$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f488478-8059-4c49-b2f2-27c562ae73b0.roa File: 2f488478-8059-4c49-b2f2-27c562ae73b0.roa (raw, json) Hash identifier: XJtvnSzTU5tLFr7JVMfFIRNy8BpPKdDbFs5piZg9Wyg= Subject key identifier: E1:1B:1D:3F:A2:41:EB:96:4D:DD:58:E0:5E:BA:99:6B:7D:AE:6D:66 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B3508CFDBC0E58B71C6CA0C2B0E42AEF01C1F4E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f488478-8059-4c49-b2f2-27c562ae73b0.roa Signing time: Sat 21 Feb 2026 01:01:43 +0000 ROA not before: Sat 21 Feb 2026 01:01:43 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:35:08:cf:db:c0:e5:8b:71:c6:ca:0c:2b:0e:42:ae:f0:1c:1f:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:01:43 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=0e8983aa2de3f25210df2af6a6886a250fbf4eca483c8517c737a91c61b76eff, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:10:e5:f8:a2:ca:fd:98:e7:01:c3:54:6b: 47:01:a9:55:ce:00:9a:e4:c4:3c:77:c1:db:f7:d4: 55:0b:af:ca:f9:51:41:09:df:74:da:5e:2e:35:0a: 7e:89:aa:84:fe:0b:50:af:15:3e:41:e4:94:75:e9: 88:8a:db:06:61:0b:ce:6a:01:ce:1d:6a:4b:a0:1a: 9a:25:e0:77:57:ed:b1:44:b8:a0:a2:67:fd:82:99: b9:5d:1e:8c:90:95:82:a7:30:67:aa:02:78:58:69: 1c:d2:d4:07:46:26:68:c8:5f:d6:0e:6f:de:22:9d: d7:b2:d2:b1:26:13:ea:b0:94:b9:65:dc:c7:60:49: 6b:4e:94:4d:c0:77:25:b4:ab:78:21:bf:9d:e3:89: cb:58:12:cb:b0:a2:2e:f3:15:a6:cf:86:06:eb:ba: f8:96:9e:8f:5b:b9:fa:c6:64:bb:75:20:4d:e4:33: eb:37:8d:23:6a:b2:22:9a:6c:8d:82:03:51:c9:49: 7f:c2:ee:c9:50:bb:7e:7a:a5:18:84:19:4e:70:bc: d5:04:e3:a2:57:34:24:19:38:f6:96:7f:63:d6:8b: b5:63:76:d0:22:5d:0d:ce:d9:13:f6:a3:c4:4f:88: 9e:06:db:cf:3c:99:54:39:c5:8d:c9:88:65:d2:fa: 2d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1B:1D:3F:A2:41:EB:96:4D:DD:58:E0:5E:BA:99:6B:7D:AE:6D:66 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f488478-8059-4c49-b2f2-27c562ae73b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.34.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:c8:81:73:cc:12:85:e7:25:2e:58:0e:87:dd:7c:4b:c9:21: 11:5a:bb:14:5f:6e:8f:7e:2f:9f:b1:94:e1:c0:e9:3c:53:6e: ec:48:92:e5:94:1b:33:fa:ec:26:23:0e:2d:52:d6:eb:01:87: 8b:e3:4b:27:07:c2:86:5c:3f:c9:94:c8:3a:d1:2f:43:6b:2e: a2:20:da:50:a6:83:f2:33:72:c8:21:31:42:18:e9:06:94:1b: 67:22:f5:99:ea:97:f0:6c:d7:e4:29:0b:d4:29:b9:9a:ca:8a: b1:43:6f:41:0d:bc:a5:86:7a:d3:fe:1c:ec:07:f7:c2:ba:cc: 0f:11:a0:76:78:68:35:dd:be:4d:3c:4e:44:06:d3:5e:92:2f: a5:e2:c0:5c:9f:9b:66:b3:9e:41:4b:ca:b7:c2:b8:fb:01:e5: 59:48:9b:12:15:8e:84:c2:0a:a0:e4:01:9c:4f:2a:e2:91:b6: 8c:0a:05:0a:a5:0f:df:2c:96:2f:18:82:19:88:e4:fb:2f:e0: 74:26:20:d9:21:49:62:29:c3:d3:90:56:22:fe:ae:49:17:dc: f4:48:c8:ab:3c:52:6d:9a:cd:f9:d3:a5:81:aa:05:b3:52:37: f7:ce:5d:e4:ca:1e:6a:06:74:d3:c4:4b:2a:5c:ae:41:f5:b9: 53:e1:24:d2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOzUIz9vA5YtxxsoMKw5CrvAcH04wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDEwMTQzWhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTg5ODNhYTJkZTNmMjUyMTBkZjJhZjZhNjg4NmEyNTBm YmY0ZWNhNDgzYzg1MTdjNzM3YTkxYzYxYjc2ZWZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1qhDl+KLK/ZjnAcNUa0cBqVXOAJrkxDx3wdv31FULr8r5 UUEJ33TaXi41Cn6JqoT+C1CvFT5B5JR16YiK2wZhC85qAc4dakugGpol4HdX7bFE uKCiZ/2CmbldHoyQlYKnMGeqAnhYaRzS1AdGJmjIX9YOb94indey0rEmE+qwlLll 3MdgSWtOlE3AdyW0q3ghv53jictYEsuwoi7zFabPhgbruviWno9bufrGZLt1IE3k M+s3jSNqsiKabI2CA1HJSX/C7slQu356pRiEGU5wvNUE46JXNCQZOPaWf2PWi7Vj dtAiXQ3O2RP2o8RPiJ4G2888mVQ5xY3JiGXS+i1fAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4RsdP6JB65ZN3VjgXrqZa32ubWYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJmNDg4NDc4LTgwNTktNGM0OS1iMmYyLTI3YzU2MmFlNzNiMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsCIwDQYJKoZIhvcNAQELBQADggEBAH7IgXPMEoXnJS5YDofdfEvJIRFa uxRfbo9+L5+xlOHA6TxTbuxIkuWUGzP67CYjDi1S1usBh4vjSycHwoZcP8mUyDrR L0NrLqIg2lCmg/IzcsghMUIY6QaUG2ci9Znql/Bs1+QpC9QpuZrKirFDb0ENvKWG etP+HOwH98K6zA8RoHZ4aDXdvk08TkQG016SL6XiwFyfm2aznkFLyrfCuPsB5VlI mxIVjoTCCqDkAZxPKuKRtowKBQqlD98sli8YghmI5Psv4HQmINkhSWIpw9OQViL+ rkkX3PRIyKs8Um2azfnTpYGqBbNSN/fOXeTKHmoGdNPESypcrkH1uVPhJNI= -----END CERTIFICATE-----Generated at Sun Mar 1 22:23:27 2026 by rpki-client