$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1979bbc-89d1-4e07-aad6-85080b17a463.roa File: d1979bbc-89d1-4e07-aad6-85080b17a463.roa (raw, json) Hash identifier: dTfXciqbkm2PS4XUdX2cKFDrUtGWJUNdZxjDFol8OUQ= Subject key identifier: 43:E3:C6:71:25:18:7A:27:58:1E:3A:1E:90:97:C6:12:A3:B7:6C:6F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 29D89967CE14A8A3997D33B02D0175563FDEF47A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1979bbc-89d1-4e07-aad6-85080b17a463.roa Signing time: Wed 18 Feb 2026 00:30:11 +0000 ROA not before: Wed 18 Feb 2026 00:30:11 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 121.93.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d8:99:67:ce:14:a8:a3:99:7d:33:b0:2d:01:75:56:3f:de:f4:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 18 00:30:11 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=e3e67abcdf1733c751e627d48d91e1d7bd8da3f76f3291a97ba666f8c7774d27, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:e1:37:18:ce:f7:e3:91:50:88:ba:a2:0d: e2:c4:18:07:18:17:a3:ad:93:9c:7c:83:2f:ab:11: 32:c3:c2:26:e8:38:7b:a4:94:06:95:48:f2:67:6a: d9:53:01:88:63:d2:a9:f0:7f:2a:59:49:82:e3:27: f6:b5:38:17:bf:c5:fe:4b:89:5d:5a:f6:88:b2:de: 79:ec:87:3d:2e:89:fe:43:1c:cd:9e:3d:42:8e:14: 18:02:5a:5e:7e:f1:7b:12:0d:2e:9c:f7:4f:d2:52: c3:1d:d7:e7:ba:f6:b3:45:e7:ab:b0:f1:91:bc:7d: 41:9a:cd:03:5c:d9:47:b6:5f:b7:3e:42:b8:28:fb: 0d:95:13:51:0e:d1:41:ac:f2:78:3e:df:8b:6b:4f: 7a:4e:f8:07:e7:f7:69:df:e8:38:e1:ec:b3:53:38: f0:73:81:37:1d:21:7f:a0:4d:5a:db:4a:45:b7:65: 14:6b:42:e5:e9:cd:59:11:9e:a9:d9:a3:5e:a6:73: 5f:3c:a5:90:d0:93:ae:88:98:37:7b:c1:19:2d:96: 7d:a0:cc:c0:56:36:be:d5:bb:05:a1:19:70:2c:a9: d3:e9:8c:18:f8:88:a4:dd:f0:26:98:d5:23:a7:82: 4e:d0:3e:bc:8d:8a:d9:84:50:98:3a:25:cd:35:43: 10:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E3:C6:71:25:18:7A:27:58:1E:3A:1E:90:97:C6:12:A3:B7:6C:6F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1979bbc-89d1-4e07-aad6-85080b17a463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.93.128.0/18 Signature Algorithm: sha256WithRSAEncryption 27:55:45:32:48:1a:8a:7f:ce:88:99:9e:58:e4:57:02:63:4e: 0c:d1:ae:9f:68:cd:0d:5e:41:f9:f6:23:4e:be:9f:62:ed:44: cb:5b:c7:39:9f:ec:fa:33:26:15:b5:24:31:d3:e2:55:ca:c8: 7e:fd:44:98:5f:50:28:4a:24:a3:bc:15:0c:68:12:e4:0e:70: 1f:ed:9b:fe:21:ba:6e:d4:67:56:e6:e2:e3:5f:50:c9:ad:17: 65:9b:2e:c9:a3:ff:b5:43:65:a2:cc:d1:b5:04:25:0f:f8:11: 91:0e:c4:9a:48:8a:79:af:10:5a:ed:dd:94:25:74:e1:47:6a: 8d:67:87:03:8f:87:ed:6e:20:eb:ef:2f:df:93:a4:64:0d:89: 4b:8c:a1:bd:13:a3:4d:83:b1:87:f2:95:33:e3:5f:ae:0e:24: ff:2e:41:f6:9f:c5:d4:28:e7:e7:44:f6:06:10:24:2a:2f:c6: 55:6c:58:cb:65:38:50:42:30:8a:67:6c:1b:3a:bf:e9:f0:8c: 0f:3d:a8:50:35:1e:0f:d4:9c:7c:54:9b:9d:cf:4f:ef:69:e4: e2:4c:e5:98:59:e1:83:74:2f:fe:e7:70:c3:f8:27:f4:db:2b: e6:26:af:68:b7:12:98:33:69:a8:99:46:3b:86:98:25:75:1a: e0:50:61:50 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKdiZZ84UqKOZfTOwLQF1Vj/e9HowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE4MDAzMDExWhcNMjYwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlM2U2N2FiY2RmMTczM2M3NTFlNjI3ZDQ4ZDkxZTFkN2Jk OGRhM2Y3NmYzMjkxYTk3YmE2NjZmOGM3Nzc0ZDI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHTuE3GM7345FQiLqiDeLEGAcYF6Otk5x8gy+rETLDwibo OHuklAaVSPJnatlTAYhj0qnwfypZSYLjJ/a1OBe/xf5LiV1a9oiy3nnshz0uif5D HM2ePUKOFBgCWl5+8XsSDS6c90/SUsMd1+e69rNF56uw8ZG8fUGazQNc2Ue2X7c+ Qrgo+w2VE1EO0UGs8ng+34trT3pO+Afn92nf6Djh7LNTOPBzgTcdIX+gTVrbSkW3 ZRRrQuXpzVkRnqnZo16mc188pZDQk66ImDd7wRktln2gzMBWNr7VuwWhGXAsqdPp jBj4iKTd8CaY1SOngk7QPryNitmEUJg6Jc01QxDPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQ+PGcSUYeidYHjoekJfGEqO3bG8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QxOTc5YmJjLTg5ZDEtNGUwNy1hYWQ2LTg1MDgwYjE3YTQ2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZ5XYAwDQYJKoZIhvcNAQELBQADggEBACdVRTJIGop/zoiZnljkVwJjTgzR rp9ozQ1eQfn2I06+n2LtRMtbxzmf7PozJhW1JDHT4lXKyH79RJhfUChKJKO8FQxo EuQOcB/tm/4hum7UZ1bm4uNfUMmtF2WbLsmj/7VDZaLM0bUEJQ/4EZEOxJpIinmv EFrt3ZQldOFHao1nhwOPh+1uIOvvL9+TpGQNiUuMob0To02DsYfylTPjX64OJP8u QfafxdQo5+dE9gYQJCovxlVsWMtlOFBCMIpnbBs6v+nwjA89qFA1Hg/UnHxUm53P T+9p5OJM5ZhZ4YN0L/7ncMP4J/TbK+Ymr2i3EpgzaaiZRjuGmCV1GuBQYVA= -----END CERTIFICATE-----Generated at Mon Mar 2 03:39:53 2026 by rpki-client