$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48a0b6fa-615d-434d-b543-f9f732d80dc1.roa File: 48a0b6fa-615d-434d-b543-f9f732d80dc1.roa (raw, json) Hash identifier: a37Bp8ZmrW1Hydg0ywfa2s6A451m/qRulA3igpE3sL4= Subject key identifier: E1:09:8F:4F:0E:6E:5C:C2:BD:85:0D:13:13:D6:29:0A:82:38:E0:CC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 03C181A228B84BE95DF67799564E9DA40F87C5A5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48a0b6fa-615d-434d-b543-f9f732d80dc1.roa Signing time: Thu 26 Feb 2026 00:11:12 +0000 ROA not before: Thu 26 Feb 2026 00:11:12 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 199.205.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c1:81:a2:28:b8:4b:e9:5d:f6:77:99:56:4e:9d:a4:0f:87:c5:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 26 00:11:12 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=e6f2f20568793e667ed58c9fbd1820be898dff8b9d102aebf817418449e789c8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4a:e0:60:9d:dd:84:26:46:fe:f9:51:0c:00: 4d:11:f5:64:18:75:87:ff:54:bb:32:09:f7:12:92: 80:14:8e:8f:63:6e:b0:34:1d:2e:ab:cf:c8:33:37: 51:0c:5b:67:08:ca:fb:09:cd:21:81:51:94:b1:cf: 90:2f:b0:47:e8:c1:6a:76:75:de:87:c2:e4:e8:50: 1d:1b:40:04:62:26:de:14:9e:f6:c5:a5:1d:f8:fc: 79:09:24:64:54:b2:f7:b1:4e:44:87:96:3f:8a:23: 88:dc:5d:c0:12:47:37:ff:db:fe:c2:7f:f5:a4:4f: da:17:ee:74:7f:65:d4:8c:23:e9:67:4c:6f:a4:12: bc:cd:57:0d:92:99:48:08:89:68:4e:3e:67:40:22: 96:0b:a2:a4:4f:3c:d3:69:27:7d:8f:4e:43:54:a6: 71:2b:51:e2:26:60:af:31:34:97:f3:d6:42:a7:97: 90:41:4f:97:f7:7a:0b:54:7c:e1:36:52:62:93:21: 08:9a:7c:de:33:76:ee:c4:92:9a:d0:ed:67:19:12: f0:a1:c9:02:2b:40:80:d9:f7:a7:d0:cd:7a:17:dc: 10:07:1f:97:c7:26:5d:ee:77:54:ab:a0:3c:6f:0d: 5a:55:46:1e:87:4e:ec:52:0f:ca:ec:2a:d5:6c:2c: 9f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:09:8F:4F:0E:6E:5C:C2:BD:85:0D:13:13:D6:29:0A:82:38:E0:CC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48a0b6fa-615d-434d-b543-f9f732d80dc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.205.0.0/16 Signature Algorithm: sha256WithRSAEncryption a6:09:64:d5:04:7c:d6:6a:82:7b:90:fd:52:98:80:e5:eb:28: 96:5f:b3:27:5b:9f:37:c5:58:3c:9c:5b:4d:01:d2:d3:99:75: 0f:99:b2:ab:8f:39:d2:8a:72:ca:46:f3:6d:76:60:17:bd:a7: 4d:8b:a5:02:03:2e:8e:70:c9:f4:e5:5b:e0:65:fd:f0:17:ff: 49:78:36:f2:14:77:8a:ec:4f:da:01:13:af:d2:f6:4c:f1:f7: 33:30:8a:f8:30:f7:4c:2f:fc:35:94:02:af:4f:0e:51:ec:0f: ef:a0:44:4d:fa:08:14:6a:70:21:bf:09:b9:9c:70:67:05:20: ac:a9:8c:44:35:c0:c2:21:23:3f:01:ed:90:29:00:31:a8:dc: 94:aa:ea:0e:15:f7:48:ad:74:61:39:01:46:b5:15:53:0f:e4: 07:e7:fd:a8:67:e5:21:9f:25:e8:e7:43:8d:02:af:17:1e:92: 1d:89:f9:1c:e0:b5:37:f0:a2:55:6d:96:ea:94:98:93:78:63: b3:49:36:7d:8b:fd:7e:89:34:77:64:0e:95:75:65:37:fb:00: 54:64:49:c0:53:27:9d:53:02:15:6a:20:fd:6f:8a:a2:cd:52: bf:f6:21:51:47:7c:1b:95:d1:9a:ea:47:2b:99:e0:17:ce:96: 5e:0d:ec:7c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUA8GBoii4S+ld9neZVk6dpA+HxaUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI2MDAxMTEyWhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNmYyZjIwNTY4NzkzZTY2N2VkNThjOWZiZDE4MjBiZTg5 OGRmZjhiOWQxMDJhZWJmODE3NDE4NDQ5ZTc4OWM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiSuBgnd2EJkb++VEMAE0R9WQYdYf/VLsyCfcSkoAUjo9j brA0HS6rz8gzN1EMW2cIyvsJzSGBUZSxz5AvsEfowWp2dd6HwuToUB0bQARiJt4U nvbFpR34/HkJJGRUsvexTkSHlj+KI4jcXcASRzf/2/7Cf/WkT9oX7nR/ZdSMI+ln TG+kErzNVw2SmUgIiWhOPmdAIpYLoqRPPNNpJ32PTkNUpnErUeImYK8xNJfz1kKn l5BBT5f3egtUfOE2UmKTIQiafN4zdu7EkprQ7WcZEvChyQIrQIDZ96fQzXoX3BAH H5fHJl3ud1SroDxvDVpVRh6HTuxSD8rsKtVsLJ8LAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU4QmPTw5uXMK9hQ0TE9YpCoI44MwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ4YTBiNmZhLTYxNWQtNDM0ZC1iNTQzLWY5ZjczMmQ4MGRjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDHzTANBgkqhkiG9w0BAQsFAAOCAQEApglk1QR81mqCe5D9UpiA5esoll+z J1ufN8VYPJxbTQHS05l1D5myq4850opyykbzbXZgF72nTYulAgMujnDJ9OVb4GX9 8Bf/SXg28hR3iuxP2gETr9L2TPH3MzCK+DD3TC/8NZQCr08OUewP76BETfoIFGpw Ib8JuZxwZwUgrKmMRDXAwiEjPwHtkCkAMajclKrqDhX3SK10YTkBRrUVUw/kB+f9 qGflIZ8l6OdDjQKvFx6SHYn5HOC1N/CiVW2W6pSYk3hjs0k2fYv9fok0d2QOlXVl N/sAVGRJwFMnnVMCFWog/W+Kos1Sv/YhUUd8G5XRmupHK5ngF86WXg3sfA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:30:23 2026 by rpki-client