$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42b647a3-df86-48ab-9aef-85d200253272.roa File: 42b647a3-df86-48ab-9aef-85d200253272.roa (raw, json) Hash identifier: Rm+Y/h79AgHASS4Acl82cAFbqGRYeZmnJ0S41tVU10U= Subject key identifier: 4C:CE:E0:2D:0B:8E:06:54:EC:39:51:8F:C1:12:95:D6:85:A2:05:66 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 42625008E89A74041EC12B2E011F4A0515F75F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42b647a3-df86-48ab-9aef-85d200253272.roa Signing time: Sat 21 Feb 2026 01:12:08 +0000 ROA not before: Sat 21 Feb 2026 01:12:08 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:62:50:08:e8:9a:74:04:1e:c1:2b:2e:01:1f:4a:05:15:f7:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:12:08 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=dcf4a716a2bb683201bb30eb647e5a30d4176aa73201151079258eec3151e0ad, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6d:54:48:8f:d5:5b:85:7f:66:16:66:d4:4f: db:3d:df:5c:37:3b:02:ff:1d:31:49:02:bb:b7:80: b1:dc:24:29:e6:db:37:70:cd:7d:85:58:b3:0a:56: be:f1:1e:53:b8:dc:3b:6c:4b:d4:c9:a2:b5:a8:96: 99:53:c2:07:2b:da:f8:06:a7:54:c4:3d:f3:93:12: a0:f4:c2:f3:23:30:eb:b4:9c:a7:70:90:0d:a0:c7: da:3a:fb:89:2c:f2:8c:2d:ac:f8:10:10:e6:b8:84: 1a:71:77:eb:0b:ab:6f:04:8e:3c:26:e7:fe:ac:60: 15:66:07:87:3f:f6:6a:2b:d1:76:c0:57:1d:0d:85: 72:c9:6d:95:40:c4:ea:b3:9d:fd:1c:06:a2:d4:75: 62:a2:55:c7:a3:ce:39:53:49:fb:1d:d3:43:5d:1b: cd:5a:95:0f:c7:ee:ff:69:90:16:bb:fb:f0:4d:be: 4a:c6:f0:a3:e1:d6:2b:fd:a8:1d:e7:12:75:d8:35: 7a:a5:b4:f5:2e:8c:ed:00:b5:f2:55:09:45:9e:56: 0c:e7:12:92:85:38:05:f6:0b:7a:c5:84:bf:df:0c: 4f:bf:66:43:1d:0c:78:2b:8b:1a:56:2e:0b:8a:42: b4:65:b6:82:91:bc:72:39:eb:f3:89:88:ed:2c:c2: c3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:CE:E0:2D:0B:8E:06:54:EC:39:51:8F:C1:12:95:D6:85:A2:05:66 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42b647a3-df86-48ab-9aef-85d200253272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.67.0/24 Signature Algorithm: sha256WithRSAEncryption bb:96:d1:b6:8a:60:a5:74:95:47:50:9d:49:0d:79:50:ab:c9: b7:e4:8e:02:f9:ed:7c:a5:ad:ae:1f:84:1a:d3:7a:fe:17:f3: 53:24:c2:b7:87:04:f3:95:20:b0:c8:bf:5c:8d:ca:a1:88:e2: 38:77:9e:e6:45:57:7e:40:8f:53:fa:f0:7f:51:9f:ea:8a:df: c4:92:df:c0:e4:3e:08:f6:69:13:cc:70:2d:91:44:71:90:21: a0:3f:5e:9a:7e:7a:83:c2:28:38:6a:27:18:9e:e1:ad:4e:e9: d4:3b:15:ea:88:88:1a:98:72:e0:16:8a:01:29:9d:1a:d8:71: 7b:0b:2a:65:c3:cc:7d:ef:27:a8:4e:b1:d3:8b:a2:d2:61:e1: e3:87:00:39:ea:ba:28:56:74:63:74:ad:93:b4:9d:b4:d9:e0: d8:e8:23:2d:ff:9a:11:83:9b:74:3a:16:dd:eb:de:52:32:4b: f2:81:65:08:a3:82:bc:8a:5e:16:72:75:af:f7:3d:b8:1c:0a: 15:09:7e:4a:19:1d:66:ea:7b:1b:5e:5d:d7:86:b0:51:17:ae: 91:8c:d9:37:16:de:46:e5:2d:97:f1:ca:dd:df:7e:f2:cd:94: a4:4b:7e:60:02:02:fc:0a:31:bc:b4:43:19:ba:89:13:2a:b1: 9f:8e:84:84 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITQmJQCOiadAQewSsuAR9KBRX3XzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjAyMjEwMTEyMDhaFw0yNjA1MjIyMzU5NTla MHoxSTBHBgNVBAUTQGRjZjRhNzE2YTJiYjY4MzIwMWJiMzBlYjY0N2U1YTMwZDQx NzZhYTczMjAxMTUxMDc5MjU4ZWVjMzE1MWUwYWQxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANltVEiP1VuFf2YWZtRP2z3fXDc7Av8dMUkCu7eAsdwkKebb N3DNfYVYswpWvvEeU7jcO2xL1MmitaiWmVPCByva+AanVMQ985MSoPTC8yMw67Sc p3CQDaDH2jr7iSzyjC2s+BAQ5riEGnF36wurbwSOPCbn/qxgFWYHhz/2aivRdsBX HQ2FcsltlUDE6rOd/RwGotR1YqJVx6POOVNJ+x3TQ10bzVqVD8fu/2mQFrv78E2+ Ssbwo+HWK/2oHecSddg1eqW09S6M7QC18lUJRZ5WDOcSkoU4BfYLesWEv98MT79m Qx0MeCuLGlYuC4pCtGW2gpG8cjnr84mI7SzCwxMCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBRMzuAtC44GVOw5UY/BEpXWhaIFZjAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvNDJiNjQ3YTMtZGY4Ni00OGFiLTlhZWYtODVkMjAwMjUzMjcyLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAIKwQzANBgkqhkiG9w0BAQsFAAOCAQEAu5bRtopgpXSVR1CdSQ15UKvJt+SO AvntfKWtrh+EGtN6/hfzUyTCt4cE85UgsMi/XI3KoYjiOHee5kVXfkCPU/rwf1Gf 6orfxJLfwOQ+CPZpE8xwLZFEcZAhoD9emn56g8IoOGonGJ7hrU7p1DsV6oiIGphy 4BaKASmdGthxewsqZcPMfe8nqE6x04ui0mHh44cAOeq6KFZ0Y3Stk7SdtNng2Ogj Lf+aEYObdDoW3eveUjJL8oFlCKOCvIpeFnJ1r/c9uBwKFQl+ShkdZup7G15d14aw UReukYzZNxbeRuUtl/HK3d9+8s2UpEt+YAIC/AoxvLRDGbqJEyqxn46EhA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:24:15 2026 by rpki-client