$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38154d7b-bec9-41f1-9633-f666ed70e4d5.roa File: 38154d7b-bec9-41f1-9633-f666ed70e4d5.roa (raw, json) Hash identifier: ZmAXsdUYL78Kv4ESaoW3GJ+b3v35CPDi1CNzZhASXRs= Subject key identifier: 12:C8:12:27:37:0E:A1:A6:27:91:CA:67:74:38:5A:66:29:BC:95:5A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2F67501443B82197D621C40C6FCFDB7B496D8AA4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38154d7b-bec9-41f1-9633-f666ed70e4d5.roa Signing time: Sat 21 Feb 2026 01:31:33 +0000 ROA not before: Sat 21 Feb 2026 01:31:33 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:67:50:14:43:b8:21:97:d6:21:c4:0c:6f:cf:db:7b:49:6d:8a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:31:33 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=3f726a9a79c9adbfc0b818c1340d136cd523aee9ef021f379fff64055b5e00d5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7f:8c:bf:67:0a:7a:ac:85:ea:ef:5e:b4:7d: 64:ae:2c:4b:09:d0:87:30:bf:8f:bd:1f:2c:96:9a: 35:b1:7e:e2:74:71:08:5a:7f:a8:7c:e5:7d:d9:99: 6d:4f:aa:96:62:b2:30:bd:2a:6a:d6:9e:43:bd:a3: a4:90:b0:38:f0:68:de:dc:a1:4d:95:c9:d2:f7:8c: 8a:07:67:2f:bc:90:fb:36:ea:8b:9e:26:8d:c3:9d: 34:4a:83:a9:f2:b7:6f:07:d5:0a:92:35:5d:25:1d: 48:fc:cb:20:c2:ea:9e:55:cd:67:da:00:25:5d:4e: 35:3e:96:de:ce:5b:60:36:c2:4d:c5:51:b4:4a:c6: 60:69:c7:ec:08:5b:9a:f6:f1:8d:58:26:c4:4e:b5: 2e:95:47:f5:b2:f7:b3:1d:0c:a0:0d:2d:c7:ea:49: bd:b8:a0:a4:f6:2a:0e:cd:ad:ef:46:15:d8:1f:c8: a5:73:30:61:0f:e7:d0:0c:89:6d:e3:a9:30:18:74: c7:ab:88:94:01:22:b1:0e:b2:b4:db:c7:7a:fc:48: b5:64:df:9a:3e:a5:be:21:94:69:9f:c3:00:c4:3a: ff:e4:c3:dd:a6:32:5a:0d:4a:b7:5a:7f:27:a1:89: 7d:14:a9:5f:96:7e:5f:d5:99:91:4d:fb:e9:94:f7: df:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C8:12:27:37:0E:A1:A6:27:91:CA:67:74:38:5A:66:29:BC:95:5A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38154d7b-bec9-41f1-9633-f666ed70e4d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.187.0/24 Signature Algorithm: sha256WithRSAEncryption 59:bf:c1:5b:95:04:86:a1:97:04:3e:fb:71:1a:1b:ea:a8:c1: cf:dc:14:ff:ac:59:e5:ba:50:cb:37:a8:ee:e5:56:ca:1b:53: b1:ea:d1:5c:ef:8b:7a:f6:76:ad:22:bd:e4:f7:a5:51:0f:dc: 3b:88:6b:3d:eb:36:c7:67:44:ae:22:29:ee:6e:df:7d:4d:0f: 03:1a:5f:8a:01:09:d8:86:64:e6:c3:fb:e8:cd:3c:94:91:07: 47:c2:c8:43:cd:c8:77:de:b4:d6:97:1f:25:ed:ad:25:4e:e2: fa:32:af:f2:45:f4:dc:26:1d:c6:67:25:a7:8f:12:24:50:e9: b8:a6:94:59:03:b5:6a:bd:3b:dd:0e:8f:04:62:5e:f3:1e:54: 10:b5:c1:85:48:5f:56:b6:0d:21:8d:e0:5d:01:56:b1:7e:d5: 1f:79:b1:2a:66:88:2a:81:fd:9d:c1:3e:f9:42:59:1b:68:52: f1:44:18:69:27:e1:c9:18:74:29:cc:e9:27:01:00:66:20:84: 76:f5:df:4c:f3:14:93:89:5f:79:92:76:76:aa:58:34:f4:bf: 68:e6:3d:96:6d:ac:40:3b:7a:b2:aa:ba:13:8f:3f:46:1a:5a: ff:db:ac:41:bd:61:d1:13:09:fb:23:c1:2b:d7:cc:68:cd:20: 6f:f0:83:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL2dQFEO4IZfWIcQMb8/be0ltiqQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDEzMTMzWhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZjcyNmE5YTc5YzlhZGJmYzBiODE4YzEzNDBkMTM2Y2Q1 MjNhZWU5ZWYwMjFmMzc5ZmZmNjQwNTViNWUwMGQ1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2f4y/Zwp6rIXq7160fWSuLEsJ0Icwv4+9HyyWmjWxfuJ0 cQhaf6h85X3ZmW1PqpZisjC9KmrWnkO9o6SQsDjwaN7coU2VydL3jIoHZy+8kPs2 6oueJo3DnTRKg6nyt28H1QqSNV0lHUj8yyDC6p5VzWfaACVdTjU+lt7OW2A2wk3F UbRKxmBpx+wIW5r28Y1YJsROtS6VR/Wy97MdDKANLcfqSb24oKT2Kg7Nre9GFdgf yKVzMGEP59AMiW3jqTAYdMeriJQBIrEOsrTbx3r8SLVk35o+pb4hlGmfwwDEOv/k w92mMloNSrdafyehiX0UqV+Wfl/VmZFN++mU99/XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEsgSJzcOoaYnkcpndDhaZim8lVowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4MTU0ZDdiLWJlYzktNDFmMS05NjMzLWY2NjZlZDcwZTRkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsLswDQYJKoZIhvcNAQELBQADggEBAFm/wVuVBIahlwQ++3EaG+qowc/c FP+sWeW6UMs3qO7lVsobU7Hq0Vzvi3r2dq0iveT3pVEP3DuIaz3rNsdnRK4iKe5u 331NDwMaX4oBCdiGZObD++jNPJSRB0fCyEPNyHfetNaXHyXtrSVO4voyr/JF9Nwm HcZnJaePEiRQ6bimlFkDtWq9O90OjwRiXvMeVBC1wYVIX1a2DSGN4F0BVrF+1R95 sSpmiCqB/Z3BPvlCWRtoUvFEGGkn4ckYdCnM6ScBAGYghHb130zzFJOJX3mSdnaq WDT0v2jmPZZtrEA7erKquhOPP0YaWv/brEG9YdETCfsjwSvXzGjNIG/wgzY= -----END CERTIFICATE-----Generated at Mon Mar 2 06:49:18 2026 by rpki-client