$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0982b3d-85c6-445f-ac08-b1fb609d4aa3.roa File: a0982b3d-85c6-445f-ac08-b1fb609d4aa3.roa (raw, json) Hash identifier: tug7HZupu8Esq5HFigrt1vtUjR1dmavGXmKW1ICJE/E= Subject key identifier: 40:C7:09:EA:39:34:5E:4B:21:E6:D7:F1:23:B2:7C:9A:83:AF:17:7C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B91EB4FADB6BB75F09E253AA442F3062BEE18D3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0982b3d-85c6-445f-ac08-b1fb609d4aa3.roa Signing time: Sat 21 Feb 2026 01:00:51 +0000 ROA not before: Sat 21 Feb 2026 01:00:51 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:91:eb:4f:ad:b6:bb:75:f0:9e:25:3a:a4:42:f3:06:2b:ee:18:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:00:51 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=78df437656bb4d1bce13fea7cc9f72e2006135e38f1885203c04382264b02705, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:74:ad:e6:49:eb:2e:53:94:fc:f7:51:be:e6: 0b:62:64:1b:52:8c:c1:ba:74:30:7c:ed:07:6f:5b: 17:e0:f3:d0:a3:3c:e1:8e:fd:0d:ce:69:a8:a7:11: d4:a4:f2:44:85:a1:a7:78:ad:c6:49:41:4c:e5:32: 8f:a6:1f:a4:ec:67:7c:22:c7:8e:cd:ab:60:7d:b4: b8:07:f7:69:b2:77:ee:61:a3:86:e0:87:a6:e6:5c: d4:fa:1c:8a:a0:1f:ea:74:c5:d6:e7:5f:f4:1e:95: 37:0b:89:e0:6f:59:5e:04:c3:a7:fb:96:b3:71:3d: 47:31:e8:74:21:b1:d3:7b:d7:0b:48:a9:70:03:5b: a4:d6:40:ee:22:40:ed:3d:18:5a:07:03:b1:72:c6: 9d:1d:59:1e:18:25:51:d0:b6:3c:f9:d9:e6:83:a7: cc:bf:97:e3:03:a3:12:4a:9d:c9:9b:3d:4a:01:94: ce:ff:68:ef:2c:44:61:0b:46:19:5e:f7:3d:62:6c: 40:a4:8b:36:a8:88:ab:20:c1:dd:6c:5f:cd:60:6e: 81:d2:59:a3:cb:12:13:a5:be:f5:85:e4:cb:ed:f6: d3:3b:a1:3a:fc:e8:f9:a9:3b:82:c6:cc:e4:44:66: 68:b9:bc:f6:41:8b:87:57:ff:62:a3:18:a8:a6:d6: 8c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C7:09:EA:39:34:5E:4B:21:E6:D7:F1:23:B2:7C:9A:83:AF:17:7C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0982b3d-85c6-445f-ac08-b1fb609d4aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.226.0/24 Signature Algorithm: sha256WithRSAEncryption a9:0d:db:09:c1:02:6d:9a:3d:1e:a7:bb:88:c5:c6:c9:6f:cf: 7f:c4:45:ec:b9:0e:ab:67:1e:60:07:e1:8a:8f:ef:04:ff:81: 45:7d:fe:dc:53:d4:b1:18:57:e0:56:2f:0c:08:95:e6:0b:25: ab:0a:99:58:b0:f7:62:59:09:24:fe:89:ac:f7:73:31:ea:7d: 61:ff:1c:1e:6b:4a:c7:52:13:1f:48:92:62:4e:a2:0d:bf:45: 42:49:71:ac:5f:c0:38:a7:e1:5a:26:d6:69:97:86:47:0f:5a: ca:66:6e:6e:8d:0e:f5:f4:7a:45:9e:8d:f9:65:d5:8e:7e:af: 76:c8:7a:05:f9:07:33:6d:12:3b:d5:a4:b1:ff:d3:bb:92:77: 11:2f:8e:d1:9a:fe:be:f9:e2:21:97:42:e0:17:77:17:d1:19: 8c:27:7c:f9:85:76:25:ff:9c:47:c0:bc:5c:06:95:be:b5:99: bd:6f:52:e1:78:bc:6d:b7:06:f5:97:ce:fd:7b:55:3c:8f:d7: 16:39:a9:37:61:a7:c5:38:0a:ce:27:26:f8:49:92:6e:75:2d: 9c:bb:5c:5c:5f:94:f8:77:c7:1a:6c:26:c5:31:30:46:51:44: 2f:bd:cf:09:75:01:3e:f2:49:db:63:9f:fb:97:12:34:03:b1: 6e:2c:70:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO5HrT622u3XwniU6pELzBivuGNMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDEwMDUxWhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OGRmNDM3NjU2YmI0ZDFiY2UxM2ZlYTdjYzlmNzJlMjAw NjEzNWUzOGYxODg1MjAzYzA0MzgyMjY0YjAyNzA1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1dK3mSesuU5T891G+5gtiZBtSjMG6dDB87QdvWxfg89Cj POGO/Q3OaainEdSk8kSFoad4rcZJQUzlMo+mH6TsZ3wix47Nq2B9tLgH92myd+5h o4bgh6bmXNT6HIqgH+p0xdbnX/QelTcLieBvWV4Ew6f7lrNxPUcx6HQhsdN71wtI qXADW6TWQO4iQO09GFoHA7Fyxp0dWR4YJVHQtjz52eaDp8y/l+MDoxJKncmbPUoB lM7/aO8sRGELRhle9z1ibECkizaoiKsgwd1sX81gboHSWaPLEhOlvvWF5Mvt9tM7 oTr86PmpO4LGzOREZmi5vPZBi4dX/2KjGKim1ozXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQMcJ6jk0Xksh5tfxI7J8moOvF3wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EwOTgyYjNkLTg1YzYtNDQ1Zi1hYzA4LWIxZmI2MDlkNGFhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsOIwDQYJKoZIhvcNAQELBQADggEBAKkN2wnBAm2aPR6nu4jFxslvz3/E Rey5DqtnHmAH4YqP7wT/gUV9/txT1LEYV+BWLwwIleYLJasKmViw92JZCST+iaz3 czHqfWH/HB5rSsdSEx9IkmJOog2/RUJJcaxfwDin4Vom1mmXhkcPWspmbm6NDvX0 ekWejfll1Y5+r3bIegX5BzNtEjvVpLH/07uSdxEvjtGa/r754iGXQuAXdxfRGYwn fPmFdiX/nEfAvFwGlb61mb1vUuF4vG23BvWXzv17VTyP1xY5qTdhp8U4Cs4nJvhJ km51LZy7XFxflPh3xxpsJsUxMEZRRC+9zwl1AT7ySdtjn/uXEjQDsW4scKM= -----END CERTIFICATE-----Generated at Sun Mar 1 23:54:59 2026 by rpki-client