$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38ac66a3-78c0-4403-b446-119cf320b794.roa File: 38ac66a3-78c0-4403-b446-119cf320b794.roa (raw, json) Hash identifier: zTmSbhmUrojkTOhohHNeIbER5i7myaYF1x2XjfT0I2o= Subject key identifier: 67:AB:4D:6E:23:78:99:45:1A:2E:D5:EC:05:59:7D:78:78:E9:95:D9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 477ED629F2DA33958E8F8D74F27E97669EB29569 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38ac66a3-78c0-4403-b446-119cf320b794.roa Signing time: Wed 18 Feb 2026 00:21:36 +0000 ROA not before: Wed 18 Feb 2026 00:21:36 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 124.25.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:7e:d6:29:f2:da:33:95:8e:8f:8d:74:f2:7e:97:66:9e:b2:95:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 18 00:21:36 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=2e7c04ea556e3d5bdcb1e02a195c397f12d78504b328a02f677fe71d6f726659, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:82:74:36:77:7b:a7:33:18:9c:f9:e2:57:77: 15:91:3d:45:d6:67:81:9a:dc:97:f1:d9:0a:f9:65: b8:89:19:8c:c1:fb:96:61:43:8a:1a:4c:be:0b:f2: e4:36:1b:39:91:25:c5:7d:9e:59:c2:d9:7f:48:96: 9e:2b:2c:39:ff:eb:55:cd:66:89:df:d0:ee:2d:19: 06:fa:d8:e4:9c:95:e8:3c:a6:ba:9a:9c:60:04:ad: 83:4c:c2:ab:26:16:08:c6:cd:82:6e:dd:e6:1d:4f: f7:e4:07:53:a2:81:f8:e6:7b:13:5c:72:b8:15:91: cd:8d:bf:35:fb:a3:11:32:4c:b4:3d:71:04:2f:eb: e1:77:1f:b8:90:ac:fa:4e:eb:b3:c9:5b:7c:c8:ab: fd:70:49:0e:c6:ed:5f:e0:46:11:db:b9:78:0f:59: d9:0e:53:1f:9d:6e:79:1f:6b:6e:72:04:0d:3c:7a: f8:8a:a7:45:e9:66:ff:9a:94:02:f0:77:ec:b3:c0: 68:72:4e:7b:0a:dd:28:33:cd:05:f0:ab:d2:e5:2e: 0e:dd:fe:a2:44:ac:55:96:d6:c0:9b:c8:0c:3f:41: 07:ea:db:b4:7e:41:94:83:ae:cd:0b:7e:35:1f:e7: 12:5c:8f:44:ce:cf:08:9e:63:95:fb:89:13:79:11: db:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AB:4D:6E:23:78:99:45:1A:2E:D5:EC:05:59:7D:78:78:E9:95:D9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38ac66a3-78c0-4403-b446-119cf320b794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.25.128.0/17 Signature Algorithm: sha256WithRSAEncryption 19:e6:a5:57:1b:6d:df:28:7d:9b:73:38:ba:44:72:02:ee:e5: 95:13:ce:74:23:28:1b:8e:ad:df:cd:42:1e:09:d4:64:6b:6d: bc:be:d7:01:d7:03:05:51:a1:f0:8e:57:8c:fd:97:1c:e0:59: 3f:40:5e:f7:df:58:ce:aa:58:d3:5c:3d:1b:f7:2e:d8:6b:ae: 98:2e:cc:53:10:53:32:e8:1d:bc:58:27:35:73:d7:30:4b:c4: 1c:05:a2:1b:cf:0b:50:e7:77:ed:c9:63:03:bd:a5:a7:cf:82: 53:7e:81:8a:ed:59:0d:2f:bc:7a:01:e8:40:3a:62:93:f0:53: 49:11:fc:a9:20:c1:42:0a:f0:6d:0d:03:65:3a:54:e9:49:6d: 71:c2:43:5f:47:fb:cc:00:77:26:12:59:a2:91:58:65:df:c5: 2c:0e:01:5a:59:1f:aa:c5:ee:8b:11:64:40:00:0d:e2:ea:1b: 8d:85:27:ff:22:fe:5f:a4:2d:53:14:89:f6:e9:0d:12:c0:60: f0:19:e0:a6:40:9c:e0:ed:d7:13:05:c5:1c:d9:12:89:75:2a: cf:44:54:39:67:ff:8f:94:77:f0:a9:97:74:96:98:d2:1f:9f: d6:d5:0f:fc:bd:21:44:a2:e1:4c:e5:32:4f:46:3c:8c:ab:40: db:2e:00:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR37WKfLaM5WOj4108n6XZp6ylWkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE4MDAyMTM2WhcNMjYwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTdjMDRlYTU1NmUzZDViZGNiMWUwMmExOTVjMzk3ZjEy ZDc4NTA0YjMyOGEwMmY2NzdmZTcxZDZmNzI2NjU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDygnQ2d3unMxic+eJXdxWRPUXWZ4Ga3Jfx2Qr5ZbiJGYzB +5ZhQ4oaTL4L8uQ2GzmRJcV9nlnC2X9Ilp4rLDn/61XNZonf0O4tGQb62OScleg8 prqanGAErYNMwqsmFgjGzYJu3eYdT/fkB1OigfjmexNccrgVkc2NvzX7oxEyTLQ9 cQQv6+F3H7iQrPpO67PJW3zIq/1wSQ7G7V/gRhHbuXgPWdkOUx+dbnkfa25yBA08 eviKp0XpZv+alALwd+yzwGhyTnsK3SgzzQXwq9LlLg7d/qJErFWW1sCbyAw/QQfq 27R+QZSDrs0LfjUf5xJcj0TOzwieY5X7iRN5EdshAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZ6tNbiN4mUUaLtXsBVl9eHjpldkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4YWM2NmEzLTc4YzAtNDQwMy1iNDQ2LTExOWNmMzIwYjc5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAd8GYAwDQYJKoZIhvcNAQELBQADggEBABnmpVcbbd8ofZtzOLpEcgLu5ZUT znQjKBuOrd/NQh4J1GRrbby+1wHXAwVRofCOV4z9lxzgWT9AXvffWM6qWNNcPRv3 LthrrpguzFMQUzLoHbxYJzVz1zBLxBwFohvPC1Dnd+3JYwO9pafPglN+gYrtWQ0v vHoB6EA6YpPwU0kR/KkgwUIK8G0NA2U6VOlJbXHCQ19H+8wAdyYSWaKRWGXfxSwO AVpZH6rF7osRZEAADeLqG42FJ/8i/l+kLVMUifbpDRLAYPAZ4KZAnODt1xMFxRzZ Eol1Ks9EVDln/4+Ud/Cpl3SWmNIfn9bVD/y9IUSi4UzlMk9GPIyrQNsuABI= -----END CERTIFICATE-----Generated at Mon Mar 2 00:17:38 2026 by rpki-client