$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01fd71e7-c8fa-47a6-a272-7ee9962ca10b.roa File: 01fd71e7-c8fa-47a6-a272-7ee9962ca10b.roa (raw, json) Hash identifier: 8wKKFY2Vfmdb9G7wthuU5Afas6v+x+r2GcWTwC6sm2w= Subject key identifier: 26:C3:BF:BB:BA:4B:88:6E:BE:1E:25:ED:96:98:A8:CA:E9:AE:C2:69 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70CFB450DD0E1AC012F90197C04A132A8EAEF428 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01fd71e7-c8fa-47a6-a272-7ee9962ca10b.roa Signing time: Sat 28 Feb 2026 00:30:57 +0000 ROA not before: Sat 28 Feb 2026 00:30:57 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 202.5.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:cf:b4:50:dd:0e:1a:c0:12:f9:01:97:c0:4a:13:2a:8e:ae:f4:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 28 00:30:57 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=0a9a8ab2fca85f4bdb0aef8d2b59992d906a276e5c698f6222c9b4ad5efd73cd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:74:9a:a1:75:e0:6a:79:9d:25:39:e2:31:b1: c7:75:44:ab:59:c0:d1:f7:95:74:1b:df:e0:98:58: 13:2c:22:a2:63:f1:d7:1d:7b:94:18:11:a6:89:c9: 2a:83:47:bc:79:33:12:51:29:c1:ff:c1:a3:9f:9e: a6:d4:aa:18:92:c3:9a:98:e6:5c:e7:48:66:5d:ec: 64:e3:2e:4c:ba:c7:c6:d8:07:a4:18:c6:0f:c9:e1: 5a:80:67:8b:1a:53:09:cc:5d:d7:98:b4:56:d3:e7: 84:b9:a5:f6:1e:26:61:d6:6c:18:5e:92:53:50:ff: c9:97:2e:55:ba:43:b0:b7:e7:a6:e0:a5:f2:7c:67: 7a:a1:33:cc:5b:08:02:5e:c3:d3:ee:2d:55:86:81: 1d:30:0d:28:48:57:6f:37:2f:24:f1:0a:b7:c0:c4: b9:42:1e:91:a8:00:fc:87:31:2a:33:a2:e5:d3:d5: ec:cf:b9:0d:fc:e1:49:40:da:72:9a:af:0d:65:4d: b0:1c:6a:71:b2:91:af:15:dd:d4:02:f9:bf:0b:bb: 85:c1:f9:71:1c:17:1e:52:72:de:5d:43:71:dd:1b: 61:90:84:39:f5:77:05:06:1f:bf:4e:ee:e0:31:d5: 9f:87:bd:cf:6f:91:b7:00:81:7a:19:5e:9b:59:51: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C3:BF:BB:BA:4B:88:6E:BE:1E:25:ED:96:98:A8:CA:E9:AE:C2:69 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01fd71e7-c8fa-47a6-a272-7ee9962ca10b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.5.186.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:92:7e:72:33:9c:c2:10:50:d3:41:8c:dc:9b:d3:88:3a:d7: d6:e5:19:5a:dc:26:78:86:9b:2e:0a:91:cb:d2:ec:7e:ee:4e: 3e:fc:7d:31:08:71:7f:b5:00:08:43:3a:0d:e7:0b:9c:12:cf: 33:5d:f4:de:38:c9:70:a8:b9:f0:f5:b8:8f:42:bb:c8:52:bb: 08:84:50:88:23:b4:b5:c0:52:ad:cf:72:b6:26:2c:5c:c7:b2: 27:ad:82:5a:53:ce:b1:45:3a:8c:ce:a5:d7:1a:2e:aa:58:d6: dc:2b:95:08:2a:57:be:12:ef:94:97:db:29:6d:ad:65:58:ff: 72:c5:bb:f7:c0:b6:5f:d1:ce:06:4e:fd:c8:6d:0a:f3:8c:69: f3:5f:96:72:3f:70:6e:a3:9e:0d:e1:9b:76:17:85:76:f3:5c: a2:31:2c:a8:83:1e:78:c5:15:68:97:99:90:c1:f8:d7:bd:32: 7f:04:91:1b:9c:02:37:bc:2b:b4:4e:54:6a:16:0c:23:c3:20: f5:77:64:bc:d0:12:c9:57:d5:1c:07:13:c2:da:27:4b:71:8b: 09:af:3b:c1:68:18:de:ff:02:d5:70:53:dc:33:6c:9f:b5:fd: 8c:a5:61:8a:c0:71:68:2c:fd:99:3f:ca:e7:4b:70:05:cf:76: 41:00:c6:f6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcM+0UN0OGsAS+QGXwEoTKo6u9CgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI4MDAzMDU3WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYTlhOGFiMmZjYTg1ZjRiZGIwYWVmOGQyYjU5OTkyZDkw NmEyNzZlNWM2OThmNjIyMmM5YjRhZDVlZmQ3M2NkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1dJqhdeBqeZ0lOeIxscd1RKtZwNH3lXQb3+CYWBMsIqJj 8dcde5QYEaaJySqDR7x5MxJRKcH/waOfnqbUqhiSw5qY5lznSGZd7GTjLky6x8bY B6QYxg/J4VqAZ4saUwnMXdeYtFbT54S5pfYeJmHWbBheklNQ/8mXLlW6Q7C356bg pfJ8Z3qhM8xbCAJew9PuLVWGgR0wDShIV283LyTxCrfAxLlCHpGoAPyHMSozouXT 1ezPuQ384UlA2nKarw1lTbAcanGyka8V3dQC+b8Lu4XB+XEcFx5Sct5dQ3HdG2GQ hDn1dwUGH79O7uAx1Z+Hvc9vkbcAgXoZXptZUaQxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJsO/u7pLiG6+HiXtlpioyumuwmkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAxZmQ3MWU3LWM4ZmEtNDdhNi1hMjcyLTdlZTk5NjJjYTEwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHKBbowDQYJKoZIhvcNAQELBQADggEBAJ+SfnIznMIQUNNBjNyb04g619bl GVrcJniGmy4KkcvS7H7uTj78fTEIcX+1AAhDOg3nC5wSzzNd9N44yXCoufD1uI9C u8hSuwiEUIgjtLXAUq3PcrYmLFzHsietglpTzrFFOozOpdcaLqpY1twrlQgqV74S 75SX2yltrWVY/3LFu/fAtl/RzgZO/chtCvOMafNflnI/cG6jng3hm3YXhXbzXKIx LKiDHnjFFWiXmZDB+Ne9Mn8EkRucAje8K7ROVGoWDCPDIPV3ZLzQEslX1RwHE8La J0txiwmvO8FoGN7/AtVwU9wzbJ+1/YylYYrAcWgs/Zk/yudLcAXPdkEAxvY= -----END CERTIFICATE-----Generated at Sun Mar 1 22:12:12 2026 by rpki-client