$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bf3e768-4bf1-4181-bd9a-81c9c9111880.roa File: 8bf3e768-4bf1-4181-bd9a-81c9c9111880.roa (raw, json) Hash identifier: lN1wkRwYFRFoxOrqrgiiQxHVmmMHDBEzyOmOPZNSKTc= Subject key identifier: 1C:7F:0E:95:BE:8D:B9:15:DE:22:3C:F9:90:18:D3:52:D3:71:D1:01 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0CC7FA7D3C6952E7D54FC41649FB908FABEF55 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bf3e768-4bf1-4181-bd9a-81c9c9111880.roa Signing time: Sat 14 Feb 2026 01:00:38 +0000 ROA not before: Sat 14 Feb 2026 01:00:38 +0000 ROA not after: Fri 15 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c7:fa:7d:3c:69:52:e7:d5:4f:c4:16:49:fb:90:8f:ab:ef:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 14 01:00:38 2026 GMT Not After : May 15 23:59:59 2026 GMT Subject: serialNumber=4b8e33020c8079976fbfa17846bc739f01ca5b3c14c9d6671026084e5777316a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:38:d2:20:62:5a:e1:f8:0d:21:11:1a:86:b2: 34:8c:46:8a:6f:4d:3e:4b:60:f2:54:2a:d2:f8:bb: ae:6f:1e:6f:da:96:b7:98:da:da:67:e7:9c:c9:b0: a1:2f:83:d5:7f:a4:a6:02:89:cc:01:ec:11:56:9f: ad:1e:80:39:24:f8:2a:c8:fd:b4:ba:1e:b1:1c:9f: 64:c6:9f:48:27:02:6a:c6:f0:1c:91:0d:24:4d:27: a8:aa:d1:60:bd:da:b7:6d:da:00:5a:a9:fb:48:4f: 1d:0c:b7:01:a7:96:da:eb:a7:e7:22:7b:21:a3:8c: 5a:a2:d0:b7:3b:b9:78:85:b1:b0:7e:58:9f:65:21: 9d:64:1a:d1:61:f6:ae:c1:9a:3d:4b:a7:72:30:ac: b4:52:40:d9:1d:10:ce:a7:f0:39:e2:c5:4a:a8:f6: 4f:0b:36:86:9e:8f:a5:e3:fb:0e:26:14:6b:ae:6c: 35:4b:01:36:25:09:83:28:50:6a:bc:9c:d1:d4:dc: 58:e9:c3:07:5f:84:19:9e:21:f2:da:1c:fb:92:30: 1e:63:82:2b:40:2c:56:68:56:8f:4c:77:c4:94:b4: 9e:d0:5b:17:d6:32:4a:16:4d:aa:4a:cf:2a:f9:e3: 13:49:83:77:9b:4f:7a:a1:d0:82:ea:6d:c8:00:3f: c5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7F:0E:95:BE:8D:B9:15:DE:22:3C:F9:90:18:D3:52:D3:71:D1:01 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bf3e768-4bf1-4181-bd9a-81c9c9111880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.142.0/23 Signature Algorithm: sha256WithRSAEncryption c9:1a:2e:10:31:d5:16:bc:fa:a9:1c:52:ed:b0:29:bd:e1:e9: 19:59:35:c2:d1:c8:f1:84:d4:3b:8d:92:61:84:40:e1:8e:41: 0f:41:25:0a:3b:48:ee:fc:b1:5c:0e:c2:03:3a:1c:65:8a:fb: 1b:95:3a:45:36:14:f7:f4:72:b3:1e:b7:d7:28:5a:b8:7d:f4: 8b:24:0a:fd:5a:49:48:fc:2d:02:e0:9e:6c:8f:07:95:0c:b9: 6a:4c:16:2f:d9:a9:03:49:68:01:cd:bb:ef:ce:ba:0b:43:21: 6d:7c:08:9a:e7:45:cc:8b:fb:73:f7:a7:67:7e:ad:e0:6a:7e: 1a:18:e7:20:d5:08:c5:a1:f0:48:48:03:36:9d:9c:66:ad:ff: 70:ef:28:e0:e4:26:ba:22:c8:d7:13:3c:e1:68:1b:5d:6a:45: 77:2e:fd:3e:a0:0e:4c:e4:c9:b9:2d:86:60:9a:e3:b7:f0:5e: 34:c0:ff:63:35:da:21:e1:28:db:ea:bc:bd:ed:65:b4:b2:3e: 24:8a:c4:70:68:b0:c4:c9:0c:72:57:46:60:a3:41:2b:ea:5c: ef:ae:63:72:ad:dc:fd:a9:d2:0a:43:80:59:67:83:23:53:25: 7a:a6:c7:62:9b:15:5b:c9:81:67:54:cd:ba:af:38:d1:5c:43: 59:f7:1f:b7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITDMf6fTxpUufVT8QWSfuQj6vvVTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjAyMTQwMTAwMzhaFw0yNjA1MTUyMzU5NTla MHoxSTBHBgNVBAUTQDRiOGUzMzAyMGM4MDc5OTc2ZmJmYTE3ODQ2YmM3MzlmMDFj YTViM2MxNGM5ZDY2NzEwMjYwODRlNTc3NzMxNmExLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKw40iBiWuH4DSERGoayNIxGim9NPktg8lQq0vi7rm8eb9qW t5ja2mfnnMmwoS+D1X+kpgKJzAHsEVafrR6AOST4Ksj9tLoesRyfZMafSCcCasbw HJENJE0nqKrRYL3at23aAFqp+0hPHQy3AaeW2uun5yJ7IaOMWqLQtzu5eIWxsH5Y n2UhnWQa0WH2rsGaPUuncjCstFJA2R0QzqfwOeLFSqj2Tws2hp6PpeP7DiYUa65s NUsBNiUJgyhQaryc0dTcWOnDB1+EGZ4h8toc+5IwHmOCK0AsVmhWj0x3xJS0ntBb F9YyShZNqkrPKvnjE0mDd5tPeqHQguptyAA/xVMCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQcfw6Vvo25Fd4iPPmQGNNS03HRATAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvOGJmM2U3NjgtNGJmMS00MTgxLWJkOWEtODFjOWM5MTExODgwLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAYgSjjANBgkqhkiG9w0BAQsFAAOCAQEAyRouEDHVFrz6qRxS7bApveHpGVk1 wtHI8YTUO42SYYRA4Y5BD0ElCjtI7vyxXA7CAzocZYr7G5U6RTYU9/Rysx631yha uH30iyQK/VpJSPwtAuCebI8HlQy5akwWL9mpA0loAc277866C0MhbXwImudFzIv7 c/enZ36t4Gp+GhjnINUIxaHwSEgDNp2cZq3/cO8o4OQmuiLI1xM84WgbXWpFdy79 PqAOTOTJuS2GYJrjt/BeNMD/YzXaIeEo2+q8ve1ltLI+JIrEcGiwxMkMcldGYKNB K+pc765jcq3c/anSCkOAWWeDI1MleqbHYpsVW8mBZ1TNuq840VxDWfcftw== -----END CERTIFICATE-----Generated at Mon Mar 2 06:35:55 2026 by rpki-client