$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/094fa198-22df-45ed-b9ab-686db72562f1.roa File: 094fa198-22df-45ed-b9ab-686db72562f1.roa (raw, json) Hash identifier: 5HvhiQplKfknXT6rMsfbAYx75+cJIwJ1/gJXIt2f8zg= Subject key identifier: 74:8E:ED:E1:9D:78:8B:3B:FF:CF:13:DF:DB:A8:11:F7:81:94:BC:36 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6700ACFF16C06D36A773807056CE368DC8FE4F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/094fa198-22df-45ed-b9ab-686db72562f1.roa Signing time: Tue 24 Feb 2026 01:40:14 +0000 ROA not before: Tue 24 Feb 2026 01:40:14 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 108.130.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:00:ac:ff:16:c0:6d:36:a7:73:80:70:56:ce:36:8d:c8:fe:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 01:40:14 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=0a7f966d505f9b6f937c2be1625650a8eb92a4cac2cb38e693d696b5ee904ce5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:01:61:6e:2d:a0:e1:e8:07:53:93:e4:0a:c5: 79:65:e6:cd:d5:d5:a5:9c:30:1e:f2:a9:c0:7d:5e: 88:62:28:12:84:63:da:11:31:2c:a9:1a:7d:44:37: 8c:cc:c1:53:42:a2:9a:86:c7:ef:99:c0:ad:17:10: f9:bb:46:f7:81:f1:7d:8f:17:15:94:4d:bf:10:91: 16:e8:f4:9d:e1:33:d2:2d:0e:49:bd:6a:b3:60:0a: 76:f8:52:20:1e:70:2a:f2:c5:d1:2e:46:d3:60:a2: 1d:56:00:9f:50:e8:a8:04:05:a8:39:57:65:7e:c9: a2:cb:a4:6c:95:0f:10:5c:fe:40:53:2e:3c:5a:02: 53:12:6e:a4:27:28:fa:1e:bd:ce:18:c9:cd:1a:c6: 05:ef:76:b0:f5:11:d1:2f:63:5e:83:be:1a:ca:bd: 3c:01:6c:50:1c:56:bb:cd:bb:cd:3e:93:21:9a:7b: 8c:79:07:5a:d8:b0:39:38:3f:6f:f8:ae:1a:2f:52: 34:19:e0:32:90:a3:9b:87:9b:e7:b9:84:8c:6e:73: 0b:b8:8c:aa:2b:fe:f5:73:16:91:d7:fa:1f:ce:11: d9:30:94:b6:e7:27:16:f7:d9:6e:fe:91:b8:69:b4: 26:04:67:10:19:0e:59:ca:8a:54:83:f9:0a:62:50: cf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8E:ED:E1:9D:78:8B:3B:FF:CF:13:DF:DB:A8:11:F7:81:94:BC:36 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/094fa198-22df-45ed-b9ab-686db72562f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.130.186.0/23 Signature Algorithm: sha256WithRSAEncryption 17:af:62:aa:8c:1a:60:9a:e0:05:35:57:e7:11:62:29:dd:dd: ae:ef:fb:fe:d1:fc:0f:d5:00:b3:ee:1d:34:7b:6e:f4:79:f5: 97:6a:ee:36:68:bb:a2:66:c4:bc:dc:50:67:2e:35:42:06:fd: ce:a4:f8:24:cb:38:9e:61:47:e4:6d:a2:fd:51:01:ed:71:6d: d3:37:61:bb:ed:ed:39:7d:68:20:96:4b:a4:08:97:77:e2:5d: 85:87:88:69:2d:6d:a7:9d:a2:46:8d:d2:e3:bd:fa:9a:df:39: 38:5c:1c:d5:14:5e:73:7b:d4:a7:5a:73:45:e6:c5:00:61:54: 89:bf:98:ae:0a:c1:ba:b9:7c:9b:70:fb:ea:c5:15:52:f3:9d: 99:b8:d8:a2:3d:1d:41:3f:58:22:fd:88:ae:d2:0f:21:3b:fa: a0:7b:e7:f2:56:1b:d0:a3:11:5c:d8:20:25:ab:1d:61:bc:06: 44:92:1c:20:fd:48:1c:86:6a:09:91:7d:63:66:49:d9:8b:50: a7:77:17:a0:9b:f5:76:8e:92:c7:dd:24:b1:c4:91:53:23:d9: ae:ac:26:e3:a3:d6:07:3f:46:ec:9d:c6:4a:38:2b:8d:b1:3e: 0c:99:1f:07:84:4a:d5:49:4c:8b:b5:a4:2b:f2:d0:9b:e9:d5: ef:35:b6:e3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITZwCs/xbAbTanc4BwVs42jcj+TzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjAyMjQwMTQwMTRaFw0yNjA1MjUyMzU5NTla MHoxSTBHBgNVBAUTQDBhN2Y5NjZkNTA1ZjliNmY5MzdjMmJlMTYyNTY1MGE4ZWI5 MmE0Y2FjMmNiMzhlNjkzZDY5NmI1ZWU5MDRjZTUxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMcBYW4toOHoB1OT5ArFeWXmzdXVpZwwHvKpwH1eiGIoEoRj 2hExLKkafUQ3jMzBU0KimobH75nArRcQ+btG94HxfY8XFZRNvxCRFuj0neEz0i0O Sb1qs2AKdvhSIB5wKvLF0S5G02CiHVYAn1DoqAQFqDlXZX7JosukbJUPEFz+QFMu PFoCUxJupCco+h69zhjJzRrGBe92sPUR0S9jXoO+Gsq9PAFsUBxWu827zT6TIZp7 jHkHWtiwOTg/b/iuGi9SNBngMpCjm4eb57mEjG5zC7iMqiv+9XMWkdf6H84R2TCU tucnFvfZbv6RuGm0JgRnEBkOWcqKVIP5CmJQz7cCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBR0ju3hnXiLO//PE9/bqBH3gZS8NjAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvMDk0ZmExOTgtMjJkZi00NWVkLWI5YWItNjg2ZGI3MjU2MmYxLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWyCujANBgkqhkiG9w0BAQsFAAOCAQEAF69iqowaYJrgBTVX5xFiKd3dru/7 /tH8D9UAs+4dNHtu9Hn1l2ruNmi7ombEvNxQZy41Qgb9zqT4JMs4nmFH5G2i/VEB 7XFt0zdhu+3tOX1oIJZLpAiXd+JdhYeIaS1tp52iRo3S4736mt85OFwc1RRec3vU p1pzRebFAGFUib+YrgrBurl8m3D76sUVUvOdmbjYoj0dQT9YIv2IrtIPITv6oHvn 8lYb0KMRXNggJasdYbwGRJIcIP1IHIZqCZF9Y2ZJ2YtQp3cXoJv1do6Sx90kscSR UyPZrqwm46PWBz9G7J3GSjgrjbE+DJkfB4RK1UlMi7WkK/LQm+nV7zW24w== -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:39 2026 by rpki-client