$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c7afa97-5210-4ac5-8791-0f69846c8f2d.roa File: 3c7afa97-5210-4ac5-8791-0f69846c8f2d.roa (raw, json) Hash identifier: N9PwxripsnGA1N/PJh0j8q1/Lnv8D3I3ZRVj8QKlOxM= Subject key identifier: 59:22:20:FF:94:ED:5E:C9:12:1C:79:A6:16:22:A7:A4:19:EE:51:8B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0775E6EE0020B84708AD03F3B7E2D45077537A8D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c7afa97-5210-4ac5-8791-0f69846c8f2d.roa Signing time: Fri 06 Feb 2026 00:10:37 +0000 ROA not before: Fri 06 Feb 2026 00:10:37 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 8987 IP address blocks: 16.64.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:75:e6:ee:00:20:b8:47:08:ad:03:f3:b7:e2:d4:50:77:53:7a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 6 00:10:37 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=67ddf7544a0ef9c0db01b7eb394ea7913fffdf73d28ac7ac9ae361e778ec8014, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bd:f6:02:36:85:50:41:70:45:a9:74:2a:7c: bb:e0:af:75:38:85:88:ad:b4:ac:56:45:41:bc:12: 3d:85:7a:e4:71:1f:2f:a3:2f:68:f3:27:f3:ed:e6: 16:57:6a:00:68:1a:2a:ff:29:89:f7:e2:13:c8:69: d2:1b:d5:a8:7e:e5:a2:0d:7f:61:86:b7:ed:05:f4: d8:a8:f4:54:5b:18:0f:9e:d8:98:93:2d:05:57:f0: 88:1f:66:c6:1b:ea:0d:78:15:01:35:85:9d:8d:34: b5:6c:4a:89:71:8c:12:4c:3f:3c:4e:3f:8d:85:43: 39:a8:6d:e3:a5:c4:8a:06:fc:cc:7e:14:5e:53:07: 6f:d0:bd:fd:e1:a0:cb:eb:5b:90:40:57:19:6d:07: 00:e2:8c:69:f5:da:13:8a:c9:3e:9c:6e:85:e7:34: b8:cc:ae:95:f5:f3:82:ab:69:f7:c7:91:2e:d0:5d: 7c:61:58:65:57:5a:43:85:12:7c:f8:29:ac:34:3d: 49:47:db:b1:41:ef:8d:c1:e9:02:8b:d7:fc:1c:5b: eb:4d:63:b4:62:cd:fb:87:a8:ab:f4:80:1e:16:51: 9c:71:12:f8:ab:cb:cd:66:6f:49:ff:b5:4c:a5:9e: be:ce:1a:60:76:c0:59:eb:9d:a1:d7:6f:43:83:a5: 7c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:22:20:FF:94:ED:5E:C9:12:1C:79:A6:16:22:A7:A4:19:EE:51:8B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c7afa97-5210-4ac5-8791-0f69846c8f2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.64.102.0/23 Signature Algorithm: sha256WithRSAEncryption 27:be:79:f3:ef:8d:ca:c2:61:38:da:f5:a7:65:17:60:ee:ef: 5a:44:75:ea:36:c4:76:af:66:a4:bd:9a:03:6e:43:13:54:e2: 99:f3:01:40:8a:8e:c2:d0:4a:27:2a:92:eb:ef:1b:33:ea:54: 6e:2d:a2:a8:44:af:9d:60:09:1a:72:66:9d:02:ab:c2:c6:5a: 7d:39:8b:16:e5:b3:74:5b:cd:1a:41:a4:1d:ed:b2:4b:ba:27: 25:61:75:35:b2:fa:b5:61:68:c0:6f:f8:40:e6:a2:2e:b7:d1: 42:0e:79:1f:8f:ad:75:b9:8a:2b:fe:08:8f:8b:55:70:4b:e3: b2:af:fc:bf:4f:fc:07:34:0b:7d:52:b1:83:22:1c:2a:3e:86: ea:f6:41:3f:44:60:13:98:8f:76:e6:9b:fb:1c:73:76:a0:23: fa:61:80:ee:a3:de:cb:0e:2d:56:25:3c:b4:69:0b:6d:a7:3c: 99:a9:9a:d3:05:18:2e:d8:1d:9e:e5:b0:08:67:c7:2e:fb:3f: e0:67:fb:08:06:f2:16:43:0a:bf:45:bd:7b:3a:2e:7c:a3:cd: b8:76:d7:94:28:9b:11:9c:6e:b4:5c:9c:4a:01:fb:e8:3f:2d: e5:8c:aa:09:4d:50:b7:2a:88:b9:06:51:f5:48:86:2f:94:42: 0c:82:61:18 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB3Xm7gAguEcIrQPzt+LUUHdTeo0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA2MDAxMDM3WhcNMjYwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2N2RkZjc1NDRhMGVmOWMwZGIwMWI3ZWIzOTRlYTc5MTNm ZmZkZjczZDI4YWM3YWM5YWUzNjFlNzc4ZWM4MDE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfvfYCNoVQQXBFqXQqfLvgr3U4hYittKxWRUG8Ej2FeuRx Hy+jL2jzJ/Pt5hZXagBoGir/KYn34hPIadIb1ah+5aINf2GGt+0F9Nio9FRbGA+e 2JiTLQVX8IgfZsYb6g14FQE1hZ2NNLVsSolxjBJMPzxOP42FQzmobeOlxIoG/Mx+ FF5TB2/Qvf3hoMvrW5BAVxltBwDijGn12hOKyT6cboXnNLjMrpX184KraffHkS7Q XXxhWGVXWkOFEnz4Kaw0PUlH27FB743B6QKL1/wcW+tNY7RizfuHqKv0gB4WUZxx Eviry81mb0n/tUylnr7OGmB2wFnrnaHXb0ODpXznAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWSIg/5TtXskSHHmmFiKnpBnuUYswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNjN2FmYTk3LTUyMTAtNGFjNS04NzkxLTBmNjk4NDZjOGYyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEQQGYwDQYJKoZIhvcNAQELBQADggEBACe+efPvjcrCYTja9adlF2Du71pE deo2xHavZqS9mgNuQxNU4pnzAUCKjsLQSicqkuvvGzPqVG4toqhEr51gCRpyZp0C q8LGWn05ixbls3RbzRpBpB3tsku6JyVhdTWy+rVhaMBv+EDmoi630UIOeR+PrXW5 iiv+CI+LVXBL47Kv/L9P/Ac0C31SsYMiHCo+hur2QT9EYBOYj3bmm/scc3agI/ph gO6j3ssOLVYlPLRpC22nPJmpmtMFGC7YHZ7lsAhnxy77P+Bn+wgG8hZDCr9FvXs6 Lnyjzbh215QomxGcbrRcnEoB++g/LeWMqglNULcqiLkGUfVIhi+UQgyCYRg= -----END CERTIFICATE-----Generated at Sun Mar 1 22:26:52 2026 by rpki-client