$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a9b8f82-d613-457f-8a2e-9ddcd2b04fbd.roa File: 2a9b8f82-d613-457f-8a2e-9ddcd2b04fbd.roa (raw, json) Hash identifier: hRkv6GeQQ/lAsqFrCH/XaT/VItapO+GtkJYPonL5ZjU= Subject key identifier: B6:BA:F4:B9:CF:95:47:46:1E:C1:98:AF:B1:19:CA:0C:58:C9:86:87 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E392FD29275077923C55D25A2C4E68D332776AE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a9b8f82-d613-457f-8a2e-9ddcd2b04fbd.roa Signing time: Fri 06 Feb 2026 00:20:24 +0000 ROA not before: Fri 06 Feb 2026 00:20:24 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 184.36.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:39:2f:d2:92:75:07:79:23:c5:5d:25:a2:c4:e6:8d:33:27:76:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 6 00:20:24 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=5d3886b50033ff59d57b3e7044d5291002ced1d6c87d7b77eb94653491b380ee, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2c:84:ce:ad:8c:cc:95:08:1d:f9:be:a4:bf: 3b:1b:fb:69:fb:59:37:5a:54:79:c0:6a:38:9d:1d: f2:f7:76:e2:58:ff:95:84:fe:93:7f:af:8d:3a:9d: 66:36:14:b1:68:bc:0c:e9:a4:6f:52:5f:81:34:0b: c3:6e:6a:f0:44:2e:d8:9f:bf:19:af:39:5c:da:ca: e4:ef:33:b3:e6:2f:a6:a1:4b:51:d9:90:df:95:01: 54:b0:4c:cc:f9:a6:d0:f9:70:57:48:d5:39:7a:f2: 84:82:00:fd:88:4a:ff:1f:e3:59:f3:ee:18:fe:b2: 55:06:eb:02:8f:5f:e1:84:75:c1:9c:6e:95:f5:82: 25:87:93:88:8e:07:45:ee:c9:f1:b6:f5:96:2f:80: 0a:f3:9f:41:34:f9:04:ba:6e:29:cc:e3:2a:fc:9c: 12:cc:fd:91:fc:06:ea:32:ce:65:7b:19:c5:cc:31: f2:fe:2b:5c:9b:43:0d:eb:94:f2:87:c8:1c:74:27: a3:a7:23:48:6d:3b:5d:14:fe:5e:f0:04:f2:d1:7b: ef:3a:c4:6b:e0:9a:61:69:00:3b:1d:c6:8f:82:76: db:b5:94:4b:bc:60:f2:73:2a:b2:9a:1a:58:2d:ab: 83:64:52:e2:6e:9a:79:0d:b1:8a:77:31:d5:90:e0: 50:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BA:F4:B9:CF:95:47:46:1E:C1:98:AF:B1:19:CA:0C:58:C9:86:87 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a9b8f82-d613-457f-8a2e-9ddcd2b04fbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.36.0.0/15 Signature Algorithm: sha256WithRSAEncryption 9f:ff:10:0e:ea:6e:c1:75:50:b4:49:2e:8e:91:83:cf:1f:80: 6b:80:68:5f:26:2d:0f:51:7d:f2:85:10:5e:19:30:53:3e:2a: d6:e2:e6:dd:31:0a:29:c9:ad:2b:6f:d1:31:75:d4:30:2b:ee: dc:16:c6:25:99:35:1b:74:56:69:cb:65:8c:cc:0b:0c:c3:01: d6:0c:0d:c3:a6:9a:59:31:41:dc:a4:40:37:ef:b7:e4:d5:18: 3f:23:85:4c:b8:03:d5:d1:74:0f:44:1c:d3:1b:42:51:78:9f: f0:0f:05:cf:2b:d0:62:0e:97:0f:f8:07:2b:53:e6:87:11:34: 55:59:1e:f1:04:48:ae:a8:00:7b:bd:02:da:2f:a5:9c:79:0c: e4:3f:47:c5:e9:61:d4:0d:8d:83:05:93:7d:ff:62:69:95:81: a1:79:bd:35:f7:04:16:37:1f:5b:43:f6:03:5f:54:fd:43:a6: 59:c8:93:92:d4:a2:a7:63:74:a1:c0:f9:97:a9:82:0a:22:23: e4:91:12:39:fa:f0:b6:0f:4b:16:b2:f1:fa:46:e8:35:3a:80: 38:38:00:5b:53:18:0a:79:d6:16:a2:09:c1:a5:21:83:ed:3b: f7:d7:6b:2e:31:67:42:0d:f8:fc:a8:f5:ef:92:5f:41:21:84: 0a:96:ac:d9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTjkv0pJ1B3kjxV0losTmjTMndq4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA2MDAyMDI0WhcNMjYwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDM4ODZiNTAwMzNmZjU5ZDU3YjNlNzA0NGQ1MjkxMDAy Y2VkMWQ2Yzg3ZDdiNzdlYjk0NjUzNDkxYjM4MGVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsLITOrYzMlQgd+b6kvzsb+2n7WTdaVHnAajidHfL3duJY /5WE/pN/r406nWY2FLFovAzppG9SX4E0C8NuavBELtifvxmvOVzayuTvM7PmL6ah S1HZkN+VAVSwTMz5ptD5cFdI1Tl68oSCAP2ISv8f41nz7hj+slUG6wKPX+GEdcGc bpX1giWHk4iOB0XuyfG29ZYvgArzn0E0+QS6binM4yr8nBLM/ZH8BuoyzmV7GcXM MfL+K1ybQw3rlPKHyBx0J6OnI0htO10U/l7wBPLRe+86xGvgmmFpADsdxo+Cdtu1 lEu8YPJzKrKaGlgtq4NkUuJumnkNsYp3MdWQ4FA/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUtrr0uc+VR0YewZivsRnKDFjJhocwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhOWI4ZjgyLWQ2MTMtNDU3Zi04YTJlLTlkZGNkMmIwNGZiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwG4JDANBgkqhkiG9w0BAQsFAAOCAQEAn/8QDupuwXVQtEkujpGDzx+Aa4Bo XyYtD1F98oUQXhkwUz4q1uLm3TEKKcmtK2/RMXXUMCvu3BbGJZk1G3RWactljMwL DMMB1gwNw6aaWTFB3KRAN++35NUYPyOFTLgD1dF0D0Qc0xtCUXif8A8FzyvQYg6X D/gHK1PmhxE0VVke8QRIrqgAe70C2i+lnHkM5D9Hxelh1A2NgwWTff9iaZWBoXm9 NfcEFjcfW0P2A19U/UOmWciTktSip2N0ocD5l6mCCiIj5JESOfrwtg9LFrLx+kbo NTqAODgAW1MYCnnWFqIJwaUhg+0799drLjFnQg34/Kj175JfQSGECpas2Q== -----END CERTIFICATE-----Generated at Sun Mar 1 23:50:27 2026 by rpki-client