$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d0f9171-43f9-440d-b156-d5a204a3cf6a.roa File: 4d0f9171-43f9-440d-b156-d5a204a3cf6a.roa (raw, json) Hash identifier: wMS2H04ayK6Rkk+tGFdwcRwOzaAu+tz06sHZfsE32wc= Subject key identifier: 2D:0A:64:73:7C:1D:FC:E7:42:A6:4C:57:4B:2C:B1:D4:52:C4:EF:A4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0A39A83E0C0D189E6C935AD64C0F936E402CBF4B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d0f9171-43f9-440d-b156-d5a204a3cf6a.roa Signing time: Tue 24 Feb 2026 02:31:37 +0000 ROA not before: Tue 24 Feb 2026 02:31:37 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 1.178.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:39:a8:3e:0c:0d:18:9e:6c:93:5a:d6:4c:0f:93:6e:40:2c:bf:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 02:31:37 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=df132f11b8820dca0b54c7d534ec148f5af5b3f641c338ac3b45637204519ab5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:14:8d:86:9f:9d:9e:cd:8a:d1:16:82:64:a7: 4c:f7:b8:6a:8f:0b:56:e3:13:51:76:18:8b:30:66: e8:81:e3:47:70:41:e5:3b:7d:71:67:fa:fb:ef:ba: aa:a3:ce:40:7e:9d:32:03:7d:d1:02:8d:85:2a:95: 61:08:cc:5d:13:b3:18:71:7c:13:8d:c1:5b:4f:08: 4e:59:fa:08:cd:9b:bc:9a:46:d8:8a:28:c7:b1:73: a7:7d:84:02:3e:ce:af:62:f1:21:6a:60:d7:58:49: c4:88:7c:26:c4:0a:b9:6d:af:25:cf:db:a1:fb:3a: 38:20:a2:15:10:db:56:29:45:7e:a0:99:ec:fd:77: 35:91:af:24:5c:1d:28:6f:51:67:fe:bf:3c:3b:ac: 8f:cd:b5:36:56:aa:8a:de:e7:25:ca:51:99:d2:61: f2:af:5e:78:7c:79:ee:a5:f2:55:11:02:c1:70:9d: 8b:c2:1b:3d:ff:64:bb:a4:96:9d:03:de:dd:ed:0e: e5:3f:c5:b6:2d:50:d5:01:61:59:9e:ec:c3:88:05: b0:13:10:9e:a6:ff:79:35:09:6a:e8:7b:10:5b:12: 8e:15:7f:c6:e3:95:4e:e5:58:04:1e:f8:f7:a5:e1: 1c:b8:7a:fb:31:80:a4:25:94:d6:c4:41:ad:1c:d4: 0a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0A:64:73:7C:1D:FC:E7:42:A6:4C:57:4B:2C:B1:D4:52:C4:EF:A4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d0f9171-43f9-440d-b156-d5a204a3cf6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.178.16.0/20 Signature Algorithm: sha256WithRSAEncryption d0:9c:e5:e2:1b:99:56:f6:f1:35:d9:b8:e3:0c:96:a9:e7:97: 41:dd:01:16:f0:f7:85:c6:61:c4:e4:51:be:b9:6d:23:68:79: 71:2d:53:21:f2:ac:19:da:66:6e:ea:ce:5c:4f:59:ce:10:b4: 74:b7:ec:7f:3c:36:ad:f8:ae:7b:7e:cd:56:26:5a:78:31:29: 18:1e:ef:18:1f:c9:a1:39:c7:1b:99:cd:36:f5:c1:5d:10:c0: 7d:a4:1e:21:d8:5a:4a:d9:3a:b5:93:f3:49:7c:7d:9e:6c:ee: 54:9c:dd:b8:40:a8:b5:58:d4:58:a3:cb:5d:ec:3e:8f:71:81: f2:16:49:b0:75:c6:8f:4c:1b:ab:64:cd:00:d5:13:e6:2a:fb: db:0c:71:b1:6f:d2:ae:37:96:50:00:2e:44:87:15:33:f6:a9: eb:9d:72:0c:86:5d:6b:06:51:cc:e3:b1:49:71:e4:07:d3:3d: 43:b5:a8:c4:94:d6:42:26:fb:69:8b:29:39:f5:53:cc:40:6b: 69:3f:f1:c0:ff:71:56:e2:fc:fa:b9:02:f7:8b:d0:ca:e0:5f: ac:fa:4b:02:45:87:09:af:b6:c4:8c:c0:68:ea:7f:e5:3f:a9: 4d:98:27:ab:a6:33:31:7a:73:65:32:79:5f:fe:1a:11:85:9f: a8:03:06:3c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCjmoPgwNGJ5sk1rWTA+TbkAsv0swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDIzMTM3WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjEzMmYxMWI4ODIwZGNhMGI1NGM3ZDUzNGVjMTQ4ZjVh ZjViM2Y2NDFjMzM4YWMzYjQ1NjM3MjA0NTE5YWI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLFI2Gn52ezYrRFoJkp0z3uGqPC1bjE1F2GIswZuiB40dw QeU7fXFn+vvvuqqjzkB+nTIDfdECjYUqlWEIzF0TsxhxfBONwVtPCE5Z+gjNm7ya RtiKKMexc6d9hAI+zq9i8SFqYNdYScSIfCbECrltryXP26H7OjggohUQ21YpRX6g mez9dzWRryRcHShvUWf+vzw7rI/NtTZWqore5yXKUZnSYfKvXnh8ee6l8lURAsFw nYvCGz3/ZLuklp0D3t3tDuU/xbYtUNUBYVme7MOIBbATEJ6m/3k1CWroexBbEo4V f8bjlU7lWAQe+Pel4Ry4evsxgKQllNbEQa0c1Ap5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULQpkc3wd/OdCpkxXSyyx1FLE76QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRkMGY5MTcxLTQzZjktNDQwZC1iMTU2LWQ1YTIwNGEzY2Y2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBshAwDQYJKoZIhvcNAQELBQADggEBANCc5eIbmVb28TXZuOMMlqnnl0Hd ARbw94XGYcTkUb65bSNoeXEtUyHyrBnaZm7qzlxPWc4QtHS37H88Nq34rnt+zVYm WngxKRge7xgfyaE5xxuZzTb1wV0QwH2kHiHYWkrZOrWT80l8fZ5s7lSc3bhAqLVY 1Fijy13sPo9xgfIWSbB1xo9MG6tkzQDVE+Yq+9sMcbFv0q43llAALkSHFTP2qeud cgyGXWsGUczjsUlx5AfTPUO1qMSU1kIm+2mLKTn1U8xAa2k/8cD/cVbi/Pq5AveL 0MrgX6z6SwJFhwmvtsSMwGjqf+U/qU2YJ6umMzF6c2UyeV/+GhGFn6gDBjw= -----END CERTIFICATE-----Generated at Sun Mar 1 22:06:43 2026 by rpki-client