$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4259c68a-93ef-43e1-9e0d-14ebf785bc7b.roa File: 4259c68a-93ef-43e1-9e0d-14ebf785bc7b.roa (raw, json) Hash identifier: 7a7keND+5h2JVvcmbWc2cSV1JWGNIb0B7Snd10qhshQ= Subject key identifier: B2:F0:10:1E:87:FF:3A:B8:C8:D2:6F:32:05:66:81:35:A1:CA:35:56 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1666F16C77CF6FA462215924A1A863C65715E317 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4259c68a-93ef-43e1-9e0d-14ebf785bc7b.roa Signing time: Tue 17 Feb 2026 00:23:40 +0000 ROA not before: Tue 17 Feb 2026 00:23:40 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.95.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:66:f1:6c:77:cf:6f:a4:62:21:59:24:a1:a8:63:c6:57:15:e3:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 17 00:23:40 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=cef03d84fea6f141f410df3fc644372021d9357f264a7eb9b98d51750b16846c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:7a:85:6b:c8:24:8a:e3:b8:df:39:6e:14: bd:b3:9e:d5:74:20:77:8b:31:84:89:74:a2:ae:ae: 37:18:36:97:dd:80:97:cf:f0:bd:9c:3b:da:0b:72: 44:ef:41:eb:56:5f:94:62:12:5a:7e:08:4d:c5:3e: 92:a1:b3:f1:0f:3b:52:af:f4:02:06:02:41:53:6c: 13:ce:6f:de:da:02:c6:2a:db:37:fe:9a:2f:9d:d3: 83:8a:30:50:9a:3c:8f:c6:97:1d:3a:05:e8:40:d9: 3c:a0:f8:64:ed:2e:de:68:44:5e:52:6a:96:16:65: 3a:e8:8d:49:21:e9:30:45:48:a0:29:77:47:64:28: 50:2a:89:5c:c9:70:a4:6f:95:20:e9:72:ce:14:89: c0:95:f4:45:eb:eb:57:f6:7c:fc:d5:93:6d:11:65: 29:c3:e1:ea:74:9a:06:9b:bd:2a:29:fc:95:17:45: 54:56:4e:57:01:64:f4:0d:14:ca:db:e6:02:3b:4a: 8d:e7:07:3a:92:2f:d2:1b:5e:d7:ae:50:f0:66:83: a6:ed:45:8f:aa:39:b1:50:95:d2:7b:68:34:bd:e0: 75:26:0d:6f:07:c1:0b:6b:28:a9:de:c3:83:f5:cb: f3:80:71:5c:84:49:77:ed:7a:c5:22:e3:81:30:6b: 31:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F0:10:1E:87:FF:3A:B8:C8:D2:6F:32:05:66:81:35:A1:CA:35:56 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4259c68a-93ef-43e1-9e0d-14ebf785bc7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.95.212.0/22 Signature Algorithm: sha256WithRSAEncryption 24:89:24:ba:8b:32:c8:be:a9:33:44:b8:af:05:81:a7:7f:ba: 8a:2d:d3:98:1f:93:e4:be:ae:ce:58:a7:0c:8d:c1:73:01:1c: 63:71:60:a3:97:38:dd:82:7c:2b:60:9a:d7:6a:64:89:3a:1e: 05:94:e3:25:42:d5:c1:b8:7e:45:fb:8a:a1:83:d5:2b:b9:75: de:fe:8f:15:0e:61:f1:2f:ae:cb:af:95:8f:a2:c5:cb:a9:3c: 8d:68:2e:e7:5d:d4:d5:64:de:59:b6:5a:53:d3:3d:c7:16:16: 91:b1:f7:91:a5:a2:dc:93:0b:95:d4:72:c8:46:50:d8:57:27: de:82:a4:b2:f2:97:7b:88:45:02:d7:73:97:25:51:6f:35:b8: 70:cd:7c:27:7a:6e:b3:88:dc:03:0f:94:8e:01:34:9b:6a:c1: 7c:11:76:2a:99:b9:0b:30:a3:83:f8:9a:68:25:8f:d6:91:f0: fa:09:cc:b1:b4:dc:9e:cb:61:f3:fe:d6:42:a1:22:71:14:9f: 04:e8:76:9d:81:96:7b:42:52:72:af:87:50:a5:b8:d7:e4:ec: 7e:9b:24:3e:a4:1c:d8:62:24:91:94:a4:82:4e:11:82:b2:88: b7:e9:98:b5:8e:a7:d9:e9:c0:02:15:a7:6f:da:bf:32:a8:e0: 39:5a:52:ec -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFmbxbHfPb6RiIVkkoahjxlcV4xcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE3MDAyMzQwWhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZWYwM2Q4NGZlYTZmMTQxZjQxMGRmM2ZjNjQ0MzcyMDIx ZDkzNTdmMjY0YTdlYjliOThkNTE3NTBiMTY4NDZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC44XqFa8gkiuO43zluFL2zntV0IHeLMYSJdKKurjcYNpfd gJfP8L2cO9oLckTvQetWX5RiElp+CE3FPpKhs/EPO1Kv9AIGAkFTbBPOb97aAsYq 2zf+mi+d04OKMFCaPI/Glx06BehA2Tyg+GTtLt5oRF5SapYWZTrojUkh6TBFSKAp d0dkKFAqiVzJcKRvlSDpcs4UicCV9EXr61f2fPzVk20RZSnD4ep0mgabvSop/JUX RVRWTlcBZPQNFMrb5gI7So3nBzqSL9IbXteuUPBmg6btRY+qObFQldJ7aDS94HUm DW8HwQtrKKnew4P1y/OAcVyESXftesUi44EwazH7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsvAQHof/OrjI0m8yBWaBNaHKNVYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQyNTljNjhhLTkzZWYtNDNlMS05ZTBkLTE0ZWJmNzg1YmM3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJAX9QwDQYJKoZIhvcNAQELBQADggEBACSJJLqLMsi+qTNEuK8Fgad/uoot 05gfk+S+rs5YpwyNwXMBHGNxYKOXON2CfCtgmtdqZIk6HgWU4yVC1cG4fkX7iqGD 1Su5dd7+jxUOYfEvrsuvlY+ixcupPI1oLudd1NVk3lm2WlPTPccWFpGx95GlotyT C5XUcshGUNhXJ96CpLLyl3uIRQLXc5clUW81uHDNfCd6brOI3AMPlI4BNJtqwXwR diqZuQswo4P4mmglj9aR8PoJzLG03J7LYfP+1kKhInEUnwTodp2BlntCUnKvh1Cl uNfk7H6bJD6kHNhiJJGUpIJOEYKyiLfpmLWOp9npwAIVp2/avzKo4DlaUuw= -----END CERTIFICATE-----Generated at Sun Mar 1 23:43:20 2026 by rpki-client