$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96775b6e-d2c7-45b1-b153-6189276f8a53.roa File: 96775b6e-d2c7-45b1-b153-6189276f8a53.roa (raw, json) Hash identifier: /yJJnwJOaUAiGhWsr+wg1z34i412gPupjmmLIkxErKw= Subject key identifier: A4:3B:70:EB:FA:A0:E6:5D:EF:9D:AC:CA:5B:9F:06:EF:97:18:D8:CD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2CCD738BF0789E7162C8419A283E8973D2AA7BEF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96775b6e-d2c7-45b1-b153-6189276f8a53.roa Signing time: Sat 14 Feb 2026 00:10:53 +0000 ROA not before: Sat 14 Feb 2026 00:10:53 +0000 ROA not after: Fri 15 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 184.73.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:cd:73:8b:f0:78:9e:71:62:c8:41:9a:28:3e:89:73:d2:aa:7b:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 14 00:10:53 2026 GMT Not After : May 15 23:59:59 2026 GMT Subject: serialNumber=c1c8d69c09b8bbc4f924115edbf4b0c3bd98d958a6b74373ab6990d93a3cdd94, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:e7:de:12:30:f8:91:72:07:40:87:e2:63: e2:0a:a1:6b:70:ac:58:70:4b:35:a0:b4:19:a6:aa: f2:92:6b:3d:ab:88:e5:b9:ad:a6:e1:b4:cd:75:41: 0c:17:d1:79:59:f8:70:02:03:9d:24:de:87:29:d7: 2c:5f:ec:b6:c0:c1:33:5c:7c:d9:23:4d:05:ce:d8: 32:c7:f9:b1:2a:1e:c0:c6:4e:a2:12:1a:47:85:cd: 3c:32:3e:40:88:6d:f5:3c:09:f4:cd:d7:8f:41:7f: 6a:c7:61:ab:75:a5:20:42:fe:0e:5b:14:53:53:7b: ff:df:ba:97:e2:8c:c0:d8:d3:d1:34:dc:ac:0d:4f: 1b:70:0a:62:9e:4b:77:49:85:9b:ed:d7:40:37:1a: bb:df:93:72:f8:9e:02:7c:d8:d7:fe:59:7b:e3:ed: 0b:32:78:4f:ed:5f:e2:52:48:48:54:af:75:1e:6e: f5:95:06:b0:b3:41:a2:36:6d:df:65:09:40:5f:24: c0:7a:f1:e7:04:9b:92:03:ec:93:92:d9:b1:1b:f8: 1e:94:a4:f2:85:07:3f:60:30:84:61:38:28:d3:d8: dd:88:e9:a9:db:e5:40:b3:7a:39:c1:ee:ad:d5:e0: bd:84:c0:65:c2:ab:44:11:4b:91:76:19:fd:24:70: dc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3B:70:EB:FA:A0:E6:5D:EF:9D:AC:CA:5B:9F:06:EF:97:18:D8:CD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96775b6e-d2c7-45b1-b153-6189276f8a53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.73.152.0/21 Signature Algorithm: sha256WithRSAEncryption 3c:16:90:0d:aa:52:5e:74:d8:b8:6e:4c:8e:70:49:0c:6d:aa: 6a:cc:46:94:60:7f:6d:f4:17:56:e9:e9:95:43:f6:8d:ff:a0: e7:f9:15:02:ef:42:86:3d:e6:d2:85:83:f1:c7:09:84:dd:96: 4a:83:54:aa:c5:95:af:1a:c4:db:23:d0:d7:38:33:9e:e8:2c: de:19:1b:05:ee:e9:fb:9b:21:3c:a6:ec:61:73:d1:19:ff:22: 5a:9b:11:fb:ca:d4:6f:d4:f5:e6:d8:4b:f9:68:dc:c8:52:d5: f1:72:eb:f0:8a:eb:b2:db:e4:6d:3d:ee:fb:a0:30:36:bc:e9: 06:fc:dc:ce:44:69:7b:32:6f:83:95:fd:c3:b8:80:66:93:fd: 6c:40:e5:9e:e3:24:a5:0f:f8:00:9c:bc:49:03:35:f4:df:ef: 25:bb:ea:82:e8:cd:26:89:da:7a:2f:47:a8:53:28:56:54:d9: 5f:36:92:c9:83:d3:5c:07:dc:aa:78:2d:31:2b:f5:55:41:a4: 3f:00:e2:1f:41:de:03:c8:85:88:08:2b:eb:b3:65:ce:d0:83: b5:db:7f:4e:16:43:91:00:d7:ee:8e:7b:17:87:b7:18:dc:e8: 20:0b:05:78:6a:59:3e:a1:20:bb:c9:43:e4:52:53:2c:5a:74: 6c:aa:53:00 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULM1zi/B4nnFiyEGaKD6Jc9Kqe+8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE0MDAxMDUzWhcNMjYwNTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMWM4ZDY5YzA5YjhiYmM0ZjkyNDExNWVkYmY0YjBjM2Jk OThkOTU4YTZiNzQzNzNhYjY5OTBkOTNhM2NkZDk0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqZefeEjD4kXIHQIfiY+IKoWtwrFhwSzWgtBmmqvKSaz2r iOW5rabhtM11QQwX0XlZ+HACA50k3ocp1yxf7LbAwTNcfNkjTQXO2DLH+bEqHsDG TqISGkeFzTwyPkCIbfU8CfTN149Bf2rHYat1pSBC/g5bFFNTe//fupfijMDY09E0 3KwNTxtwCmKeS3dJhZvt10A3Grvfk3L4ngJ82Nf+WXvj7QsyeE/tX+JSSEhUr3Ue bvWVBrCzQaI2bd9lCUBfJMB68ecEm5ID7JOS2bEb+B6UpPKFBz9gMIRhOCjT2N2I 6anb5UCzejnB7q3V4L2EwGXCq0QRS5F2Gf0kcNwBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpDtw6/qg5l3vnazKW58G75cY2M0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk2Nzc1YjZlLWQyYzctNDViMS1iMTUzLTYxODkyNzZmOGE1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO4SZgwDQYJKoZIhvcNAQELBQADggEBADwWkA2qUl502LhuTI5wSQxtqmrM RpRgf230F1bp6ZVD9o3/oOf5FQLvQoY95tKFg/HHCYTdlkqDVKrFla8axNsj0Nc4 M57oLN4ZGwXu6fubITym7GFz0Rn/IlqbEfvK1G/U9ebYS/lo3MhS1fFy6/CK67Lb 5G097vugMDa86Qb83M5EaXsyb4OV/cO4gGaT/WxA5Z7jJKUP+ACcvEkDNfTf7yW7 6oLozSaJ2novR6hTKFZU2V82ksmD01wH3Kp4LTEr9VVBpD8A4h9B3gPIhYgIK+uz Zc7Qg7Xbf04WQ5EA1+6OexeHtxjc6CALBXhqWT6hILvJQ+RSUyxadGyqUwA= -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:00 2026 by rpki-client