$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a39e7546-9d76-41dc-99d2-139c9526f29b.roa File: a39e7546-9d76-41dc-99d2-139c9526f29b.roa (raw, json) Hash identifier: R1NQWnVV7YTcrrpz4XYptkCnyTSIZyDM6puoLq5OoR0= Subject key identifier: 78:65:14:5B:4A:23:77:28:C5:35:74:7D:F4:8D:13:BA:9F:28:56:73 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1E75A8E3528B957193D5695A6AF415241C57C811 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a39e7546-9d76-41dc-99d2-139c9526f29b.roa Signing time: Sat 21 Feb 2026 00:21:31 +0000 ROA not before: Sat 21 Feb 2026 00:21:31 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:75:a8:e3:52:8b:95:71:93:d5:69:5a:6a:f4:15:24:1c:57:c8:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:21:31 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=7606e5d67281f71d15e9b9a7ba5b64734efd558ebfcacf605199dcc3b4e82554, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:80:c5:25:36:e5:ba:f8:dc:35:73:09:08:1b: b4:03:c3:ec:60:0e:d3:8d:b2:2f:90:34:6b:51:9b: 04:e8:6c:4f:50:8a:ea:30:63:e4:1e:52:41:5b:a7: d4:e1:c6:98:70:09:5c:c5:c8:db:d9:65:25:76:73: 22:8c:a7:94:26:aa:c4:cf:32:61:70:74:0d:f8:4a: d0:8a:f8:59:70:62:05:ec:55:28:0b:c1:fd:b9:14: 3d:95:0e:03:05:28:47:56:59:3a:f9:82:aa:b9:75: 23:18:13:42:7b:d6:2b:85:cd:1a:ee:47:21:74:e4: 64:87:fc:4f:75:d5:17:cf:04:a5:c6:29:09:dd:63: 6f:b9:0d:30:52:4d:61:b0:f7:db:1e:85:69:c4:ba: 61:2b:55:79:1b:41:81:c1:ae:7d:66:90:ee:13:8c: 2e:2d:2d:da:0d:d8:93:ef:f3:62:60:f6:29:03:e8: c0:8f:20:42:2f:9e:11:73:35:8d:b4:06:1a:43:69: 5d:48:6f:61:7c:fb:ad:e5:77:e7:23:b3:cc:27:e1: 7a:d4:b8:05:c8:49:6a:fc:35:74:28:49:94:b2:22: 39:54:03:8d:31:ce:4f:b1:df:6f:c4:95:dc:5a:bf: 22:e6:d2:19:94:79:9c:62:f2:fb:62:6e:56:a6:44: 89:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:65:14:5B:4A:23:77:28:C5:35:74:7D:F4:8D:13:BA:9F:28:56:73 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a39e7546-9d76-41dc-99d2-139c9526f29b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.96.0/24 Signature Algorithm: sha256WithRSAEncryption 14:b5:7e:1d:45:d9:01:6d:15:18:6d:19:a3:e2:5f:ff:bc:64: 70:3e:28:e4:96:58:8f:ca:d8:f5:b2:b7:72:0e:37:32:69:c0: 7c:ee:de:0b:f3:30:7c:f8:49:19:96:da:a8:64:38:6f:52:55: 70:ce:85:a2:7c:8d:fd:04:48:34:d6:39:a3:85:53:4d:66:18: 9f:71:f5:5b:e4:3d:4f:2a:81:10:8f:af:f2:af:c9:cc:d4:e9: 0d:83:28:94:3f:78:e4:b1:a5:b9:e3:fb:87:b0:82:a2:58:82: 73:51:62:af:66:71:b5:b1:d1:5a:da:55:74:a4:e1:e4:61:64: 97:3e:4b:72:84:a4:a1:ab:4b:c5:7a:61:f4:9c:1c:ae:d9:af: 64:70:bd:14:89:5a:1f:ef:30:f5:14:5c:65:41:60:ca:7f:21: a0:93:0d:76:80:71:9c:62:a7:90:bc:34:34:eb:30:38:7f:a1: 61:20:c7:9b:ea:16:c5:d9:29:7e:f4:22:15:bd:c9:95:44:d8: 25:77:70:bf:0e:40:09:ad:5f:02:e9:60:f7:4a:1e:72:13:67: 81:44:6a:e7:35:46:80:b8:31:67:d5:d4:a3:d8:ce:ae:45:07: 37:52:e2:fc:10:ef:72:56:38:d9:09:70:7e:8a:f5:a6:d9:44: b6:f7:22:82 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHnWo41KLlXGT1WlaavQVJBxXyBEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDAyMTMxWhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NjA2ZTVkNjcyODFmNzFkMTVlOWI5YTdiYTViNjQ3MzRl ZmQ1NThlYmZjYWNmNjA1MTk5ZGNjM2I0ZTgyNTU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOgMUlNuW6+Nw1cwkIG7QDw+xgDtONsi+QNGtRmwTobE9Q iuowY+QeUkFbp9ThxphwCVzFyNvZZSV2cyKMp5QmqsTPMmFwdA34StCK+FlwYgXs VSgLwf25FD2VDgMFKEdWWTr5gqq5dSMYE0J71iuFzRruRyF05GSH/E911RfPBKXG KQndY2+5DTBSTWGw99sehWnEumErVXkbQYHBrn1mkO4TjC4tLdoN2JPv82Jg9ikD 6MCPIEIvnhFzNY20BhpDaV1Ib2F8+63ld+cjs8wn4XrUuAXISWr8NXQoSZSyIjlU A40xzk+x32/EldxavyLm0hmUeZxi8vtiblamRInVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeGUUW0ojdyjFNXR99I0Tup8oVnMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EzOWU3NTQ2LTlkNzYtNDFkYy05OWQyLTEzOWM5NTI2ZjI5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsGAwDQYJKoZIhvcNAQELBQADggEBABS1fh1F2QFtFRhtGaPiX/+8ZHA+ KOSWWI/K2PWyt3IONzJpwHzu3gvzMHz4SRmW2qhkOG9SVXDOhaJ8jf0ESDTWOaOF U01mGJ9x9VvkPU8qgRCPr/KvyczU6Q2DKJQ/eOSxpbnj+4ewgqJYgnNRYq9mcbWx 0VraVXSk4eRhZJc+S3KEpKGrS8V6YfScHK7Zr2RwvRSJWh/vMPUUXGVBYMp/IaCT DXaAcZxip5C8NDTrMDh/oWEgx5vqFsXZKX70IhW9yZVE2CV3cL8OQAmtXwLpYPdK HnITZ4FEauc1RoC4MWfV1KPYzq5FBzdS4vwQ73JWONkJcH6K9abZRLb3IoI= -----END CERTIFICATE-----Generated at Mon Mar 2 00:08:05 2026 by rpki-client