$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01b5fe35-191e-43b1-b18e-cf40d1fa180b.roa File: 01b5fe35-191e-43b1-b18e-cf40d1fa180b.roa (raw, json) Hash identifier: /bhVzi7Nq2Dmy45XdG+DXu8Ng0eB0xZ9tNnXZZqhsjE= Subject key identifier: 06:28:F7:81:C4:FB:F6:92:BD:AF:63:A0:A1:0E:72:F8:7C:EA:2F:FC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 068B6F658F312B7D10E29ED2F83D409F4575A4C2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01b5fe35-191e-43b1-b18e-cf40d1fa180b.roa Signing time: Wed 25 Feb 2026 01:01:26 +0000 ROA not before: Wed 25 Feb 2026 01:01:26 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 23.21.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:8b:6f:65:8f:31:2b:7d:10:e2:9e:d2:f8:3d:40:9f:45:75:a4:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 01:01:26 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=cf372b1e1047536784cde5ec41bdb3a31cd3228472efe66f352e9bb424be24b5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8f:68:ba:66:2d:94:9a:4f:38:9e:7b:b2:f8: 36:39:f3:33:26:ad:7b:6d:67:b6:c6:fa:b7:55:e2: 5f:7e:41:fa:77:0d:6d:74:ed:bf:81:ff:40:55:96: ac:b2:35:50:27:43:6f:2b:91:e5:36:9a:50:7d:63: bb:cf:8a:7c:a0:4f:cd:fb:ce:ca:d2:db:80:4e:b5: 78:1c:00:72:bf:7d:09:16:25:9f:64:6d:33:7e:36: 62:55:a6:bb:21:e0:aa:48:41:80:a9:97:8f:ee:b7: e3:06:3e:bb:b0:d1:b5:f2:50:e6:87:ad:8d:6e:41: d2:78:0a:57:8f:69:0a:cb:b5:24:b2:ca:68:e0:1c: b1:11:02:3e:5b:fd:80:bd:4d:8b:c0:12:51:c8:7b: 22:cd:d4:59:2c:21:8c:c6:9f:ef:cf:59:f0:c3:87: fd:4e:4c:66:f4:a7:ba:e7:d8:73:94:7e:2f:ce:fc: 02:f1:7f:0a:c3:86:21:65:6e:23:49:3d:3a:8c:49: 00:d5:0c:0e:e8:e1:9d:a3:9f:07:a1:bf:43:8d:89: 7c:8a:54:6b:91:58:49:4c:d4:a9:c8:7f:3c:ff:55: f5:31:aa:dd:9a:ad:68:5d:08:21:1d:08:a6:c4:1e: 98:69:61:6d:16:62:f7:db:51:a3:1f:91:54:bd:aa: 35:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:28:F7:81:C4:FB:F6:92:BD:AF:63:A0:A1:0E:72:F8:7C:EA:2F:FC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01b5fe35-191e-43b1-b18e-cf40d1fa180b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.21.48.0/20 Signature Algorithm: sha256WithRSAEncryption 6f:42:19:8f:c8:82:fe:4b:62:d1:86:3d:31:7f:f5:f6:8f:d2: 22:c7:0f:b4:fd:e4:aa:c0:cf:30:8f:5f:02:09:9d:59:ab:4b: 15:55:94:1c:7a:4f:8f:15:6a:0d:00:5e:49:3e:d4:76:21:81: 4f:9f:c2:a5:2c:9b:31:4a:38:d0:ed:be:99:df:8d:ac:b6:38: 05:b0:7c:1b:37:b6:18:75:a1:20:f7:3c:3a:1a:0b:98:f9:06: 5a:dd:52:23:23:84:d5:08:93:bf:9c:ba:d1:8c:b9:87:ee:ff: 9e:4a:24:19:28:2a:e5:77:d6:ae:e6:2b:b8:ed:e7:8b:a8:15: f6:91:73:e5:d9:66:1a:e3:ee:48:6e:5f:b9:87:8c:4e:f8:92: 89:c0:10:c6:93:38:e7:b4:41:3f:1b:f3:82:9f:62:61:30:20: aa:20:32:a6:8e:7e:6a:85:2f:47:95:7d:7b:bf:5e:be:fd:56: d3:a6:04:c3:d9:a1:64:41:b4:fc:1a:fe:f6:e4:f8:2a:cc:29: d2:72:1c:c1:7d:86:28:a9:82:65:45:8d:ac:0d:e0:f7:bb:24: fb:c9:69:53:28:35:ba:b2:00:6d:75:32:39:df:ab:bf:77:49: 37:ce:a9:35:6b:3f:25:c8:f9:f7:1e:88:d1:60:0c:1f:ee:3e: 1d:af:8d:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBotvZY8xK30Q4p7S+D1An0V1pMIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDEwMTI2WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZjM3MmIxZTEwNDc1MzY3ODRjZGU1ZWM0MWJkYjNhMzFj ZDMyMjg0NzJlZmU2NmYzNTJlOWJiNDI0YmUyNGI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1j2i6Zi2Umk84nnuy+DY58zMmrXttZ7bG+rdV4l9+Qfp3 DW107b+B/0BVlqyyNVAnQ28rkeU2mlB9Y7vPinygT837zsrS24BOtXgcAHK/fQkW JZ9kbTN+NmJVprsh4KpIQYCpl4/ut+MGPruw0bXyUOaHrY1uQdJ4ClePaQrLtSSy ymjgHLERAj5b/YC9TYvAElHIeyLN1FksIYzGn+/PWfDDh/1OTGb0p7rn2HOUfi/O /ALxfwrDhiFlbiNJPTqMSQDVDA7o4Z2jnwehv0ONiXyKVGuRWElM1KnIfzz/VfUx qt2arWhdCCEdCKbEHphpYW0WYvfbUaMfkVS9qjXtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBij3gcT79pK9r2OgoQ5y+HzqL/wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAxYjVmZTM1LTE5MWUtNDNiMS1iMThlLWNmNDBkMWZhMTgwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQXFTAwDQYJKoZIhvcNAQELBQADggEBAG9CGY/Igv5LYtGGPTF/9faP0iLH D7T95KrAzzCPXwIJnVmrSxVVlBx6T48Vag0AXkk+1HYhgU+fwqUsmzFKONDtvpnf jay2OAWwfBs3thh1oSD3PDoaC5j5BlrdUiMjhNUIk7+cutGMuYfu/55KJBkoKuV3 1q7mK7jt54uoFfaRc+XZZhrj7khuX7mHjE74konAEMaTOOe0QT8b84KfYmEwIKog MqaOfmqFL0eVfXu/Xr79VtOmBMPZoWRBtPwa/vbk+CrMKdJyHMF9hiipgmVFjawN 4Pe7JPvJaVMoNbqyAG11Mjnfq793STfOqTVrPyXI+fceiNFgDB/uPh2vje8= -----END CERTIFICATE-----Generated at Sun Mar 1 22:16:58 2026 by rpki-client