$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/394ea377-6e76-4b2f-a5b4-6770182b6a6f.roa File: 394ea377-6e76-4b2f-a5b4-6770182b6a6f.roa (raw, json) Hash identifier: H4uMhSIeC75TAjUaXj+3g7nstTddbGqOrfZtLqA3AtI= Subject key identifier: 44:96:CA:50:E4:FB:2E:16:ED:97:89:7F:18:4B:A5:FE:23:B3:60:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 51A17E8A037ED982251FAA2D938DDD82B4A8A37F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/394ea377-6e76-4b2f-a5b4-6770182b6a6f.roa Signing time: Tue 24 Feb 2026 01:10:05 +0000 ROA not before: Tue 24 Feb 2026 01:10:05 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 161.193.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:a1:7e:8a:03:7e:d9:82:25:1f:aa:2d:93:8d:dd:82:b4:a8:a3:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 01:10:05 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=3a73238cd89aa710487ae83943f3b537a508eeea6dc28195cd114256df157136, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:57:a2:de:6c:a3:b6:36:57:82:26:8e:5f:3e: ba:31:b8:a7:67:b0:ef:c2:d7:eb:eb:a9:02:dd:3a: cc:42:c8:66:fb:70:66:0d:da:4a:c2:68:37:8f:1a: aa:59:c9:66:07:b4:aa:2b:30:f6:88:ff:32:1e:d8: e2:68:44:04:1f:85:c2:45:1a:24:1a:a9:3e:24:45: a2:9d:ea:59:1c:e4:2b:7b:1d:19:b2:3c:77:50:ce: 89:29:e6:95:31:f7:1e:b0:7a:da:78:99:74:7e:ba: d8:b4:75:86:38:5b:b3:99:8c:15:46:e6:3b:eb:03: e0:56:67:3b:90:dc:c8:a1:22:99:c2:7f:78:b7:7d: 34:b3:9d:5e:35:e7:df:f9:3d:54:bd:ec:c7:1f:fd: 31:a7:f8:21:d8:ce:4c:21:56:a0:e4:21:9f:42:d9: 37:fa:d3:12:03:a2:1f:6d:b7:7d:19:be:3c:6b:53: 57:6b:38:88:aa:c9:3b:79:96:ed:4e:f1:79:0f:50: 8f:9c:93:35:79:cc:ee:b3:78:28:d2:84:04:24:43: 10:e1:53:a1:85:fb:fb:9b:66:5e:6a:d9:3f:6e:2a: 71:08:f5:1f:2e:25:31:88:05:66:83:34:f9:a8:36: ee:3d:d7:bc:c2:b7:29:14:89:10:8c:72:cf:e7:e3: d5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:96:CA:50:E4:FB:2E:16:ED:97:89:7F:18:4B:A5:FE:23:B3:60:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/394ea377-6e76-4b2f-a5b4-6770182b6a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.193.32.0/19 Signature Algorithm: sha256WithRSAEncryption 51:57:eb:a7:8b:e8:2e:d8:44:66:82:0a:62:12:d4:fe:1a:ed: f4:e8:51:13:59:13:db:d3:32:96:95:7f:27:1e:63:30:c6:6f: 99:14:5b:ec:bf:fa:91:09:5e:4d:81:7a:8e:1f:30:eb:ab:4c: 67:f1:ff:2d:22:fe:44:ca:12:96:19:a7:77:2c:bf:e9:3b:e5: c2:b2:7f:ce:7e:8a:2e:f8:ac:1e:53:df:b4:11:f1:34:9d:6d: 38:e9:29:95:3d:a4:52:f4:9e:7c:ac:71:ea:0d:ec:67:90:75: 11:76:a4:1f:fb:8a:6e:59:0d:f9:73:89:c3:12:39:de:d3:33: f2:f9:24:99:51:8f:aa:9b:71:ae:1c:7c:ed:34:1c:41:ec:7a: 16:a7:51:68:0a:3e:e9:6c:1a:ab:25:ec:55:67:f8:f0:bd:c6: f0:91:8f:e7:cf:2a:34:13:66:ee:64:0a:ff:02:c9:7c:51:57: 28:f0:cb:78:82:85:8f:ed:65:47:7c:53:99:f1:5b:0b:06:01: 5f:1b:5c:03:6c:67:ac:4e:be:16:0f:32:2a:f6:df:12:c7:8b: 33:7b:ef:b2:a9:28:21:b1:0b:88:f6:80:c5:ac:f8:84:45:70: 5e:d7:c6:f2:b5:cd:03:33:94:f7:df:ca:7b:ba:30:c0:7f:84: de:15:ec:6f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUaF+igN+2YIlH6otk43dgrSoo38wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDExMDA1WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTczMjM4Y2Q4OWFhNzEwNDg3YWU4Mzk0M2YzYjUzN2E1 MDhlZWVhNmRjMjgxOTVjZDExNDI1NmRmMTU3MTM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjV6LebKO2NleCJo5fProxuKdnsO/C1+vrqQLdOsxCyGb7 cGYN2krCaDePGqpZyWYHtKorMPaI/zIe2OJoRAQfhcJFGiQaqT4kRaKd6lkc5Ct7 HRmyPHdQzokp5pUx9x6wetp4mXR+uti0dYY4W7OZjBVG5jvrA+BWZzuQ3MihIpnC f3i3fTSznV4159/5PVS97Mcf/TGn+CHYzkwhVqDkIZ9C2Tf60xIDoh9tt30Zvjxr U1drOIiqyTt5lu1O8XkPUI+ckzV5zO6zeCjShAQkQxDhU6GF+/ubZl5q2T9uKnEI 9R8uJTGIBWaDNPmoNu4917zCtykUiRCMcs/n49VpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURJbKUOT7Lhbtl4l/GEul/iOzYJ0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM5NGVhMzc3LTZlNzYtNGIyZi1hNWI0LTY3NzAxODJiNmE2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAWhwSAwDQYJKoZIhvcNAQELBQADggEBAFFX66eL6C7YRGaCCmIS1P4a7fTo URNZE9vTMpaVfyceYzDGb5kUW+y/+pEJXk2Beo4fMOurTGfx/y0i/kTKEpYZp3cs v+k75cKyf85+ii74rB5T37QR8TSdbTjpKZU9pFL0nnysceoN7GeQdRF2pB/7im5Z DflzicMSOd7TM/L5JJlRj6qbca4cfO00HEHsehanUWgKPulsGqsl7FVn+PC9xvCR j+fPKjQTZu5kCv8CyXxRVyjwy3iChY/tZUd8U5nxWwsGAV8bXANsZ6xOvhYPMir2 3xLHizN777KpKCGxC4j2gMWs+IRFcF7XxvK1zQMzlPffynu6MMB/hN4V7G8= -----END CERTIFICATE-----Generated at Sun Mar 1 22:24:23 2026 by rpki-client