$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f78896e-9c27-4154-9a25-9064134c796a.roa File: 2f78896e-9c27-4154-9a25-9064134c796a.roa (raw, json) Hash identifier: Qy+b8/AVrUrsjboLy8LKlK/mndc3LAXNoPDHVmQb9kg= Subject key identifier: 4C:3C:20:98:27:B4:EC:E7:56:0B:AF:2D:7F:9D:A5:21:DD:BD:61:41 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 47009962A9FFAF00857ABC81171DC7AEA20F12EF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f78896e-9c27-4154-9a25-9064134c796a.roa Signing time: Sat 21 Feb 2026 01:40:09 +0000 ROA not before: Sat 21 Feb 2026 01:40:09 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:00:99:62:a9:ff:af:00:85:7a:bc:81:17:1d:c7:ae:a2:0f:12:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:40:09 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=d47dae20a2e6f7dd8ff8ce5bd461f1597e09d53dc4fb1c8118c15215d8334619, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d4:65:1d:36:ab:5b:8a:65:ec:77:49:3e:d3: a8:ca:7a:80:d0:24:c6:79:52:db:47:4c:89:72:e3: dc:af:a5:68:13:98:0d:2f:87:87:2b:54:59:59:a4: 7f:97:5e:97:4e:9f:8a:e3:27:ca:16:98:5b:40:dc: 6a:b5:16:d7:5b:ff:de:39:fc:d9:57:26:08:1a:70: f7:06:bc:e7:05:8c:73:97:7d:10:1b:c6:0d:4d:74: 4a:76:7d:ab:0e:a7:bc:97:2f:b7:a0:f2:2a:78:86: 41:a6:eb:76:5b:86:f1:63:d0:d0:e0:4e:79:96:1c: 96:3c:7f:81:d6:0c:e4:ae:b4:99:1c:93:95:70:b5: 70:a4:48:1f:1f:0e:04:25:ca:fb:07:5c:b2:4c:63: de:ae:c6:52:48:2b:ed:69:9a:20:aa:5f:ca:b0:4a: fd:1d:91:5f:2e:10:78:b4:6f:64:4a:e4:03:ed:03: 2e:34:61:87:e4:e7:fe:c8:a7:bb:08:c0:4e:f3:ea: 45:ab:61:ea:70:9c:94:e3:65:88:79:8b:1d:41:7f: aa:67:50:4e:68:1b:0e:d4:31:d7:6a:64:ba:33:34: 59:61:12:d4:84:2f:56:20:69:e2:8f:11:c0:0a:0a: 4a:9a:b9:38:a5:31:59:d4:7a:88:49:ba:83:28:77: 9e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3C:20:98:27:B4:EC:E7:56:0B:AF:2D:7F:9D:A5:21:DD:BD:61:41 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f78896e-9c27-4154-9a25-9064134c796a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.255.0/24 Signature Algorithm: sha256WithRSAEncryption ce:ca:fc:eb:84:46:2b:24:cd:e6:c3:62:c2:98:e3:4c:6f:67: 2a:04:d8:b9:c1:bf:bc:dd:d1:44:86:ff:1b:a8:3c:6f:7e:d3: 65:9d:f0:ec:7b:a9:a7:43:39:eb:2d:36:54:5e:66:f3:7e:f9: 7e:57:73:ed:f5:4e:4e:af:13:7d:ed:9f:98:e9:d2:36:90:ec: 3a:f1:a6:6b:ba:fe:d5:e2:a9:1d:13:2e:59:be:d1:b6:0c:75: 31:ec:c3:b7:51:dd:50:2f:2b:70:cc:c5:56:23:49:82:c9:a4: 49:9b:00:7e:85:a7:f6:6a:77:af:ff:1e:a5:a2:b9:06:02:c1: 2d:9b:cd:71:b7:21:7d:cf:5b:e9:b4:e8:64:14:39:61:e5:06: 45:85:57:94:ca:14:12:d4:0d:bc:c1:d6:8d:49:48:de:2f:88: 8a:50:fa:6a:ed:0c:69:96:4d:0a:28:2a:f1:9c:90:56:f7:9f: 1b:4b:ce:87:f7:88:e7:53:23:c1:ab:bb:22:08:27:13:7b:15: b4:2c:92:56:3f:2a:2c:8d:da:e5:31:84:32:42:8f:4a:2b:60: af:c8:5d:c5:ff:46:f9:8e:98:ea:de:d6:64:3a:64:de:90:12: c3:86:a1:13:8d:04:59:09:35:05:c3:06:ad:e4:7a:12:ee:2a: d7:be:2c:5e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURwCZYqn/rwCFeryBFx3HrqIPEu8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDE0MDA5WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDdkYWUyMGEyZTZmN2RkOGZmOGNlNWJkNDYxZjE1OTdl MDlkNTNkYzRmYjFjODExOGMxNTIxNWQ4MzM0NjE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD11GUdNqtbimXsd0k+06jKeoDQJMZ5UttHTIly49yvpWgT mA0vh4crVFlZpH+XXpdOn4rjJ8oWmFtA3Gq1Ftdb/945/NlXJggacPcGvOcFjHOX fRAbxg1NdEp2fasOp7yXL7eg8ip4hkGm63ZbhvFj0NDgTnmWHJY8f4HWDOSutJkc k5VwtXCkSB8fDgQlyvsHXLJMY96uxlJIK+1pmiCqX8qwSv0dkV8uEHi0b2RK5APt Ay40YYfk5/7Ip7sIwE7z6kWrYepwnJTjZYh5ix1Bf6pnUE5oGw7UMddqZLozNFlh EtSEL1YgaeKPEcAKCkqauTilMVnUeohJuoMod54dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTDwgmCe07OdWC68tf52lId29YUEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJmNzg4OTZlLTljMjctNDE1NC05YTI1LTkwNjQxMzRjNzk2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsP8wDQYJKoZIhvcNAQELBQADggEBAM7K/OuERiskzebDYsKY40xvZyoE 2LnBv7zd0USG/xuoPG9+02Wd8Ox7qadDOestNlReZvN++X5Xc+31Tk6vE33tn5jp 0jaQ7Drxpmu6/tXiqR0TLlm+0bYMdTHsw7dR3VAvK3DMxVYjSYLJpEmbAH6Fp/Zq d6//HqWiuQYCwS2bzXG3IX3PW+m06GQUOWHlBkWFV5TKFBLUDbzB1o1JSN4viIpQ +mrtDGmWTQooKvGckFb3nxtLzof3iOdTI8GruyIIJxN7FbQsklY/KiyN2uUxhDJC j0orYK/IXcX/RvmOmOre1mQ6ZN6QEsOGoRONBFkJNQXDBq3kehLuKte+LF4= -----END CERTIFICATE-----Generated at Sun Mar 1 22:34:19 2026 by rpki-client