$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89a8e37e-25ae-47f3-a49b-f9093043948d.roa File: 89a8e37e-25ae-47f3-a49b-f9093043948d.roa (raw, json) Hash identifier: YyNi31M+E60ST8i7lG564MU0ITIPZkTIJpY+XNqFTN8= Subject key identifier: 7A:90:23:88:12:51:9D:49:76:EF:39:40:E5:69:3F:8A:E2:80:6C:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B66BC1430468260AEA9C83DFC648E0C134621C5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89a8e37e-25ae-47f3-a49b-f9093043948d.roa Signing time: Sat 21 Feb 2026 01:30:10 +0000 ROA not before: Sat 21 Feb 2026 01:30:10 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:66:bc:14:30:46:82:60:ae:a9:c8:3d:fc:64:8e:0c:13:46:21:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:30:10 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=cc8b5c0ede303b3d0a8aaa09b5bb9b74d9a21a4d95b69503d1e703126f8de783, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:46:25:0f:31:3f:d5:66:26:57:7e:02:b7:13: 05:45:37:dc:03:80:36:46:83:08:f1:80:ce:cd:61: a2:f3:72:16:81:60:0f:56:48:80:b5:f3:46:fc:8c: 4f:fe:8d:85:82:06:c5:44:9e:0d:a4:3a:29:0f:af: 00:fd:b6:9a:bf:43:f5:b8:69:27:c6:dd:c8:72:24: 36:3e:58:51:6e:68:4f:f3:c4:6c:29:40:1b:97:f2: e7:53:ce:83:af:de:87:11:33:19:21:2f:03:54:c2: e6:58:99:fe:9b:ab:ee:4c:2a:cf:08:99:c3:e1:2e: b3:e2:49:a4:b6:da:e5:fb:db:71:2c:f6:98:34:09: 79:57:ed:61:f0:aa:f3:3b:33:6f:0f:08:d3:7b:0d: 2f:66:e1:0e:71:3c:55:a2:7b:45:de:ba:83:42:ef: 65:d8:0f:a9:8b:a7:be:7d:0f:ec:2a:ca:b0:ff:3d: 05:2a:33:ef:a9:27:96:51:59:9a:5f:d1:4f:f3:ef: 2e:a5:05:c3:9f:d1:9e:ff:a0:b3:79:bb:b2:42:fd: 63:77:c3:64:ee:79:5a:e9:21:6a:70:53:6e:85:11: 32:5c:59:e4:b4:c1:b1:a0:24:e8:45:c5:15:04:be: 9f:ad:f8:fa:71:69:39:a6:58:56:06:52:18:46:dc: 1a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:90:23:88:12:51:9D:49:76:EF:39:40:E5:69:3F:8A:E2:80:6C:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89a8e37e-25ae-47f3-a49b-f9093043948d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.185.0/24 Signature Algorithm: sha256WithRSAEncryption d4:1b:16:7d:94:5e:71:08:22:fb:91:4f:6e:a5:ec:f5:3b:1e: 43:27:1b:1a:16:93:80:51:86:06:01:56:c4:fa:ff:85:70:67: 90:b8:32:b3:84:f0:ac:d5:ab:72:7f:d4:cb:22:12:49:dc:48: 8a:2a:7f:d2:c9:6f:d7:f4:3b:bf:67:59:a1:8b:34:e9:33:2a: fe:bd:77:a7:e1:23:17:ae:de:1f:04:ac:44:82:9c:ff:95:3c: a9:32:81:1b:07:d5:4d:dd:3c:98:29:f5:9a:82:d2:aa:ea:ed: d3:38:61:23:ce:51:4b:8c:c4:dc:27:53:e8:af:ca:c1:64:44: 8e:c7:34:f4:d6:00:66:be:e5:48:fd:17:35:1f:80:e5:e0:f9: e5:9d:03:31:16:2a:b8:78:51:0b:cf:02:7f:50:8d:4b:69:bc: 5b:40:70:19:5b:87:73:eb:a3:bc:49:84:6b:32:d9:c1:6d:15: a5:2f:24:25:1e:33:81:e4:8c:4d:8f:85:36:4b:02:6b:8a:c9: e5:ad:c6:ac:6d:c1:54:c9:a4:24:f8:9c:f4:e0:e0:18:3c:1b: bb:a0:5c:41:8b:07:7d:b5:c5:57:67:ee:53:5a:e0:39:9f:48: 3f:31:03:f3:c7:0e:f4:d3:70:80:ed:7e:39:ad:05:00:12:97: 65:1e:a8:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO2a8FDBGgmCuqcg9/GSODBNGIcUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDEzMDEwWhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzhiNWMwZWRlMzAzYjNkMGE4YWFhMDliNWJiOWI3NGQ5 YTIxYTRkOTViNjk1MDNkMWU3MDMxMjZmOGRlNzgzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDORiUPMT/VZiZXfgK3EwVFN9wDgDZGgwjxgM7NYaLzchaB YA9WSIC180b8jE/+jYWCBsVEng2kOikPrwD9tpq/Q/W4aSfG3chyJDY+WFFuaE/z xGwpQBuX8udTzoOv3ocRMxkhLwNUwuZYmf6bq+5MKs8ImcPhLrPiSaS22uX723Es 9pg0CXlX7WHwqvM7M28PCNN7DS9m4Q5xPFWie0XeuoNC72XYD6mLp759D+wqyrD/ PQUqM++pJ5ZRWZpf0U/z7y6lBcOf0Z7/oLN5u7JC/WN3w2TueVrpIWpwU26FETJc WeS0wbGgJOhFxRUEvp+t+PpxaTmmWFYGUhhG3BqpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUepAjiBJRnUl27zlA5Wk/iuKAbIgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5YThlMzdlLTI1YWUtNDdmMy1hNDliLWY5MDkzMDQzOTQ4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsLkwDQYJKoZIhvcNAQELBQADggEBANQbFn2UXnEIIvuRT26l7PU7HkMn GxoWk4BRhgYBVsT6/4VwZ5C4MrOE8KzVq3J/1MsiEkncSIoqf9LJb9f0O79nWaGL NOkzKv69d6fhIxeu3h8ErESCnP+VPKkygRsH1U3dPJgp9ZqC0qrq7dM4YSPOUUuM xNwnU+ivysFkRI7HNPTWAGa+5Uj9FzUfgOXg+eWdAzEWKrh4UQvPAn9QjUtpvFtA cBlbh3Pro7xJhGsy2cFtFaUvJCUeM4HkjE2PhTZLAmuKyeWtxqxtwVTJpCT4nPTg 4Bg8G7ugXEGLB321xVdn7lNa4DmfSD8xA/PHDvTTcIDtfjmtBQASl2UeqOY= -----END CERTIFICATE-----Generated at Sun Mar 1 22:36:40 2026 by rpki-client