$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1855087d-2aeb-4773-ba4e-a011c623e906.roa File: 1855087d-2aeb-4773-ba4e-a011c623e906.roa (raw, json) Hash identifier: 9AqqUQa87TF8ERx/gpRfVQTAs4sq5Zts2YzO/rUa0R0= Subject key identifier: 34:78:2D:D7:05:31:94:79:91:76:70:CB:1F:31:92:01:35:A7:63:8C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52A1F77B4C35B5D45E7263AA1F682A317A5BDDCB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1855087d-2aeb-4773-ba4e-a011c623e906.roa Signing time: Fri 13 Feb 2026 00:10:08 +0000 ROA not before: Fri 13 Feb 2026 00:10:08 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.83.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a1:f7:7b:4c:35:b5:d4:5e:72:63:aa:1f:68:2a:31:7a:5b:dd:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 13 00:10:08 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=45e9bc80ae73b5831ad1b41beeb47f856bfda74d501180af234612b690f99d89, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b3:35:92:43:8c:d9:70:f0:95:38:8f:1c:c2: af:34:47:7d:c6:10:41:8a:5b:a0:3c:f5:2b:8e:e7: fd:df:22:72:db:3f:a3:77:eb:d6:02:d5:c3:a6:73: 56:bb:1e:8a:a3:94:cd:b0:36:ab:ec:7a:08:47:9d: ae:30:86:43:72:66:c2:bf:ae:6c:69:7e:33:d4:e1: 7f:09:ba:47:5e:e5:d2:b0:a0:8b:48:6e:22:4a:9b: 59:35:a2:e7:e9:f9:ab:ac:38:02:50:e4:01:87:a9: bd:a2:91:48:d8:bd:02:07:d8:26:87:88:ff:5c:cd: 93:bc:a6:de:e9:28:00:45:09:e5:1e:73:57:e2:84: b8:1d:8c:37:f6:8d:58:07:14:bd:3f:8d:63:cc:13: db:a4:1b:9d:af:c1:90:69:f4:a5:07:ca:11:74:ba: 0a:d3:6a:d3:7b:fb:ce:cc:4e:ae:b9:70:06:3e:84: 7d:f5:5c:6c:1f:fa:90:47:8f:e7:d3:22:1d:e2:87: 95:64:42:e8:0b:1d:e0:93:b1:33:be:39:50:7b:b1: f3:2e:c7:16:2b:43:73:87:f9:72:de:99:ea:62:e0: 30:08:b3:58:b0:67:64:24:01:95:71:41:9c:2b:82: 71:a0:e3:32:e3:92:a6:91:d3:17:6e:f8:9c:06:ed: 10:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:78:2D:D7:05:31:94:79:91:76:70:CB:1F:31:92:01:35:A7:63:8C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1855087d-2aeb-4773-ba4e-a011c623e906.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.83.240.0/20 Signature Algorithm: sha256WithRSAEncryption 42:35:62:0a:a7:d8:b3:e5:4f:e8:17:2e:bf:24:ff:1f:77:2e: a0:c2:ab:b6:dc:a1:8a:ab:2b:c1:cd:31:39:a2:c5:e4:06:a1: 74:63:38:0f:97:da:75:56:77:f1:86:04:43:76:0f:27:7a:43: b5:50:72:12:ba:83:32:cc:7d:92:ff:75:dc:49:8a:25:a2:d8: 8c:80:41:4b:94:83:1d:14:3b:d2:8f:c5:37:54:b4:85:3c:70: 83:e2:2f:3d:c4:3a:d2:61:99:89:0d:99:2e:0f:6f:55:05:a1: 42:d6:97:7c:a6:7c:4a:50:be:9b:15:65:36:ac:8a:56:05:9e: 28:e0:ce:b2:dc:d7:7e:55:27:7f:ef:81:06:8e:71:55:72:7d: 99:37:7d:36:b9:c7:66:4b:46:af:bc:d1:35:df:81:9e:e0:98: a7:5a:10:dc:0a:8e:6a:d0:db:d4:08:7d:6e:f8:d7:6d:aa:4c: a3:bb:af:fe:4d:2a:63:3b:01:96:c6:d1:7e:fd:b5:f2:d5:a5: a7:cf:6f:27:7c:32:f1:fb:f5:27:b0:c3:db:3b:87:5f:9d:66: 1b:e0:14:33:75:53:72:23:ea:a0:18:4d:32:4e:51:6c:54:4e: bf:28:5b:d2:f7:77:6e:32:b1:e4:f5:0b:3c:5c:45:13:70:82: 19:f5:ae:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUqH3e0w1tdRecmOqH2gqMXpb3cswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEzMDAxMDA4WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NWU5YmM4MGFlNzNiNTgzMWFkMWI0MWJlZWI0N2Y4NTZi ZmRhNzRkNTAxMTgwYWYyMzQ2MTJiNjkwZjk5ZDg5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoszWSQ4zZcPCVOI8cwq80R33GEEGKW6A89SuO5/3fInLb P6N369YC1cOmc1a7HoqjlM2wNqvseghHna4whkNyZsK/rmxpfjPU4X8Jukde5dKw oItIbiJKm1k1oufp+ausOAJQ5AGHqb2ikUjYvQIH2CaHiP9czZO8pt7pKABFCeUe c1fihLgdjDf2jVgHFL0/jWPME9ukG52vwZBp9KUHyhF0ugrTatN7+87MTq65cAY+ hH31XGwf+pBHj+fTIh3ih5VkQugLHeCTsTO+OVB7sfMuxxYrQ3OH+XLemepi4DAI s1iwZ2QkAZVxQZwrgnGg4zLjkqaR0xdu+JwG7RCfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNHgt1wUxlHmRdnDLHzGSATWnY4wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE4NTUwODdkLTJhZWItNDc3My1iYTRlLWEwMTFjNjIzZTkwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARjU/AwDQYJKoZIhvcNAQELBQADggEBAEI1Ygqn2LPlT+gXLr8k/x93LqDC q7bcoYqrK8HNMTmixeQGoXRjOA+X2nVWd/GGBEN2Dyd6Q7VQchK6gzLMfZL/ddxJ iiWi2IyAQUuUgx0UO9KPxTdUtIU8cIPiLz3EOtJhmYkNmS4Pb1UFoULWl3ymfEpQ vpsVZTasilYFnijgzrLc135VJ3/vgQaOcVVyfZk3fTa5x2ZLRq+80TXfgZ7gmKda ENwKjmrQ29QIfW74122qTKO7r/5NKmM7AZbG0X79tfLVpafPbyd8MvH79Seww9s7 h1+dZhvgFDN1U3Ij6qAYTTJOUWxUTr8oW9L3d24yseT1CzxcRRNwghn1rq0= -----END CERTIFICATE-----Generated at Sun Mar 1 22:17:10 2026 by rpki-client