$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeb5a04b-af2e-493c-a824-8181a14a14c0.roa File: aeb5a04b-af2e-493c-a824-8181a14a14c0.roa (raw, json) Hash identifier: qnLTy+A+YrbxTaw0zZRfsoS8CeCaTfzj/FI4is3C+mY= Subject key identifier: A0:81:07:C4:F7:9A:23:48:DA:1E:1E:B6:27:C1:F9:CE:1F:C8:9E:9C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5FA390F7D6E07D108236821765291ACEB5041818 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeb5a04b-af2e-493c-a824-8181a14a14c0.roa Signing time: Sat 21 Feb 2026 00:20:59 +0000 ROA not before: Sat 21 Feb 2026 00:20:59 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a3:90:f7:d6:e0:7d:10:82:36:82:17:65:29:1a:ce:b5:04:18:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:20:59 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=8927e7ef76325ae9e91dba86d46dac1e1dd372b594b4ff72ec957b5cc663b4d5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:35:bd:76:76:fb:8c:c7:3b:34:59:cd:83:e8: 13:6a:80:9f:9d:7c:f8:ce:a6:e8:b9:ad:f6:6f:72: e9:e2:45:1a:67:a6:24:02:9a:dc:3f:36:55:0a:fd: 33:15:01:1d:2c:b0:03:27:18:9a:35:68:3c:2b:65: c1:72:b8:f3:56:92:23:29:9a:d0:a8:ce:8a:e9:fe: 74:6d:c4:90:91:da:14:d0:08:11:aa:8b:6a:61:c2: b0:e2:1b:5e:01:97:58:92:c6:59:fe:89:41:e4:1a: 80:d4:e2:10:0c:14:99:2b:51:f8:30:49:f2:1c:bf: c1:cc:64:eb:8b:22:1a:04:93:69:69:a4:47:31:83: 8d:9a:6d:bd:35:89:7e:6d:97:3c:79:a1:29:9c:88: a2:77:5a:52:dc:a4:73:3c:18:10:69:25:77:12:11: f2:ec:1b:c8:ca:b1:2c:2e:d5:15:49:a1:ca:1f:6a: 9e:60:2b:d6:54:f0:22:36:41:a2:86:4f:47:0d:4b: 1d:45:d0:38:a8:ba:5e:a5:77:5b:75:4f:20:62:ce: 1e:e1:3a:9c:7b:54:12:9a:35:d0:b1:3a:2f:b3:10: 5f:00:f3:ad:bd:84:bc:d2:4b:4f:1b:ed:69:3b:37: 34:65:ec:c4:f7:f6:d4:b8:8b:d4:55:63:ba:99:e5: 94:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:81:07:C4:F7:9A:23:48:DA:1E:1E:B6:27:C1:F9:CE:1F:C8:9E:9C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aeb5a04b-af2e-493c-a824-8181a14a14c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.100.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:8c:ba:38:dd:b1:a7:d9:83:86:18:4f:51:a7:28:28:ff:23: 02:b0:f2:d9:20:9a:95:aa:6d:c6:35:aa:e5:96:c2:7e:7d:22: 6d:17:21:d4:6c:e9:22:c9:9b:07:91:76:b4:1f:5d:19:30:88: 74:58:a8:93:af:14:87:59:7d:f5:d6:50:8e:7a:11:22:e1:56: 28:4e:b1:58:ed:94:de:e2:21:b3:b7:e9:18:61:95:bc:6a:0c: 02:69:3d:05:ce:de:61:6f:b2:a9:da:72:a2:8c:e6:6c:d0:1c: 32:d8:74:f0:36:10:16:ca:4a:21:6b:82:33:e0:4f:36:c7:d2: 33:fe:69:68:93:5f:3c:f4:40:24:6f:38:75:24:cc:90:92:30: d8:5f:67:de:97:1c:90:ff:13:c8:0f:bc:3f:03:d0:ec:49:3c: 3d:6e:15:85:52:ba:f5:6a:d7:f6:96:3c:7b:06:eb:51:71:be: 58:06:9e:b7:ad:d0:8c:02:96:80:16:66:ac:60:25:41:95:14: e6:37:e1:09:63:03:d8:8a:e4:33:71:14:6a:15:7e:ea:4c:a2: 12:e7:f7:bb:9c:d3:4d:63:91:46:c9:5e:e6:d3:a4:f4:fa:a6: a1:30:5e:e0:74:49:61:58:27:08:58:c2:09:9b:7e:48:67:dc: 06:05:af:2d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX6OQ99bgfRCCNoIXZSkazrUEGBgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDAyMDU5WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4OTI3ZTdlZjc2MzI1YWU5ZTkxZGJhODZkNDZkYWMxZTFk ZDM3MmI1OTRiNGZmNzJlYzk1N2I1Y2M2NjNiNGQ1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCINb12dvuMxzs0Wc2D6BNqgJ+dfPjOpui5rfZvcuniRRpn piQCmtw/NlUK/TMVAR0ssAMnGJo1aDwrZcFyuPNWkiMpmtCozorp/nRtxJCR2hTQ CBGqi2phwrDiG14Bl1iSxln+iUHkGoDU4hAMFJkrUfgwSfIcv8HMZOuLIhoEk2lp pEcxg42abb01iX5tlzx5oSmciKJ3WlLcpHM8GBBpJXcSEfLsG8jKsSwu1RVJocof ap5gK9ZU8CI2QaKGT0cNSx1F0Dioul6ld1t1TyBizh7hOpx7VBKaNdCxOi+zEF8A 8629hLzSS08b7Wk7NzRl7MT39tS4i9RVY7qZ5ZR7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoIEHxPeaI0jaHh62J8H5zh/InpwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlYjVhMDRiLWFmMmUtNDkzYy1hODI0LTgxODFhMTRhMTRjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsGQwDQYJKoZIhvcNAQELBQADggEBAGqMujjdsafZg4YYT1GnKCj/IwKw 8tkgmpWqbcY1quWWwn59Im0XIdRs6SLJmweRdrQfXRkwiHRYqJOvFIdZffXWUI56 ESLhVihOsVjtlN7iIbO36RhhlbxqDAJpPQXO3mFvsqnacqKM5mzQHDLYdPA2EBbK SiFrgjPgTzbH0jP+aWiTXzz0QCRvOHUkzJCSMNhfZ96XHJD/E8gPvD8D0OxJPD1u FYVSuvVq1/aWPHsG61FxvlgGnret0IwCloAWZqxgJUGVFOY34QljA9iK5DNxFGoV fupMohLn97uc001jkUbJXubTpPT6pqEwXuB0SWFYJwhYwgmbfkhn3AYFry0= -----END CERTIFICATE-----Generated at Sun Mar 1 22:24:54 2026 by rpki-client