$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/baec629c-9730-496d-9402-3c54613bc3f2.roa File: baec629c-9730-496d-9402-3c54613bc3f2.roa (raw, json) Hash identifier: Eqcui+jNAAN9gZEHXA3mI/Jeg4ybUZD4IXiqXpGBu2g= Subject key identifier: 12:D4:33:75:BA:7E:41:60:A2:D4:3F:9A:E4:5F:0E:50:59:56:A3:A6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 22D4B62298239D31C25724BB03B52299B8118A97 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/baec629c-9730-496d-9402-3c54613bc3f2.roa Signing time: Fri 06 Feb 2026 00:20:25 +0000 ROA not before: Fri 06 Feb 2026 00:20:25 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 13.220.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d4:b6:22:98:23:9d:31:c2:57:24:bb:03:b5:22:99:b8:11:8a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 6 00:20:25 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=0c3b320dd73816b32bbe59867e6fd7a6be3a86cbacc89a7910334782117d4004, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:a8:04:05:10:b5:18:e3:08:ef:fa:88:cd: ec:c5:cc:f5:71:fe:ad:f6:e7:ff:2a:e4:5a:22:14: 2b:48:47:a4:ba:b4:46:38:d3:5f:da:3f:96:b5:57: 31:f8:33:51:03:88:31:b7:fe:6a:33:4a:32:83:8d: b2:e5:47:b1:24:1e:de:8f:f7:ce:0c:56:4b:52:24: 8c:80:90:a0:89:a0:98:b2:8c:f4:1f:4d:f7:7f:78: 16:dc:5a:49:c9:b3:da:ba:74:cf:1e:6e:72:9e:ae: 53:19:e1:ed:e6:62:57:09:ed:74:d9:e6:66:d7:66: ca:27:b4:fa:c2:c4:fb:bc:1d:23:7d:2c:67:75:01: fa:92:78:86:cc:6c:8b:78:81:6c:a7:e5:21:c3:13: dc:92:1e:66:1a:71:fd:31:b2:67:13:8d:6b:65:78: 4b:01:83:5b:a6:93:d3:68:0b:4f:51:99:df:ea:48: 18:27:5b:81:a3:c7:eb:6d:57:4e:73:37:fb:e6:43: 18:b1:95:ee:7a:e5:05:8e:02:6a:b0:b2:84:80:a1: 1c:76:94:5c:2f:b6:11:bb:e0:fb:76:82:18:2b:08: e4:9c:7f:23:bf:c3:39:b5:2f:51:7e:a5:6a:c2:33: e3:c3:14:ed:46:67:0f:b2:1a:91:cd:4b:8d:5b:c2: 86:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D4:33:75:BA:7E:41:60:A2:D4:3F:9A:E4:5F:0E:50:59:56:A3:A6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/baec629c-9730-496d-9402-3c54613bc3f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.220.36.0/23 Signature Algorithm: sha256WithRSAEncryption 20:0f:11:2e:f7:73:31:47:6b:eb:16:a5:82:b3:ce:ee:4a:a9: b3:4d:91:4f:47:8b:28:ad:c2:55:78:a1:0d:86:7a:d0:e8:76: 9d:2a:da:1d:e2:ec:43:a5:65:a1:18:f8:41:4d:11:2a:f8:5c: a1:8d:12:4b:f3:f8:08:52:43:c0:18:3b:ea:79:42:a4:a3:d0: 7b:57:a6:d8:43:d6:0d:58:4c:03:d2:35:6c:cf:0b:18:76:be: 14:55:2c:51:3b:ea:94:13:a8:ed:de:7b:bb:90:bf:ca:df:ec: 8c:75:b6:5f:74:bc:2c:a4:52:8d:c9:54:14:9c:4b:80:b4:e6: 49:2b:0f:27:a3:16:23:58:75:6b:7b:a0:bf:da:a5:65:f2:6a: 37:51:cb:27:f4:37:11:08:e9:f4:f0:76:b9:94:d4:96:31:1b: ec:20:1a:7a:31:2e:a3:44:0a:7a:59:b8:53:be:89:24:32:3a: cb:5c:8e:ea:b0:db:72:0d:9c:f4:b2:90:56:42:b6:19:50:6d: f6:db:6a:c3:e8:19:9b:94:5c:c3:36:0e:c6:f7:d0:32:78:c4: 54:66:04:23:12:4e:ba:26:8c:40:1f:65:ec:d0:b6:c1:f7:49: 5e:c5:ff:ff:a5:86:a5:75:de:0b:3d:dd:08:db:78:80:8c:3b: a3:d0:18:ed -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUItS2IpgjnTHCVyS7A7UimbgRipcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjA2MDAyMDI1WhcNMjYwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzNiMzIwZGQ3MzgxNmIzMmJiZTU5ODY3ZTZmZDdhNmJl M2E4NmNiYWNjODlhNzkxMDMzNDc4MjExN2Q0MDA0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7v6gEBRC1GOMI7/qIzezFzPVx/q325/8q5FoiFCtIR6S6 tEY401/aP5a1VzH4M1EDiDG3/mozSjKDjbLlR7EkHt6P984MVktSJIyAkKCJoJiy jPQfTfd/eBbcWknJs9q6dM8ebnKerlMZ4e3mYlcJ7XTZ5mbXZsontPrCxPu8HSN9 LGd1AfqSeIbMbIt4gWyn5SHDE9ySHmYacf0xsmcTjWtleEsBg1umk9NoC09Rmd/q SBgnW4Gjx+ttV05zN/vmQxixle565QWOAmqwsoSAoRx2lFwvthG74Pt2ghgrCOSc fyO/wzm1L1F+pWrCM+PDFO1GZw+yGpHNS41bwoaJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEtQzdbp+QWCi1D+a5F8OUFlWo6YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JhZWM2MjljLTk3MzAtNDk2ZC05NDAyLTNjNTQ2MTNiYzNmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN3CQwDQYJKoZIhvcNAQELBQADggEBACAPES73czFHa+sWpYKzzu5KqbNN kU9HiyitwlV4oQ2GetDodp0q2h3i7EOlZaEY+EFNESr4XKGNEkvz+AhSQ8AYO+p5 QqSj0HtXpthD1g1YTAPSNWzPCxh2vhRVLFE76pQTqO3ee7uQv8rf7Ix1tl90vCyk Uo3JVBScS4C05kkrDyejFiNYdWt7oL/apWXyajdRyyf0NxEI6fTwdrmU1JYxG+wg GnoxLqNECnpZuFO+iSQyOstcjuqw23INnPSykFZCthlQbfbbasPoGZuUXMM2Dsb3 0DJ4xFRmBCMSTromjEAfZezQtsH3SV7F//+lhqV13gs93QjbeICMO6PQGO0= -----END CERTIFICATE-----Generated at Thu Feb 26 02:08:16 2026 by rpki-client