$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63449ecd-6994-4bc7-aed6-f25cedc78b72.roa File: 63449ecd-6994-4bc7-aed6-f25cedc78b72.roa (raw, json) Hash identifier: tDTgYiU4m0vJxo6RMKwTd1IzWGVuaT79Lucz3lW54I4= Subject key identifier: 30:01:65:3B:8B:BA:74:92:00:00:85:63:24:18:13:37:43:80:FA:EF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 440BB8B0C0E836A7BC4E563EAB832A8B8166F781 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63449ecd-6994-4bc7-aed6-f25cedc78b72.roa Signing time: Wed 25 Feb 2026 00:40:06 +0000 ROA not before: Wed 25 Feb 2026 00:40:06 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 7224 IP address blocks: 1.178.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:0b:b8:b0:c0:e8:36:a7:bc:4e:56:3e:ab:83:2a:8b:81:66:f7:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 00:40:06 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=38658a06ee8f8fe6cefec1be2d11204c0173be94d53b38464e57a2cbf58ba29e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6f:c9:5a:05:a3:e9:ba:2d:42:cc:d9:7b:0a: 2e:1c:6b:cd:c9:80:8a:f4:a6:e0:b9:74:f8:b2:9d: 71:22:46:d2:0e:26:84:b5:02:9f:7d:bd:d7:3e:96: b3:de:1f:37:de:5f:0d:cf:9f:06:a2:c0:38:21:24: cd:0f:c2:24:d2:db:76:ce:6e:1e:08:ad:71:b0:ad: 7a:73:c4:f7:d4:11:4a:cf:cb:02:a8:8a:e1:78:71: 0c:81:22:13:28:b1:97:8c:dd:a5:f8:b9:f8:ca:54: 5e:2d:95:15:74:53:32:79:db:8a:97:9f:ef:03:01: 11:45:26:c1:72:39:56:b4:03:a9:60:17:1f:97:87: 10:75:42:e8:38:d3:2f:8f:1e:0f:36:2d:28:5b:a3: 55:38:00:b5:fd:f2:85:06:f2:19:4e:55:47:aa:79: 79:a4:94:ea:52:9b:0d:d1:c5:ad:1c:37:05:33:80: 5d:03:8e:d2:a4:ba:ef:51:bc:cf:5e:d5:4b:c8:c0: d7:0a:5d:d9:25:7c:9d:7d:08:d9:5a:33:46:ea:a3: ec:b4:76:5e:94:8b:6e:60:db:ee:59:8b:60:9f:a3: 2f:f5:be:e5:25:64:e5:4d:3a:87:11:9d:b5:a4:d8: 59:49:98:91:c4:dd:c6:dc:15:7b:ad:7a:04:32:cd: a9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:01:65:3B:8B:BA:74:92:00:00:85:63:24:18:13:37:43:80:FA:EF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63449ecd-6994-4bc7-aed6-f25cedc78b72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.178.184.0/21 Signature Algorithm: sha256WithRSAEncryption 4f:94:2e:5d:1b:2a:1a:2b:6a:12:c9:33:94:27:33:a2:aa:d9: ff:21:b9:84:e9:ae:ad:9d:66:2f:8b:33:58:d7:32:3d:21:00: 00:4f:60:30:91:ad:74:ad:16:8c:92:fb:0b:f6:e4:d1:eb:d2: d4:1d:b6:17:00:2f:ee:bd:e7:da:f4:66:c8:1f:f0:7b:d0:02: 7d:f3:74:4d:33:88:3d:d0:10:cd:96:9c:0d:47:e1:7a:e3:18: 8e:9d:5b:b3:38:79:e3:dc:f7:22:cb:1e:6e:22:fd:df:49:61: ea:11:1c:7c:a8:37:36:41:1b:a1:52:f9:6f:eb:be:07:19:12: 88:7a:ea:7f:61:91:b6:af:ea:04:4d:62:35:3b:12:c1:19:1c: 20:41:9c:bb:40:b8:19:64:28:6d:36:d6:33:a8:76:f4:0d:72: 9c:14:a0:77:fd:8a:01:3a:1d:dd:82:88:8f:74:60:b1:60:71: d1:8e:74:85:69:d8:fb:9b:c4:49:7e:05:5e:ba:41:85:8b:4c: a4:10:ec:e2:f2:5a:b0:14:d9:e5:75:1e:b4:96:b3:2a:d2:be: 0b:82:45:57:4a:51:a6:e1:4e:b3:57:47:2b:c9:29:5b:e8:e0: e5:84:04:8d:86:40:14:1a:55:a1:b2:0d:86:8b:6c:37:7e:1d: 35:77:6d:77 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURAu4sMDoNqe8TlY+q4Mqi4Fm94EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDA0MDA2WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzODY1OGEwNmVlOGY4ZmU2Y2VmZWMxYmUyZDExMjA0YzAx NzNiZTk0ZDUzYjM4NDY0ZTU3YTJjYmY1OGJhMjllMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBb8laBaPpui1CzNl7Ci4ca83JgIr0puC5dPiynXEiRtIO JoS1Ap99vdc+lrPeHzfeXw3PnwaiwDghJM0PwiTS23bObh4IrXGwrXpzxPfUEUrP ywKoiuF4cQyBIhMosZeM3aX4ufjKVF4tlRV0UzJ524qXn+8DARFFJsFyOVa0A6lg Fx+XhxB1Qug40y+PHg82LShbo1U4ALX98oUG8hlOVUeqeXmklOpSmw3Rxa0cNwUz gF0DjtKkuu9RvM9e1UvIwNcKXdklfJ19CNlaM0bqo+y0dl6Ui25g2+5Zi2Cfoy/1 vuUlZOVNOocRnbWk2FlJmJHE3cbcFXutegQyzamXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMAFlO4u6dJIAAIVjJBgTN0OA+u8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYzNDQ5ZWNkLTY5OTQtNGJjNy1hZWQ2LWYyNWNlZGM3OGI3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBsrgwDQYJKoZIhvcNAQELBQADggEBAE+ULl0bKhorahLJM5QnM6Kq2f8h uYTprq2dZi+LM1jXMj0hAABPYDCRrXStFoyS+wv25NHr0tQdthcAL+6959r0Zsgf 8HvQAn3zdE0ziD3QEM2WnA1H4XrjGI6dW7M4eePc9yLLHm4i/d9JYeoRHHyoNzZB G6FS+W/rvgcZEoh66n9hkbav6gRNYjU7EsEZHCBBnLtAuBlkKG021jOodvQNcpwU oHf9igE6Hd2CiI90YLFgcdGOdIVp2PubxEl+BV66QYWLTKQQ7OLyWrAU2eV1HrSW syrSvguCRVdKUabhTrNXRyvJKVvo4OWEBI2GQBQaVaGyDYaLbDd+HTV3bXc= -----END CERTIFICATE-----Generated at Sun Mar 1 23:27:23 2026 by rpki-client