$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f388bd7a-04db-402d-be25-8724438527ac.roa File: f388bd7a-04db-402d-be25-8724438527ac.roa (raw, json) Hash identifier: kHS07IQhM4FAI6l+Q4yFMF26KfWhYGp+JrIsPQRl6uk= Subject key identifier: 61:97:6E:B0:E1:26:29:3D:6E:66:EA:D9:51:B6:D9:C4:62:A8:D4:D7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3F84C9915544BA4CC8485953B4C81B43A70D1322 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f388bd7a-04db-402d-be25-8724438527ac.roa Signing time: Tue 24 Feb 2026 00:50:08 +0000 ROA not before: Tue 24 Feb 2026 00:50:08 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 119.12.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:84:c9:91:55:44:ba:4c:c8:48:59:53:b4:c8:1b:43:a7:0d:13:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 00:50:08 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=332664820f3451f5919883d4f32bac08225f3d8e613d19823bfd231c7ca79d9d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b9:28:e4:77:e9:5c:d7:ba:ee:5b:3e:09:58: ef:8e:88:19:a6:1d:94:25:ae:02:f1:0c:c5:c7:3b: 3c:45:51:55:d7:ca:34:a6:a9:0d:a2:d7:16:a7:8f: 53:08:2a:a2:57:36:1e:2e:db:6c:fb:9b:e5:62:ca: b5:e5:02:47:64:93:28:18:9f:1d:af:4b:d8:9b:aa: 0c:b5:55:2e:55:ca:46:6f:3c:85:0c:a3:fd:43:91: 87:a1:c1:55:9a:30:da:19:68:a5:ce:09:a9:cd:37: b3:99:02:58:36:f7:8b:8b:92:d6:71:9a:e4:be:d5: 49:6c:e6:15:4b:77:c3:7e:71:e4:42:29:f3:4d:88: a3:0a:ce:5e:d2:d3:b9:9f:7b:a7:09:42:aa:65:3b: cb:39:80:61:ee:7e:06:39:0d:8f:57:ad:c8:23:62: 64:73:17:22:97:f4:d2:e9:1f:31:7f:57:68:d0:07: 32:4a:f7:6f:e1:1a:a1:ca:d1:05:7d:e7:4f:3e:4b: b0:80:6d:48:d8:12:9c:34:c9:ff:c4:37:e4:cd:94: 61:68:96:8c:d5:10:14:0b:c9:d5:2c:60:c7:41:4b: 4e:2a:e7:85:65:12:a9:a0:3c:82:e1:0d:13:ac:6e: 34:7a:cb:e2:36:cb:6c:13:d3:1c:be:2b:b0:1e:96: ac:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:97:6E:B0:E1:26:29:3D:6E:66:EA:D9:51:B6:D9:C4:62:A8:D4:D7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f388bd7a-04db-402d-be25-8724438527ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.12.112.0/20 Signature Algorithm: sha256WithRSAEncryption 3c:ae:6a:60:6a:ae:b2:95:c9:31:ab:40:fe:23:25:1a:13:c6: c9:69:f3:e7:9e:78:96:1d:2d:20:b1:c8:51:8c:ff:65:83:8b: f2:58:f4:cd:cc:31:56:5b:d6:a3:58:59:f9:29:f2:b7:36:4e: e6:1d:4b:8f:d3:0a:21:22:78:9b:d4:62:4c:4d:f9:9e:62:ad: e4:64:ee:d8:6c:a0:03:e5:af:b0:da:9b:81:c4:43:ad:7d:d3: 38:97:7c:2c:cb:87:4c:87:fd:1d:47:83:af:b9:47:fc:d8:cc: 41:1d:58:41:f9:e1:1d:98:50:62:08:9b:ef:7e:e1:33:24:0c: 48:d4:b1:c9:3e:ee:b4:fd:33:ca:0e:70:27:47:4a:53:ce:e6: d4:72:58:55:18:8e:af:5c:3b:d4:ce:e9:65:41:67:61:b8:04: 3a:bc:ea:0e:e2:96:72:61:39:02:51:30:f7:b8:4d:48:3c:f5: 34:87:c3:82:5c:46:8e:af:7e:7b:1a:ac:43:95:da:d1:d1:a8: 97:40:79:7d:e5:6c:b7:62:80:7e:2c:6e:fe:6d:c6:d9:0d:e2: f8:ba:cc:8b:28:8a:3f:fa:35:42:14:5f:5e:24:37:9a:5a:f1: 3c:ef:19:56:45:da:8e:fc:db:7e:13:c0:f1:5c:f7:1c:b8:ff: 94:e8:9c:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP4TJkVVEukzISFlTtMgbQ6cNEyIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDA1MDA4WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMzI2NjQ4MjBmMzQ1MWY1OTE5ODgzZDRmMzJiYWMwODIy NWYzZDhlNjEzZDE5ODIzYmZkMjMxYzdjYTc5ZDlkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD3uSjkd+lc17ruWz4JWO+OiBmmHZQlrgLxDMXHOzxFUVXX yjSmqQ2i1xanj1MIKqJXNh4u22z7m+ViyrXlAkdkkygYnx2vS9ibqgy1VS5VykZv PIUMo/1DkYehwVWaMNoZaKXOCanNN7OZAlg294uLktZxmuS+1Uls5hVLd8N+ceRC KfNNiKMKzl7S07mfe6cJQqplO8s5gGHufgY5DY9XrcgjYmRzFyKX9NLpHzF/V2jQ BzJK92/hGqHK0QV9508+S7CAbUjYEpw0yf/EN+TNlGFolozVEBQLydUsYMdBS04q 54VlEqmgPILhDROsbjR6y+I2y2wT0xy+K7Aelqy/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYZdusOEmKT1uZurZUbbZxGKo1NcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YzODhiZDdhLTA0ZGItNDAyZC1iZTI1LTg3MjQ0Mzg1MjdhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAR3DHAwDQYJKoZIhvcNAQELBQADggEBADyuamBqrrKVyTGrQP4jJRoTxslp 8+eeeJYdLSCxyFGM/2WDi/JY9M3MMVZb1qNYWfkp8rc2TuYdS4/TCiEieJvUYkxN +Z5ireRk7thsoAPlr7Dam4HEQ6190ziXfCzLh0yH/R1Hg6+5R/zYzEEdWEH54R2Y UGIIm+9+4TMkDEjUsck+7rT9M8oOcCdHSlPO5tRyWFUYjq9cO9TO6WVBZ2G4BDq8 6g7ilnJhOQJRMPe4TUg89TSHw4JcRo6vfnsarEOV2tHRqJdAeX3lbLdigH4sbv5t xtkN4vi6zIsoij/6NUIUX14kN5pa8TzvGVZF2o78234TwPFc9xy4/5TonHM= -----END CERTIFICATE-----Generated at Mon Mar 2 06:35:53 2026 by rpki-client