$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d98cd23-1c47-4e92-97d3-1cc1b17b82a4.roa File: 7d98cd23-1c47-4e92-97d3-1cc1b17b82a4.roa (raw, json) Hash identifier: xw7wZysst4xLp4tpbaFA1K9PIaTvIoCxbPSGz6uZJFE= Subject key identifier: B9:86:38:4A:11:39:4B:93:C9:58:57:05:BA:0C:3D:68:33:CA:F8:59 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5129BEF07F5634C255DEC4105D4B503DCB3B40EB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d98cd23-1c47-4e92-97d3-1cc1b17b82a4.roa Signing time: Tue 24 Feb 2026 00:50:10 +0000 ROA not before: Tue 24 Feb 2026 00:50:10 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 204.236.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:29:be:f0:7f:56:34:c2:55:de:c4:10:5d:4b:50:3d:cb:3b:40:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 00:50:10 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=d541bfd2011b3a1226aa744144daf2f0ca970d06757a2ef02d692c0e32c9a858, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f9:f0:59:2d:ba:c9:9e:df:56:a9:42:c6:28: ee:90:6a:6b:e2:c9:d7:83:11:93:cb:e5:d6:ed:8c: 63:d8:57:1e:9b:02:a6:a5:2e:ca:90:19:70:9a:9e: cf:4c:ff:85:69:6a:bf:93:a4:26:7d:b4:5f:a9:b7: 07:05:cb:c5:94:89:19:4a:dc:ab:57:7e:cc:00:90: ee:e7:b8:b6:e6:01:bc:a3:0f:1b:6b:c5:80:fc:ea: 86:5a:2a:4e:ff:b9:2e:dd:3e:02:0c:8b:ee:cc:00: 7c:96:5f:34:b5:72:00:50:1d:c3:17:19:09:3b:59: 1a:5b:7a:1a:af:d8:da:65:a2:91:b1:10:79:c0:41: fd:70:2f:a2:de:d2:81:27:7d:dd:04:25:03:41:7d: 4d:29:5d:83:3a:3a:98:84:c6:64:8a:d8:38:ac:7d: 04:9b:bb:dc:fd:cf:a1:2c:a9:c8:5b:85:de:7b:a3: 05:cc:ab:57:45:b1:84:8f:c6:e1:98:89:9a:0e:2b: b2:0b:bc:0e:97:b7:7e:59:f6:2f:cb:10:12:62:35: e2:bd:e7:58:ca:b4:50:72:3d:e3:39:b2:88:bc:0d: 5e:ca:57:61:57:96:b7:12:70:77:77:2d:80:33:5d: ae:2a:fa:b4:34:bc:0b:8c:ea:1c:45:18:5a:a3:6b: ef:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:86:38:4A:11:39:4B:93:C9:58:57:05:BA:0C:3D:68:33:CA:F8:59 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d98cd23-1c47-4e92-97d3-1cc1b17b82a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.236.218.0/23 Signature Algorithm: sha256WithRSAEncryption ce:fe:9d:27:22:b1:29:d1:7a:fc:0a:5c:ab:5f:81:c5:ae:d5: f0:9e:45:a1:74:ae:17:fa:3c:76:aa:80:4c:58:a7:b6:ac:0d: 47:e1:c4:61:97:92:74:34:ca:0e:50:be:62:8a:0d:c9:ef:9e: e1:92:78:40:9b:72:df:a6:a7:1c:66:b0:a1:88:9d:54:9f:7d: d4:df:7c:46:89:09:4e:ed:d9:72:84:6b:fb:04:5e:74:1d:9f: d5:30:81:65:70:a1:77:75:e4:36:fe:79:3a:ee:ad:fa:23:98: 4f:88:77:13:d2:d6:93:24:4d:c1:34:0f:a1:e5:74:06:26:97: 4f:81:03:20:b4:96:c7:a9:57:0b:0c:57:ad:db:a6:a8:c6:cf: c9:8d:e8:b2:57:e1:7f:34:8a:71:b9:24:8f:0d:7b:63:06:7c: 9f:f3:5c:51:e7:c5:98:67:7a:5c:2e:19:27:aa:2a:56:ac:7c: b5:cf:51:07:bf:d3:76:c5:db:1f:f8:d4:c5:d8:43:9b:1e:6c: ae:19:85:45:44:9d:f6:b0:50:89:0d:a0:05:06:84:a6:6f:d9: 1f:8b:12:99:0c:bb:55:cf:15:4d:b5:dd:23:ea:e1:d5:6c:15: fa:93:ba:4f:d0:f2:4a:0c:58:b7:31:19:f6:c8:3b:ad:8c:46: b3:cc:f0:38 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUSm+8H9WNMJV3sQQXUtQPcs7QOswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDA1MDEwWhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTQxYmZkMjAxMWIzYTEyMjZhYTc0NDE0NGRhZjJmMGNh OTcwZDA2NzU3YTJlZjAyZDY5MmMwZTMyYzlhODU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3+fBZLbrJnt9WqULGKO6QamviydeDEZPL5dbtjGPYVx6b AqalLsqQGXCans9M/4Vpar+TpCZ9tF+ptwcFy8WUiRlK3KtXfswAkO7nuLbmAbyj DxtrxYD86oZaKk7/uS7dPgIMi+7MAHyWXzS1cgBQHcMXGQk7WRpbehqv2NplopGx EHnAQf1wL6Le0oEnfd0EJQNBfU0pXYM6OpiExmSK2DisfQSbu9z9z6Esqchbhd57 owXMq1dFsYSPxuGYiZoOK7ILvA6Xt35Z9i/LEBJiNeK951jKtFByPeM5soi8DV7K V2FXlrcScHd3LYAzXa4q+rQ0vAuM6hxFGFqja++nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuYY4ShE5S5PJWFcFugw9aDPK+FkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkOThjZDIzLTFjNDctNGU5Mi05N2QzLTFjYzFiMTdiODJhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHM7NowDQYJKoZIhvcNAQELBQADggEBAM7+nScisSnRevwKXKtfgcWu1fCe RaF0rhf6PHaqgExYp7asDUfhxGGXknQ0yg5QvmKKDcnvnuGSeECbct+mpxxmsKGI nVSffdTffEaJCU7t2XKEa/sEXnQdn9UwgWVwoXd15Db+eTrurfojmE+IdxPS1pMk TcE0D6HldAYml0+BAyC0lsepVwsMV63bpqjGz8mN6LJX4X80inG5JI8Ne2MGfJ/z XFHnxZhnelwuGSeqKlasfLXPUQe/03bF2x/41MXYQ5sebK4ZhUVEnfawUIkNoAUG hKZv2R+LEpkMu1XPFU213SPq4dVsFfqTuk/Q8koMWLcxGfbIO62MRrPM8Dg= -----END CERTIFICATE-----Generated at Sun Mar 1 22:17:05 2026 by rpki-client