$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/171a5698-ec28-4a37-812f-99d2b414200e.roa File: 171a5698-ec28-4a37-812f-99d2b414200e.roa (raw, json) Hash identifier: jA93vWR0Myclbe7k2LdApL17yvt0vARQwOcg8TdWt5g= Subject key identifier: F8:77:44:4D:50:F2:D2:87:80:8C:DC:9B:36:43:81:5B:BA:F4:31:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 665CC345017B034FB1F6BC63B93F612B6FCC4142 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/171a5698-ec28-4a37-812f-99d2b414200e.roa Signing time: Sat 21 Feb 2026 00:30:18 +0000 ROA not before: Sat 21 Feb 2026 00:30:18 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:5c:c3:45:01:7b:03:4f:b1:f6:bc:63:b9:3f:61:2b:6f:cc:41:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:30:18 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=dfe9503154f230ec14ba7074914ce487c656f8f6e69ed274519cf04aaff45ca3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7a:2d:0e:43:d4:91:11:57:2c:d1:6d:6e:d2: 22:d4:4c:f3:b6:74:a0:96:94:58:67:09:72:92:c8: f0:b3:b3:8a:5d:a5:15:92:db:7c:72:18:26:71:13: 56:87:93:b3:13:b7:b8:5b:c5:24:92:db:e3:59:e6: 05:17:30:67:46:6f:81:7d:a1:84:79:b3:c4:d2:65: 9a:d2:62:af:82:df:c7:32:87:2a:00:f3:31:3f:f0: 4a:9d:38:3f:70:9f:71:b8:5e:6c:db:71:51:ac:d1: 01:4d:58:e3:55:44:1d:6c:f0:9c:3d:23:12:d4:6b: 01:a3:d3:5b:ed:8f:4e:2a:e9:70:96:7e:2c:24:26: d3:55:15:17:78:1c:3f:06:6e:ef:46:fc:8a:7e:89: b3:e7:3b:3d:67:cc:3f:24:9d:80:e8:6b:e2:ed:63: 6a:57:91:0a:f2:b5:9a:89:d1:ff:c5:1a:cd:05:55: 90:6e:99:7e:17:69:a0:f9:54:62:b5:7b:8c:d6:9e: bf:ad:b0:ae:59:ee:21:2f:86:c2:fc:78:f7:74:cb: 29:b3:76:26:03:2d:d2:98:f0:16:ef:b9:77:9a:b4: 2a:1d:29:fa:e0:27:ff:89:a2:3c:5c:4d:a8:6d:9e: 60:59:6d:42:21:87:9d:31:3e:17:7f:76:ed:ec:d1: 93:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:77:44:4D:50:F2:D2:87:80:8C:DC:9B:36:43:81:5B:BA:F4:31:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/171a5698-ec28-4a37-812f-99d2b414200e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.200.0/21 Signature Algorithm: sha256WithRSAEncryption 62:14:63:dc:cb:10:6d:87:60:0c:e1:41:09:8f:5b:49:e8:47: 5a:d0:30:8e:c3:c5:fe:b0:3a:e2:40:cb:93:9a:ea:75:61:34: 33:8e:30:12:40:1d:71:3c:cf:8c:a2:31:3d:63:24:51:1d:56: 6c:8c:ca:bb:8c:88:ea:c9:cf:dd:a1:40:38:95:00:b9:a8:bf: 13:e9:60:60:38:fd:08:ac:31:57:1f:f9:85:8d:66:23:03:3e: e1:62:fa:cd:96:4a:04:f4:e1:91:b8:94:f5:b6:74:ba:13:f5: 85:7c:e5:10:93:90:50:69:43:3a:b9:53:d7:cb:39:0d:25:09: 2d:a5:3e:b7:a2:be:58:78:8e:a5:d2:6c:28:92:98:87:f6:b2: b8:c9:0d:e8:c0:ad:57:42:f9:88:6b:d1:1f:08:a3:7e:66:e0: 63:d5:ce:cd:73:e6:36:9d:33:ac:e5:93:3f:88:76:5a:05:29: 4e:23:65:03:c1:a8:61:b8:a7:e6:17:48:c2:26:4e:34:74:1e: 02:bc:16:af:14:51:c5:ee:72:8b:ff:1c:02:79:0b:1f:02:63: 0e:f9:ff:79:0b:66:e9:de:04:29:46:b0:a6:0d:7e:92:c7:e0: f6:34:e0:0e:f9:5e:cf:61:04:e7:7e:97:ab:e5:af:3a:79:0f: 38:76:a1:ff -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZlzDRQF7A0+x9rxjuT9hK2/MQUIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDAzMDE4WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmU5NTAzMTU0ZjIzMGVjMTRiYTcwNzQ5MTRjZTQ4N2M2 NTZmOGY2ZTY5ZWQyNzQ1MTljZjA0YWFmZjQ1Y2EzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcei0OQ9SREVcs0W1u0iLUTPO2dKCWlFhnCXKSyPCzs4pd pRWS23xyGCZxE1aHk7MTt7hbxSSS2+NZ5gUXMGdGb4F9oYR5s8TSZZrSYq+C38cy hyoA8zE/8EqdOD9wn3G4XmzbcVGs0QFNWONVRB1s8Jw9IxLUawGj01vtj04q6XCW fiwkJtNVFRd4HD8Gbu9G/Ip+ibPnOz1nzD8knYDoa+LtY2pXkQrytZqJ0f/FGs0F VZBumX4XaaD5VGK1e4zWnr+tsK5Z7iEvhsL8ePd0yymzdiYDLdKY8BbvuXeatCod KfrgJ/+JojxcTahtnmBZbUIhh50xPhd/du3s0ZMrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+HdETVDy0oeAjNybNkOBW7r0MS0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE3MWE1Njk4LWVjMjgtNGEzNy04MTJmLTk5ZDJiNDE0MjAwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOCsMgwDQYJKoZIhvcNAQELBQADggEBAGIUY9zLEG2HYAzhQQmPW0noR1rQ MI7Dxf6wOuJAy5Oa6nVhNDOOMBJAHXE8z4yiMT1jJFEdVmyMyruMiOrJz92hQDiV ALmovxPpYGA4/QisMVcf+YWNZiMDPuFi+s2WSgT04ZG4lPW2dLoT9YV85RCTkFBp Qzq5U9fLOQ0lCS2lPreivlh4jqXSbCiSmIf2srjJDejArVdC+Yhr0R8Io35m4GPV zs1z5jadM6zlkz+IdloFKU4jZQPBqGG4p+YXSMImTjR0HgK8Fq8UUcXucov/HAJ5 Cx8CYw75/3kLZuneBClGsKYNfpLH4PY04A75Xs9hBOd+l6vlrzp5Dzh2of8= -----END CERTIFICATE-----Generated at Sun Mar 1 22:27:07 2026 by rpki-client