$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa5c1777-566f-4141-ba4d-8ae287ac045c.roa File: fa5c1777-566f-4141-ba4d-8ae287ac045c.roa (raw, json) Hash identifier: sMmHN2W5FYZNETlvJhv74KSnHGjTRsEdGDwfeoSXdSg= Subject key identifier: 08:FA:C5:AF:AB:AE:22:1B:4D:05:6F:E9:61:11:95:D9:69:FC:29:46 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1AD1B10F888F1F8AFDBB85675A195EB1CDDB42FE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa5c1777-566f-4141-ba4d-8ae287ac045c.roa Signing time: Fri 06 Feb 2026 00:10:38 +0000 ROA not before: Fri 06 Feb 2026 00:10:38 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.193.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d1:b1:0f:88:8f:1f:8a:fd:bb:85:67:5a:19:5e:b1:cd:db:42:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 6 00:10:38 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=23ad6340382ae6b80778413ac905b0680db7ce4c2bc1d406eed0371c5a8cf88b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:62:42:34:65:a1:82:f9:aa:24:9d:61:78: 35:5b:32:6a:b4:96:a8:e1:36:64:50:00:37:6e:37: 4c:22:88:13:ad:e0:75:c7:39:97:35:9b:8a:a3:68: c4:fc:ee:33:18:d3:8c:8d:43:06:96:fd:e8:19:27: ec:2a:ac:35:54:76:fd:23:d8:b5:0a:04:50:36:5c: d9:71:72:41:34:b2:6b:42:e2:fc:db:f2:99:0d:23: 13:26:7d:19:7a:74:05:67:45:77:81:db:ff:d5:b9: 60:d4:70:96:93:b3:5f:ba:3c:34:e4:c8:54:c2:c4: 93:6c:71:a9:b5:e8:ca:e3:9b:33:51:e4:b6:0a:c2: f1:94:9a:46:e0:0e:98:46:ae:cb:e3:26:f2:e3:d7: 57:88:de:db:59:68:7d:98:6f:3f:99:c4:fa:71:32: 5e:81:01:ac:b7:01:7a:d7:9e:5a:61:44:47:7e:62: 8e:c3:cc:36:77:f3:94:7b:fd:a6:58:57:5e:82:c7: ec:cc:8a:97:98:26:62:b6:5b:d6:cf:c0:fb:42:e7: 54:80:7b:4f:6c:4e:71:15:ab:0f:a5:91:ba:a4:4c: 28:62:5f:90:14:c0:07:bf:f8:dc:a1:2d:00:b8:28: 5a:ac:34:20:33:d8:03:18:f6:c4:bc:7a:cf:70:91: ca:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FA:C5:AF:AB:AE:22:1B:4D:05:6F:E9:61:11:95:D9:69:FC:29:46 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa5c1777-566f-4141-ba4d-8ae287ac045c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.193.128.0/17 Signature Algorithm: sha256WithRSAEncryption c7:ec:59:87:b1:db:a8:ab:91:a1:fd:6b:eb:db:53:be:59:2c: 56:fa:c1:bc:d0:0f:d1:3e:bb:95:d3:ee:e4:32:f1:c4:b0:50: 73:09:ac:b8:44:15:f1:db:2c:a9:27:11:85:f0:5b:11:fa:9c: 53:4c:b0:80:69:43:b0:f0:af:da:cf:78:49:29:3f:8e:62:5c: ed:0b:2b:5b:b4:a0:df:9f:35:52:db:1f:41:5b:f6:8a:11:d3: 5f:c8:a3:b0:11:65:7d:ef:31:15:9d:98:04:ff:a0:75:77:d0: b6:d0:4b:b0:2a:cf:8a:e1:90:c6:bc:1b:5c:7e:ef:5c:56:66: 34:02:d9:0c:87:61:07:5c:50:e2:77:af:16:5e:b3:47:73:64: cd:31:5f:31:6d:7a:7e:26:65:78:31:1b:be:cc:75:ca:0c:66: 0a:5a:62:cd:b5:a2:eb:78:61:09:0d:06:33:9d:f0:96:dd:a3: fb:d5:2d:4e:96:6b:76:6c:94:93:a3:95:84:05:0f:53:3c:ca: 86:9e:3f:71:0f:cb:7b:9c:97:af:d0:5b:24:44:16:88:74:b8: bf:01:18:73:bb:90:e1:05:6c:26:45:4b:73:3a:cf:2d:9f:64: dc:14:ed:af:47:97:40:c6:23:03:fc:a8:b5:5a:cc:5e:26:b8: fb:d1:a9:61 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGtGxD4iPH4r9u4VnWhlesc3bQv4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA2MDAxMDM4WhcNMjYwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyM2FkNjM0MDM4MmFlNmI4MDc3ODQxM2FjOTA1YjA2ODBk YjdjZTRjMmJjMWQ0MDZlZWQwMzcxYzVhOGNmODhiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu/GJCNGWhgvmqJJ1heDVbMmq0lqjhNmRQADduN0wiiBOt 4HXHOZc1m4qjaMT87jMY04yNQwaW/egZJ+wqrDVUdv0j2LUKBFA2XNlxckE0smtC 4vzb8pkNIxMmfRl6dAVnRXeB2//VuWDUcJaTs1+6PDTkyFTCxJNscam16MrjmzNR 5LYKwvGUmkbgDphGrsvjJvLj11eI3ttZaH2Ybz+ZxPpxMl6BAay3AXrXnlphREd+ Yo7DzDZ385R7/aZYV16Cx+zMipeYJmK2W9bPwPtC51SAe09sTnEVqw+lkbqkTChi X5AUwAe/+NyhLQC4KFqsNCAz2AMY9sS8es9wkcp3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCPrFr6uuIhtNBW/pYRGV2Wn8KUYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZhNWMxNzc3LTU2NmYtNDE0MS1iYTRkLThhZTI4N2FjMDQ1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcNwYAwDQYJKoZIhvcNAQELBQADggEBAMfsWYex26irkaH9a+vbU75ZLFb6 wbzQD9E+u5XT7uQy8cSwUHMJrLhEFfHbLKknEYXwWxH6nFNMsIBpQ7Dwr9rPeEkp P45iXO0LK1u0oN+fNVLbH0Fb9ooR01/Io7ARZX3vMRWdmAT/oHV30LbQS7Aqz4rh kMa8G1x+71xWZjQC2QyHYQdcUOJ3rxZes0dzZM0xXzFten4mZXgxG77MdcoMZgpa Ys21out4YQkNBjOd8Jbdo/vVLU6Wa3ZslJOjlYQFD1M8yoaeP3EPy3ucl6/QWyRE Foh0uL8BGHO7kOEFbCZFS3M6zy2fZNwU7a9Hl0DGIwP8qLVazF4muPvRqWE= -----END CERTIFICATE-----Generated at Mon Mar 2 05:36:59 2026 by rpki-client