$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3e98078-c643-4a79-824d-9414bb417cea.roa File: c3e98078-c643-4a79-824d-9414bb417cea.roa (raw, json) Hash identifier: ouxd43xuzMrQlyDMBIF2AHRHrTuGgV9pp2TxEjp7V3w= Subject key identifier: BD:16:DA:05:E4:95:73:83:8E:5A:5C:3B:0B:13:76:7B:68:55:5A:A7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6B4AB50EDF26BD6FCA07BFC1C0B415FC21391FEE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3e98078-c643-4a79-824d-9414bb417cea.roa Signing time: Sat 21 Feb 2026 01:00:55 +0000 ROA not before: Sat 21 Feb 2026 01:00:55 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4a:b5:0e:df:26:bd:6f:ca:07:bf:c1:c0:b4:15:fc:21:39:1f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:00:55 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=607898519feca8c41bb4b1e71cd76b48d5a85f07e7c08d8dbf8950d4eacbaa0b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3e:f9:ee:d0:db:76:a0:6b:be:6d:99:3a:8a: 16:53:75:44:65:6f:66:e8:27:a9:9b:58:28:49:7c: f1:1a:bf:82:d0:37:f2:bc:e8:0d:04:90:70:60:a5: 24:d5:c8:32:59:6f:96:70:f8:7a:09:5f:61:4a:53: e9:1b:74:f8:80:76:b3:ce:92:24:ba:dd:e6:5f:81: 5f:bc:40:47:fd:00:93:c6:a2:b0:e6:73:5a:aa:db: 91:df:29:ed:a3:b6:ac:a0:06:24:13:c5:6d:d5:03: 5e:6d:67:69:5a:32:a4:88:2a:3b:2b:5a:d8:32:ba: 3b:44:19:20:0d:11:79:95:15:16:e6:15:c5:a6:00: 97:d3:11:d2:ee:44:42:8b:18:4a:e1:ab:10:e3:db: 54:07:89:fb:e8:97:1f:f0:75:67:56:26:ac:78:70: 21:dd:24:e5:8f:fc:45:80:a5:6c:cb:b5:6e:42:14: fd:ed:92:6a:40:58:eb:ec:18:b3:42:c7:fb:52:b2: 71:54:29:ad:c8:de:11:ce:8e:fa:5f:27:b3:c5:ee: 45:dc:de:f6:e0:fa:b8:29:94:bc:69:5e:78:1a:12: ed:65:4e:db:e7:d4:ab:cb:f5:a0:49:77:46:41:f6: 7f:9e:bd:7c:f9:c3:92:1e:d0:6f:b3:17:00:29:d1: 81:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:16:DA:05:E4:95:73:83:8E:5A:5C:3B:0B:13:76:7B:68:55:5A:A7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3e98078-c643-4a79-824d-9414bb417cea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.218.0/24 Signature Algorithm: sha256WithRSAEncryption a0:20:b1:2b:2e:77:22:76:94:ea:a5:8b:f2:10:37:c3:51:54: 34:bd:83:64:a0:ae:e2:e6:32:c9:e3:9a:59:f7:1e:4b:e2:a0: 26:c5:67:6e:f4:8b:00:73:ad:83:6a:c4:b2:34:c9:ab:13:8a: 13:be:80:c7:71:d4:2e:4f:40:28:5c:34:1d:47:4f:0e:a1:34: 1a:0a:68:31:d1:00:8b:5f:a2:7d:0c:a0:e4:ff:a1:40:22:f8: e8:49:b2:9c:fb:a3:d9:6a:b0:32:77:6e:64:d4:c3:0a:dc:bc: c5:f0:63:4d:77:81:b3:3a:b2:57:6b:cc:9b:74:b8:1f:b7:46: 1e:da:5e:a4:df:af:af:39:23:b5:4c:57:b3:9c:a9:11:c0:54: 11:53:ae:43:63:59:7d:79:4d:ed:70:21:10:68:3b:72:1d:aa: 28:ef:e5:e6:d4:8b:dd:05:4d:22:87:a3:85:17:bd:98:57:b2: e2:d6:b1:53:ae:54:4b:5c:32:89:48:4b:c4:ae:65:dd:17:f9: 72:ec:84:08:21:f8:7b:b1:45:1e:56:cb:66:79:a7:5c:f1:ce: fc:7f:7c:5a:11:65:f1:33:7e:da:c3:d9:1a:cd:ab:30:bd:d6: 70:d3:cf:02:0e:a4:e8:dd:8e:d3:0b:c1:62:0a:d8:ad:e2:c0: 3d:3a:7d:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa0q1Dt8mvW/KB7/BwLQV/CE5H+4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDEwMDU1WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MDc4OTg1MTlmZWNhOGM0MWJiNGIxZTcxY2Q3NmI0OGQ1 YTg1ZjA3ZTdjMDhkOGRiZjg5NTBkNGVhY2JhYTBiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWPvnu0Nt2oGu+bZk6ihZTdURlb2boJ6mbWChJfPEav4LQ N/K86A0EkHBgpSTVyDJZb5Zw+HoJX2FKU+kbdPiAdrPOkiS63eZfgV+8QEf9AJPG orDmc1qq25HfKe2jtqygBiQTxW3VA15tZ2laMqSIKjsrWtgyujtEGSANEXmVFRbm FcWmAJfTEdLuREKLGErhqxDj21QHifvolx/wdWdWJqx4cCHdJOWP/EWApWzLtW5C FP3tkmpAWOvsGLNCx/tSsnFUKa3I3hHOjvpfJ7PF7kXc3vbg+rgplLxpXngaEu1l Ttvn1KvL9aBJd0ZB9n+evXz5w5Ie0G+zFwAp0YG5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvRbaBeSVc4OOWlw7CxN2e2hVWqcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MzZTk4MDc4LWM2NDMtNGE3OS04MjRkLTk0MTRiYjQxN2NlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsNowDQYJKoZIhvcNAQELBQADggEBAKAgsSsudyJ2lOqli/IQN8NRVDS9 g2SgruLmMsnjmln3HkvioCbFZ270iwBzrYNqxLI0yasTihO+gMdx1C5PQChcNB1H Tw6hNBoKaDHRAItfon0MoOT/oUAi+OhJspz7o9lqsDJ3bmTUwwrcvMXwY013gbM6 sldrzJt0uB+3Rh7aXqTfr685I7VMV7OcqRHAVBFTrkNjWX15Te1wIRBoO3Idqijv 5ebUi90FTSKHo4UXvZhXsuLWsVOuVEtcMolIS8SuZd0X+XLshAgh+HuxRR5Wy2Z5 p1zxzvx/fFoRZfEzftrD2RrNqzC91nDTzwIOpOjdjtMLwWIK2K3iwD06fcI= -----END CERTIFICATE-----Generated at Mon Mar 2 00:12:22 2026 by rpki-client