$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ac8b03e-0752-4f43-8b38-eeca26c9cffa.roa File: 3ac8b03e-0752-4f43-8b38-eeca26c9cffa.roa (raw, json) Hash identifier: B2qc1Qjin6kTAi1d/+nrTLsGv9254CEPaYbnXm0jExk= Subject key identifier: 9D:E4:E1:E4:34:08:8E:1D:00:E5:F7:C7:47:69:38:07:CE:9C:32:71 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2259AEF0F36E912366C3232C9850B7FECB4B3F80 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ac8b03e-0752-4f43-8b38-eeca26c9cffa.roa Signing time: Wed 25 Feb 2026 01:01:26 +0000 ROA not before: Wed 25 Feb 2026 01:01:26 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 208.78.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:59:ae:f0:f3:6e:91:23:66:c3:23:2c:98:50:b7:fe:cb:4b:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 01:01:26 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=908661e879d52d7024da0f7755db74aca307476b63b975a92f8d98a85f1f97e6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:35:61:cb:35:06:ce:47:d9:36:24:f9:3e:d6: 34:20:7f:b2:ae:89:b7:bf:7d:94:05:1f:cb:fe:98: ee:4a:cd:fe:4f:02:11:1a:8d:c7:e9:03:bb:4d:e8: 05:cb:b1:25:58:f5:96:01:f9:9f:8e:7a:f8:79:23: 14:9e:85:72:70:19:84:be:50:8a:50:9f:c3:f8:b0: 19:77:b3:a6:ad:10:7e:9a:7b:25:7f:47:84:6f:09: 7b:46:7c:e5:6c:b6:71:00:86:f2:d4:73:47:1f:93: eb:c8:e8:1e:57:f2:b8:7e:21:93:c4:29:1e:cc:f3: 18:6a:b8:b5:cd:00:47:9b:94:24:93:8d:b2:cc:57: c0:75:2a:ce:b0:42:8a:32:6d:33:f3:33:97:0f:37: 5b:0a:70:84:74:2d:a8:7b:16:4b:a4:e5:d1:9a:e1: 5b:1f:c5:cd:b0:d7:c4:4d:df:cd:e2:12:b7:b3:b5: dc:f8:39:f4:7c:0e:08:e2:94:06:20:c4:41:57:1c: b6:d0:7a:e2:8e:18:fe:0a:01:a1:b8:f6:cb:21:13: d1:18:c7:64:ad:ff:be:e4:e0:d9:cb:d1:3c:bb:ab: 75:fa:ed:7a:7f:0f:db:9e:be:e0:b8:be:36:d6:ac: 90:19:fd:26:aa:ae:86:57:8d:36:9e:f4:7b:29:e9: 31:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E4:E1:E4:34:08:8E:1D:00:E5:F7:C7:47:69:38:07:CE:9C:32:71 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ac8b03e-0752-4f43-8b38-eeca26c9cffa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.78.128.0/21 Signature Algorithm: sha256WithRSAEncryption 43:e3:15:0a:ef:89:05:65:20:be:c3:ac:0a:9a:a2:6d:08:73: 1c:d9:22:d7:8c:88:74:60:76:92:ed:cd:8c:cc:29:7a:b8:a6: 4a:16:6d:06:2c:a6:b7:ca:ec:ee:3e:2d:2c:27:e7:eb:07:97: c0:64:de:a3:e3:8e:b8:1f:9b:28:3c:16:99:34:39:2f:07:42: 65:b8:9b:47:08:6e:2d:f5:ff:d5:d3:bb:34:ac:04:71:36:d1: 59:03:2e:4e:0d:e7:12:4b:a4:8e:1c:ec:73:19:62:12:da:89: 15:70:73:cf:33:23:b6:a0:83:99:28:55:61:36:3e:67:20:a5: f1:c3:e2:f6:30:9f:79:1a:76:65:36:d7:76:cc:46:cd:41:94: 80:5e:a7:ee:ff:e9:34:b9:fc:03:fe:41:71:eb:68:ea:77:32: c5:e3:23:40:cb:13:b1:6d:a2:a5:7d:33:a0:32:26:7f:a6:86: b2:c2:41:07:86:98:c3:46:e6:13:48:13:90:62:5a:11:2c:e8: f7:e1:06:30:ee:5e:db:6d:6f:7c:70:f7:51:81:d5:e7:f4:7c: 31:51:27:fb:9f:cf:eb:aa:cb:ad:7f:1a:e4:a6:7b:f1:7f:aa: bf:1e:41:81:46:18:1e:04:28:05:51:d1:d9:04:77:a6:ec:56: f7:40:ec:ba -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIlmu8PNukSNmwyMsmFC3/stLP4AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDEwMTI2WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDg2NjFlODc5ZDUyZDcwMjRkYTBmNzc1NWRiNzRhY2Ez MDc0NzZiNjNiOTc1YTkyZjhkOThhODVmMWY5N2U2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYNWHLNQbOR9k2JPk+1jQgf7Kuibe/fZQFH8v+mO5Kzf5P AhEajcfpA7tN6AXLsSVY9ZYB+Z+Oevh5IxSehXJwGYS+UIpQn8P4sBl3s6atEH6a eyV/R4RvCXtGfOVstnEAhvLUc0cfk+vI6B5X8rh+IZPEKR7M8xhquLXNAEeblCST jbLMV8B1Ks6wQooybTPzM5cPN1sKcIR0Lah7Fkuk5dGa4Vsfxc2w18RN383iErez tdz4OfR8DgjilAYgxEFXHLbQeuKOGP4KAaG49sshE9EYx2St/77k4NnL0Ty7q3X6 7Xp/D9uevuC4vjbWrJAZ/SaqroZXjTae9Hsp6TEFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUneTh5DQIjh0A5ffHR2k4B86cMnEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNhYzhiMDNlLTA3NTItNGY0My04YjM4LWVlY2EyNmM5Y2ZmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPQToAwDQYJKoZIhvcNAQELBQADggEBAEPjFQrviQVlIL7DrAqaom0IcxzZ IteMiHRgdpLtzYzMKXq4pkoWbQYsprfK7O4+LSwn5+sHl8Bk3qPjjrgfmyg8Fpk0 OS8HQmW4m0cIbi31/9XTuzSsBHE20VkDLk4N5xJLpI4c7HMZYhLaiRVwc88zI7ag g5koVWE2PmcgpfHD4vYwn3kadmU213bMRs1BlIBep+7/6TS5/AP+QXHraOp3MsXj I0DLE7FtoqV9M6AyJn+mhrLCQQeGmMNG5hNIE5BiWhEs6PfhBjDuXtttb3xw91GB 1ef0fDFRJ/ufz+uqy61/GuSme/F/qr8eQYFGGB4EKAVR0dkEd6bsVvdA7Lo= -----END CERTIFICATE-----Generated at Mon Mar 2 03:23:15 2026 by rpki-client