$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c9955eb-b353-47f1-92e9-9fa09d187037.roa File: 4c9955eb-b353-47f1-92e9-9fa09d187037.roa (raw, json) Hash identifier: X7dcIZwkWWp8Wq4ebARXOyvku2XGb3ttnf88L8qUsME= Subject key identifier: 5C:04:F3:5D:E4:76:AA:C9:F9:D3:13:AE:6A:39:85:CB:15:8C:01:BD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 13B60E3C82E69DC0525A63C76FAC916C45125548 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c9955eb-b353-47f1-92e9-9fa09d187037.roa Signing time: Sat 21 Feb 2026 01:20:07 +0000 ROA not before: Sat 21 Feb 2026 01:20:07 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b6:0e:3c:82:e6:9d:c0:52:5a:63:c7:6f:ac:91:6c:45:12:55:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:20:07 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=f8ade889a080f9849a2b11682134e9f8dd2aaf20344764d4c55b772132e5f8c4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:95:2d:ea:18:6b:58:6e:08:25:dc:7a:b5: 14:1e:cb:ba:65:2e:6e:4c:f6:07:37:0b:d4:27:ec: 02:d0:7d:8f:94:e5:e2:9f:5d:ae:23:bc:2e:37:b1: 82:a1:2b:13:fc:8c:c9:cd:d4:6d:55:e6:62:2f:96: e4:d6:3d:50:ae:e6:c0:b2:96:92:0d:53:65:dd:05: a5:15:95:a6:22:cb:36:a3:af:bd:ec:00:56:81:71: e8:d3:45:aa:01:28:8d:eb:51:73:9d:43:dc:d8:03: dc:b2:6e:17:8c:5f:e9:c7:9d:cc:e6:9f:9a:18:be: fe:fd:5a:a5:29:68:25:be:fe:65:23:b3:e3:39:0a: 0a:56:0d:6f:ba:ec:e7:73:9c:6f:0e:c1:c7:37:33: cb:24:34:78:45:69:c3:1a:03:73:5c:f1:aa:ba:5a: 9e:a9:d0:c2:74:04:e2:8a:29:3d:5e:ca:2a:7d:75: 33:a4:4e:17:34:01:b5:e1:c1:f8:7e:3f:13:d0:76: b3:64:bd:af:6a:d2:75:f6:d9:79:fd:2e:e1:28:31: 05:6f:92:88:e0:9b:3a:91:95:05:ad:a9:3e:1e:12: 43:85:25:1e:18:1b:d5:14:67:e7:1a:75:6e:9b:7e: da:3e:d9:da:d8:e5:61:4e:35:da:b1:24:0d:d8:92: ff:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:04:F3:5D:E4:76:AA:C9:F9:D3:13:AE:6A:39:85:CB:15:8C:01:BD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c9955eb-b353-47f1-92e9-9fa09d187037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.224.0/20 Signature Algorithm: sha256WithRSAEncryption 1f:1c:11:17:eb:11:e5:de:16:00:56:e3:67:78:35:ee:7c:9f: 26:1b:fa:5c:f3:e2:53:d1:1c:b2:3f:41:ce:4c:ab:56:e1:76: eb:f7:35:6d:f4:b9:d5:ea:24:d0:b2:ed:32:0b:34:f0:a5:c4: 6f:8c:25:2b:64:aa:66:3f:d1:ef:8c:12:ab:3d:ad:91:f6:e8: 6f:57:b6:35:91:6a:be:32:b0:3f:04:0c:a3:ec:fc:83:f1:ac: 66:c4:0a:5e:f4:0a:8a:15:d2:97:47:11:36:89:5f:f2:90:de: da:db:a0:42:01:10:ac:69:92:24:3f:aa:9d:9b:b4:5b:89:d3: 0d:5d:b5:a8:ae:d9:eb:4b:37:75:98:df:56:36:e6:20:e7:b7: 71:35:d1:ba:19:f6:26:f7:74:bd:4a:29:ad:7e:3e:fa:ad:00: 36:1e:83:97:bd:53:b7:dc:2c:43:22:ce:6d:c0:95:a7:6d:89: 8e:8e:ae:17:61:0f:29:22:4e:a4:c7:68:b1:79:41:df:f8:e4: 8b:18:ef:2f:b3:c2:02:ac:e6:6f:57:77:3b:f7:6a:bc:15:df: 41:00:94:e9:7e:dc:56:a8:91:27:34:d4:73:d1:93:1d:1e:d2: 22:8f:ab:05:58:7a:1c:84:9f:fb:c8:89:a1:bf:1c:5e:3e:a3: 10:b3:cf:80 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE7YOPILmncBSWmPHb6yRbEUSVUgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDEyMDA3WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmOGFkZTg4OWEwODBmOTg0OWEyYjExNjgyMTM0ZTlmOGRk MmFhZjIwMzQ0NzY0ZDRjNTViNzcyMTMyZTVmOGM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvS5Ut6hhrWG4IJdx6tRQey7plLm5M9gc3C9Qn7ALQfY+U 5eKfXa4jvC43sYKhKxP8jMnN1G1V5mIvluTWPVCu5sCylpINU2XdBaUVlaYiyzaj r73sAFaBcejTRaoBKI3rUXOdQ9zYA9yybheMX+nHnczmn5oYvv79WqUpaCW+/mUj s+M5CgpWDW+67OdznG8Owcc3M8skNHhFacMaA3Nc8aq6Wp6p0MJ0BOKKKT1eyip9 dTOkThc0AbXhwfh+PxPQdrNkva9q0nX22Xn9LuEoMQVvkojgmzqRlQWtqT4eEkOF JR4YG9UUZ+cadW6bfto+2drY5WFONdqxJA3Ykv8dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXATzXeR2qsn50xOuajmFyxWMAb0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjOTk1NWViLWIzNTMtNDdmMS05MmU5LTlmYTA5ZDE4NzAzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASCsOAwDQYJKoZIhvcNAQELBQADggEBAB8cERfrEeXeFgBW42d4Ne58nyYb +lzz4lPRHLI/Qc5Mq1bhduv3NW30udXqJNCy7TILNPClxG+MJStkqmY/0e+MEqs9 rZH26G9XtjWRar4ysD8EDKPs/IPxrGbECl70CooV0pdHETaJX/KQ3trboEIBEKxp kiQ/qp2btFuJ0w1dtaiu2etLN3WY31Y25iDnt3E10boZ9ib3dL1KKa1+PvqtADYe g5e9U7fcLEMizm3AladtiY6OrhdhDykiTqTHaLF5Qd/45IsY7y+zwgKs5m9Xdzv3 arwV30EAlOl+3FaokSc01HPRkx0e0iKPqwVYehyEn/vIiaG/HF4+oxCzz4A= -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:02 2026 by rpki-client