$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a9e0461-1eac-46f7-a3a8-d886a8271805.roa File: 7a9e0461-1eac-46f7-a3a8-d886a8271805.roa (raw, json) Hash identifier: B9nh4orOrGSKOXLtzljkkp6PN+k7SdFuHYpoLT+CcOk= Subject key identifier: 86:3F:32:F2:B1:6F:91:2A:E7:45:84:1C:B8:D2:CF:F5:0D:4A:AB:4F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 69142C57252CA682924518B0A42CA6F30727EF87 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a9e0461-1eac-46f7-a3a8-d886a8271805.roa Signing time: Fri 13 Feb 2026 01:20:55 +0000 ROA not before: Fri 13 Feb 2026 01:20:55 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.144.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:14:2c:57:25:2c:a6:82:92:45:18:b0:a4:2c:a6:f3:07:27:ef:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 13 01:20:55 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=4f9ffc743dab73d23a9095128ec2eb5c44dc7a387011dd05be09f35390a4a5b5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d2:79:7c:dd:62:e7:1a:45:8c:f0:61:b2:f9: 2c:1e:9f:9e:81:25:15:7a:64:14:25:94:25:14:b8: 89:ab:59:31:6b:6e:5e:27:8a:96:88:31:3e:66:bf: 4a:9e:23:f6:53:66:ab:73:21:6d:ce:ed:8e:97:12: 62:85:ef:a3:77:a2:79:28:ca:6d:ae:fa:5a:7a:bc: 16:c0:79:2f:02:87:f6:6b:66:36:fd:1d:01:40:64: 03:07:21:6b:43:d0:d1:58:02:c0:e3:9f:5c:c4:b6: 35:5b:42:19:af:3c:40:5c:0d:91:c0:4e:27:87:44: 4f:30:f8:51:5e:be:8b:af:c1:63:b3:35:87:8f:53: 79:78:0a:aa:10:4c:21:ef:5d:23:e0:4d:62:01:d4: 78:25:c4:a9:f4:07:0e:34:1d:7e:05:2d:dd:90:05: 2d:8a:a5:e4:7e:df:e6:b3:f3:10:c6:94:f6:85:96: 2e:5f:20:57:90:27:41:69:6d:e7:e0:8e:ec:15:90: c8:db:f2:ed:e2:f1:8a:92:0f:f8:7d:dc:c9:99:57: e6:5f:df:7d:19:d3:54:31:bc:09:ab:95:ea:b5:57: 74:5f:78:ed:80:d1:61:03:90:c2:75:b7:0e:d5:87: 5b:80:f9:3a:c2:6d:2e:ca:b1:cd:2e:fd:6d:80:40: 64:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3F:32:F2:B1:6F:91:2A:E7:45:84:1C:B8:D2:CF:F5:0D:4A:AB:4F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a9e0461-1eac-46f7-a3a8-d886a8271805.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.144.88.0/21 Signature Algorithm: sha256WithRSAEncryption af:d9:99:8d:a0:23:ea:e9:63:05:45:3a:7e:9d:15:8f:74:d6: c1:b2:6f:4d:c3:d7:8b:44:e3:79:4d:ab:fd:30:e8:9e:7c:3f: d0:40:1a:ea:04:0c:c7:5b:76:d5:68:9f:4a:8f:5c:83:1d:66: bc:bd:16:be:20:9c:6e:63:a2:07:60:0b:a2:16:1f:8a:68:44: c7:6b:f0:2c:78:9d:89:91:ac:59:60:dd:dc:14:ef:43:d4:21: a2:19:6e:21:b2:9a:4b:57:95:28:1d:4d:9f:14:20:ee:08:25: 39:93:f1:e8:6c:de:b8:da:e7:14:52:f0:1e:cc:b8:55:16:ae: a7:00:65:7f:74:2a:40:08:ac:14:dd:7b:6c:d1:ec:f4:0f:54: 9c:1d:1a:6a:76:e7:03:8e:74:08:14:59:da:95:0e:fd:b2:d2: d8:8a:1f:7a:59:2f:d2:0c:f0:24:b0:16:ec:15:35:e7:52:b0: a1:c6:88:eb:a3:f2:6c:f8:4d:fc:de:4f:a9:71:c5:d7:c9:11: c3:89:82:c2:1f:92:f8:fb:8f:d0:59:e7:7e:f0:46:e0:e7:99: d3:c5:9d:cb:3f:85:75:45:14:8a:fd:81:53:b7:a3:3a:72:21: ad:f7:a4:b4:43:5d:5e:47:fb:18:d5:a8:dd:0c:22:a5:03:22: 81:df:7c:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaRQsVyUspoKSRRiwpCym8wcn74cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEzMDEyMDU1WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZjlmZmM3NDNkYWI3M2QyM2E5MDk1MTI4ZWMyZWI1YzQ0 ZGM3YTM4NzAxMWRkMDViZTA5ZjM1MzkwYTRhNWI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDc0nl83WLnGkWM8GGy+Swen56BJRV6ZBQllCUUuImrWTFr bl4nipaIMT5mv0qeI/ZTZqtzIW3O7Y6XEmKF76N3onkoym2u+lp6vBbAeS8Ch/Zr Zjb9HQFAZAMHIWtD0NFYAsDjn1zEtjVbQhmvPEBcDZHATieHRE8w+FFevouvwWOz NYePU3l4CqoQTCHvXSPgTWIB1HglxKn0Bw40HX4FLd2QBS2KpeR+3+az8xDGlPaF li5fIFeQJ0FpbefgjuwVkMjb8u3i8YqSD/h93MmZV+Zf330Z01QxvAmrleq1V3Rf eO2A0WEDkMJ1tw7Vh1uA+TrCbS7Ksc0u/W2AQGQ3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhj8y8rFvkSrnRYQcuNLP9Q1Kq08wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdhOWUwNDYxLTFlYWMtNDZmNy1hM2E4LWQ4ODZhODI3MTgwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMNkFgwDQYJKoZIhvcNAQELBQADggEBAK/ZmY2gI+rpYwVFOn6dFY901sGy b03D14tE43lNq/0w6J58P9BAGuoEDMdbdtVon0qPXIMdZry9Fr4gnG5jogdgC6IW H4poRMdr8Cx4nYmRrFlg3dwU70PUIaIZbiGymktXlSgdTZ8UIO4IJTmT8ehs3rja 5xRS8B7MuFUWrqcAZX90KkAIrBTde2zR7PQPVJwdGmp25wOOdAgUWdqVDv2y0tiK H3pZL9IM8CSwFuwVNedSsKHGiOuj8mz4TfzeT6lxxdfJEcOJgsIfkvj7j9BZ537w RuDnmdPFncs/hXVFFIr9gVO3ozpyIa33pLRDXV5H+xjVqN0MIqUDIoHffLc= -----END CERTIFICATE-----Generated at Mon Mar 2 00:12:14 2026 by rpki-client