$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4085f065-a4ee-4426-8e45-715fae95ccc0.roa File: 4085f065-a4ee-4426-8e45-715fae95ccc0.roa (raw, json) Hash identifier: fK/XaDF+9SLnwd+CczmTjVOD6zsOUTzsMkZJn5mQ9qM= Subject key identifier: 79:F8:FD:D8:59:A8:EB:CA:E5:EB:97:32:A2:CF:3A:5B:D0:31:09:C9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A86DD924BE013EC63D148A2E34CF6292313E53A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4085f065-a4ee-4426-8e45-715fae95ccc0.roa Signing time: Sat 21 Feb 2026 01:21:03 +0000 ROA not before: Sat 21 Feb 2026 01:21:03 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:86:dd:92:4b:e0:13:ec:63:d1:48:a2:e3:4c:f6:29:23:13:e5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:21:03 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=703e02508b555f46e35abedfc889199f6b1b9f34f07c705459bc94cb940802d6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bb:3d:dc:6d:74:53:8e:d7:2b:22:1c:89:a5: 4a:5d:db:f2:6e:44:c3:d0:f2:fa:1c:43:cf:5c:75: ac:1f:54:ef:3c:7c:d0:e0:1e:3d:33:84:d7:b4:cf: 18:15:4c:61:4f:9f:5f:26:24:a0:b6:22:0a:df:b8: 58:8e:be:32:74:02:3c:6c:27:63:6d:dd:b5:d0:68: a0:eb:1b:dc:ed:c7:56:d0:22:6f:e5:8b:a9:6d:75: 9a:8b:ac:54:e4:cb:27:07:e6:5f:89:e3:2d:82:7e: 4e:83:f5:ec:e3:c9:6f:14:5b:de:0b:ce:a2:12:ab: 8e:0f:30:82:12:63:00:da:2d:b0:38:36:2b:88:b5: 4c:6f:05:5f:7f:52:ef:c7:09:25:be:3f:c3:1f:1b: f5:b1:6f:a1:5f:51:32:b0:6b:f7:ee:ce:dd:ac:c1: 31:28:28:f6:31:4f:72:26:98:e8:e4:fe:20:1b:99: a3:1f:af:5d:7e:79:42:6c:42:b4:8c:bf:f4:37:0c: 09:3c:42:22:a0:1b:40:c8:9a:28:2e:4b:f7:ba:70: 99:b5:13:89:48:fa:f2:5c:3c:f0:27:3f:41:11:0a: e4:0b:b5:26:20:85:71:1a:ef:0c:dd:c5:0c:7c:f0: 7a:15:ec:3a:ac:4a:4d:0e:27:05:bf:65:c8:05:d0: 18:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F8:FD:D8:59:A8:EB:CA:E5:EB:97:32:A2:CF:3A:5B:D0:31:09:C9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4085f065-a4ee-4426-8e45-715fae95ccc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.8.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:5b:c4:0e:78:1f:01:a3:3a:f1:72:3d:14:16:2f:64:e4:34: 94:24:1b:f0:39:03:12:7a:09:7f:ca:7b:1a:9f:5d:e0:dd:95: 85:a3:da:78:b5:ec:f4:76:8f:ee:91:cb:e0:9c:d1:e8:d5:1c: 94:94:e9:e2:1f:09:81:9f:eb:e8:dd:93:af:dd:5d:81:ea:09: 22:5b:b2:01:46:aa:ee:38:30:fe:04:7e:98:76:75:48:d1:a5: 06:c3:5d:0e:44:43:d1:f9:26:2e:01:3d:a6:f8:60:5d:a6:78: 93:aa:9c:f6:f9:08:fd:e3:ce:01:82:ca:b9:50:98:29:a6:4a: ac:ae:5b:9d:72:04:71:f8:12:7a:53:7b:81:e3:6b:3c:40:3b: 82:ff:b7:53:19:9f:f3:80:95:01:50:20:6e:48:02:bf:19:f3: 60:a0:3e:7a:04:60:11:67:7d:8e:a6:35:5f:ca:a1:9d:6e:58: f4:9a:63:79:ce:ec:16:e7:68:d3:a5:c7:74:f6:4b:2f:b1:f1: 7d:47:5d:d3:8f:c5:e1:de:34:de:63:9b:4f:3e:e1:c8:e6:c6: 90:6a:6a:e7:c3:4c:5f:a2:e0:f5:c7:8b:9d:1a:44:04:2b:05: dc:e6:67:6a:9e:d8:75:82:53:42:ab:c4:f0:5f:34:91:88:6c: 81:f6:c1:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWobdkkvgE+xj0Uii40z2KSMT5TowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDEyMTAzWhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MDNlMDI1MDhiNTU1ZjQ2ZTM1YWJlZGZjODg5MTk5ZjZi MWI5ZjM0ZjA3YzcwNTQ1OWJjOTRjYjk0MDgwMmQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkuz3cbXRTjtcrIhyJpUpd2/JuRMPQ8vocQ89cdawfVO88 fNDgHj0zhNe0zxgVTGFPn18mJKC2IgrfuFiOvjJ0AjxsJ2Nt3bXQaKDrG9ztx1bQ Im/li6ltdZqLrFTkyycH5l+J4y2Cfk6D9ezjyW8UW94LzqISq44PMIISYwDaLbA4 NiuItUxvBV9/Uu/HCSW+P8MfG/Wxb6FfUTKwa/fuzt2swTEoKPYxT3ImmOjk/iAb maMfr11+eUJsQrSMv/Q3DAk8QiKgG0DImiguS/e6cJm1E4lI+vJcPPAnP0ERCuQL tSYghXEa7wzdxQx88HoV7DqsSk0OJwW/ZcgF0BgFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUefj92Fmo68rl65cyos86W9AxCckwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQwODVmMDY1LWE0ZWUtNDQyNi04ZTQ1LTcxNWZhZTk1Y2NjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsAgwDQYJKoZIhvcNAQELBQADggEBAItbxA54HwGjOvFyPRQWL2TkNJQk G/A5AxJ6CX/KexqfXeDdlYWj2ni17PR2j+6Ry+Cc0ejVHJSU6eIfCYGf6+jdk6/d XYHqCSJbsgFGqu44MP4Efph2dUjRpQbDXQ5EQ9H5Ji4BPab4YF2meJOqnPb5CP3j zgGCyrlQmCmmSqyuW51yBHH4EnpTe4HjazxAO4L/t1MZn/OAlQFQIG5IAr8Z82Cg PnoEYBFnfY6mNV/KoZ1uWPSaY3nO7BbnaNOlx3T2Sy+x8X1HXdOPxeHeNN5jm08+ 4cjmxpBqaufDTF+i4PXHi50aRAQrBdzmZ2qe2HWCU0KrxPBfNJGIbIH2wRY= -----END CERTIFICATE-----Generated at Mon Mar 2 04:56:33 2026 by rpki-client