgIzRKH13bdcELJFZdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHmY98kzQQX/DSd2GS1wh5cyEIbYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNkZTY3Njk3LWE3ZmYtNDAyOS1hMTJjLTllMWQwMmMyYmM3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZA/IAwDQYJKoZIhvcNAQELBQADggEBALTcK0sHdnQh94grecjFZECu2izL YWLhQE+yFa4aOF2e3mMhCMENL3qxXwk9dY00qJR9GeQY7w5IFD/PY92yDceyhq6a BJGvlx0O6HqH+l+1CRNBvTVp6BOtA7bkvYULWbrTkt3vHyZc6fYVzFnKPHPb+hOl i5f4XHgob8IzKy5V7DNiFRdvxHXv1cJSbeFzyZahDa/F3EOSclBQu8oVQ5mKML8w xHtUHFm3Ti01j19ZCg244BeeB+hY9rfGzd/ekPfHD5dWCE3g0rE5F1P81tm8qEi/ GbMeOxYF0Qx7UVy/vYCvGBxl/S9hMJsmW1gjtBpaUnj2/YMXBGi2vWLL3a0= -----END CERTIFICATE-----Generated at Tue Mar 17 10:04:04 2026 by rpki-client