$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e91e8fa-d27d-476a-8013-7e291eb9fefd.roa File: 7e91e8fa-d27d-476a-8013-7e291eb9fefd.roa (raw, json) Hash identifier: FXyY0mtQMUzAfkcBHLqSJkzuuUMZRNHaNnWKu3Scl6c= Subject key identifier: 1E:4B:98:68:A2:AE:CE:ED:18:9D:0D:56:57:E8:BC:D0:41:D2:4C:C1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 621612645EF0F363EA92EDDA8F2C901DFF81F889 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e91e8fa-d27d-476a-8013-7e291eb9fefd.roa Signing time: Fri 13 Feb 2026 00:30:39 +0000 ROA not before: Fri 13 Feb 2026 00:30:39 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 13.128.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:16:12:64:5e:f0:f3:63:ea:92:ed:da:8f:2c:90:1d:ff:81:f8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 13 00:30:39 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=ded723eee54cbe640f974685d853a6bc0bad426808722d2e7c2e0f3439332fe1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:d7:94:44:78:6d:19:96:58:bf:20:c6:ff: eb:c1:7e:3b:63:c5:a0:98:d3:fc:03:c6:89:7f:09: 3d:d0:3e:86:74:0a:cc:c2:b2:3c:aa:1f:0e:8f:4c: b2:6f:75:97:7b:97:3e:18:1f:43:90:b2:d9:c4:e0: 13:d9:08:34:4a:45:30:fa:af:33:98:79:06:d2:dc: 10:5f:21:b3:c1:70:10:32:27:0d:3e:ca:56:67:22: b0:ab:b5:3c:e8:29:2e:f4:16:a9:3c:b4:1a:72:c3: fc:a6:cc:14:48:4f:2e:07:48:ff:21:42:81:b4:e4: e5:c4:11:90:41:c8:34:e3:f2:60:0f:60:07:bc:42: 50:df:9b:7d:4a:2f:23:c8:53:c9:b7:a4:4d:21:c9: d6:ae:53:1c:64:24:46:2e:e7:b4:61:fa:b6:99:22: 8a:82:4f:1a:f5:f2:03:8d:c9:e7:fc:45:b4:49:14: d5:7a:88:64:c5:1a:ea:1c:63:c6:24:28:ea:77:22: da:f5:74:3f:6f:fa:7a:21:1e:01:76:11:2f:15:da: 85:8b:ed:0b:43:9f:3d:10:79:fc:65:cd:a2:6a:5a: 80:1a:c3:ab:e4:5c:f6:b6:ad:65:74:e1:68:3c:f6: d3:3b:1f:5b:d8:88:39:74:8e:c3:c7:2f:67:37:ab: 21:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4B:98:68:A2:AE:CE:ED:18:9D:0D:56:57:E8:BC:D0:41:D2:4C:C1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e91e8fa-d27d-476a-8013-7e291eb9fefd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.0.0/20 Signature Algorithm: sha256WithRSAEncryption 39:13:37:bc:cc:bd:d9:a4:e2:9e:6c:be:45:45:fb:de:78:78: 07:a5:d8:71:91:bb:8f:e8:23:a8:ce:15:83:4a:35:a3:9d:94: c7:c7:53:02:37:9a:27:71:4b:1e:41:a9:bc:88:cb:71:40:a6: e2:7d:5e:d7:bc:a1:f4:d1:cc:18:87:0b:4f:8b:2a:93:c8:df: ec:52:e9:d0:32:59:ce:ec:e1:6a:d7:12:79:3a:7a:6f:9b:19: 45:14:d0:62:4c:b9:05:79:c9:8d:1c:82:2d:9e:6f:8e:58:dc: 5c:a5:cd:47:c5:c3:01:40:00:98:db:69:c7:bd:4c:ec:ec:f5: 07:db:e0:f0:98:8e:c0:ea:75:e4:c7:8a:bf:d6:23:e0:cd:fe: 4a:cc:b3:51:e5:6d:33:7c:6f:79:b7:a6:82:57:e3:8f:b4:57: 6f:97:74:56:67:9f:08:f9:47:f9:cc:0f:45:7d:8e:07:54:ce: 1b:d8:1e:c1:1e:cb:2d:ef:c6:05:6a:31:9e:6e:a7:19:5f:91: 92:c3:80:3c:19:c6:e5:8e:b9:08:42:6a:c4:f1:c3:2f:65:d0: 3b:13:a5:bb:93:e0:6e:a4:bb:4a:06:1e:3d:81:aa:9f:ee:c2: b8:72:95:89:3c:28:b9:4b:a1:7a:e1:c8:94:68:92:26:4d:00: 5b:c0:33:cc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYhYSZF7w82Pqku3ajyyQHf+B+IkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEzMDAzMDM5WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZWQ3MjNlZWU1NGNiZTY0MGY5NzQ2ODVkODUzYTZiYzBi YWQ0MjY4MDg3MjJkMmU3YzJlMGYzNDM5MzMyZmUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsH9eURHhtGZZYvyDG/+vBfjtjxaCY0/wDxol/CT3QPoZ0 CszCsjyqHw6PTLJvdZd7lz4YH0OQstnE4BPZCDRKRTD6rzOYeQbS3BBfIbPBcBAy Jw0+ylZnIrCrtTzoKS70Fqk8tBpyw/ymzBRITy4HSP8hQoG05OXEEZBByDTj8mAP YAe8QlDfm31KLyPIU8m3pE0hydauUxxkJEYu57Rh+raZIoqCTxr18gONyef8RbRJ FNV6iGTFGuocY8YkKOp3Itr1dD9v+nohHgF2ES8V2oWL7QtDnz0QefxlzaJqWoAa w6vkXPa2rWV04Wg89tM7H1vYiDl0jsPHL2c3qyF/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHkuYaKKuzu0YnQ1WV+i80EHSTMEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdlOTFlOGZhLWQyN2QtNDc2YS04MDEzLTdlMjkxZWI5ZmVmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNgAAwDQYJKoZIhvcNAQELBQADggEBADkTN7zMvdmk4p5svkVF+954eAel 2HGRu4/oI6jOFYNKNaOdlMfHUwI3midxSx5BqbyIy3FApuJ9Xte8ofTRzBiHC0+L KpPI3+xS6dAyWc7s4WrXEnk6em+bGUUU0GJMuQV5yY0cgi2eb45Y3FylzUfFwwFA AJjbace9TOzs9Qfb4PCYjsDqdeTHir/WI+DN/krMs1HlbTN8b3m3poJX44+0V2+X dFZnnwj5R/nMD0V9jgdUzhvYHsEeyy3vxgVqMZ5upxlfkZLDgDwZxuWOuQhCasTx wy9l0DsTpbuT4G6ku0oGHj2Bqp/uwrhylYk8KLlLoXrhyJRokiZNAFvAM8w= -----END CERTIFICATE-----Generated at Sun Mar 1 22:10:09 2026 by rpki-client