$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fe38204-9c56-474c-bd42-8f68c20a3781.roa File: 9fe38204-9c56-474c-bd42-8f68c20a3781.roa (raw, json) Hash identifier: kxtP+Jr0NHus8nBS1cgkkcZqcxph9f4otdK4ppqEKg4= Subject key identifier: 00:3B:A4:E9:94:08:42:E5:FF:53:B4:D5:E7:3E:15:EE:A6:03:28:15 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 20F40325E40B7C1A7AFBD7460FC38CE884EAEAD2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fe38204-9c56-474c-bd42-8f68c20a3781.roa Signing time: Sat 07 Feb 2026 00:20:06 +0000 ROA not before: Sat 07 Feb 2026 00:20:06 +0000 ROA not after: Fri 08 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 20.131.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:f4:03:25:e4:0b:7c:1a:7a:fb:d7:46:0f:c3:8c:e8:84:ea:ea:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 7 00:20:06 2026 GMT Not After : May 8 23:59:59 2026 GMT Subject: serialNumber=c7da082c0d1e7188c959a70756125fce871cb7a7dee74528fd348c28784ddf04, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:be:22:fe:30:1b:19:b6:f0:b7:3a:68:13:74: 53:07:37:8d:e3:55:90:8c:b0:63:76:d2:9d:af:98: 81:7b:95:7c:06:04:d4:2e:71:70:55:ed:ca:35:0f: 35:97:af:ff:8d:43:ef:0a:6f:8d:99:8b:15:e5:93: 89:b3:14:75:66:82:5c:c5:d9:f3:29:8b:97:9d:e1: 89:7a:d3:27:9e:3a:02:ca:e9:76:67:80:db:01:8b: 37:a2:ad:af:07:22:51:2d:03:90:37:6a:61:5d:91: 97:cf:08:09:b4:8a:a0:62:49:e7:dc:11:a8:90:84: b1:da:a6:96:bb:25:b7:63:19:a0:04:7c:54:c2:fd: fe:12:5d:fc:44:b9:22:ef:df:a6:0d:0a:1c:62:b0: 1f:fd:40:8b:d4:bd:05:0d:e3:d3:76:b5:a3:30:ba: 99:11:bb:36:86:f6:aa:85:0e:d7:df:d0:35:32:cf: 7c:ae:5f:19:50:33:67:32:06:2f:d4:af:d3:79:23: 96:a4:76:71:aa:b7:5d:06:c8:cd:a3:8e:f9:cc:90: b0:47:2c:e8:f3:cf:9a:ae:00:27:d3:7d:dd:5c:e2: 46:df:09:72:f7:ec:72:c6:5d:32:9a:a8:0a:86:f3: c0:d4:79:b1:97:50:fc:00:ed:de:2c:e1:43:d9:a8: b9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3B:A4:E9:94:08:42:E5:FF:53:B4:D5:E7:3E:15:EE:A6:03:28:15 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9fe38204-9c56-474c-bd42-8f68c20a3781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 20.131.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1c:7b:bb:19:35:cb:bb:f8:6a:21:d9:fb:42:0f:c0:ac:24:d7: 93:99:88:d6:db:05:ab:26:39:46:af:ba:b7:ca:7c:67:7d:4d: f5:0b:61:b5:a8:89:66:e2:21:7e:4e:42:94:b8:bf:03:aa:72: 11:85:5d:64:03:7c:84:9c:19:af:f2:e8:a0:8b:57:2f:f3:17: 4c:9f:47:5e:c5:39:9a:09:3e:85:70:ca:bc:8d:a0:1a:5a:ed: 20:ba:50:5e:0d:73:8d:ac:c7:a2:fd:b6:f5:b9:5d:d6:f5:1a: 24:df:a1:e6:da:46:51:77:a5:4e:fb:e6:76:66:73:b9:02:fc: 38:ef:a6:5d:c2:ab:72:db:75:33:2a:98:d6:5a:93:50:33:f2: ec:4e:9d:03:bf:27:e2:65:63:de:3e:60:ae:01:9e:f2:52:8f: 60:15:43:91:1a:a2:db:4a:d6:44:8a:da:ab:e9:9b:58:0a:1b: 45:98:27:f5:3a:4d:2e:98:50:d5:8c:63:64:35:b8:a4:df:a0: 78:0c:65:f5:2c:cb:23:a9:2d:3a:52:48:d5:29:6a:c8:da:ce: 8d:7a:f8:72:4f:7d:47:79:9a:9f:0a:9f:4b:82:0e:5d:5b:4e: d0:ce:12:fe:d4:d7:45:3b:68:16:48:b1:d0:7f:e5:f0:a9:e4: a6:a7:2f:a4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIPQDJeQLfBp6+9dGD8OM6ITq6tIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA3MDAyMDA2WhcNMjYwNTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjN2RhMDgyYzBkMWU3MTg4Yzk1OWE3MDc1NjEyNWZjZTg3 MWNiN2E3ZGVlNzQ1MjhmZDM0OGMyODc4NGRkZjA0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzviL+MBsZtvC3OmgTdFMHN43jVZCMsGN20p2vmIF7lXwG BNQucXBV7co1DzWXr/+NQ+8Kb42ZixXlk4mzFHVmglzF2fMpi5ed4Yl60yeeOgLK 6XZngNsBizeira8HIlEtA5A3amFdkZfPCAm0iqBiSefcEaiQhLHappa7JbdjGaAE fFTC/f4SXfxEuSLv36YNChxisB/9QIvUvQUN49N2taMwupkRuzaG9qqFDtff0DUy z3yuXxlQM2cyBi/Ur9N5I5akdnGqt10GyM2jjvnMkLBHLOjzz5quACfTfd1c4kbf CXL37HLGXTKaqAqG88DUebGXUPwA7d4s4UPZqLmnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUADuk6ZQIQuX/U7TV5z4V7qYDKBUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlmZTM4MjA0LTljNTYtNDc0Yy1iZDQyLThmNjhjMjBhMzc4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAUgzANBgkqhkiG9w0BAQsFAAOCAQEAHHu7GTXLu/hqIdn7Qg/ArCTXk5mI 1tsFqyY5Rq+6t8p8Z31N9QthtaiJZuIhfk5ClLi/A6pyEYVdZAN8hJwZr/LooItX L/MXTJ9HXsU5mgk+hXDKvI2gGlrtILpQXg1zjazHov229bld1vUaJN+h5tpGUXel TvvmdmZzuQL8OO+mXcKrctt1MyqY1lqTUDPy7E6dA78n4mVj3j5grgGe8lKPYBVD kRqi20rWRIraq+mbWAobRZgn9TpNLphQ1YxjZDW4pN+geAxl9SzLI6ktOlJI1Slq yNrOjXr4ck99R3manwqfS4IOXVtO0M4S/tTXRTtoFkix0H/l8KnkpqcvpA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:31:09 2026 by rpki-client