$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40189ac3-c54b-4d57-b13f-8efd193da722.roa File: 40189ac3-c54b-4d57-b13f-8efd193da722.roa (raw, json) Hash identifier: UR0pxUQG5zcNtqFoy6xAWGPF3v8tvx+YRGu2IYdSM5o= Subject key identifier: 79:44:92:85:1F:74:78:85:F3:D2:D0:42:83:EB:85:BB:A2:36:E8:A6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 78F4BCA5F8D3A341B02777DC2A7A282AE88D1270 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40189ac3-c54b-4d57-b13f-8efd193da722.roa Signing time: Sat 28 Feb 2026 00:10:10 +0000 ROA not before: Sat 28 Feb 2026 00:10:10 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 88.104.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f4:bc:a5:f8:d3:a3:41:b0:27:77:dc:2a:7a:28:2a:e8:8d:12:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 28 00:10:10 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=8367c35a57ad3d08ec18af0d0936cf80c2c3362ab57a7a2459838991ad0c2579, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cb:0b:0d:8d:99:f1:8a:05:ad:3c:d1:07:2b: 88:47:bc:9a:33:15:d0:15:f7:e7:aa:2c:eb:ee:15: dc:57:da:f6:73:53:ee:44:ba:be:b7:58:23:e4:ba: f1:72:10:c3:c6:92:9e:a8:2e:91:96:9d:cc:27:e9: 5e:91:20:ca:db:cf:10:86:ed:67:a2:1c:ee:15:94: c6:aa:31:57:99:f0:f1:e6:d0:45:60:97:81:dc:70: e8:87:7a:0f:94:f5:90:8d:df:96:59:c5:02:66:47: 08:cb:49:e4:23:3f:08:8f:00:12:24:ba:11:e1:85: f8:f7:be:eb:74:82:f5:45:a5:40:50:75:c6:90:95: 4b:6c:0d:18:30:c0:e4:a7:82:69:3a:1b:64:ec:53: ce:17:e9:9e:3e:ae:e3:86:64:21:96:e5:ae:8b:44: 87:b4:34:6d:01:e5:3d:17:c3:50:cb:1c:d6:37:6e: 8f:b9:60:2b:8e:4b:cb:13:8a:da:1a:b6:da:05:58: f5:7b:c2:b3:33:1a:22:63:a0:0e:f3:12:24:70:38: 20:79:30:7d:83:26:eb:57:e9:13:54:2e:2f:65:ce: 78:44:60:cc:d0:c1:31:b4:cf:d1:da:21:89:10:a2: 4d:2c:1a:7a:a3:0e:d8:32:9f:e0:61:16:b4:97:4f: 65:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:44:92:85:1F:74:78:85:F3:D2:D0:42:83:EB:85:BB:A2:36:E8:A6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40189ac3-c54b-4d57-b13f-8efd193da722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.104.0.0/15 Signature Algorithm: sha256WithRSAEncryption 27:76:af:30:30:de:cb:44:dd:67:13:b2:b3:09:6b:d4:87:07: 4d:9e:cd:23:56:91:bd:a9:4e:8b:34:ba:07:5d:da:61:1a:65: 90:73:42:90:de:e8:74:e9:14:39:20:10:16:b5:35:c8:7d:c6: 78:39:fb:25:b2:ec:5b:b2:f1:d7:3c:f3:c2:bc:2a:59:b9:44: f1:1e:48:8d:eb:7b:3c:c8:13:32:da:12:83:d1:29:cc:91:aa: 30:bb:41:e9:84:f9:f0:91:10:d1:5a:2a:6d:a9:0c:a8:4f:30: be:54:81:61:d5:3f:ea:19:60:7a:4e:69:ad:cd:bd:85:34:fa: 20:17:bb:06:2f:4d:ed:2e:37:c8:58:72:bf:2f:e9:99:d3:6d: fd:09:76:c6:94:63:9c:3b:0b:01:a2:0c:35:35:07:30:18:67: 12:92:e4:93:8f:9f:bf:c7:5c:3b:c4:76:02:fa:89:37:f3:63: b3:4f:b0:09:f3:41:4e:a5:2b:05:a6:28:66:14:73:54:5e:e9: 80:a8:d7:b1:55:89:bc:37:a4:3d:ce:53:fc:0f:23:03:8f:c5: 03:47:26:10:5f:ec:d8:29:65:1b:b1:6c:76:38:48:dd:4f:da: f3:d8:b0:60:02:30:33:3a:91:16:32:8d:87:c6:86:62:aa:a7: b5:85:83:c1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUePS8pfjTo0GwJ3fcKnooKuiNEnAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI4MDAxMDEwWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzY3YzM1YTU3YWQzZDA4ZWMxOGFmMGQwOTM2Y2Y4MGMy YzMzNjJhYjU3YTdhMjQ1OTgzODk5MWFkMGMyNTc5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQywsNjZnxigWtPNEHK4hHvJozFdAV9+eqLOvuFdxX2vZz U+5Eur63WCPkuvFyEMPGkp6oLpGWncwn6V6RIMrbzxCG7WeiHO4VlMaqMVeZ8PHm 0EVgl4HccOiHeg+U9ZCN35ZZxQJmRwjLSeQjPwiPABIkuhHhhfj3vut0gvVFpUBQ dcaQlUtsDRgwwOSngmk6G2TsU84X6Z4+ruOGZCGW5a6LRIe0NG0B5T0Xw1DLHNY3 bo+5YCuOS8sTitoattoFWPV7wrMzGiJjoA7zEiRwOCB5MH2DJutX6RNULi9lznhE YMzQwTG0z9HaIYkQok0sGnqjDtgyn+BhFrSXT2WFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUeUSShR90eIXz0tBCg+uFu6I26KYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQwMTg5YWMzLWM1NGItNGQ1Ny1iMTNmLThlZmQxOTNkYTcyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFYaDANBgkqhkiG9w0BAQsFAAOCAQEAJ3avMDDey0TdZxOyswlr1IcHTZ7N I1aRvalOizS6B13aYRplkHNCkN7odOkUOSAQFrU1yH3GeDn7JbLsW7Lx1zzzwrwq WblE8R5Ijet7PMgTMtoSg9EpzJGqMLtB6YT58JEQ0VoqbakMqE8wvlSBYdU/6hlg ek5prc29hTT6IBe7Bi9N7S43yFhyvy/pmdNt/Ql2xpRjnDsLAaIMNTUHMBhnEpLk k4+fv8dcO8R2AvqJN/Njs0+wCfNBTqUrBaYoZhRzVF7pgKjXsVWJvDekPc5T/A8j A4/FA0cmEF/s2CllG7FsdjhI3U/a89iwYAIwMzqRFjKNh8aGYqqntYWDwQ== -----END CERTIFICATE-----Generated at Mon Mar 2 05:36:32 2026 by rpki-client