$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c50577a-0584-4873-b250-87c171b5c8e2.roa File: 2c50577a-0584-4873-b250-87c171b5c8e2.roa (raw, json) Hash identifier: 5zI4j2YHExQuJoCRw5h4mY9+V+D4S3eELrUMpFwGIp0= Subject key identifier: F3:69:FE:C6:15:0C:F1:E3:1F:3C:D8:2E:F3:2B:04:0B:1F:44:13:BA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4B8467BEFF5E21CFA6C14A60AB4CF31B7A6E63FE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c50577a-0584-4873-b250-87c171b5c8e2.roa Signing time: Tue 10 Feb 2026 01:10:10 +0000 ROA not before: Tue 10 Feb 2026 01:10:10 +0000 ROA not after: Mon 11 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.77.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:84:67:be:ff:5e:21:cf:a6:c1:4a:60:ab:4c:f3:1b:7a:6e:63:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 10 01:10:10 2026 GMT Not After : May 11 23:59:59 2026 GMT Subject: serialNumber=3dc88f27d40ba3339258c850c271aee853c3ce1de0319ea0e5c075103098889c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c7:29:9f:7a:21:d7:c6:f0:0b:fe:64:23:4a: 7d:2f:25:6f:16:11:23:96:8c:63:51:fe:79:6c:33: 50:1c:47:04:b1:4d:9d:69:a3:6e:28:d2:7f:20:ed: 66:87:26:4a:bc:6e:81:3a:b3:63:7f:23:fa:d2:6b: 2e:89:b0:81:a8:76:bb:2e:60:62:1f:54:6e:22:d9: e4:34:54:a5:bb:63:6d:a6:c0:f5:33:be:7d:b2:b3: ae:a3:51:02:9e:81:1c:07:6d:a2:9d:4a:6b:58:8d: 1d:6b:ae:fb:f3:f3:67:2e:b1:2e:dc:a2:be:5e:7b: a3:d8:1b:0c:bc:fa:83:36:d0:36:b5:39:53:8a:09: 50:7d:64:a8:2c:43:e2:12:41:16:32:ba:33:85:bd: 2b:db:b8:ba:4d:b6:2e:b3:bd:78:c4:e9:2f:5c:ed: a0:d6:eb:3b:63:8b:54:6d:7f:34:aa:48:3b:38:1f: 8d:5a:66:f1:7b:83:33:97:24:71:0a:6e:33:5b:ed: da:72:e0:e3:3d:38:8a:ca:5a:8a:2f:62:b1:8e:46: 63:72:59:76:99:7e:7d:17:7e:c4:d8:b6:47:1e:e1: 22:ba:24:a9:88:ff:33:5a:d8:7f:4c:06:9c:d8:c0: b3:a4:19:c1:53:84:a6:be:5c:f9:18:52:ae:4c:2f: a3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:69:FE:C6:15:0C:F1:E3:1F:3C:D8:2E:F3:2B:04:0B:1F:44:13:BA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c50577a-0584-4873-b250-87c171b5c8e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.77.131.0/24 Signature Algorithm: sha256WithRSAEncryption cf:d9:fa:53:c7:17:e0:5e:02:f0:f2:3c:2e:c4:44:b8:c0:c9: 23:fe:c1:38:ad:1c:18:0b:06:82:57:e0:5a:e5:cd:4d:eb:49: f7:cd:0d:2c:0c:a3:33:bc:06:c0:03:1c:da:64:65:08:fb:e9: 9e:1c:0e:65:ac:1c:27:29:2a:fd:dd:89:85:a9:eb:0c:58:2a: a0:5c:ae:ff:c3:93:ec:90:cb:bc:42:40:67:eb:d1:0d:7e:97: 9a:e0:11:08:33:dc:02:61:48:86:08:da:94:2b:b9:cd:85:2e: e4:c1:f5:a9:86:04:e5:22:bd:da:71:7e:55:18:67:2f:9d:c6: a9:54:91:97:54:1a:47:60:74:d5:da:e6:43:72:b8:29:63:82: 45:18:31:69:66:7e:26:dc:c1:19:24:8a:5b:3f:30:25:11:14: 20:cb:79:ba:25:60:d9:3a:ff:d1:20:79:1d:3b:e0:d7:b1:47: 94:07:6a:63:6c:17:50:a4:6a:8e:2a:b8:96:ab:3d:11:3c:2e: d9:17:ee:c0:82:98:31:26:87:73:6f:64:28:23:fb:57:66:c7: 6e:86:95:25:31:d5:f9:1e:65:65:f6:39:0b:7c:b0:10:cc:69: 5a:c6:68:6d:01:e9:ce:1e:c2:2e:ec:3f:82:b9:4a:66:f8:ec: ba:38:ef:82 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS4Rnvv9eIc+mwUpgq0zzG3puY/4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDExMDEwWhcNMjYwNTExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZGM4OGYyN2Q0MGJhMzMzOTI1OGM4NTBjMjcxYWVlODUz YzNjZTFkZTAzMTllYTBlNWMwNzUxMDMwOTg4ODljMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8xymfeiHXxvAL/mQjSn0vJW8WESOWjGNR/nlsM1AcRwSx TZ1po24o0n8g7WaHJkq8boE6s2N/I/rSay6JsIGodrsuYGIfVG4i2eQ0VKW7Y22m wPUzvn2ys66jUQKegRwHbaKdSmtYjR1rrvvz82cusS7cor5ee6PYGwy8+oM20Da1 OVOKCVB9ZKgsQ+ISQRYyujOFvSvbuLpNti6zvXjE6S9c7aDW6ztji1RtfzSqSDs4 H41aZvF7gzOXJHEKbjNb7dpy4OM9OIrKWoovYrGORmNyWXaZfn0XfsTYtkce4SK6 JKmI/zNa2H9MBpzYwLOkGcFThKa+XPkYUq5ML6M7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU82n+xhUM8eMfPNgu8ysECx9EE7owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJjNTA1NzdhLTA1ODQtNDg3My1iMjUwLTg3YzE3MWI1YzhlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjTYMwDQYJKoZIhvcNAQELBQADggEBAM/Z+lPHF+BeAvDyPC7ERLjAySP+ wTitHBgLBoJX4FrlzU3rSffNDSwMozO8BsADHNpkZQj76Z4cDmWsHCcpKv3diYWp 6wxYKqBcrv/Dk+yQy7xCQGfr0Q1+l5rgEQgz3AJhSIYI2pQruc2FLuTB9amGBOUi vdpxflUYZy+dxqlUkZdUGkdgdNXa5kNyuCljgkUYMWlmfibcwRkkils/MCURFCDL ebolYNk6/9EgeR074NexR5QHamNsF1Ckao4quJarPRE8LtkX7sCCmDEmh3NvZCgj +1dmx26GlSUx1fkeZWX2OQt8sBDMaVrGaG0B6c4ewi7sP4K5Smb47Lo474I= -----END CERTIFICATE-----Generated at Mon Mar 2 04:52:44 2026 by rpki-client