$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375f8678-f36c-4b2b-b493-20f94a8a3444.roa File: 375f8678-f36c-4b2b-b493-20f94a8a3444.roa (raw, json) Hash identifier: UPKbgwOOVOwWf6EQDW+HseVRB7VP29XOH0MpDXPQmFQ= Subject key identifier: E8:02:0C:57:19:8F:BC:63:B9:3D:3C:4B:61:D6:1F:BD:1E:8D:26:60 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5442F05CC781CCF87CB577E61C18B1BB5DC5A162 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375f8678-f36c-4b2b-b493-20f94a8a3444.roa Signing time: Tue 17 Feb 2026 00:21:20 +0000 ROA not before: Tue 17 Feb 2026 00:21:20 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 114.56.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:42:f0:5c:c7:81:cc:f8:7c:b5:77:e6:1c:18:b1:bb:5d:c5:a1:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 17 00:21:20 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=a0d8c15cb4ae59f799d7df6ecf68662c5ec503053fe4206e1b190c7f214596e2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:88:00:8c:6a:27:49:60:c8:7c:4d:1f:a5:09: d5:68:66:6b:d0:87:2d:7b:d3:fc:54:ef:a2:9d:a0: 68:51:68:61:cc:99:31:84:e2:72:b0:bf:ec:95:43: 7b:60:69:0b:8d:fa:a1:15:be:32:f6:09:e0:3a:51: 31:a7:d8:29:1f:70:da:b1:7f:40:86:20:68:48:5c: 65:f5:a9:ab:c2:f5:3b:a4:98:c4:a0:81:60:4d:c2: d1:eb:1d:4b:42:4c:78:7b:63:8f:a3:7b:06:c8:00: 7b:ab:49:72:95:7a:0f:f4:80:14:e6:5b:ef:cb:f8: 31:27:31:a0:42:ea:dc:6c:b7:1f:5f:a4:14:f9:91: 16:a5:23:06:ee:db:ee:53:1e:ce:d3:39:38:e9:5d: af:26:c1:1c:ff:f7:96:75:6b:5c:fa:58:e4:5a:5f: af:54:4e:9b:53:60:7c:49:5c:a0:c1:2f:6e:b1:6d: 54:5b:b1:cb:a0:85:ef:20:1c:ee:cb:ef:4b:34:61: d7:e2:c2:f8:98:ed:c8:12:3f:9c:ba:ff:05:dc:41: d7:29:27:78:f9:b0:97:41:a1:ef:92:9d:af:d7:34: 30:38:ee:5d:e8:25:d1:ef:ef:f1:2f:9e:14:05:c1: 70:18:36:ad:bc:e7:97:c5:73:09:2b:32:33:30:e1: 58:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:02:0C:57:19:8F:BC:63:B9:3D:3C:4B:61:D6:1F:BD:1E:8D:26:60 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/375f8678-f36c-4b2b-b493-20f94a8a3444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.56.133.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:46:63:4c:65:a9:6b:2a:bc:fc:39:c2:df:99:2b:95:de:8c: 53:84:c7:e2:c5:50:f8:ad:4e:2d:ef:e6:8f:31:5b:e0:11:d0: 75:dd:ab:dd:e1:7b:e2:3c:1c:70:36:9c:fa:5f:54:a4:ec:ad: 9b:f0:a1:9a:6d:f7:e3:d6:e2:d0:b5:57:17:ec:8d:d8:4c:7d: af:c7:1a:05:54:e4:1c:57:7a:b8:4f:1d:74:d4:d2:e2:c3:87: 56:2d:a3:b1:13:0d:61:d4:c5:f1:fe:0a:74:7b:2d:da:f6:a3: 5d:14:0c:73:cc:5e:6d:56:7a:4c:82:9e:01:c4:22:04:5d:c5: b3:1b:98:4a:4b:3b:d9:43:ec:d3:6a:c1:9f:25:0e:07:c3:d5: 5a:b0:ff:5e:bd:7d:e5:33:8d:90:25:c1:59:08:f0:d3:50:7e: bb:35:e0:69:0b:63:4e:8f:3d:9a:00:83:88:37:62:0a:3a:d8: ec:a1:75:42:5c:c2:a7:d2:32:ec:2c:f8:33:02:43:91:4f:5b: d9:8f:e9:61:77:a6:36:83:25:b6:72:09:22:a0:5e:be:07:5d: 9d:e3:04:86:40:81:98:9a:d1:44:e0:b5:8b:d9:6e:ba:51:f6: 4c:d0:75:36:fe:9b:0f:48:ac:36:a2:dc:56:aa:77:a1:e0:38: ab:ce:e6:b6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVELwXMeBzPh8tXfmHBixu13FoWIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE3MDAyMTIwWhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMGQ4YzE1Y2I0YWU1OWY3OTlkN2RmNmVjZjY4NjYyYzVl YzUwMzA1M2ZlNDIwNmUxYjE5MGM3ZjIxNDU5NmUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsiACMaidJYMh8TR+lCdVoZmvQhy170/xU76KdoGhRaGHM mTGE4nKwv+yVQ3tgaQuN+qEVvjL2CeA6UTGn2CkfcNqxf0CGIGhIXGX1qavC9Tuk mMSggWBNwtHrHUtCTHh7Y4+jewbIAHurSXKVeg/0gBTmW+/L+DEnMaBC6txstx9f pBT5kRalIwbu2+5THs7TOTjpXa8mwRz/95Z1a1z6WORaX69UTptTYHxJXKDBL26x bVRbscughe8gHO7L70s0YdfiwviY7cgSP5y6/wXcQdcpJ3j5sJdBoe+Sna/XNDA4 7l3oJdHv7/EvnhQFwXAYNq2855fFcwkrMjMw4VgLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6AIMVxmPvGO5PTxLYdYfvR6NJmAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM3NWY4Njc4LWYzNmMtNGIyYi1iNDkzLTIwZjk0YThhMzQ0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAByOIUwDQYJKoZIhvcNAQELBQADggEBABtGY0xlqWsqvPw5wt+ZK5XejFOE x+LFUPitTi3v5o8xW+AR0HXdq93he+I8HHA2nPpfVKTsrZvwoZpt9+PW4tC1Vxfs jdhMfa/HGgVU5BxXerhPHXTU0uLDh1Yto7ETDWHUxfH+CnR7Ldr2o10UDHPMXm1W ekyCngHEIgRdxbMbmEpLO9lD7NNqwZ8lDgfD1Vqw/169feUzjZAlwVkI8NNQfrs1 4GkLY06PPZoAg4g3Ygo62OyhdUJcwqfSMuws+DMCQ5FPW9mP6WF3pjaDJbZyCSKg Xr4HXZ3jBIZAgZia0UTgtYvZbrpR9kzQdTb+mw9IrDai3Faqd6HgOKvO5rY= -----END CERTIFICATE-----Generated at Sun Mar 1 22:37:16 2026 by rpki-client