$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bc62270-49ca-441b-ba8d-65b483733244.roa File: 4bc62270-49ca-441b-ba8d-65b483733244.roa (raw, json) Hash identifier: unp3XABUL3ho9MziKfnGsDbAjU9AH373XU5aLjtOCck= Subject key identifier: 04:54:BD:57:D5:03:EF:0A:ED:BD:5C:9D:E1:BC:A2:A9:E1:A5:39:5E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2FED51CA890A857B66A7BCB15656F2F5438931B4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bc62270-49ca-441b-ba8d-65b483733244.roa Signing time: Wed 18 Feb 2026 00:10:08 +0000 ROA not before: Wed 18 Feb 2026 00:10:08 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 216.230.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ed:51:ca:89:0a:85:7b:66:a7:bc:b1:56:56:f2:f5:43:89:31:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 18 00:10:08 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=a33ac028e716ed014dd38326e28f93e0dc1afa4cf005d2d643ddc6b013c346a0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:29:b2:57:8b:7c:b8:89:93:05:21:a8:0c:ef: df:13:39:bc:c4:53:f4:05:62:b7:2b:62:ba:96:62: d6:4e:d9:ab:5b:6f:3c:e3:a7:a2:53:cd:9b:59:e9: 46:95:1f:16:10:ee:b8:e4:4e:1c:e3:14:1b:b5:32: 9b:0a:bb:b3:ed:87:0e:a7:64:fd:a5:48:fc:35:d8: d5:da:70:7c:71:0f:c2:9f:94:45:aa:55:8a:a6:45: d9:66:ab:ea:86:bf:83:71:d8:db:2a:26:5f:9c:96: 76:32:17:61:26:03:b4:b3:39:b7:07:01:b3:84:99: 92:88:7f:fb:d6:ef:3b:93:14:f0:a2:14:9e:bb:85: 61:86:59:33:36:4e:30:2e:78:ff:83:8d:2a:78:2c: a8:4b:f2:5d:14:0a:40:d1:88:ea:86:29:d2:f7:e3: f4:6b:0c:4f:08:7a:c9:69:68:36:01:b5:88:3a:8e: 54:bc:56:b4:ad:67:05:6e:8c:d1:8c:5c:8d:cf:47: 8c:f9:98:07:55:cf:65:fa:9c:ad:31:95:8c:3b:d9: cb:09:32:1f:cf:1f:cd:1e:5e:1f:c0:82:d4:59:2f: bb:6f:d5:0d:64:aa:6d:a6:fe:fb:0a:91:99:e0:c9: 3f:55:c8:5a:a8:5f:fa:83:a7:df:ea:a4:c7:47:c2: 30:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:54:BD:57:D5:03:EF:0A:ED:BD:5C:9D:E1:BC:A2:A9:E1:A5:39:5E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bc62270-49ca-441b-ba8d-65b483733244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.230.65.0/24 Signature Algorithm: sha256WithRSAEncryption d5:56:0c:ad:a9:54:dc:40:c9:2c:69:f1:34:3a:fe:bf:f7:87: a8:d9:33:66:40:91:f3:e5:8b:b6:36:0b:76:39:88:49:12:78: 4b:4a:c7:c3:ea:73:20:94:1b:42:26:dc:d4:e5:c9:b4:c4:40: 5c:7c:35:bf:4e:77:35:1c:fd:9f:d3:e3:40:15:8f:83:38:43: 79:5e:f0:e5:0a:c0:b2:7c:b1:ac:57:90:55:74:0d:a6:dd:aa: ce:e9:bd:b9:a6:03:58:30:cc:41:7d:a1:e4:36:09:bb:db:eb: 72:e3:bd:35:15:de:9e:17:ed:52:6c:ab:b5:9b:a4:40:a6:4b: 12:78:43:92:32:fc:a2:53:66:b7:78:74:7e:52:72:5b:0d:0a: 22:3d:7e:d3:a6:92:6d:9f:1c:dd:5b:e0:48:26:8d:2a:c1:c4: cb:17:b2:a7:ef:fa:db:b1:48:2d:16:91:69:06:7d:84:c2:db: 38:88:70:ee:e0:04:1e:44:1a:54:3f:db:98:3e:5b:8b:d5:82: 08:5d:4c:79:e9:45:91:88:69:a6:8e:05:5c:fc:9e:e9:7b:c6: 4f:88:b2:a6:b7:ea:e4:50:97:a6:a4:69:c9:21:41:37:16:15: ea:8a:a4:41:f3:5d:04:47:e8:b5:3d:3f:a0:bf:17:f5:e2:82: d9:5e:59:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL+1RyokKhXtmp7yxVlby9UOJMbQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE4MDAxMDA4WhcNMjYwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzNhYzAyOGU3MTZlZDAxNGRkMzgzMjZlMjhmOTNlMGRj MWFmYTRjZjAwNWQyZDY0M2RkYzZiMDEzYzM0NmEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGKbJXi3y4iZMFIagM798TObzEU/QFYrcrYrqWYtZO2atb bzzjp6JTzZtZ6UaVHxYQ7rjkThzjFBu1MpsKu7Pthw6nZP2lSPw12NXacHxxD8Kf lEWqVYqmRdlmq+qGv4Nx2NsqJl+clnYyF2EmA7SzObcHAbOEmZKIf/vW7zuTFPCi FJ67hWGGWTM2TjAueP+DjSp4LKhL8l0UCkDRiOqGKdL34/RrDE8IeslpaDYBtYg6 jlS8VrStZwVujNGMXI3PR4z5mAdVz2X6nK0xlYw72csJMh/PH80eXh/AgtRZL7tv 1Q1kqm2m/vsKkZngyT9VyFqoX/qDp9/qpMdHwjBTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBFS9V9UD7wrtvVyd4byiqeGlOV4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRiYzYyMjcwLTQ5Y2EtNDQxYi1iYThkLTY1YjQ4MzczMzI0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADY5kEwDQYJKoZIhvcNAQELBQADggEBANVWDK2pVNxAySxp8TQ6/r/3h6jZ M2ZAkfPli7Y2C3Y5iEkSeEtKx8PqcyCUG0Im3NTlybTEQFx8Nb9OdzUc/Z/T40AV j4M4Q3le8OUKwLJ8saxXkFV0Dabdqs7pvbmmA1gwzEF9oeQ2Cbvb63LjvTUV3p4X 7VJsq7WbpECmSxJ4Q5Iy/KJTZrd4dH5SclsNCiI9ftOmkm2fHN1b4EgmjSrBxMsX sqfv+tuxSC0WkWkGfYTC2ziIcO7gBB5EGlQ/25g+W4vVgghdTHnpRZGIaaaOBVz8 nul7xk+Isqa36uRQl6akackhQTcWFeqKpEHzXQRH6LU9P6C/F/XigtleWX8= -----END CERTIFICATE-----Generated at Sun Mar 1 22:20:09 2026 by rpki-client