$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/053eb650-9bae-428e-9e11-1465fd0cd03a.roa File: 053eb650-9bae-428e-9e11-1465fd0cd03a.roa (raw, json) Hash identifier: MALnJllArkVNwEfI3cwhuRpy6sAhVGSg/J2C7R6ZILk= Subject key identifier: D2:F4:87:A2:51:FF:BA:4B:07:1F:09:EB:DB:C5:A3:50:43:1D:7F:64 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 71378D1B30C15AE28393F7D85088FC78E9C180AB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/053eb650-9bae-428e-9e11-1465fd0cd03a.roa Signing time: Tue 24 Feb 2026 00:40:41 +0000 ROA not before: Tue 24 Feb 2026 00:40:41 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.56.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:37:8d:1b:30:c1:5a:e2:83:93:f7:d8:50:88:fc:78:e9:c1:80:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 00:40:41 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=03d727b126f3b5895295cf2f294c96c20944c8d446ec489072b66d9a66101b45, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:31:fb:bb:e9:09:dd:0e:97:56:84:f9:89: b6:b3:fc:19:90:82:69:43:dd:af:1e:2a:6b:39:e8: a4:0b:f8:cf:0c:12:8b:d6:9a:f7:49:1e:3b:bd:4f: c8:86:1d:17:e2:b7:74:50:67:6d:5b:59:d1:7b:84: bf:8f:36:e3:e6:ee:15:00:9e:ad:42:ab:23:57:75: 84:17:39:f6:ac:5c:1d:23:ea:08:5f:a4:ae:d5:f8: f5:44:f0:d2:46:ff:7b:4d:59:fa:7b:49:31:85:54: 26:94:c4:7d:52:e2:d8:f0:13:b4:13:f5:e6:d7:45: f1:7b:76:a3:2a:0c:90:ed:31:cf:5f:5b:59:77:7a: 67:a9:53:16:f7:34:fc:31:df:23:b1:21:59:25:eb: 2c:9e:35:89:13:d2:3d:21:dc:66:8a:3e:36:00:33: 6c:38:47:86:46:ec:1c:ea:50:47:54:3e:db:9c:63: 97:dc:3c:34:0c:4c:ec:39:e3:0f:6e:08:f2:c7:8e: c9:71:80:c5:bc:f9:5b:10:4f:08:da:ac:60:4d:cf: 45:78:76:ab:f8:87:86:47:13:4d:f0:de:0a:13:6b: 8c:9e:98:61:2c:21:67:af:19:d8:99:02:24:6e:e5: 57:b9:eb:41:7c:f0:83:af:27:ee:53:f0:c0:83:98: 96:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F4:87:A2:51:FF:BA:4B:07:1F:09:EB:DB:C5:A3:50:43:1D:7F:64 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/053eb650-9bae-428e-9e11-1465fd0cd03a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.56.0.0/19 Signature Algorithm: sha256WithRSAEncryption 75:34:be:e7:18:f4:b1:ea:e3:39:0d:08:cd:e1:95:02:58:18: 71:73:4a:13:b9:a5:22:b3:48:c0:c6:22:68:9c:10:62:40:e9: 99:d1:5c:2a:07:79:49:39:3e:21:f4:ca:9c:b3:a3:de:f1:ce: b7:53:42:5b:81:1a:0d:bf:0a:25:63:65:87:6a:e4:08:e7:01: fc:b8:d3:a7:c2:96:aa:42:3d:3d:99:dd:0d:7e:b2:ab:ea:d0: 64:78:34:67:4c:72:26:07:82:97:9b:8b:c2:04:dd:77:bd:08: ca:4c:03:ef:43:96:95:98:91:3c:aa:14:64:81:54:93:36:0f: 55:45:74:a4:61:8a:92:d3:56:f8:9f:b7:1b:a5:6c:c3:ea:63: d5:29:65:cd:4a:c4:40:b2:08:ce:da:ea:46:41:80:89:2b:64: 75:ee:2e:56:80:39:20:18:98:ca:77:04:87:4f:d8:fe:49:75: d8:f3:ab:c9:62:f6:54:08:0a:37:7a:ee:a2:ec:7c:2f:db:08: f2:58:58:14:5f:a2:28:99:81:07:1d:02:d6:33:88:54:c0:0d: d5:56:f7:cc:65:94:a5:7b:ad:83:70:43:9e:26:fb:2c:b3:44: a8:93:cb:18:4a:e2:c6:49:d4:41:44:ac:06:45:bf:e7:54:86: bf:59:11:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcTeNGzDBWuKDk/fYUIj8eOnBgKswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDA0MDQxWhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwM2Q3MjdiMTI2ZjNiNTg5NTI5NWNmMmYyOTRjOTZjMjA5 NDRjOGQ0NDZlYzQ4OTA3MmI2NmQ5YTY2MTAxYjQ1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7WzH7u+kJ3Q6XVoT5ibaz/BmQgmlD3a8eKms56KQL+M8M EovWmvdJHju9T8iGHRfit3RQZ21bWdF7hL+PNuPm7hUAnq1CqyNXdYQXOfasXB0j 6ghfpK7V+PVE8NJG/3tNWfp7STGFVCaUxH1S4tjwE7QT9ebXRfF7dqMqDJDtMc9f W1l3emepUxb3NPwx3yOxIVkl6yyeNYkT0j0h3GaKPjYAM2w4R4ZG7BzqUEdUPtuc Y5fcPDQMTOw54w9uCPLHjslxgMW8+VsQTwjarGBNz0V4dqv4h4ZHE03w3goTa4ye mGEsIWevGdiZAiRu5Ve560F88IOvJ+5T8MCDmJbjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0vSHolH/uksHHwnr28WjUEMdf2QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA1M2ViNjUwLTliYWUtNDI4ZS05ZTExLTE0NjVmZDBjZDAzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUQOAAwDQYJKoZIhvcNAQELBQADggEBAHU0vucY9LHq4zkNCM3hlQJYGHFz ShO5pSKzSMDGImicEGJA6ZnRXCoHeUk5PiH0ypyzo97xzrdTQluBGg2/CiVjZYdq 5AjnAfy406fClqpCPT2Z3Q1+sqvq0GR4NGdMciYHgpebi8IE3Xe9CMpMA+9DlpWY kTyqFGSBVJM2D1VFdKRhipLTVviftxulbMPqY9UpZc1KxECyCM7a6kZBgIkrZHXu LlaAOSAYmMp3BIdP2P5Jddjzq8li9lQICjd67qLsfC/bCPJYWBRfoiiZgQcdAtYz iFTADdVW98xllKV7rYNwQ54m+yyzRKiTyxhK4sZJ1EFErAZFv+dUhr9ZERw= -----END CERTIFICATE-----Generated at Mon Mar 2 00:08:38 2026 by rpki-client