$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85f6db33-61ce-4a14-8cf4-fff87a8241e6.roa File: 85f6db33-61ce-4a14-8cf4-fff87a8241e6.roa (raw, json) Hash identifier: ypNYWiEp1rQ74470QcwDjObimLAWbMdhF6Dq0m/M4Ys= Subject key identifier: AA:4A:5C:08:AF:CC:63:5D:86:3C:A0:FA:C2:8A:47:2B:A2:04:CD:FA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1363E64C590E5DF4A0820122D16EB0AEE6D0DB8D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85f6db33-61ce-4a14-8cf4-fff87a8241e6.roa Signing time: Sun 01 Mar 2026 00:20:05 +0000 ROA not before: Sun 01 Mar 2026 00:20:05 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 202.174.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:63:e6:4c:59:0e:5d:f4:a0:82:01:22:d1:6e:b0:ae:e6:d0:db:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 1 00:20:05 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=2575ccc771c5746117c2a64c6cecf7e58369e4d3369f8d675a6fb2d4df097299, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:29:a7:8e:9c:a2:8c:03:23:e5:e6:a1:6d:c4: b9:54:17:d1:e3:9a:a7:0b:bd:69:0a:ea:c2:f0:e9: 60:06:e2:1b:82:f5:c9:7a:0a:d7:93:91:db:99:83: f7:f3:25:07:13:dd:b1:de:0a:31:14:7d:c8:bc:33: 76:1a:06:3c:1a:b3:21:49:38:e4:8b:b8:1f:47:1e: 10:23:43:64:64:27:f0:3f:6b:74:7d:6c:c3:17:72: 92:bd:ae:ac:3c:62:8b:ed:7f:f6:64:fa:08:3e:48: 18:1b:f0:50:20:2f:0c:18:6d:b9:ed:cb:b7:52:b6: b5:d1:c2:46:98:51:eb:c5:df:36:15:e7:a7:61:7e: 04:66:68:ab:83:5b:1d:9a:07:14:e9:c8:49:36:14: 08:20:c4:fe:66:97:ad:74:f0:95:7e:32:f5:40:80: 37:ca:f6:4e:74:be:4f:d6:34:37:2b:51:8b:ea:88: 36:52:f8:3a:7d:30:f8:40:a2:36:69:21:80:c5:3e: 93:01:2f:e4:f7:92:ea:6a:2d:9b:ed:a1:0d:2b:c4: ac:e0:74:70:c2:6e:e9:cf:64:f5:96:20:a4:4b:d6: 58:72:cb:53:ca:e3:10:40:84:14:9c:07:4d:47:d8: 98:3f:db:d1:f8:ea:95:65:da:cd:15:ca:df:a1:c5: a3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4A:5C:08:AF:CC:63:5D:86:3C:A0:FA:C2:8A:47:2B:A2:04:CD:FA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85f6db33-61ce-4a14-8cf4-fff87a8241e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.174.152.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:f5:ac:96:cd:bf:d1:df:97:fb:f0:d3:28:5e:e5:69:70:44: f4:01:0c:99:13:9d:ec:1d:e7:36:fb:6e:ba:65:a4:76:08:00: b3:f8:23:80:2e:1d:3d:34:30:79:56:6b:03:e2:3b:70:60:35: 5e:04:4a:cf:63:99:0f:d1:88:ab:34:c2:79:e7:7b:c3:36:0f: 73:4c:8b:4b:a9:70:73:d9:38:5b:40:60:0b:3c:52:ef:86:60: f5:44:89:6b:b2:c1:b0:3e:56:8d:82:7d:f5:75:35:c8:e0:a1: 7b:20:5a:c4:13:ac:80:47:79:4b:6b:6e:e3:25:83:c9:4e:39: b4:d2:63:da:7d:ff:57:ea:cb:06:9f:f4:ca:4a:ea:95:7f:c7: 2c:30:99:90:be:c0:8f:c7:6d:48:93:86:58:7b:f0:31:83:8d: e4:a1:bc:d3:fc:bd:c9:9f:78:35:5d:6d:47:13:21:92:2a:18: ec:d6:40:69:28:3b:66:e9:d2:49:ab:31:cd:26:0c:c2:13:8b: b9:d8:72:8b:50:d9:9b:0b:ae:dc:b2:af:06:a1:d5:e6:f4:06: 88:b7:c4:07:f7:2c:a0:09:4d:dc:66:37:f0:4c:32:75:26:2d: 21:ce:48:e6:20:ba:9f:ec:cf:04:8e:00:a9:52:be:af:c0:1f: f9:45:b5:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE2PmTFkOXfSgggEi0W6wrubQ240wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzAxMDAyMDA1WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNTc1Y2NjNzcxYzU3NDYxMTdjMmE2NGM2Y2VjZjdlNTgz NjllNGQzMzY5ZjhkNjc1YTZmYjJkNGRmMDk3Mjk5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmKaeOnKKMAyPl5qFtxLlUF9HjmqcLvWkK6sLw6WAG4huC 9cl6CteTkduZg/fzJQcT3bHeCjEUfci8M3YaBjwasyFJOOSLuB9HHhAjQ2RkJ/A/ a3R9bMMXcpK9rqw8Yovtf/Zk+gg+SBgb8FAgLwwYbbnty7dStrXRwkaYUevF3zYV 56dhfgRmaKuDWx2aBxTpyEk2FAggxP5ml6108JV+MvVAgDfK9k50vk/WNDcrUYvq iDZS+Dp9MPhAojZpIYDFPpMBL+T3kupqLZvtoQ0rxKzgdHDCbunPZPWWIKRL1lhy y1PK4xBAhBScB01H2Jg/29H46pVl2s0Vyt+hxaMDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqkpcCK/MY12GPKD6wopHK6IEzfowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg1ZjZkYjMzLTYxY2UtNGExNC04Y2Y0LWZmZjg3YTgyNDFlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHKrpgwDQYJKoZIhvcNAQELBQADggEBAF/1rJbNv9Hfl/vw0yhe5WlwRPQB DJkTnewd5zb7brplpHYIALP4I4AuHT00MHlWawPiO3BgNV4ESs9jmQ/RiKs0wnnn e8M2D3NMi0upcHPZOFtAYAs8Uu+GYPVEiWuywbA+Vo2CffV1NcjgoXsgWsQTrIBH eUtrbuMlg8lOObTSY9p9/1fqywaf9MpK6pV/xywwmZC+wI/HbUiThlh78DGDjeSh vNP8vcmfeDVdbUcTIZIqGOzWQGkoO2bp0kmrMc0mDMITi7nYcotQ2ZsLrtyyrwah 1eb0Boi3xAf3LKAJTdxmN/BMMnUmLSHOSOYgup/szwSOAKlSvq/AH/lFtXg= -----END CERTIFICATE-----Generated at Sun Mar 1 22:21:39 2026 by rpki-client