$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1045c20-8716-489f-b67c-b1b08e31a05f.roa File: f1045c20-8716-489f-b67c-b1b08e31a05f.roa (raw, json) Hash identifier: dV0EiAPLgqQa3dLmpvrULs2kzKgS+LUNHcIBc95mrfg= Subject key identifier: 66:DB:BD:74:72:CE:CE:BB:0D:15:44:46:6D:DA:D5:C7:DC:28:A2:D6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 300AC61DDDE45CE834695E301CFB24BD9C74E803 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1045c20-8716-489f-b67c-b1b08e31a05f.roa Signing time: Sat 21 Feb 2026 00:30:14 +0000 ROA not before: Sat 21 Feb 2026 00:30:14 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:0a:c6:1d:dd:e4:5c:e8:34:69:5e:30:1c:fb:24:bd:9c:74:e8:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:30:14 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=40632a99736621b6ae7ab11902d57d00f091e380d059937dff61b30295453b83, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:cb:da:be:3f:64:8c:c3:c3:72:0a:97:e1:a5: cf:38:9b:af:29:3e:e0:18:26:70:20:f8:99:a9:14: a4:4c:e5:ba:33:fa:23:97:ec:6d:b2:4f:f4:b3:29: 2d:40:38:d4:7b:2a:18:43:2e:fc:c0:74:6a:43:cb: 61:37:c8:46:0d:57:4e:49:7b:3f:cc:0e:92:51:8b: 66:f1:9d:d8:f7:47:9c:0f:ea:90:a2:f2:9c:24:1d: 4f:37:f0:d8:7e:76:f7:8e:ca:47:1f:4b:2b:58:30: 7c:44:3b:88:d3:07:b3:62:ff:ca:44:70:22:ed:32: 32:d8:3e:fb:87:86:70:71:ce:a5:8c:b1:5a:15:35: b7:61:3b:e1:19:48:5f:b6:69:66:28:6f:cf:72:25: 4c:88:1f:d0:5c:a0:c5:cf:36:6c:c0:31:92:d9:a5: 38:b5:e2:50:29:9e:fd:b0:03:d0:06:8e:ce:2d:97: 8c:90:2d:10:cb:45:fd:95:7c:7c:04:a3:bb:cd:54: 3a:33:2e:9f:42:f6:9c:e8:d5:f7:23:aa:c2:8a:65: 2d:02:54:a8:00:df:2e:5b:6f:ce:12:46:9d:b2:a0: 14:1c:a2:ac:fc:66:c1:74:33:4f:bf:be:3b:d9:d8: 65:95:92:01:05:8b:21:30:c7:c5:64:a1:98:03:3d: 39:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DB:BD:74:72:CE:CE:BB:0D:15:44:46:6D:DA:D5:C7:DC:28:A2:D6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1045c20-8716-489f-b67c-b1b08e31a05f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.53.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:5c:a1:de:da:86:9d:9d:8b:c2:39:5f:43:b2:c0:74:6e:dc: 6d:56:38:19:60:49:f0:87:f6:5c:15:b9:ee:64:dc:9b:54:3b: 0c:ef:96:64:c8:31:95:55:57:c5:cb:ce:58:25:50:c3:a9:3e: d9:24:1c:2b:48:47:e6:2b:96:8b:f4:f5:a6:fe:11:da:e4:c8: 4e:ab:8a:ec:7c:13:27:d3:60:8c:ac:76:93:22:7b:28:52:b1: fd:45:54:40:3f:fc:7f:fa:43:f3:53:dc:d5:ae:cb:e9:3d:c0: d0:ba:2c:65:4e:e2:6f:e3:7a:ac:9f:04:df:58:a4:ea:c5:a7: cd:90:3e:3a:32:b2:e2:dc:4d:b8:de:7c:f0:06:40:58:03:46: 56:f4:04:64:29:44:ea:76:be:98:32:79:59:73:f2:39:f6:48: c6:df:d4:ba:0c:48:96:2c:8a:8f:ff:57:e0:7a:32:21:01:77: e3:2b:9b:e3:b9:98:7d:4a:a9:df:a5:f0:bd:58:a6:23:cd:35: 0e:c5:d9:e2:67:c7:16:af:5a:9a:92:75:ee:5b:ac:b9:b4:8c: 0d:66:5c:7c:31:09:f7:ef:69:51:7b:d9:79:1f:b3:71:67:14: 5a:29:16:ca:63:84:e0:bf:1f:08:9b:45:9f:7f:77:53:d1:5b: a1:fe:8c:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMArGHd3kXOg0aV4wHPskvZx06AMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDAzMDE0WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDYzMmE5OTczNjYyMWI2YWU3YWIxMTkwMmQ1N2QwMGYw OTFlMzgwZDA1OTkzN2RmZjYxYjMwMjk1NDUzYjgzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDuy9q+P2SMw8NyCpfhpc84m68pPuAYJnAg+JmpFKRM5boz +iOX7G2yT/SzKS1AONR7KhhDLvzAdGpDy2E3yEYNV05Jez/MDpJRi2bxndj3R5wP 6pCi8pwkHU838Nh+dveOykcfSytYMHxEO4jTB7Ni/8pEcCLtMjLYPvuHhnBxzqWM sVoVNbdhO+EZSF+2aWYob89yJUyIH9BcoMXPNmzAMZLZpTi14lApnv2wA9AGjs4t l4yQLRDLRf2VfHwEo7vNVDozLp9C9pzo1fcjqsKKZS0CVKgA3y5bb84SRp2yoBQc oqz8ZsF0M0+/vjvZ2GWVkgEFiyEwx8VkoZgDPTkFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZtu9dHLOzrsNFURGbdrVx9wootYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YxMDQ1YzIwLTg3MTYtNDg5Zi1iNjdjLWIxYjA4ZTMxYTA1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsDUwDQYJKoZIhvcNAQELBQADggEBAF5cod7ahp2di8I5X0OywHRu3G1W OBlgSfCH9lwVue5k3JtUOwzvlmTIMZVVV8XLzlglUMOpPtkkHCtIR+Yrlov09ab+ EdrkyE6riux8EyfTYIysdpMieyhSsf1FVEA//H/6Q/NT3NWuy+k9wNC6LGVO4m/j eqyfBN9YpOrFp82QPjoysuLcTbjefPAGQFgDRlb0BGQpROp2vpgyeVlz8jn2SMbf 1LoMSJYsio//V+B6MiEBd+Mrm+O5mH1Kqd+l8L1YpiPNNQ7F2eJnxxavWpqSde5b rLm0jA1mXHwxCffvaVF72Xkfs3FnFFopFspjhOC/HwibRZ9/d1PRW6H+jA4= -----END CERTIFICATE-----Generated at Mon Mar 2 00:14:34 2026 by rpki-client