$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cf541f1-60a9-4165-a1ba-527339f40010.roa File: 8cf541f1-60a9-4165-a1ba-527339f40010.roa (raw, json) Hash identifier: qPGP/zRfakU8mpl32XaYuPVRXZ0MKbYWik7ZAJdOiLE= Subject key identifier: C2:C7:CC:E0:48:89:AE:3E:99:ED:57:41:A9:E0:D7:21:D4:F5:B1:03 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1CEAB009A33C7985273CBE5E464813811405970F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cf541f1-60a9-4165-a1ba-527339f40010.roa Signing time: Wed 25 Feb 2026 02:10:34 +0000 ROA not before: Wed 25 Feb 2026 02:10:34 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 1.178.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ea:b0:09:a3:3c:79:85:27:3c:be:5e:46:48:13:81:14:05:97:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 02:10:34 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=a51b30401331c5032c85c7fcadef1a8484cfcb7dc9ffcd776b7e7de0d956ff3e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2c:7e:27:fe:a0:0c:05:a8:99:9f:f6:e9:f5: 42:c6:b6:a3:8e:8c:03:20:aa:51:01:6d:a6:36:d4: 3e:5d:49:2d:c9:bc:05:db:b0:64:2d:bd:37:cf:32: a3:fb:f2:14:f7:79:79:26:ba:d9:28:ff:8b:7c:63: ec:04:38:b4:20:77:c1:44:3d:69:67:0c:5c:b6:1c: 3d:37:e5:2e:86:fa:f7:13:13:4a:25:e3:de:12:19: 41:9a:35:ce:47:a5:b7:ef:23:3e:df:a9:d3:da:b4: 23:4c:7f:b7:83:84:f1:95:eb:1a:8f:58:c9:73:37: a5:c6:7e:df:52:d6:b1:9d:92:ef:d6:8e:05:24:46: 00:40:dd:b5:00:bf:51:e9:b3:48:02:7a:8e:0f:44: 94:63:f4:76:31:15:8b:d8:5d:22:e8:a0:78:ea:5f: ed:91:84:38:f1:05:7f:e4:23:71:79:55:6f:2a:d2: d2:d3:78:91:7e:90:ba:c3:08:93:3e:de:2f:6b:e2: 07:6a:62:2c:07:07:aa:99:78:40:78:34:ee:66:9e: bb:68:f0:ad:ed:06:57:57:f9:f6:f0:17:92:3e:1c: 60:72:af:40:b6:89:00:24:cd:9d:92:d3:39:55:43: f6:79:37:22:0a:22:66:d2:69:32:c1:0f:b7:c5:ec: 66:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C7:CC:E0:48:89:AE:3E:99:ED:57:41:A9:E0:D7:21:D4:F5:B1:03 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cf541f1-60a9-4165-a1ba-527339f40010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.178.1.0/24 Signature Algorithm: sha256WithRSAEncryption 32:ab:45:11:57:02:91:c6:98:b0:51:31:c5:0e:90:ad:1c:78: d6:47:7d:30:1e:94:05:3b:76:9b:de:02:ed:87:d0:c1:42:93: dc:e6:ff:74:3b:43:7a:17:23:7c:82:3d:de:20:8e:ed:13:e4: 07:3b:4f:05:89:3f:95:86:2f:4e:f8:19:09:d6:c1:3f:90:55: 46:d2:2c:bb:e8:82:f0:53:80:25:4e:42:0f:df:71:09:09:3e: a8:d9:db:d3:3d:1c:36:2a:5e:bc:63:e1:21:e5:1b:c3:22:97: 34:a9:91:75:bf:ea:7c:f0:fb:42:6b:70:a3:08:54:4e:ca:c2: 28:a8:95:8f:23:58:52:53:79:e0:3d:b6:06:1b:b5:6b:04:37: 94:7b:10:67:8f:06:06:59:44:84:47:e7:81:39:48:35:20:ef: b5:84:62:94:a1:91:54:73:80:d7:76:14:7e:7c:24:4e:e7:0b: c5:a8:7b:c9:62:cf:be:05:31:2a:74:05:28:bd:f6:d6:21:72: 30:b5:e6:00:70:99:3c:24:7b:a4:9d:ec:83:91:78:2b:c4:f0: 28:2c:ca:76:6b:f5:d5:84:1f:4a:b3:25:ed:ed:8a:77:21:8a: 27:fd:d5:0a:d0:06:2e:5e:6a:af:2d:ee:ce:19:05:5c:35:82: 5c:d8:0d:c7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHOqwCaM8eYUnPL5eRkgTgRQFlw8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDIxMDM0WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTFiMzA0MDEzMzFjNTAzMmM4NWM3ZmNhZGVmMWE4NDg0 Y2ZjYjdkYzlmZmNkNzc2YjdlN2RlMGQ5NTZmZjNlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChLH4n/qAMBaiZn/bp9ULGtqOOjAMgqlEBbaY21D5dSS3J vAXbsGQtvTfPMqP78hT3eXkmutko/4t8Y+wEOLQgd8FEPWlnDFy2HD035S6G+vcT E0ol494SGUGaNc5HpbfvIz7fqdPatCNMf7eDhPGV6xqPWMlzN6XGft9S1rGdku/W jgUkRgBA3bUAv1Hps0gCeo4PRJRj9HYxFYvYXSLooHjqX+2RhDjxBX/kI3F5VW8q 0tLTeJF+kLrDCJM+3i9r4gdqYiwHB6qZeEB4NO5mnrto8K3tBldX+fbwF5I+HGBy r0C2iQAkzZ2S0zlVQ/Z5NyIKImbSaTLBD7fF7GbnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwsfM4EiJrj6Z7VdBqeDXIdT1sQMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhjZjU0MWYxLTYwYTktNDE2NS1hMWJhLTUyNzMzOWY0MDAxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABsgEwDQYJKoZIhvcNAQELBQADggEBADKrRRFXApHGmLBRMcUOkK0ceNZH fTAelAU7dpveAu2H0MFCk9zm/3Q7Q3oXI3yCPd4gju0T5Ac7TwWJP5WGL074GQnW wT+QVUbSLLvogvBTgCVOQg/fcQkJPqjZ29M9HDYqXrxj4SHlG8MilzSpkXW/6nzw +0JrcKMIVE7KwiiolY8jWFJTeeA9tgYbtWsEN5R7EGePBgZZRIRH54E5SDUg77WE YpShkVRzgNd2FH58JE7nC8Woe8liz74FMSp0BSi99tYhcjC15gBwmTwke6Sd7IOR eCvE8CgsynZr9dWEH0qzJe3tinchiif91QrQBi5eaq8t7s4ZBVw1glzYDcc= -----END CERTIFICATE-----Generated at Sun Mar 1 22:33:54 2026 by rpki-client