$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a03dc88-1a7e-468f-a6f8-04c75ddfd98c.roa File: 3a03dc88-1a7e-468f-a6f8-04c75ddfd98c.roa (raw, json) Hash identifier: TkxVrRJQ8R5IJWJxLJqCPLNfFsz39ah2oVwljBj7ZI0= Subject key identifier: DF:10:58:8E:D7:03:2D:FC:57:07:A8:E8:4F:BC:76:43:37:6C:8A:A0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 239A1F4F41BC2D87F4256EF421E73EF6966DC87B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a03dc88-1a7e-468f-a6f8-04c75ddfd98c.roa Signing time: Sun 01 Mar 2026 00:31:18 +0000 ROA not before: Sun 01 Mar 2026 00:31:18 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.54.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:9a:1f:4f:41:bc:2d:87:f4:25:6e:f4:21:e7:3e:f6:96:6d:c8:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 1 00:31:18 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=8a95554d72f14b639c32860ab922fc3d38ba3eadfecc1080c4b1073b3805310f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:10:a3:1a:9e:65:bf:59:41:af:c0:39:67:50: f7:a2:07:97:e9:7e:16:a7:a3:1f:e4:af:47:bf:60: 00:47:da:30:65:00:57:43:49:f2:5f:cb:45:f6:11: ab:42:e4:75:b2:8a:87:7d:91:b4:2f:b9:04:d7:bd: fa:4d:d3:78:9e:8b:b0:5e:c5:86:68:e9:29:1d:3f: 9f:fa:6a:28:a3:40:9f:de:36:ad:e1:ba:cf:12:a5: 6f:2f:32:05:57:9e:cd:c0:b3:30:d2:d4:7f:aa:27: 9f:70:d7:5a:0f:d6:e6:99:87:af:b6:b7:e5:4c:c4: e9:b3:bd:b9:cd:d2:2a:cf:8c:24:ae:b8:aa:7f:a5: c4:8a:5d:a1:ff:7c:d8:3b:70:1d:04:aa:dd:da:64: 97:90:20:61:1f:96:d9:ce:ba:44:32:3e:18:1b:13: 17:38:50:cb:58:5b:8e:f7:db:82:1e:4c:f6:1d:11: 5b:4c:56:37:ee:95:fd:82:49:d3:fd:75:12:7f:aa: 76:cd:f3:ec:c3:1f:d8:e4:86:c8:38:74:0c:51:c3: 0c:59:2e:5a:23:aa:b5:31:f6:a0:81:de:31:8f:a0: 69:82:e2:3c:13:0b:48:66:ad:c9:be:ec:2b:ba:1e: 2b:8c:9d:0e:5d:1c:54:d0:a0:3e:e7:57:32:84:ea: 16:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:10:58:8E:D7:03:2D:FC:57:07:A8:E8:4F:BC:76:43:37:6C:8A:A0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a03dc88-1a7e-468f-a6f8-04c75ddfd98c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.54.53.0/24 Signature Algorithm: sha256WithRSAEncryption 34:10:ce:4f:d2:62:96:66:77:19:2c:68:6c:b7:e6:da:92:41: 07:43:29:cb:06:c0:2b:ee:aa:52:84:12:f4:fc:b8:7d:7b:71: fa:d0:30:98:60:80:ab:e9:d9:a6:bd:e9:39:9c:65:a5:bf:99: e1:14:0e:6e:8f:57:0e:92:58:25:ca:0d:65:4c:0a:c5:26:2b: ab:ac:a6:07:71:a3:42:0f:7c:75:5b:e1:51:64:eb:d2:84:c1: 7b:32:6e:92:2c:02:d6:8e:d3:b5:3e:75:6c:8f:f7:9c:8d:2f: 9d:24:3f:3a:85:ec:1a:c4:80:d9:5e:9b:a8:67:50:03:0f:bf: 6b:2c:8b:20:f3:e9:98:79:6b:f7:e2:3e:6f:23:10:f2:59:9f: 3f:fc:cb:a0:a0:07:93:84:23:24:d5:ea:11:66:8d:e7:8c:cf: ce:94:40:11:e1:56:c3:a1:1d:62:19:c7:73:df:3d:d1:87:aa: d4:0a:88:38:02:d5:aa:fd:5c:34:c8:f3:55:87:bd:85:b0:60: ce:10:38:07:1c:cf:00:e3:ed:62:e5:15:dd:99:67:c1:fb:d8: c8:a6:f5:3a:7f:34:bb:12:5c:9c:ad:02:91:38:07:d8:2c:0c: 07:02:1a:15:2b:fb:14:0b:55:ed:7f:be:d0:44:dc:d1:c4:04: 57:ac:b4:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI5ofT0G8LYf0JW70Iec+9pZtyHswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzAxMDAzMTE4WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YTk1NTU0ZDcyZjE0YjYzOWMzMjg2MGFiOTIyZmMzZDM4 YmEzZWFkZmVjYzEwODBjNGIxMDczYjM4MDUzMTBmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfEKManmW/WUGvwDlnUPeiB5fpfhanox/kr0e/YABH2jBl AFdDSfJfy0X2EatC5HWyiod9kbQvuQTXvfpN03iei7BexYZo6SkdP5/6aiijQJ/e Nq3hus8SpW8vMgVXns3AszDS1H+qJ59w11oP1uaZh6+2t+VMxOmzvbnN0irPjCSu uKp/pcSKXaH/fNg7cB0Eqt3aZJeQIGEfltnOukQyPhgbExc4UMtYW47324IeTPYd EVtMVjfulf2CSdP9dRJ/qnbN8+zDH9jkhsg4dAxRwwxZLlojqrUx9qCB3jGPoGmC 4jwTC0hmrcm+7Cu6HiuMnQ5dHFTQoD7nVzKE6hYRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3xBYjtcDLfxXB6joT7x2QzdsiqAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNhMDNkYzg4LTFhN2UtNDY4Zi1hNmY4LTA0Yzc1ZGRmZDk4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjNjUwDQYJKoZIhvcNAQELBQADggEBADQQzk/SYpZmdxksaGy35tqSQQdD KcsGwCvuqlKEEvT8uH17cfrQMJhggKvp2aa96TmcZaW/meEUDm6PVw6SWCXKDWVM CsUmK6uspgdxo0IPfHVb4VFk69KEwXsybpIsAtaO07U+dWyP95yNL50kPzqF7BrE gNlem6hnUAMPv2ssiyDz6Zh5a/fiPm8jEPJZnz/8y6CgB5OEIyTV6hFmjeeMz86U QBHhVsOhHWIZx3PfPdGHqtQKiDgC1ar9XDTI81WHvYWwYM4QOAcczwDj7WLlFd2Z Z8H72Mim9Tp/NLsSXJytApE4B9gsDAcCGhUr+xQLVe1/vtBE3NHEBFestDU= -----END CERTIFICATE-----Generated at Sun Mar 1 22:24:55 2026 by rpki-client