$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da7b25fd-98db-48f9-b842-f5cfa4155d9d.roa File: da7b25fd-98db-48f9-b842-f5cfa4155d9d.roa (raw, json) Hash identifier: abeS5GYwImiDe8bgTLsNtFJTwE187l4tOv2h3NF1qgU= Subject key identifier: E6:2E:2D:01:BE:EA:1D:7E:55:E3:97:54:42:93:CB:46:68:F5:D7:78 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6224B55B03FC1063AB532BD57D6E4F0615F85AC9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da7b25fd-98db-48f9-b842-f5cfa4155d9d.roa Signing time: Sat 21 Feb 2026 01:20:11 +0000 ROA not before: Sat 21 Feb 2026 01:20:11 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:24:b5:5b:03:fc:10:63:ab:53:2b:d5:7d:6e:4f:06:15:f8:5a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:20:11 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=9db5221726531e6ed9758954c16c9f141bb445f9e7209a9d9a9e25b032d12e12, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bc:63:3a:b0:ec:1f:57:c9:a0:7d:33:7c:e3: 5d:bf:8d:54:0d:02:05:9f:1b:09:b9:7b:b6:09:6c: 49:10:cb:e9:e0:f6:8f:72:f4:b4:6f:e8:17:10:8d: e8:7f:cf:b9:90:aa:23:e3:f6:94:a6:87:dc:00:28: a3:ea:0c:f9:d7:fb:cc:a5:1e:cd:75:23:b5:25:e5: 7d:90:c3:1a:b2:7d:c8:0e:09:e8:63:e2:03:dc:a3: 3b:95:2c:59:99:4a:ed:bb:7f:a0:01:bc:a7:8d:b2: 67:cc:02:92:66:0c:25:37:3e:dd:be:bc:7a:3d:61: 0d:00:6e:ca:cd:f8:27:40:f6:71:e9:d9:ce:41:5d: 3d:18:cf:4c:6a:49:4f:76:5e:a1:4a:3d:bd:73:04: 14:c8:c7:c2:1b:ec:0a:18:f2:48:cd:33:ec:41:c3: b5:af:fa:df:11:c0:0e:d3:7c:f6:28:fa:b8:61:1a: f9:53:e3:c2:4c:a3:d0:45:33:ab:e3:8b:7f:2b:dc: 36:7f:ef:78:84:89:4d:d2:fa:77:1e:00:62:58:35: 6a:48:7f:bf:3c:f2:1b:38:21:b6:d4:93:69:e6:df: 0e:36:fd:7a:2b:e0:b2:30:68:9d:bc:81:f9:0d:b3: 55:86:28:cb:0c:b4:58:52:9f:d6:c9:15:9c:d1:e7: 64:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2E:2D:01:BE:EA:1D:7E:55:E3:97:54:42:93:CB:46:68:F5:D7:78 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da7b25fd-98db-48f9-b842-f5cfa4155d9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.179.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:8f:83:24:80:bc:fe:ea:f3:3b:6e:35:62:1c:46:74:43:94: e9:a5:99:6a:cf:8d:af:b1:a9:a4:cb:5a:a6:d5:b5:9e:bd:35: aa:36:36:8a:62:f3:af:c9:a6:9c:f6:0b:4e:99:8d:8d:7f:85: d4:19:9e:48:bb:50:e6:b2:9d:59:b1:1c:82:58:4d:90:41:3a: 0a:8a:ef:98:af:22:00:8f:83:01:70:31:85:44:84:ab:c5:cc: 95:b3:f5:00:ac:84:fd:a8:f8:a6:06:35:8c:15:b5:ce:c0:53: 41:ec:cb:3a:a7:5f:3a:2d:4e:85:f9:6b:07:fd:22:b6:cb:07: cb:85:f9:2c:7e:6a:dc:ce:06:af:e9:6b:e0:10:34:73:c7:2a: e8:25:e7:92:19:25:57:11:12:76:17:59:57:10:56:f4:2e:6a: fb:ab:b1:90:82:bc:7c:11:73:2e:c6:f6:07:8e:03:cd:ce:c7: 57:c8:3e:94:b1:6e:3c:49:37:45:6e:5e:e4:27:d8:e4:ea:84: 74:32:1e:60:e7:57:87:e0:3e:33:8b:55:09:ef:f5:21:8c:77: b5:91:06:39:67:c1:78:e2:2a:d7:de:13:00:71:0d:34:b0:91: 16:b9:96:c0:28:c7:55:96:ba:ed:7b:2a:95:5c:bb:5e:93:d5: 95:50:7e:c9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYiS1WwP8EGOrUyvVfW5PBhX4WskwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDEyMDExWhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZGI1MjIxNzI2NTMxZTZlZDk3NTg5NTRjMTZjOWYxNDFi YjQ0NWY5ZTcyMDlhOWQ5YTllMjViMDMyZDEyZTEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXvGM6sOwfV8mgfTN8412/jVQNAgWfGwm5e7YJbEkQy+ng 9o9y9LRv6BcQjeh/z7mQqiPj9pSmh9wAKKPqDPnX+8ylHs11I7Ul5X2QwxqyfcgO Cehj4gPcozuVLFmZSu27f6ABvKeNsmfMApJmDCU3Pt2+vHo9YQ0AbsrN+CdA9nHp 2c5BXT0Yz0xqSU92XqFKPb1zBBTIx8Ib7AoY8kjNM+xBw7Wv+t8RwA7TfPYo+rhh GvlT48JMo9BFM6vji38r3DZ/73iEiU3S+nceAGJYNWpIf7888hs4IbbUk2nm3w42 /Xor4LIwaJ28gfkNs1WGKMsMtFhSn9bJFZzR52T3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5i4tAb7qHX5V45dUQpPLRmj113gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RhN2IyNWZkLTk4ZGItNDhmOS1iODQyLWY1Y2ZhNDE1NWQ5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsLMwDQYJKoZIhvcNAQELBQADggEBAB+PgySAvP7q8ztuNWIcRnRDlOml mWrPja+xqaTLWqbVtZ69Nao2Nopi86/Jppz2C06ZjY1/hdQZnki7UOaynVmxHIJY TZBBOgqK75ivIgCPgwFwMYVEhKvFzJWz9QCshP2o+KYGNYwVtc7AU0HsyzqnXzot ToX5awf9IrbLB8uF+Sx+atzOBq/pa+AQNHPHKugl55IZJVcREnYXWVcQVvQuavur sZCCvHwRcy7G9geOA83Ox1fIPpSxbjxJN0VuXuQn2OTqhHQyHmDnV4fgPjOLVQnv 9SGMd7WRBjlnwXjiKtfeEwBxDTSwkRa5lsAox1WWuu17KpVcu16T1ZVQfsk= -----END CERTIFICATE-----Generated at Sun Mar 1 22:30:15 2026 by rpki-client