$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/671812b7-0aeb-4a7a-862f-1fd1a37a68c4.roa File: 671812b7-0aeb-4a7a-862f-1fd1a37a68c4.roa (raw, json) Hash identifier: NRfv5D/4jGqo18wRHt6WL+vvBG5hD6KhAqPmTMV3M/E= Subject key identifier: 3C:82:A5:D6:29:CF:41:6D:6B:A3:30:68:65:6D:DC:01:29:07:DD:B0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 67839C2E2DCB16153C092795B3BB4B03A434B89E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/671812b7-0aeb-4a7a-862f-1fd1a37a68c4.roa Signing time: Sat 28 Feb 2026 00:30:14 +0000 ROA not before: Sat 28 Feb 2026 00:30:14 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 98.82.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:83:9c:2e:2d:cb:16:15:3c:09:27:95:b3:bb:4b:03:a4:34:b8:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 28 00:30:14 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=645519f231ea2f15c42d4fbf4fa7a74eecf38d156caf05f6d08c967bc94ebae1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9b:a5:2a:a4:2a:1a:69:0e:f8:dc:0c:58:fe: c1:37:24:04:4b:a4:b0:e7:77:5d:b9:12:61:68:33: d1:59:65:2d:35:8a:34:95:8e:bf:c1:d7:2f:43:ce: 9e:fe:f0:8d:8c:5c:c1:66:0f:3c:7c:d2:c9:dd:ea: 7d:0a:40:16:e0:73:01:a0:86:0f:3f:1f:cc:f3:40: 70:9c:f6:dc:d0:2e:75:48:82:e6:db:48:55:2a:dd: ed:88:5c:ad:61:b6:9d:1f:e5:7e:bd:c6:d2:74:83: 2c:28:37:d9:49:9c:ab:69:88:32:05:b8:13:59:30: 04:d2:41:5a:61:fc:14:58:df:f1:ef:79:bb:38:5d: 6a:72:2f:8e:67:7f:d8:da:6d:d6:4a:ac:aa:ba:b5: 58:a6:ba:b6:37:e3:df:b7:93:7c:66:79:4c:63:aa: a9:7c:58:d8:e3:63:f6:58:6c:39:c2:5a:ed:7d:ea: 43:f6:5a:28:5b:e6:3b:ea:09:21:b5:13:bd:2f:7e: b7:02:30:1b:75:60:63:88:b2:d3:87:9d:31:6d:85: fc:bf:10:f5:15:95:f4:d7:de:72:23:d2:9a:7d:eb: 97:5d:a5:32:a6:e3:22:c3:2c:1b:0f:fb:52:97:71: 9c:5a:6b:df:b7:20:8f:42:e8:60:7d:14:f1:06:4c: b6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:82:A5:D6:29:CF:41:6D:6B:A3:30:68:65:6D:DC:01:29:07:DD:B0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/671812b7-0aeb-4a7a-862f-1fd1a37a68c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.82.154.0/23 Signature Algorithm: sha256WithRSAEncryption bf:9a:5b:d2:d2:0d:da:7a:5f:7e:d3:dc:00:53:80:4c:0f:e6: ef:65:27:81:9a:26:d3:6f:c2:17:d0:c8:24:90:14:2b:34:12: b4:81:21:55:6f:5c:01:38:74:cc:a9:6f:a3:34:5a:d3:88:ee: f8:1c:5e:fd:95:e3:e0:fe:e4:da:58:ea:12:39:f8:23:23:e9: 35:7e:96:96:57:87:71:18:ec:ba:4b:85:81:e4:f8:de:d4:5f: 17:e0:89:3e:bb:f7:8f:19:c1:ea:c6:73:74:39:6e:7d:63:f0: 10:49:03:5f:13:55:de:c2:d8:f5:97:6c:65:d2:0d:75:04:92: 8b:b7:f7:14:49:ef:65:95:7e:b7:8b:61:ec:da:ae:24:ec:88: 30:53:38:9a:9a:7e:4f:11:6c:0e:c3:ad:5e:68:02:c6:63:93: 10:4a:db:ec:c5:86:18:da:4a:6a:d0:ce:86:86:e3:1b:3b:f6: ac:9a:cd:09:fa:f6:c6:38:0b:54:63:f4:ca:b7:dd:61:fe:7f: 63:f1:02:19:21:0c:b5:6a:ee:39:d2:e6:ee:c4:0f:a1:b6:fc: 47:29:cd:29:d5:42:3e:68:e1:71:16:a0:ed:d7:f4:71:bc:bb: 82:77:81:c9:b7:4b:5c:37:69:36:19:f0:30:ab:b1:08:59:47: b5:bd:14:b5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ4OcLi3LFhU8CSeVs7tLA6Q0uJ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI4MDAzMDE0WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NDU1MTlmMjMxZWEyZjE1YzQyZDRmYmY0ZmE3YTc0ZWVj ZjM4ZDE1NmNhZjA1ZjZkMDhjOTY3YmM5NGViYWUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkm6UqpCoaaQ743AxY/sE3JARLpLDnd125EmFoM9FZZS01 ijSVjr/B1y9Dzp7+8I2MXMFmDzx80snd6n0KQBbgcwGghg8/H8zzQHCc9tzQLnVI gubbSFUq3e2IXK1htp0f5X69xtJ0gywoN9lJnKtpiDIFuBNZMATSQVph/BRY3/Hv ebs4XWpyL45nf9jabdZKrKq6tVimurY349+3k3xmeUxjqql8WNjjY/ZYbDnCWu19 6kP2Wihb5jvqCSG1E70vfrcCMBt1YGOIstOHnTFthfy/EPUVlfTX3nIj0pp965dd pTKm4yLDLBsP+1KXcZxaa9+3II9C6GB9FPEGTLZlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPIKl1inPQW1rozBoZW3cASkH3bAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3MTgxMmI3LTBhZWItNGE3YS04NjJmLTFmZDFhMzdhNjhjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFiUpowDQYJKoZIhvcNAQELBQADggEBAL+aW9LSDdp6X37T3ABTgEwP5u9l J4GaJtNvwhfQyCSQFCs0ErSBIVVvXAE4dMypb6M0WtOI7vgcXv2V4+D+5NpY6hI5 +CMj6TV+lpZXh3EY7LpLhYHk+N7UXxfgiT67948ZwerGc3Q5bn1j8BBJA18TVd7C 2PWXbGXSDXUEkou39xRJ72WVfreLYezariTsiDBTOJqafk8RbA7DrV5oAsZjkxBK 2+zFhhjaSmrQzoaG4xs79qyazQn69sY4C1Rj9Mq33WH+f2PxAhkhDLVq7jnS5u7E D6G2/EcpzSnVQj5o4XEWoO3X9HG8u4J3gcm3S1w3aTYZ8DCrsQhZR7W9FLU= -----END CERTIFICATE-----Generated at Mon Mar 2 04:54:51 2026 by rpki-client