$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c0cb74-fe99-4d60-a3ad-d4c299875974.roa File: b7c0cb74-fe99-4d60-a3ad-d4c299875974.roa (raw, json) Hash identifier: rN9xTTAuxatgLQWRGNoYjEcUnkWWISj3FP5hPk24HB8= Subject key identifier: 24:3E:BB:17:9F:16:35:BF:51:66:BE:47:DF:6E:6D:33:06:AB:A2:40 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4DD5277A4E4B15E731F1E0021F361668870C7AAC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c0cb74-fe99-4d60-a3ad-d4c299875974.roa Signing time: Sat 28 Feb 2026 00:40:04 +0000 ROA not before: Sat 28 Feb 2026 00:40:04 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 204.130.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:d5:27:7a:4e:4b:15:e7:31:f1:e0:02:1f:36:16:68:87:0c:7a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 28 00:40:04 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=199c1deac43000e11a02eb4420fe11049414a34f0869099e8d4cdf9ccb1f561d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0e:bf:87:1d:0b:3c:e2:64:d7:75:37:76:49: b4:be:08:04:12:61:35:7c:50:16:19:f7:5f:7f:b4: e6:cf:8d:61:4a:d3:ee:5a:9b:73:fc:6c:e3:38:b2: 63:7b:8a:b1:54:f5:c1:32:31:a9:07:c0:4b:62:f1: 22:73:11:a3:91:91:38:23:00:28:09:4f:af:6e:d5: d0:78:0d:3a:0a:c8:c3:d1:c3:dc:08:bd:04:68:8a: f4:dd:b9:ce:c0:d2:5e:07:fe:54:1b:38:5e:c3:62: 41:83:35:dc:6e:95:df:9e:06:e6:33:28:3c:92:45: 56:e1:52:5e:14:3d:11:dc:d8:69:59:f8:77:53:a9: ed:a4:20:33:2f:81:8b:f4:89:31:d8:e0:98:f3:be: 3e:00:fd:51:9c:48:1d:04:f5:a0:50:89:a9:81:34: 66:b9:a7:d7:1c:04:2c:a9:69:fd:c6:87:00:f0:e3: 16:59:a9:43:e4:9a:7e:2d:39:69:b6:e9:57:c5:6a: 43:70:bb:ad:b9:c2:61:0f:3b:31:7d:e7:29:12:d8: 14:e5:be:02:d0:6c:6c:5f:e9:21:c4:98:93:80:b0: d6:37:32:20:0f:e2:bf:ac:10:13:a6:9e:65:d0:ef: 9c:ed:39:91:9f:57:c1:04:55:17:3c:e0:f3:5c:78: db:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3E:BB:17:9F:16:35:BF:51:66:BE:47:DF:6E:6D:33:06:AB:A2:40 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c0cb74-fe99-4d60-a3ad-d4c299875974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.130.202.0/24 Signature Algorithm: sha256WithRSAEncryption c1:23:a9:14:60:aa:e6:04:38:3f:ab:00:c8:8d:f1:75:4e:c8: 9f:39:98:36:76:81:98:95:cc:48:6b:ca:47:09:fa:55:3c:40: be:bc:12:e2:0a:e4:60:45:48:03:2e:7e:33:0f:4c:82:45:1e: 77:cd:cf:d6:3a:5c:a0:32:51:70:63:9b:a5:f2:42:17:f6:08: 2a:fe:37:ff:ac:ad:d2:6b:95:78:ec:cd:86:3c:da:3f:38:17: 1c:bd:21:e9:e4:ea:07:43:19:98:e4:e3:51:13:06:0c:ae:5d: 8a:2c:bb:ef:f9:89:05:53:9c:14:04:e1:07:d3:65:5e:b5:19: c9:e1:c5:da:4a:fb:5d:a9:b6:f6:b2:52:8d:19:c9:0a:ce:10: e4:b7:0f:fc:42:af:c7:13:a4:82:05:a1:9e:4f:93:b3:af:12: 5c:c0:5d:90:53:45:83:a3:b7:f4:20:a9:4f:5a:62:52:60:e9: ec:0c:8c:e6:98:ff:37:45:70:c9:b7:c7:b7:1e:b7:45:86:d9: 75:8d:18:b3:a4:0d:28:97:0e:85:a2:91:e9:72:26:a7:2a:d8: 9b:98:39:ed:ec:e6:0f:d6:d3:58:9e:ec:ed:68:f1:c7:52:b4: ed:0d:d0:55:80:df:e3:0f:a7:6d:7e:3e:b9:fb:72:6f:0a:57: 26:65:84:05 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTdUnek5LFecx8eACHzYWaIcMeqwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI4MDA0MDA0WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTljMWRlYWM0MzAwMGUxMWEwMmViNDQyMGZlMTEwNDk0 MTRhMzRmMDg2OTA5OWU4ZDRjZGY5Y2NiMWY1NjFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpDr+HHQs84mTXdTd2SbS+CAQSYTV8UBYZ919/tObPjWFK 0+5am3P8bOM4smN7irFU9cEyMakHwEti8SJzEaORkTgjACgJT69u1dB4DToKyMPR w9wIvQRoivTduc7A0l4H/lQbOF7DYkGDNdxuld+eBuYzKDySRVbhUl4UPRHc2GlZ +HdTqe2kIDMvgYv0iTHY4Jjzvj4A/VGcSB0E9aBQiamBNGa5p9ccBCypaf3GhwDw 4xZZqUPkmn4tOWm26VfFakNwu625wmEPOzF95ykS2BTlvgLQbGxf6SHEmJOAsNY3 MiAP4r+sEBOmnmXQ75ztOZGfV8EEVRc84PNceNs7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJD67F58WNb9RZr5H325tMwarokAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I3YzBjYjc0LWZlOTktNGQ2MC1hM2FkLWQ0YzI5OTg3NTk3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADMgsowDQYJKoZIhvcNAQELBQADggEBAMEjqRRgquYEOD+rAMiN8XVOyJ85 mDZ2gZiVzEhrykcJ+lU8QL68EuIK5GBFSAMufjMPTIJFHnfNz9Y6XKAyUXBjm6Xy Qhf2CCr+N/+srdJrlXjszYY82j84Fxy9Ienk6gdDGZjk41ETBgyuXYosu+/5iQVT nBQE4QfTZV61GcnhxdpK+12ptvayUo0ZyQrOEOS3D/xCr8cTpIIFoZ5Pk7OvElzA XZBTRYOjt/QgqU9aYlJg6ewMjOaY/zdFcMm3x7cet0WG2XWNGLOkDSiXDoWikely Jqcq2JuYOe3s5g/W01ie7O1o8cdStO0N0FWA3+MPp21+Prn7cm8KVyZlhAU= -----END CERTIFICATE-----Generated at Mon Mar 2 00:06:27 2026 by rpki-client