$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc3ee322-ec17-4c1a-b0da-f20cd24d4645.roa File: dc3ee322-ec17-4c1a-b0da-f20cd24d4645.roa (raw, json) Hash identifier: f0mRoEwQCQSXdO5zv6/muxJl2+vm9QDXurhqca9Wy+M= Subject key identifier: 34:3B:4F:C0:9C:8A:89:AC:2E:23:B1:AE:4E:0A:F2:35:AC:33:B1:E2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 42459F02DFE1035F6FE1650D05B82D29FF7C9570 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc3ee322-ec17-4c1a-b0da-f20cd24d4645.roa Signing time: Sat 21 Feb 2026 01:01:41 +0000 ROA not before: Sat 21 Feb 2026 01:01:41 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:45:9f:02:df:e1:03:5f:6f:e1:65:0d:05:b8:2d:29:ff:7c:95:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:01:41 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=5214dd7b44fae114fc1e51f7372511b28ffe09538818d08efc30fce1544be3b0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:38:f7:7e:c0:ae:a3:ac:68:99:2a:60:0c:09: 62:3a:db:dc:3e:1b:b2:10:5f:19:f5:d9:03:64:5c: df:94:8d:e2:f3:3d:6f:dd:2f:84:4e:88:86:79:35: 51:2a:f7:41:6e:93:5c:7f:b9:fd:77:59:77:1d:94: c9:73:60:d5:e7:b0:3d:00:7e:af:90:a9:3d:97:a8: 78:26:de:6a:7a:8a:e8:78:5f:a5:cf:1a:8f:b2:a9: 27:4c:82:cd:9e:ce:5c:29:51:68:36:4c:bf:f2:f4: a3:66:3f:26:6a:21:97:4c:c6:f1:21:ea:2f:0f:30: 71:4f:54:93:e8:9b:ff:ab:1c:d1:04:09:fc:b0:53: 59:63:82:cf:f3:b2:08:dc:78:90:2f:c8:d3:d2:7e: b7:b9:c0:3c:8e:d3:29:d6:96:0f:51:26:1e:5e:3e: 00:55:32:ba:d2:6e:e7:97:ba:9c:33:49:9a:65:a0: 43:ea:bf:ee:3e:20:3f:a1:dc:bd:ec:43:b2:31:7b: cb:b7:37:ab:fc:51:83:25:ce:11:2d:ca:b2:37:96: 5b:74:90:3a:d3:15:01:99:47:62:b2:2a:1b:14:cd: 96:b4:70:4c:f3:d6:af:3a:b3:51:d1:39:9c:df:be: 87:f6:b3:f8:ae:f9:f5:b6:89:63:2b:4b:bb:13:2b: b1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3B:4F:C0:9C:8A:89:AC:2E:23:B1:AE:4E:0A:F2:35:AC:33:B1:E2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc3ee322-ec17-4c1a-b0da-f20cd24d4645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.38.0/24 Signature Algorithm: sha256WithRSAEncryption 64:f9:7a:0e:6f:a4:27:cf:3d:c3:be:af:a3:27:c4:17:21:5d: b9:9a:f8:62:94:85:b9:04:8a:a6:c1:37:45:d9:d8:5f:41:f4: ec:b2:b0:db:69:1f:f5:69:c3:ec:18:43:3d:cb:37:8b:7d:34: 6c:7e:3c:fe:b2:8a:da:e8:87:de:2a:f0:34:4c:02:c8:74:d4: cb:39:09:7e:55:86:43:ec:91:a5:05:7a:93:89:68:69:16:a8: 57:a5:e0:62:f3:ea:d0:ba:35:9e:2e:ef:72:29:18:35:fe:9e: 84:f1:b4:3c:5e:d6:49:38:c1:fc:1b:55:34:ff:da:ff:0c:44: 43:48:74:9c:b6:f2:ae:fd:34:51:a3:a9:95:f2:ba:c5:5b:8c: 57:d8:49:8f:5d:d7:92:a7:ed:81:89:8f:67:cc:1a:17:94:f4: df:c1:66:05:2f:94:37:fe:31:df:fc:f0:a9:5f:43:07:91:82: 38:05:42:2c:ad:28:db:a6:7b:1f:7e:ae:c5:82:5b:a6:9b:ef: bb:e3:06:aa:8e:4c:b9:12:84:10:42:5c:31:37:91:0a:d3:f7: 26:4f:a7:94:bc:6c:56:72:4e:61:70:2e:c4:c5:cb:a9:62:20: 98:bb:7f:9e:a2:ee:7b:a4:4f:43:d8:ba:e2:41:f3:f7:eb:0e: 79:d8:bc:13 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQkWfAt/hA19v4WUNBbgtKf98lXAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDEwMTQxWhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MjE0ZGQ3YjQ0ZmFlMTE0ZmMxZTUxZjczNzI1MTFiMjhm ZmUwOTUzODgxOGQwOGVmYzMwZmNlMTU0NGJlM2IwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUOPd+wK6jrGiZKmAMCWI629w+G7IQXxn12QNkXN+UjeLz PW/dL4ROiIZ5NVEq90Fuk1x/uf13WXcdlMlzYNXnsD0Afq+QqT2XqHgm3mp6iuh4 X6XPGo+yqSdMgs2ezlwpUWg2TL/y9KNmPyZqIZdMxvEh6i8PMHFPVJPom/+rHNEE CfywU1ljgs/zsgjceJAvyNPSfre5wDyO0ynWlg9RJh5ePgBVMrrSbueXupwzSZpl oEPqv+4+ID+h3L3sQ7Ixe8u3N6v8UYMlzhEtyrI3llt0kDrTFQGZR2KyKhsUzZa0 cEzz1q86s1HROZzfvof2s/iu+fW2iWMrS7sTK7H5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNDtPwJyKiawuI7GuTgryNawzseIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RjM2VlMzIyLWVjMTctNGMxYS1iMGRhLWYyMGNkMjRkNDY0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsCYwDQYJKoZIhvcNAQELBQADggEBAGT5eg5vpCfPPcO+r6MnxBchXbma +GKUhbkEiqbBN0XZ2F9B9OyysNtpH/Vpw+wYQz3LN4t9NGx+PP6yitroh94q8DRM Ash01Ms5CX5VhkPskaUFepOJaGkWqFel4GLz6tC6NZ4u73IpGDX+noTxtDxe1kk4 wfwbVTT/2v8MRENIdJy28q79NFGjqZXyusVbjFfYSY9d15Kn7YGJj2fMGheU9N/B ZgUvlDf+Md/88KlfQweRgjgFQiytKNumex9+rsWCW6ab77vjBqqOTLkShBBCXDE3 kQrT9yZPp5S8bFZyTmFwLsTFy6liIJi7f56i7nukT0PYuuJB8/frDnnYvBM= -----END CERTIFICATE-----Generated at Mon Mar 2 06:35:49 2026 by rpki-client