$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca672aeb-df38-4784-b3b1-db116a6f4cf9.roa File: ca672aeb-df38-4784-b3b1-db116a6f4cf9.roa (raw, json) Hash identifier: LtGrReZJk1j6lpUJgiD1oVyuj2AmQdXWwijPkirNCNU= Subject key identifier: 7E:8B:CE:21:76:2A:E7:FD:2A:AA:8A:1B:59:36:58:76:43:2D:4E:D8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3379D481BF819634C670FD1DA88192EAD8B14203 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca672aeb-df38-4784-b3b1-db116a6f4cf9.roa Signing time: Sat 21 Feb 2026 01:00:51 +0000 ROA not before: Sat 21 Feb 2026 01:00:51 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:79:d4:81:bf:81:96:34:c6:70:fd:1d:a8:81:92:ea:d8:b1:42:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:00:51 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=f8427c361102bc10f9442da6413c7d0422eb5f37cb187ffcc55f2216d866f54d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:30:91:62:bd:96:50:e1:4b:51:77:0f:4d:60: 28:86:85:f6:6b:60:bb:2b:bc:96:42:62:f6:dd:d4: 8f:53:96:f5:f6:f2:a5:9a:8d:83:30:c1:5f:e8:19: c4:31:52:cd:49:ab:c1:f2:d9:9b:45:b2:0e:a9:e1: d3:46:07:96:09:d5:b0:7a:18:3d:3d:83:bf:56:d7: 03:d7:d8:1b:f2:3c:52:c0:d1:b6:01:d6:4f:1f:55: 29:c9:33:bc:a6:e1:86:4c:a9:0c:ef:45:2d:93:60: 02:b5:f7:6d:03:62:c4:1f:59:02:b5:16:16:a0:e3: 3a:99:49:ea:75:16:68:14:bc:54:dd:bc:fd:a4:2e: 26:7e:e8:a0:c9:96:d7:c5:69:3c:8d:2f:a0:5f:5e: 43:73:31:5f:df:27:64:7c:50:15:9a:54:3f:ed:a4: 4c:29:ac:b5:05:2d:46:a7:99:cb:1b:8f:85:08:f1: e1:ed:9e:17:13:77:47:67:43:05:b5:78:00:a4:aa: e6:3f:b1:85:2a:c3:f1:96:0d:2e:1d:e3:b9:73:e6: 03:ec:df:ef:e0:9a:d3:e0:0d:22:d9:32:88:24:03: 02:14:77:af:12:3b:cb:96:ab:38:83:5e:72:fe:32: 41:23:d1:40:12:77:df:f6:19:5c:c3:a6:ee:94:92: 85:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8B:CE:21:76:2A:E7:FD:2A:AA:8A:1B:59:36:58:76:43:2D:4E:D8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca672aeb-df38-4784-b3b1-db116a6f4cf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.160.0/19 Signature Algorithm: sha256WithRSAEncryption 94:6b:76:db:74:d4:b4:58:d9:f7:1f:16:e3:a6:08:bc:2f:88: f7:27:54:9f:b2:96:72:45:6e:aa:c9:e1:48:f4:cf:b2:00:a2: ad:39:50:1d:59:29:32:b5:40:3a:9a:ac:4b:1f:d1:ff:6e:36: 1a:9a:d7:8c:57:32:89:b0:fc:31:ce:d4:a6:3d:98:76:1c:ac: 6e:a8:dc:fd:fc:f6:be:4c:b7:f8:cc:fb:a9:92:3a:c9:bb:a9: 08:14:c0:bd:35:1d:fd:f2:e8:62:71:fe:0f:51:75:66:de:70: a1:ac:eb:ef:f8:61:23:85:f8:af:a7:4f:da:35:ce:c3:93:82: f6:ce:44:86:7e:f1:3a:6a:79:6c:e4:8f:7c:26:9f:98:99:03: 77:91:94:e4:b4:0f:d4:b1:38:aa:9f:fb:de:6c:76:c8:30:ad: 51:14:e6:54:c5:9b:44:14:93:4b:b4:70:9a:f2:8b:e9:1d:16: 31:03:9a:9d:46:12:d9:6c:d2:39:f2:31:70:13:4f:05:bf:e3: 64:41:97:9d:2c:4a:27:58:fa:3c:46:28:2d:87:e7:65:16:04: 73:97:8d:e0:04:45:ca:9b:58:ad:78:a1:40:03:03:92:cc:f3: 39:15:58:64:21:9c:5c:96:53:da:4a:7f:0a:70:a1:27:82:f7: 10:81:e2:e0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM3nUgb+BljTGcP0dqIGS6tixQgMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDEwMDUxWhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmODQyN2MzNjExMDJiYzEwZjk0NDJkYTY0MTNjN2QwNDIy ZWI1ZjM3Y2IxODdmZmNjNTVmMjIxNmQ4NjZmNTRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwMJFivZZQ4UtRdw9NYCiGhfZrYLsrvJZCYvbd1I9TlvX2 8qWajYMwwV/oGcQxUs1Jq8Hy2ZtFsg6p4dNGB5YJ1bB6GD09g79W1wPX2BvyPFLA 0bYB1k8fVSnJM7ym4YZMqQzvRS2TYAK1920DYsQfWQK1Fhag4zqZSep1FmgUvFTd vP2kLiZ+6KDJltfFaTyNL6BfXkNzMV/fJ2R8UBWaVD/tpEwprLUFLUanmcsbj4UI 8eHtnhcTd0dnQwW1eACkquY/sYUqw/GWDS4d47lz5gPs3+/gmtPgDSLZMogkAwIU d68SO8uWqziDXnL+MkEj0UASd9/2GVzDpu6UkoVJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfovOIXYq5/0qqoobWTZYdkMtTtgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NhNjcyYWViLWRmMzgtNDc4NC1iM2IxLWRiMTE2YTZmNGNmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWCsKAwDQYJKoZIhvcNAQELBQADggEBAJRrdtt01LRY2fcfFuOmCLwviPcn VJ+ylnJFbqrJ4Uj0z7IAoq05UB1ZKTK1QDqarEsf0f9uNhqa14xXMomw/DHO1KY9 mHYcrG6o3P389r5Mt/jM+6mSOsm7qQgUwL01Hf3y6GJx/g9RdWbecKGs6+/4YSOF +K+nT9o1zsOTgvbORIZ+8TpqeWzkj3wmn5iZA3eRlOS0D9SxOKqf+95sdsgwrVEU 5lTFm0QUk0u0cJryi+kdFjEDmp1GEtls0jnyMXATTwW/42RBl50sSidY+jxGKC2H 52UWBHOXjeAERcqbWK14oUADA5LM8zkVWGQhnFyWU9pKfwpwoSeC9xCB4uA= -----END CERTIFICATE-----Generated at Sun Mar 1 22:05:20 2026 by rpki-client