$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a4f3480-053c-4633-9efd-e424130c2ead.roa File: 3a4f3480-053c-4633-9efd-e424130c2ead.roa (raw, json) Hash identifier: u/aldxioqPRuxoxS1Nbtz3XBkcBTPsHTTYmwHpOisfU= Subject key identifier: EA:4F:77:CD:74:A7:AC:FF:F3:88:C8:A1:51:F8:64:C7:FD:B0:5D:63 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7D04868EC84A871E8C58AB1B86B03DD8D23B83D4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a4f3480-053c-4633-9efd-e424130c2ead.roa Signing time: Sat 21 Feb 2026 00:30:48 +0000 ROA not before: Sat 21 Feb 2026 00:30:48 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:04:86:8e:c8:4a:87:1e:8c:58:ab:1b:86:b0:3d:d8:d2:3b:83:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:30:48 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=582d7576bcb0deaae99a0e9e225381197a3e6e510ba2dc1b9dab96cc29305595, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f3:8f:d7:e3:44:f3:24:59:69:0b:66:88:30: 40:ec:06:ed:ff:d4:8a:20:c8:cb:7f:36:84:77:af: 03:91:90:2b:ba:76:8f:74:9d:00:d4:26:2f:95:f8: 61:21:74:90:f3:b6:ef:c1:05:2a:c3:5e:50:3c:9f: 74:a9:07:fa:09:5d:94:12:bc:4d:02:6b:c3:e8:d1: 7d:f7:ac:ee:59:77:b9:a2:70:23:4f:39:d5:85:c1: 40:ad:25:fa:40:b0:3a:fd:bc:cf:a2:03:8b:1e:53: ed:b5:31:b9:29:8b:e4:57:2b:3d:a3:06:6e:c1:3e: 90:2c:29:90:8b:07:75:8d:c2:f8:be:ea:70:e6:f4: 23:48:34:f4:73:06:6e:13:64:30:20:27:06:5a:6f: af:12:39:8e:dc:5b:bf:fc:aa:ec:cd:cc:8f:19:3d: 90:d9:21:96:38:06:27:1f:16:b6:b9:1e:24:f9:a3: 3b:83:41:df:c3:e9:8f:49:82:0f:97:e2:66:1a:d4: 3f:0b:a6:6b:69:54:e6:a4:84:78:57:0e:4e:34:04: a8:26:78:ff:fc:7f:dc:e6:e9:1d:be:79:ce:13:d0: 2e:98:cd:86:4f:35:b3:03:53:fb:5c:d2:5f:51:8f: e9:82:75:67:77:40:8b:23:1e:6c:96:d0:c1:d2:c3: f9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4F:77:CD:74:A7:AC:FF:F3:88:C8:A1:51:F8:64:C7:FD:B0:5D:63 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a4f3480-053c-4633-9efd-e424130c2ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.54.0/24 Signature Algorithm: sha256WithRSAEncryption 36:bd:e1:fb:c3:ea:d5:c6:93:ea:e2:fd:ad:dc:0a:18:36:83: 57:a6:56:45:24:d8:7c:1f:e4:4b:02:dd:9b:c6:f3:2e:7e:ba: ac:58:7e:8f:da:67:62:4d:3b:65:f3:45:1e:c7:d6:40:7e:e3: cc:1b:f9:4b:cb:12:f7:a0:e6:17:53:e3:d4:70:4d:3a:36:dd: 8b:23:e5:e3:90:b1:3c:f3:4c:af:d8:73:1c:fd:6f:0c:60:5a: ce:d0:62:47:b0:9f:71:da:2d:b5:59:14:51:6b:d2:17:9d:ba: 78:9e:13:d3:dd:44:2c:3f:66:54:40:e1:b4:73:e3:2d:b1:dd: ad:b2:f4:f7:26:e9:88:79:bb:af:8a:c3:02:b4:b3:c7:02:6d: 6d:99:b3:6f:4d:3e:3b:02:93:59:bf:53:58:54:63:3d:0e:d9: 87:9e:f4:61:62:86:c9:4b:66:ea:c3:e9:8b:bc:55:b6:6f:00: 4d:57:da:21:05:93:c8:4e:1c:43:6b:42:c4:21:c6:d0:17:7a: cb:c8:d1:db:6d:26:15:f5:c8:3e:9f:6e:14:3f:5f:f1:c0:54: a0:ef:7b:53:18:80:41:11:24:a5:9f:2b:96:40:6e:7a:1b:48: df:99:69:2b:fd:6b:98:ff:db:fb:2f:a2:dd:f5:9e:19:8a:2c: 2c:44:ee:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfQSGjshKhx6MWKsbhrA92NI7g9QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDAzMDQ4WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODJkNzU3NmJjYjBkZWFhZTk5YTBlOWUyMjUzODExOTdh M2U2ZTUxMGJhMmRjMWI5ZGFiOTZjYzI5MzA1NTk1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCc84/X40TzJFlpC2aIMEDsBu3/1IogyMt/NoR3rwORkCu6 do90nQDUJi+V+GEhdJDztu/BBSrDXlA8n3SpB/oJXZQSvE0Ca8Po0X33rO5Zd7mi cCNPOdWFwUCtJfpAsDr9vM+iA4seU+21Mbkpi+RXKz2jBm7BPpAsKZCLB3WNwvi+ 6nDm9CNINPRzBm4TZDAgJwZab68SOY7cW7/8quzNzI8ZPZDZIZY4BicfFra5HiT5 ozuDQd/D6Y9Jgg+X4mYa1D8LpmtpVOakhHhXDk40BKgmeP/8f9zm6R2+ec4T0C6Y zYZPNbMDU/tc0l9Rj+mCdWd3QIsjHmyW0MHSw/krAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6k93zXSnrP/ziMihUfhkx/2wXWMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNhNGYzNDgwLTA1M2MtNDYzMy05ZWZkLWU0MjQxMzBjMmVhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsDYwDQYJKoZIhvcNAQELBQADggEBADa94fvD6tXGk+ri/a3cChg2g1em VkUk2Hwf5EsC3ZvG8y5+uqxYfo/aZ2JNO2XzRR7H1kB+48wb+UvLEveg5hdT49Rw TTo23Ysj5eOQsTzzTK/Ycxz9bwxgWs7QYkewn3HaLbVZFFFr0hedunieE9PdRCw/ ZlRA4bRz4y2x3a2y9Pcm6Yh5u6+KwwK0s8cCbW2Zs29NPjsCk1m/U1hUYz0O2Yee 9GFihslLZurD6Yu8VbZvAE1X2iEFk8hOHENrQsQhxtAXesvI0dttJhX1yD6fbhQ/ X/HAVKDve1MYgEERJKWfK5ZAbnobSN+ZaSv9a5j/2/svot31nhmKLCxE7pI= -----END CERTIFICATE-----Generated at Sun Mar 1 22:12:25 2026 by rpki-client