$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/809b6125-3665-4b5b-9735-5efa330b3442.roa File: 809b6125-3665-4b5b-9735-5efa330b3442.roa (raw, json) Hash identifier: fy74idoAq/Zh+oA3iz1bzhyBKKgO9kqRowbxry3kWp8= Subject key identifier: 62:3A:43:84:B3:07:78:AF:15:7B:6A:32:0D:A2:F0:B5:30:8A:B4:32 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40CEA142E0BD869F821E7BAD5E9AD03DB9BC4E3C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/809b6125-3665-4b5b-9735-5efa330b3442.roa Signing time: Sat 21 Feb 2026 00:51:52 +0000 ROA not before: Sat 21 Feb 2026 00:51:52 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 202.174.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ce:a1:42:e0:bd:86:9f:82:1e:7b:ad:5e:9a:d0:3d:b9:bc:4e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:51:52 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=1cea26c9627154f88d9dd6a97d88e43b7f213c6c60c825b17fbbeae02bd62ee8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:f4:3c:d8:9a:b7:63:cf:6d:04:d6:b2:b2: 80:aa:9c:70:44:c3:5a:68:07:1d:39:2f:a2:1f:d1: 95:56:1e:1b:87:37:9d:e4:ed:60:24:8b:a8:dc:b1: 60:0b:c7:e5:13:e2:51:45:34:bb:07:60:ef:3d:58: 28:64:7e:2c:ad:66:27:fc:f3:73:fd:45:82:ae:b1: 30:67:a3:6f:ca:32:ae:d8:3d:80:b6:74:57:69:2e: cb:d7:8a:f1:45:37:00:dc:57:53:a4:0c:4e:30:d4: fa:27:c0:b3:bd:57:97:32:93:9c:c2:56:a6:71:70: 0f:7e:2e:75:87:d0:12:46:98:72:7e:bd:cb:ab:3f: ba:a7:c3:dd:55:42:a2:fc:b1:92:90:f9:14:a7:e8: 94:53:55:5b:b1:0e:b3:88:7f:e0:95:06:a3:b7:22: 66:37:00:9e:c8:bf:bc:dd:77:4f:e8:16:19:a5:5a: 27:69:4a:c0:01:83:aa:11:4a:28:9a:71:f6:47:08: 35:11:43:40:00:8f:4b:76:91:5a:f0:aa:da:33:1a: a1:b5:7f:5d:3d:09:49:c7:77:aa:82:44:a1:9b:df: ad:9d:68:9d:9c:52:03:f4:48:56:9d:3c:2d:0a:dc: aa:26:7e:42:99:06:65:70:e6:05:55:d1:b7:78:43: 38:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3A:43:84:B3:07:78:AF:15:7B:6A:32:0D:A2:F0:B5:30:8A:B4:32 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/809b6125-3665-4b5b-9735-5efa330b3442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.174.132.0/24 Signature Algorithm: sha256WithRSAEncryption 87:83:2e:c9:7b:44:34:29:2f:4b:b8:dd:5a:15:1e:b2:e2:d1: c3:c6:a2:46:be:13:30:12:1b:14:da:a1:a1:d0:c9:d3:ef:75: a3:dd:68:25:ca:19:40:6a:5f:44:47:93:4f:db:91:d1:53:b6: 5f:4e:28:76:c0:32:18:45:54:7e:32:96:5c:5d:07:37:57:ef: 0e:7f:d8:2c:f7:33:47:27:97:78:52:ce:3c:10:c3:9f:a4:4f: 68:1a:de:32:f5:58:37:b9:ac:0f:d4:5d:03:39:a6:50:eb:a4: bb:8d:44:81:27:3d:5c:ef:16:a1:61:a5:e4:24:6b:a7:ff:50: d5:2d:e1:03:57:00:9d:d8:29:84:00:ca:99:2d:cb:e0:a5:4c: ca:67:b7:44:3d:97:a3:12:80:2f:b9:fa:7f:d5:1f:d0:88:1c: 31:46:d8:36:f2:88:0b:f4:08:ce:d0:aa:c7:fa:91:08:e2:2a: b8:78:80:8a:a0:e8:d7:43:21:ff:f0:1f:b9:7e:06:a8:8d:9b: e1:6f:e4:b7:36:50:f1:e3:af:e6:92:d3:a2:28:11:73:25:15: 1f:62:29:cc:f9:22:de:65:74:a0:4f:39:07:cd:2f:ab:bb:ad: 72:12:20:75:10:e9:e4:d9:94:11:ff:7c:24:37:0e:75:4e:82: 6a:e9:c6:7b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQM6hQuC9hp+CHnutXprQPbm8TjwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDA1MTUyWhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxY2VhMjZjOTYyNzE1NGY4OGQ5ZGQ2YTk3ZDg4ZTQzYjdm MjEzYzZjNjBjODI1YjE3ZmJiZWFlMDJiZDYyZWU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzfPQ82Jq3Y89tBNaysoCqnHBEw1poBx05L6If0ZVWHhuH N53k7WAki6jcsWALx+UT4lFFNLsHYO89WChkfiytZif883P9RYKusTBno2/KMq7Y PYC2dFdpLsvXivFFNwDcV1OkDE4w1PonwLO9V5cyk5zCVqZxcA9+LnWH0BJGmHJ+ vcurP7qnw91VQqL8sZKQ+RSn6JRTVVuxDrOIf+CVBqO3ImY3AJ7Iv7zdd0/oFhml WidpSsABg6oRSiiacfZHCDURQ0AAj0t2kVrwqtozGqG1f109CUnHd6qCRKGb362d aJ2cUgP0SFadPC0K3KomfkKZBmVw5gVV0bd4Qzj1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYjpDhLMHeK8Ve2oyDaLwtTCKtDIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgwOWI2MTI1LTM2NjUtNGI1Yi05NzM1LTVlZmEzMzBiMzQ0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADKroQwDQYJKoZIhvcNAQELBQADggEBAIeDLsl7RDQpL0u43VoVHrLi0cPG oka+EzASGxTaoaHQydPvdaPdaCXKGUBqX0RHk0/bkdFTtl9OKHbAMhhFVH4yllxd BzdX7w5/2Cz3M0cnl3hSzjwQw5+kT2ga3jL1WDe5rA/UXQM5plDrpLuNRIEnPVzv FqFhpeQka6f/UNUt4QNXAJ3YKYQAypkty+ClTMpnt0Q9l6MSgC+5+n/VH9CIHDFG 2DbyiAv0CM7Qqsf6kQjiKrh4gIqg6NdDIf/wH7l+BqiNm+Fv5Lc2UPHjr+aS06Io EXMlFR9iKcz5It5ldKBPOQfNL6u7rXISIHUQ6eTZlBH/fCQ3DnVOgmrpxns= -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:21 2026 by rpki-client