$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ae7013-1fbb-4d48-8f95-be150236ce6c.roa File: 05ae7013-1fbb-4d48-8f95-be150236ce6c.roa (raw, json) Hash identifier: 0VETh3OrGMlk2PYBmQWWxY6go7D+AD5nu85IG6HjH6g= Subject key identifier: 6F:79:D2:04:0C:8F:B2:31:EE:E7:DE:E4:55:F4:08:29:7B:65:D5:E6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1808AAF78787B3C3036E514956B3CD2149499F48 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ae7013-1fbb-4d48-8f95-be150236ce6c.roa Signing time: Fri 06 Feb 2026 00:10:09 +0000 ROA not before: Fri 06 Feb 2026 00:10:09 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 151.148.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:08:aa:f7:87:87:b3:c3:03:6e:51:49:56:b3:cd:21:49:49:9f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 6 00:10:09 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=7e054109cfeb991bde2564bfdafef3aeaefe8056e9332b6dfc54e36c71fa8d8e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:68:38:92:91:a4:de:4f:cc:2f:ca:1c:fd:da: 1e:22:f8:bf:7f:da:00:e1:de:21:4c:dc:b6:11:82: c1:27:19:f2:ca:db:6f:a9:87:2c:ac:25:3a:be:d0: 88:75:96:96:07:e8:90:5c:ad:40:36:60:a1:ff:bd: 39:7a:8f:7f:18:e3:4e:b8:ff:a1:cc:2a:19:47:e8: d3:5e:d3:af:61:84:34:9b:8b:59:49:ed:59:1b:d9: 91:72:9c:ad:16:54:01:96:f0:01:d5:01:b4:63:51: 64:83:26:f0:87:73:f2:d7:33:d3:88:91:cb:3f:b5: 84:41:9c:5f:95:8a:9d:95:3d:0b:94:76:2d:51:33: 18:b8:41:5b:01:f5:c5:2a:0b:fd:23:1c:18:e8:75: 6a:cc:79:15:5e:3d:c7:02:f7:e7:bb:32:38:b1:b7: 95:83:39:83:3c:2c:4b:8d:ab:9a:1a:18:01:81:c2: c4:7b:d0:cd:8b:be:d2:ab:90:a4:19:f2:97:87:71: e1:89:16:ce:c4:ad:42:c2:18:1a:bb:2b:b6:39:ab: fc:f4:8d:fb:a4:b6:65:ba:19:00:30:e2:03:bc:8e: cf:5c:ea:da:83:9d:ff:db:34:e6:13:8c:b8:50:e9: b9:a8:ad:0e:db:25:44:fe:d1:9c:1d:5a:38:b5:b5: a2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:79:D2:04:0C:8F:B2:31:EE:E7:DE:E4:55:F4:08:29:7B:65:D5:E6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05ae7013-1fbb-4d48-8f95-be150236ce6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.148.36.0/24 Signature Algorithm: sha256WithRSAEncryption 13:53:4c:dd:23:a7:d7:76:60:63:60:57:59:a8:d6:c4:b3:7e: 5b:8a:b1:f6:2a:e7:27:27:42:28:8a:82:ef:b7:a3:4a:fa:3f: 8f:d4:db:23:4e:96:d7:c1:2a:2c:bb:87:b0:39:58:a3:21:02: 03:ca:c0:2e:79:00:9e:93:8e:5c:2f:8b:7f:43:b3:2d:08:a7: 8c:c9:66:29:93:24:26:ca:66:b0:4a:8a:53:80:45:34:de:26: 3d:18:5f:ce:b0:d5:e8:3f:27:0f:95:b7:5b:0c:0b:04:3c:0a: 7a:7f:9a:ab:d4:fc:56:16:a5:95:86:66:bb:89:ab:d1:7c:72: 66:0c:57:dc:c8:17:94:de:cc:6d:ad:cf:df:bb:b0:9b:d0:e2: 8a:c8:32:06:fb:b7:8c:50:c3:0f:6b:cd:ec:b9:d1:9f:ed:39: fc:19:48:43:0d:90:17:fb:69:21:31:66:45:6b:3c:58:5e:56: 1b:f8:4f:f5:52:09:e0:f5:27:58:2a:ea:88:5a:32:8c:12:c1: 41:4a:f0:19:93:c2:40:cb:20:03:c9:90:6c:91:cc:d5:44:27: 69:db:ff:ef:0e:4b:36:44:58:0a:d4:72:06:03:1a:0c:51:80: 5c:6b:40:88:0a:13:c6:4d:ea:84:81:0e:40:69:d2:47:93:35: ff:14:2f:4a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGAiq94eHs8MDblFJVrPNIUlJn0gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA2MDAxMDA5WhcNMjYwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTA1NDEwOWNmZWI5OTFiZGUyNTY0YmZkYWZlZjNhZWFl ZmU4MDU2ZTkzMzJiNmRmYzU0ZTM2YzcxZmE4ZDhlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcaDiSkaTeT8wvyhz92h4i+L9/2gDh3iFM3LYRgsEnGfLK 22+phyysJTq+0Ih1lpYH6JBcrUA2YKH/vTl6j38Y4064/6HMKhlH6NNe069hhDSb i1lJ7Vkb2ZFynK0WVAGW8AHVAbRjUWSDJvCHc/LXM9OIkcs/tYRBnF+Vip2VPQuU di1RMxi4QVsB9cUqC/0jHBjodWrMeRVePccC9+e7Mjixt5WDOYM8LEuNq5oaGAGB wsR70M2LvtKrkKQZ8peHceGJFs7ErULCGBq7K7Y5q/z0jfuktmW6GQAw4gO8js9c 6tqDnf/bNOYTjLhQ6bmorQ7bJUT+0ZwdWji1taK7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUb3nSBAyPsjHu597kVfQIKXtl1eYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA1YWU3MDEzLTFmYmItNGQ0OC04Zjk1LWJlMTUwMjM2Y2U2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACXlCQwDQYJKoZIhvcNAQELBQADggEBABNTTN0jp9d2YGNgV1mo1sSzfluK sfYq5ycnQiiKgu+3o0r6P4/U2yNOltfBKiy7h7A5WKMhAgPKwC55AJ6Tjlwvi39D sy0Ip4zJZimTJCbKZrBKilOARTTeJj0YX86w1eg/Jw+Vt1sMCwQ8Cnp/mqvU/FYW pZWGZruJq9F8cmYMV9zIF5TezG2tz9+7sJvQ4orIMgb7t4xQww9rzey50Z/tOfwZ SEMNkBf7aSExZkVrPFheVhv4T/VSCeD1J1gq6ohaMowSwUFK8BmTwkDLIAPJkGyR zNVEJ2nb/+8OSzZEWArUcgYDGgxRgFxrQIgKE8ZN6oSBDkBp0keTNf8UL0o= -----END CERTIFICATE-----Generated at Mon Mar 2 04:52:44 2026 by rpki-client