$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55f6be6e-a10f-4f03-9a9e-9d4a356580c2.roa File: 55f6be6e-a10f-4f03-9a9e-9d4a356580c2.roa (raw, json) Hash identifier: i57ohJ//JuW+gP869n919+aCoIuRTrGE2Po+kNnkqkY= Subject key identifier: 10:93:D8:C8:0E:43:2B:02:E6:8C:35:91:60:4A:DA:D3:31:2A:AB:47 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 19288A5A9CF7E2E654715C3613D78134B1EC592A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55f6be6e-a10f-4f03-9a9e-9d4a356580c2.roa Signing time: Wed 25 Feb 2026 01:00:54 +0000 ROA not before: Wed 25 Feb 2026 01:00:54 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.22.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:28:8a:5a:9c:f7:e2:e6:54:71:5c:36:13:d7:81:34:b1:ec:59:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 01:00:54 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=0075e58ca1475c7f45b9a26cbb8fdee17240e52e28f6ccbfe21d08b6321125b8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:0b:c8:a3:ee:6a:0b:6a:24:57:dd:3e:8e: 1f:5f:db:3e:51:0c:63:82:d3:97:34:15:e1:67:c2: 7e:51:92:d1:26:a3:19:cb:87:8a:0b:ae:ad:9a:1b: 66:eb:81:c0:40:68:03:89:c2:35:e4:93:91:10:a7: fa:57:0d:19:fe:96:eb:ee:d1:f4:7d:55:e2:9c:be: 06:8e:a9:ad:e3:16:f2:a4:eb:bd:68:06:33:5f:05: e6:d0:fd:01:fc:b0:ab:46:7d:64:fc:9d:c1:96:36: 85:ab:3f:3a:b8:71:a5:10:58:75:62:99:a4:d2:9f: 6e:b1:8f:9e:4c:3a:78:d2:fe:a7:96:57:bf:cd:1b: c8:03:33:38:bf:3c:a0:41:ad:59:0e:5f:2f:db:96: c0:3b:90:8d:73:37:db:36:e5:fd:20:f1:5e:d7:48: 17:54:30:cb:ac:a3:af:42:eb:84:89:1e:5b:8b:46: 42:5e:b8:b2:e9:1a:de:59:b5:f1:43:bb:5a:4e:2f: 2b:7b:11:c8:8c:8a:6c:cc:6b:50:4a:73:ba:57:04: dc:26:d4:97:d3:df:26:0d:4a:9a:ee:08:9a:97:b4: 39:9d:74:52:56:04:f4:02:c8:5b:bd:e8:b5:e9:02: 80:6a:38:4c:38:da:ec:32:6a:c6:63:3d:86:17:69: b8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:93:D8:C8:0E:43:2B:02:E6:8C:35:91:60:4A:DA:D3:31:2A:AB:47 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55f6be6e-a10f-4f03-9a9e-9d4a356580c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.22.76.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:80:de:fa:1b:2f:19:56:81:65:93:d4:13:8b:93:a7:5e:77: fb:ec:28:43:f4:30:c9:72:e5:9d:e0:e2:d3:7a:96:e1:ba:4c: a4:76:d0:41:d8:c9:bf:e4:0b:ef:dd:8a:0f:87:15:cb:23:2d: 9f:83:87:ce:85:3c:b0:b8:0a:0f:7f:1c:96:0a:1f:6e:dc:5f: 0c:b1:ab:11:bf:d6:60:8d:02:9f:fe:1e:7c:a1:4d:24:be:91: 98:77:2e:fc:22:f7:f1:a5:fa:3a:83:03:ad:7a:1a:37:2c:61: 38:19:e7:e7:50:4e:c8:c1:5c:1c:2c:25:0a:dd:8a:30:37:11: 05:68:16:84:18:81:29:d3:a5:69:7d:83:96:76:88:b6:86:3c: 4f:45:89:c8:48:9d:a5:de:69:24:d6:8e:33:70:f5:a0:61:86: 6c:63:12:fd:9a:34:d1:59:8d:18:5f:5a:e5:63:1d:8e:cf:45: b8:22:39:80:3a:7d:6a:d7:2d:a0:97:95:1e:f8:54:2f:e3:85: e3:09:b6:64:d2:39:19:00:db:10:ae:d6:10:52:f0:bc:44:de: c0:dd:8c:d0:b7:b6:63:52:04:ef:55:17:d6:b0:03:e6:bc:42: 10:a8:f5:aa:2b:5c:fa:80:88:45:9d:4c:78:1a:f3:1d:d5:ce: b9:f9:13:9c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGSiKWpz34uZUcVw2E9eBNLHsWSowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDEwMDU0WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDc1ZTU4Y2ExNDc1YzdmNDViOWEyNmNiYjhmZGVlMTcy NDBlNTJlMjhmNmNjYmZlMjFkMDhiNjMyMTEyNWI4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAEwvIo+5qC2okV90+jh9f2z5RDGOC05c0FeFnwn5RktEm oxnLh4oLrq2aG2brgcBAaAOJwjXkk5EQp/pXDRn+luvu0fR9VeKcvgaOqa3jFvKk 671oBjNfBebQ/QH8sKtGfWT8ncGWNoWrPzq4caUQWHVimaTSn26xj55MOnjS/qeW V7/NG8gDMzi/PKBBrVkOXy/blsA7kI1zN9s25f0g8V7XSBdUMMuso69C64SJHluL RkJeuLLpGt5ZtfFDu1pOLyt7EciMimzMa1BKc7pXBNwm1JfT3yYNSpruCJqXtDmd dFJWBPQCyFu96LXpAoBqOEw42uwyasZjPYYXabhDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEJPYyA5DKwLmjDWRYEra0zEqq0cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU1ZjZiZTZlLWExMGYtNGYwMy05YTllLTlkNGEzNTY1ODBjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIXFkwwDQYJKoZIhvcNAQELBQADggEBAC2A3vobLxlWgWWT1BOLk6ded/vs KEP0MMly5Z3g4tN6luG6TKR20EHYyb/kC+/dig+HFcsjLZ+Dh86FPLC4Cg9/HJYK H27cXwyxqxG/1mCNAp/+HnyhTSS+kZh3Lvwi9/Gl+jqDA616GjcsYTgZ5+dQTsjB XBwsJQrdijA3EQVoFoQYgSnTpWl9g5Z2iLaGPE9FichInaXeaSTWjjNw9aBhhmxj Ev2aNNFZjRhfWuVjHY7PRbgiOYA6fWrXLaCXlR74VC/jheMJtmTSORkA2xCu1hBS 8LxE3sDdjNC3tmNSBO9VF9awA+a8QhCo9aorXPqAiEWdTHga8x3Vzrn5E5w= -----END CERTIFICATE-----Generated at Mon Mar 2 00:07:30 2026 by rpki-client