$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f291d4a5-d59c-4386-a5c9-5fee4e2a78ef.roa File: f291d4a5-d59c-4386-a5c9-5fee4e2a78ef.roa (raw, json) Hash identifier: 3L7HaET2JL24F0fqgYXjEoiWy2hwnUyw32UsKj8IiDg= Subject key identifier: 63:68:A9:21:5B:16:EC:78:6E:EE:84:74:10:C8:21:9E:FB:21:09:C7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0D06522BE61D8C4E3E3C0D727C04660BD13F850B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f291d4a5-d59c-4386-a5c9-5fee4e2a78ef.roa Signing time: Fri 13 Feb 2026 00:10:34 +0000 ROA not before: Fri 13 Feb 2026 00:10:34 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 13.128.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:06:52:2b:e6:1d:8c:4e:3e:3c:0d:72:7c:04:66:0b:d1:3f:85:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 13 00:10:34 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=2ac7d7d9d72e7b3c5d1a6750bb4190b2e9fd37f34f5b995dcee4f7fdcd4fb221, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c8:0c:3e:d5:b7:ab:29:66:30:36:94:4e:17: 08:4b:9a:79:4b:8b:b1:c2:7a:a0:52:8c:8f:0e:35: 4a:86:57:6e:ff:d7:fc:d4:8b:a5:89:14:df:32:b2: a0:29:14:36:4c:8e:0b:88:6d:ba:a4:a4:d9:72:f5: 56:20:fd:db:e0:96:44:d0:26:91:a9:ab:cf:3a:74: 78:38:d6:ea:0b:9f:26:78:e9:a0:9f:bd:62:5e:67: 31:3c:33:ff:51:5c:63:31:66:90:07:f5:58:4d:86: 4b:bb:8f:96:dd:71:e6:a6:2f:ff:0c:41:68:11:43: e7:61:5b:42:85:1e:7f:71:bc:37:f9:45:21:da:31: dc:69:71:6b:b0:54:70:f6:d5:95:20:76:d5:e9:91: 31:66:e8:f8:61:d5:3d:bb:7b:4a:48:c6:25:c7:fc: b7:7b:7f:9c:a0:3c:b8:c9:c4:bd:26:b8:07:7b:7b: fe:a1:e8:e1:c9:f2:2d:6a:85:96:e3:95:2f:e9:b4: b8:52:87:f2:b2:c2:e7:8b:b8:dd:4c:4a:df:0c:16: de:02:f5:f3:dc:2c:8e:a3:84:44:ba:66:6d:36:28: 6d:c0:bb:5f:a8:db:0f:11:07:63:92:a1:f9:19:8d: 61:a5:dc:f4:9d:cb:84:32:41:31:e3:9d:3c:60:31: f1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:68:A9:21:5B:16:EC:78:6E:EE:84:74:10:C8:21:9E:FB:21:09:C7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f291d4a5-d59c-4386-a5c9-5fee4e2a78ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.128.64.0/20 Signature Algorithm: sha256WithRSAEncryption 0a:09:d3:4c:4e:2f:ad:a3:19:66:2f:34:6e:33:a9:3c:b0:fa: d4:45:d6:ff:bb:39:fc:34:e6:2a:20:f5:38:79:b0:2e:ae:23: 36:48:55:92:e7:60:07:9e:d8:48:8a:33:b9:db:57:70:4a:ca: a2:14:30:74:bd:ee:84:57:6e:41:a0:f7:cf:b5:16:32:74:3b: 68:40:7d:06:35:10:93:8d:3d:1e:a0:4f:28:97:39:66:f4:e7: 4f:f0:fb:21:90:f7:c6:6d:57:e3:b4:27:6d:04:a4:10:67:42: ba:9d:60:70:93:70:da:b0:c6:96:69:58:21:e0:da:17:84:88: 05:15:35:e8:72:78:0f:0d:4e:67:df:12:73:ab:2d:f7:94:74: c8:a1:f8:4f:0d:f2:bc:16:f0:52:71:48:44:0b:6a:22:23:8b: 73:c5:c1:7e:63:61:43:27:c9:08:62:8e:0a:d6:5c:b3:8d:db: 92:d9:d0:be:47:06:ef:c2:2e:60:4a:0c:e9:e6:1e:f6:82:66: 23:18:0e:58:d2:e3:0f:3c:9f:17:e1:9f:ba:c1:c6:54:1c:14: ca:fe:77:e1:48:ec:91:63:1b:b6:e6:f1:af:f6:b5:40:4b:6d: 66:cf:af:76:b2:54:db:e8:04:82:e5:ad:3d:77:08:49:f9:1b: e6:77:11:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDQZSK+YdjE4+PA1yfARmC9E/hQswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEzMDAxMDM0WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYWM3ZDdkOWQ3MmU3YjNjNWQxYTY3NTBiYjQxOTBiMmU5 ZmQzN2YzNGY1Yjk5NWRjZWU0ZjdmZGNkNGZiMjIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCyAw+1berKWYwNpROFwhLmnlLi7HCeqBSjI8ONUqGV27/ 1/zUi6WJFN8ysqApFDZMjguIbbqkpNly9VYg/dvglkTQJpGpq886dHg41uoLnyZ4 6aCfvWJeZzE8M/9RXGMxZpAH9VhNhku7j5bdceamL/8MQWgRQ+dhW0KFHn9xvDf5 RSHaMdxpcWuwVHD21ZUgdtXpkTFm6Phh1T27e0pIxiXH/Ld7f5ygPLjJxL0muAd7 e/6h6OHJ8i1qhZbjlS/ptLhSh/KywueLuN1MSt8MFt4C9fPcLI6jhES6Zm02KG3A u1+o2w8RB2OSofkZjWGl3PSdy4QyQTHjnTxgMfGdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUY2ipIVsW7Hhu7oR0EMghnvshCccwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyOTFkNGE1LWQ1OWMtNDM4Ni1hNWM5LTVmZWU0ZTJhNzhlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQNgEAwDQYJKoZIhvcNAQELBQADggEBAAoJ00xOL62jGWYvNG4zqTyw+tRF 1v+7Ofw05iog9Th5sC6uIzZIVZLnYAee2EiKM7nbV3BKyqIUMHS97oRXbkGg98+1 FjJ0O2hAfQY1EJONPR6gTyiXOWb050/w+yGQ98ZtV+O0J20EpBBnQrqdYHCTcNqw xpZpWCHg2heEiAUVNehyeA8NTmffEnOrLfeUdMih+E8N8rwW8FJxSEQLaiIji3PF wX5jYUMnyQhijgrWXLON25LZ0L5HBu/CLmBKDOnmHvaCZiMYDljS4w88nxfhn7rB xlQcFMr+d+FI7JFjG7bm8a/2tUBLbWbPr3ayVNvoBILlrT13CEn5G+Z3ERI= -----END CERTIFICATE-----Generated at Sun Mar 1 22:11:24 2026 by rpki-client