$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd9009c-1eb1-4035-bd6f-ae1855761542.roa File: acd9009c-1eb1-4035-bd6f-ae1855761542.roa (raw, json) Hash identifier: eOk1K0X0Kgwv4N+ErSAf5C3KNiDEboxOGNkyZ+NvHHI= Subject key identifier: 79:EE:A1:2A:57:EB:15:86:10:34:61:49:1D:95:E6:DF:31:4E:D5:FA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 21E93C1A2E98EBA53856D2695FBD9FB3415A178F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd9009c-1eb1-4035-bd6f-ae1855761542.roa Signing time: Tue 24 Feb 2026 00:20:44 +0000 ROA not before: Tue 24 Feb 2026 00:20:44 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.196.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e9:3c:1a:2e:98:eb:a5:38:56:d2:69:5f:bd:9f:b3:41:5a:17:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 00:20:44 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=02b8acef0c7d640ce56390c3105a1b2a308aa1ee6a25b774663f6a7d94765a9b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e1:ad:53:5c:56:7e:a0:0a:85:b5:a3:af:13: 2a:f5:f2:b0:bf:ab:fb:1e:1b:03:80:ec:f3:1e:fa: ef:b3:61:51:0f:73:82:1c:25:31:af:98:f1:df:91: 85:1f:e8:e3:9e:b9:b9:58:56:f8:5f:7a:67:c0:5f: 74:5d:74:a2:55:ed:59:fc:e5:3e:fb:ac:06:6c:67: a3:3a:6d:ad:93:74:fe:13:bc:61:e9:d6:56:ae:2d: a2:15:e1:dc:71:e2:f7:38:22:d2:e4:23:f2:f3:e0: 58:e8:71:49:ff:69:fd:14:92:cd:8b:4e:3e:05:b2: 47:4b:fd:ab:c6:dc:0b:08:a2:f1:aa:bd:3e:c9:48: 78:71:cb:99:c3:2a:a3:cf:53:b2:0c:44:38:c7:61: 33:b4:29:5f:eb:7f:ab:38:f6:8c:51:b5:61:c4:58: 4e:b8:11:8f:c3:b3:d6:3e:0f:2f:cb:c0:26:4a:35: 77:fa:ac:39:91:5c:35:85:af:9f:8d:96:3f:ad:40: f8:2b:56:0e:c0:63:8a:70:ec:d6:34:1e:67:dd:40: e5:8c:02:61:13:3d:8a:06:09:b9:ac:81:d0:28:ba: 2b:38:98:c7:00:82:5e:bf:6c:73:11:14:30:7e:00: 0b:1e:14:22:79:68:e7:a5:29:4e:72:37:71:06:86: 67:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EE:A1:2A:57:EB:15:86:10:34:61:49:1D:95:E6:DF:31:4E:D5:FA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd9009c-1eb1-4035-bd6f-ae1855761542.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.196.0.0/14 Signature Algorithm: sha256WithRSAEncryption 15:b3:ae:a8:6d:24:24:6c:5d:7d:5d:00:a2:ad:6c:e0:00:b7: b8:8c:11:60:fd:15:75:6e:d6:62:53:cf:c8:ff:b3:56:54:82: 91:ad:ca:a5:04:66:0a:01:b0:1c:bd:7b:82:03:a3:37:80:27: 8d:0e:b5:9c:15:9b:e8:03:07:ff:50:f5:db:e5:94:04:07:4d: 11:6e:81:97:4d:bf:7e:cb:2b:7c:d9:23:f2:91:2c:7a:b0:eb: 50:13:0e:46:de:6d:3e:1e:66:2b:b0:a3:51:f0:3f:dd:1f:0e: be:1e:d5:3c:e4:8b:1d:02:0a:cb:52:97:71:57:37:f1:62:f6: e8:0a:04:a5:d0:48:e7:86:9a:fc:ec:f5:0e:ae:ae:36:24:6f: 64:1c:32:19:70:9a:ec:5a:78:83:c1:0c:b0:6d:cb:a0:d4:35: e8:c2:3d:02:f2:31:a5:77:ca:70:15:d0:a7:cc:81:7c:be:19: 05:ad:c1:c0:1d:a9:4d:20:76:a6:82:3f:17:86:01:6e:51:d5: 05:29:38:98:bc:4d:2e:af:99:26:22:d0:f0:6c:d7:ae:a7:56: de:95:8c:da:ff:4c:f2:99:cf:ec:2e:64:91:6b:97:d5:f3:8f: a7:ff:59:2f:75:61:a7:14:83:cd:35:16:9c:ff:40:80:2d:c1: d9:39:16:ae -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIek8Gi6Y66U4VtJpX72fs0FaF48wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDAyMDQ0WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMmI4YWNlZjBjN2Q2NDBjZTU2MzkwYzMxMDVhMWIyYTMw OGFhMWVlNmEyNWI3NzQ2NjNmNmE3ZDk0NzY1YTliMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCp4a1TXFZ+oAqFtaOvEyr18rC/q/seGwOA7PMe+u+zYVEP c4IcJTGvmPHfkYUf6OOeublYVvhfemfAX3RddKJV7Vn85T77rAZsZ6M6ba2TdP4T vGHp1lauLaIV4dxx4vc4ItLkI/Lz4FjocUn/af0Uks2LTj4FskdL/avG3AsIovGq vT7JSHhxy5nDKqPPU7IMRDjHYTO0KV/rf6s49oxRtWHEWE64EY/Ds9Y+Dy/LwCZK NXf6rDmRXDWFr5+Nlj+tQPgrVg7AY4pw7NY0HmfdQOWMAmETPYoGCbmsgdAouis4 mMcAgl6/bHMRFDB+AAseFCJ5aOelKU5yN3EGhmeFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUee6hKlfrFYYQNGFJHZXm3zFO1fowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FjZDkwMDljLTFlYjEtNDAzNS1iZDZmLWFlMTg1NTc2MTU0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwINxDANBgkqhkiG9w0BAQsFAAOCAQEAFbOuqG0kJGxdfV0Aoq1s4AC3uIwR YP0VdW7WYlPPyP+zVlSCka3KpQRmCgGwHL17ggOjN4AnjQ61nBWb6AMH/1D12+WU BAdNEW6Bl02/fssrfNkj8pEserDrUBMORt5tPh5mK7CjUfA/3R8Ovh7VPOSLHQIK y1KXcVc38WL26AoEpdBI54aa/Oz1Dq6uNiRvZBwyGXCa7Fp4g8EMsG3LoNQ16MI9 AvIxpXfKcBXQp8yBfL4ZBa3BwB2pTSB2poI/F4YBblHVBSk4mLxNLq+ZJiLQ8GzX rqdW3pWM2v9M8pnP7C5kkWuX1fOPp/9ZL3VhpxSDzTUWnP9AgC3B2TkWrg== -----END CERTIFICATE-----Generated at Mon Mar 2 16:24:44 2026 by rpki-client