$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2259409b-27ed-472c-8ace-2a85fc3a233e.roa File: 2259409b-27ed-472c-8ace-2a85fc3a233e.roa (raw, json) Hash identifier: apcBTNML4u3Wo4NCoT4cMD4uVKyuCVHMD3z4yg35z60= Subject key identifier: 88:42:24:F6:9C:6A:01:D0:18:E7:A9:13:5E:6C:A0:AA:E7:9C:10:7D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 669DE9238FC8E897B7402D832EE69A86879DAD0F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2259409b-27ed-472c-8ace-2a85fc3a233e.roa Signing time: Fri 06 Mar 2026 00:00:08 +0000 ROA not before: Fri 06 Mar 2026 00:00:08 +0000 ROA not after: Thu 04 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.60.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:9d:e9:23:8f:c8:e8:97:b7:40:2d:83:2e:e6:9a:86:87:9d:ad:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 6 00:00:08 2026 GMT Not After : Jun 4 23:59:59 2026 GMT Subject: serialNumber=ab75d9c43be78025bdab071bf030b9816948b2ff20312e9b8d8aa64a7da7e42e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ef:3e:35:e4:1f:8a:ca:a1:41:31:2d:8d:b6: 12:a6:7f:d5:a9:f9:03:f4:7b:4c:81:3f:31:0d:6b: 5c:54:75:2f:dc:86:c2:89:02:5b:80:f6:67:52:45: f3:c3:b4:95:5c:ee:58:d7:f8:ce:ef:16:2c:4f:7f: 9b:0b:b7:07:57:69:6c:3c:c6:a4:0d:9b:49:2b:76: a9:b8:0c:ce:76:32:4f:67:34:cd:6f:ea:10:ad:be: 41:d5:11:7b:3b:23:16:c4:dd:a2:13:f2:61:55:d0: e9:e4:77:d8:b2:4f:38:78:e3:ab:2c:d7:41:54:9a: 18:37:ef:9f:ab:ba:d7:67:71:6e:6f:44:33:ad:d5: eb:18:35:bb:66:9c:c4:a4:93:d5:7d:cc:ba:4c:d1: fa:83:ab:ac:4c:bc:90:71:ed:11:d7:74:db:7d:1c: 5f:c3:b6:5e:9d:2f:1a:3c:cd:0f:23:fe:33:18:57: 3b:d3:00:3e:43:9a:09:7e:84:23:23:10:b7:08:c8: 63:50:b5:0b:61:dc:1b:90:f7:3b:79:b6:30:f4:6f: d5:c2:34:44:c6:65:ed:2d:be:d2:cf:57:f6:bf:8c: c4:24:90:1c:44:b0:11:36:b5:9f:d4:eb:51:62:98: ff:83:da:11:02:42:a1:9b:66:e4:64:ad:08:e2:3c: b8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:42:24:F6:9C:6A:01:D0:18:E7:A9:13:5E:6C:A0:AA:E7:9C:10:7D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2259409b-27ed-472c-8ace-2a85fc3a233e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.60.128.0/17 Signature Algorithm: sha256WithRSAEncryption b7:65:5e:78:9b:e9:05:1b:4d:fe:38:57:5f:71:e2:72:cf:39: 4e:50:50:b6:b6:34:c4:43:0e:2e:f6:57:c3:f2:28:49:6f:e9: c5:91:98:ad:b9:d8:57:69:fe:28:58:dc:68:af:a5:57:ef:91: 11:71:11:a3:65:a9:9b:41:80:74:5b:a2:df:27:53:0b:8c:7b: 11:7d:5d:b9:30:9e:4b:73:49:13:11:f8:e1:84:b4:b8:27:c0: fc:60:7a:00:f5:b4:05:ca:c4:26:49:f0:cc:4d:28:ba:c1:36: 58:d2:d4:32:ba:49:2c:34:38:b3:ee:45:66:21:c8:8f:e9:6c: cc:24:9e:08:99:33:8d:a6:c3:04:c7:09:a4:c6:8c:e9:dc:0f: 63:1a:2c:d8:bb:da:45:da:19:1c:c9:fa:7b:86:c7:2e:55:7a: 1e:15:db:d0:7d:87:dd:c6:22:99:e6:d2:4b:1a:51:ee:c7:c0: 5c:b7:14:2d:c1:01:44:da:89:42:87:90:0b:c1:07:80:d8:1c: bd:e3:a8:ea:0f:2c:10:48:62:9f:07:32:d4:21:c6:8f:5b:72: 22:f8:ee:48:ad:a4:03:ac:d2:ac:17:4f:d1:1e:8d:52:11:bc: 0f:61:30:d8:c9:d0:01:00:af:29:3e:33:96:49:91:d6:5f:1b: 72:10:84:57 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZp3pI4/I6Je3QC2DLuaahoedrQ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzA2MDAwMDA4WhcNMjYwNjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjc1ZDljNDNiZTc4MDI1YmRhYjA3MWJmMDMwYjk4MTY5 NDhiMmZmMjAzMTJlOWI4ZDhhYTY0YTdkYTdlNDJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC07z415B+KyqFBMS2NthKmf9Wp+QP0e0yBPzENa1xUdS/c hsKJAluA9mdSRfPDtJVc7ljX+M7vFixPf5sLtwdXaWw8xqQNm0krdqm4DM52Mk9n NM1v6hCtvkHVEXs7IxbE3aIT8mFV0Onkd9iyTzh446ss10FUmhg375+rutdncW5v RDOt1esYNbtmnMSkk9V9zLpM0fqDq6xMvJBx7RHXdNt9HF/Dtl6dLxo8zQ8j/jMY VzvTAD5Dmgl+hCMjELcIyGNQtQth3BuQ9zt5tjD0b9XCNETGZe0tvtLPV/a/jMQk kBxEsBE2tZ/U61FimP+D2hECQqGbZuRkrQjiPLhlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiEIk9pxqAdAY56kTXmygquecEH0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyNTk0MDliLTI3ZWQtNDcyYy04YWNlLTJhODVmYzNhMjMzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcQPIAwDQYJKoZIhvcNAQELBQADggEBALdlXnib6QUbTf44V19x4nLPOU5Q ULa2NMRDDi72V8PyKElv6cWRmK252Fdp/ihY3GivpVfvkRFxEaNlqZtBgHRbot8n UwuMexF9XbkwnktzSRMR+OGEtLgnwPxgegD1tAXKxCZJ8MxNKLrBNljS1DK6SSw0 OLPuRWYhyI/pbMwkngiZM42mwwTHCaTGjOncD2MaLNi72kXaGRzJ+nuGxy5Veh4V 29B9h93GIpnm0ksaUe7HwFy3FC3BAUTaiUKHkAvBB4DYHL3jqOoPLBBIYp8HMtQh xo9bciL47kitpAOs0qwXT9EejVIRvA9hMNjJ0AEAryk+M5ZJkdZfG3IQhFc= -----END CERTIFICATE-----Generated at Thu Mar 26 03:35:07 2026 by rpki-client