$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1820a02-368b-475a-8c64-c87e903d2117.roa File: a1820a02-368b-475a-8c64-c87e903d2117.roa (raw, json) Hash identifier: 79jXEnbV9VPIx5SSn7DT1IRCz0dMC7T4UW2xDiwZQZ8= Subject key identifier: 78:0A:4D:36:CD:98:92:C9:B4:AD:E4:DC:73:7C:74:CB:27:AD:EF:AE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 71A00898F5F0A9AA33557A569FF3344C357EBAAB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1820a02-368b-475a-8c64-c87e903d2117.roa Signing time: Tue 24 Feb 2026 01:31:09 +0000 ROA not before: Tue 24 Feb 2026 01:31:09 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 164.152.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a0:08:98:f5:f0:a9:aa:33:55:7a:56:9f:f3:34:4c:35:7e:ba:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 01:31:09 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=b586d963b8915bf58532b06e4a5e39bc24ac9c255562537e0b37f1a378b94469, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bb:e3:d3:50:be:50:3f:b3:31:67:b0:60:71: 28:47:9a:f1:99:58:ed:69:d9:9f:c2:69:f8:c2:be: c0:2b:f0:60:de:48:2d:e6:70:e0:66:e5:5a:1d:be: 49:35:3c:80:9f:44:09:c6:52:7f:e1:dd:a6:d8:e1: 86:46:2f:e7:c2:5d:4e:f4:58:05:f4:7a:12:a2:ae: 03:c8:0a:d3:cb:dc:2a:bd:a7:3e:35:ff:c6:f0:9b: 58:30:0a:7e:6d:3f:d9:85:87:bf:eb:39:5b:f1:a7: 6f:1d:06:68:5a:54:c4:12:6f:7b:21:ed:29:f3:7f: 02:08:8f:51:fc:21:e2:d5:19:4a:4d:df:a6:2f:b9: 91:21:f5:6a:64:3e:7f:cc:ec:44:dd:1a:ba:45:ae: c0:a3:28:1a:57:82:dd:3f:a7:ea:72:df:e4:94:86: dd:34:75:84:ca:0a:d7:11:b2:f3:27:c8:79:0e:d5: d5:ff:94:79:c1:47:8d:cb:a6:61:ce:85:73:38:d8: 93:5c:f3:73:4f:7d:73:90:87:d8:3e:e3:ce:53:41: 9e:f8:d5:4a:d5:ac:58:8f:43:7e:bf:53:e4:26:ed: 48:42:ff:50:16:75:73:e7:1b:1b:73:95:79:f6:39: f6:4e:38:be:93:c0:62:f5:31:dd:7b:93:4c:ea:8b: cb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0A:4D:36:CD:98:92:C9:B4:AD:E4:DC:73:7C:74:CB:27:AD:EF:AE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1820a02-368b-475a-8c64-c87e903d2117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.152.184.0/21 Signature Algorithm: sha256WithRSAEncryption 69:67:cd:9b:81:20:e2:64:d3:25:25:b1:44:61:f1:f1:c0:ae: 9f:9f:b5:03:16:d6:45:5c:ea:e0:76:d9:4f:81:a0:66:b2:41: 83:c4:a0:60:83:0c:63:23:43:66:ee:4c:e2:fa:42:37:11:f7: b1:d8:19:5c:e1:5a:c8:dd:82:da:b2:c3:0e:b5:dd:4b:c0:08: 5f:0b:04:78:7a:73:8d:24:14:90:4e:94:45:76:ac:7a:5b:7f: ce:0a:6d:95:ec:10:6e:9d:0f:c5:f6:e1:1c:dc:ce:70:fb:2e: 34:43:64:78:bd:99:6c:00:b3:48:58:f1:ee:59:23:30:cd:07: 55:a7:64:f8:d4:a7:2e:ff:15:67:db:71:b7:84:7c:b1:1c:bd: cd:7b:1b:ea:a5:21:39:d5:b9:33:f7:35:d1:3e:2e:2f:6c:ba: 6f:82:2a:21:ec:a6:96:19:fb:34:2f:69:31:10:cf:76:37:25: 9a:b8:f7:1d:5b:8f:7c:a5:fe:0f:04:9e:79:d2:56:f3:a8:1f: 39:45:fd:fa:53:bf:a5:68:34:b2:d4:95:27:55:6c:7b:ae:77: 30:ee:60:24:fe:69:44:4e:0b:67:65:6c:9c:b4:37:ac:a4:9b: 10:ee:31:81:63:a1:53:d7:f1:98:45:10:b8:73:b4:0b:d2:c4: 4a:0f:36:ff -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcaAImPXwqaozVXpWn/M0TDV+uqswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDEzMTA5WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTg2ZDk2M2I4OTE1YmY1ODUzMmIwNmU0YTVlMzliYzI0 YWM5YzI1NTU2MjUzN2UwYjM3ZjFhMzc4Yjk0NDY5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiu+PTUL5QP7MxZ7BgcShHmvGZWO1p2Z/CafjCvsAr8GDe SC3mcOBm5Vodvkk1PICfRAnGUn/h3abY4YZGL+fCXU70WAX0ehKirgPICtPL3Cq9 pz41/8bwm1gwCn5tP9mFh7/rOVvxp28dBmhaVMQSb3sh7SnzfwIIj1H8IeLVGUpN 36YvuZEh9WpkPn/M7ETdGrpFrsCjKBpXgt0/p+py3+SUht00dYTKCtcRsvMnyHkO 1dX/lHnBR43LpmHOhXM42JNc83NPfXOQh9g+485TQZ741UrVrFiPQ36/U+Qm7UhC /1AWdXPnGxtzlXn2OfZOOL6TwGL1Md17k0zqi8thAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeApNNs2Yksm0reTcc3x0yyet764wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ExODIwYTAyLTM2OGItNDc1YS04YzY0LWM4N2U5MDNkMjExNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOkmLgwDQYJKoZIhvcNAQELBQADggEBAGlnzZuBIOJk0yUlsURh8fHArp+f tQMW1kVc6uB22U+BoGayQYPEoGCDDGMjQ2buTOL6QjcR97HYGVzhWsjdgtqyww61 3UvACF8LBHh6c40kFJBOlEV2rHpbf84KbZXsEG6dD8X24RzcznD7LjRDZHi9mWwA s0hY8e5ZIzDNB1WnZPjUpy7/FWfbcbeEfLEcvc17G+qlITnVuTP3NdE+Li9sum+C KiHsppYZ+zQvaTEQz3Y3JZq49x1bj3yl/g8EnnnSVvOoHzlF/fpTv6VoNLLUlSdV bHuudzDuYCT+aUROC2dlbJy0N6ykmxDuMYFjoVPX8ZhFELhztAvSxEoPNv8= -----END CERTIFICATE-----Generated at Mon Mar 2 06:36:04 2026 by rpki-client