$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/718b92b0-64ab-4047-9ec6-881bb78d0eec.roa File: 718b92b0-64ab-4047-9ec6-881bb78d0eec.roa (raw, json) Hash identifier: Y9y+94u7cZkZJPzmg7azXPenAtoPfS9uAy8232VeQ/A= Subject key identifier: 7E:73:90:86:79:F3:B8:E0:5F:8C:BF:CB:CB:F3:C0:49:3D:8B:3B:72 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4D03EEADD21AC3361A65D36D30F0D106F5D1334D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/718b92b0-64ab-4047-9ec6-881bb78d0eec.roa Signing time: Sat 21 Feb 2026 01:21:57 +0000 ROA not before: Sat 21 Feb 2026 01:21:57 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:03:ee:ad:d2:1a:c3:36:1a:65:d3:6d:30:f0:d1:06:f5:d1:33:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:21:57 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=198f643384599d3d3a69870904af0a83e4025aecc41021c9e42bad426f78c8c0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cf:b0:67:96:d1:5e:d2:76:8c:b5:3b:13:17: e9:81:5b:0d:9a:4e:3a:a0:48:d2:bb:9a:ad:ee:88: 66:69:4c:21:68:af:f6:a7:05:ae:1d:59:bd:c2:51: b3:f0:ff:9a:a3:29:30:93:24:0e:0b:1e:85:08:e8: 49:d2:a9:58:b3:aa:4b:97:78:f8:c1:a4:48:b4:9a: 79:44:ca:71:11:61:48:e4:78:2f:4a:07:fc:b2:1e: 7a:f4:22:57:83:6d:3d:bf:7a:bb:c9:a2:bd:fc:84: 58:aa:dc:dc:03:21:05:4f:25:6b:b5:b4:06:db:5a: 33:8f:c5:3d:ad:44:b5:4f:61:12:e0:85:4b:da:18: de:18:9d:a3:21:62:65:9e:e0:50:d3:94:a2:36:af: 11:b7:51:5a:42:15:35:aa:17:7f:97:47:70:37:18: ce:20:55:75:f1:bd:c7:29:98:88:5f:da:0d:ed:67: 73:dd:01:08:80:49:6c:12:37:5d:0e:7d:04:46:a7: c3:d6:f4:69:4f:dc:8e:e8:b6:31:47:e1:4d:4e:aa: 34:f5:d3:9c:1a:8c:20:65:91:33:33:fe:b5:17:e7: 57:dd:25:65:f5:28:64:66:92:00:f0:79:bf:04:66: ec:b5:0d:74:c2:e6:51:02:00:2f:a3:ee:2d:c7:53: eb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:73:90:86:79:F3:B8:E0:5F:8C:BF:CB:CB:F3:C0:49:3D:8B:3B:72 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/718b92b0-64ab-4047-9ec6-881bb78d0eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.64.0/24 Signature Algorithm: sha256WithRSAEncryption 55:90:71:81:31:55:a0:60:c9:cd:43:48:61:62:e2:dc:5f:c9: aa:cd:56:27:7b:77:03:02:70:97:d4:28:93:56:15:5f:75:21: 7c:f6:b2:b7:02:e0:80:e0:49:2a:28:cc:dc:ff:6d:35:92:08: 8b:37:84:65:a1:03:bd:e0:fb:b2:ed:82:77:20:f2:0f:52:fa: 13:59:fe:d5:7e:02:16:0e:9a:a0:90:64:c7:05:47:a2:80:7a: a7:b3:45:61:9b:b6:00:f0:79:19:27:25:95:2e:d7:8b:0b:11: e8:ce:ea:75:1b:57:5d:ab:ed:64:e5:65:8e:47:31:af:09:a4: 06:75:f6:5d:65:0b:ee:bf:44:52:47:b1:d0:0e:2f:f7:b3:20: 20:c9:0e:66:fc:90:5d:b2:72:91:b0:64:8c:1c:b6:57:6b:f2: ed:2a:4c:d4:f6:2e:9a:18:bd:8d:41:b0:dc:7a:74:c5:0e:56: cd:af:2c:c9:2f:63:e3:5f:67:59:f6:f2:a7:6c:28:48:2b:5a: fa:50:cb:63:b0:ef:0e:95:de:22:34:3f:a7:a8:b0:51:c0:a6: bc:12:c5:9b:01:0d:63:43:7d:c6:69:ea:25:76:d0:e5:82:2a: 9a:32:c7:8c:5a:63:8c:f6:88:2f:c5:5f:55:95:e5:9e:60:be: 66:2e:69:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTQPurdIawzYaZdNtMPDRBvXRM00wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDEyMTU3WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOThmNjQzMzg0NTk5ZDNkM2E2OTg3MDkwNGFmMGE4M2U0 MDI1YWVjYzQxMDIxYzllNDJiYWQ0MjZmNzhjOGMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKz7BnltFe0naMtTsTF+mBWw2aTjqgSNK7mq3uiGZpTCFo r/anBa4dWb3CUbPw/5qjKTCTJA4LHoUI6EnSqVizqkuXePjBpEi0mnlEynERYUjk eC9KB/yyHnr0IleDbT2/ervJor38hFiq3NwDIQVPJWu1tAbbWjOPxT2tRLVPYRLg hUvaGN4YnaMhYmWe4FDTlKI2rxG3UVpCFTWqF3+XR3A3GM4gVXXxvccpmIhf2g3t Z3PdAQiASWwSN10OfQRGp8PW9GlP3I7otjFH4U1OqjT105wajCBlkTMz/rUX51fd JWX1KGRmkgDweb8EZuy1DXTC5lECAC+j7i3HU+uJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfnOQhnnzuOBfjL/Ly/PAST2LO3IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcxOGI5MmIwLTY0YWItNDA0Ny05ZWM2LTg4MWJiNzhkMGVlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsEAwDQYJKoZIhvcNAQELBQADggEBAFWQcYExVaBgyc1DSGFi4txfyarN Vid7dwMCcJfUKJNWFV91IXz2srcC4IDgSSoozNz/bTWSCIs3hGWhA73g+7Ltgncg 8g9S+hNZ/tV+AhYOmqCQZMcFR6KAeqezRWGbtgDweRknJZUu14sLEejO6nUbV12r 7WTlZY5HMa8JpAZ19l1lC+6/RFJHsdAOL/ezICDJDmb8kF2ycpGwZIwctldr8u0q TNT2LpoYvY1BsNx6dMUOVs2vLMkvY+NfZ1n28qdsKEgrWvpQy2Ow7w6V3iI0P6eo sFHAprwSxZsBDWNDfcZp6iV20OWCKpoyx4xaY4z2iC/FX1WV5Z5gvmYuaQY= -----END CERTIFICATE-----Generated at Mon Mar 2 00:12:43 2026 by rpki-client