$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a0b22a0-ba9a-4be1-b539-8dc4983ff1e3.roa File: 9a0b22a0-ba9a-4be1-b539-8dc4983ff1e3.roa (raw, json) Hash identifier: aacKbkLNC1LlEqioeQJNBR/2divR/qIo1Vsg29/3te4= Subject key identifier: 36:C8:90:A0:6C:0E:88:D2:67:AC:9C:CC:05:3D:AB:89:C4:0B:AE:DD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 722C06E77F0B643400A1269CDD36A09131B1E79E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a0b22a0-ba9a-4be1-b539-8dc4983ff1e3.roa Signing time: Sat 07 Feb 2026 00:21:08 +0000 ROA not before: Sat 07 Feb 2026 00:21:08 +0000 ROA not after: Fri 08 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.135.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:2c:06:e7:7f:0b:64:34:00:a1:26:9c:dd:36:a0:91:31:b1:e7:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 7 00:21:08 2026 GMT Not After : May 8 23:59:59 2026 GMT Subject: serialNumber=c6f7ad46d9e07c9e3378d209e0e82edaa2b68092e85e9d94a1a22def3a2570cf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:30:d9:77:2d:4e:b6:5b:8e:0b:88:15:b3:0d: 8f:4d:67:b9:21:49:f9:1a:da:a9:23:fc:8b:8a:b1: f1:1e:fa:dc:09:f1:82:d4:91:17:dc:25:e6:04:ec: d3:50:35:a0:8e:c2:fe:89:0f:17:88:ca:7a:97:f0: d2:de:55:65:b1:fd:03:f4:d7:03:0d:a1:b2:db:b9: a0:49:a1:5a:05:6a:0d:a1:be:5a:77:e2:fd:81:02: cb:1e:06:80:5b:33:b3:19:08:78:31:1f:c1:3d:91: 3b:22:86:fb:22:51:00:c7:0a:5a:60:b2:50:68:af: e3:aa:9b:d0:ae:e9:31:a1:28:2e:7d:1d:4f:58:39: c0:5f:da:4b:fb:a0:73:d4:d3:38:26:7c:f4:03:e8: 6d:e3:90:a8:68:c8:33:47:11:21:8d:00:3e:23:fa: 4c:f9:23:e5:f3:86:fa:ec:14:f7:3b:fb:fa:3e:04: 33:bf:07:0e:5d:20:df:3f:90:60:5a:63:8e:df:fb: eb:81:6c:e5:72:ae:fa:98:4d:7e:ab:7b:33:42:8e: b3:01:82:7c:96:78:9a:f2:c8:4c:c6:fb:1f:ee:33: c7:ce:6e:ac:a5:f2:37:d8:56:90:23:77:0f:10:f9: 04:04:d2:03:8a:23:b7:3b:7d:7e:ed:1f:e3:b4:1c: d3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C8:90:A0:6C:0E:88:D2:67:AC:9C:CC:05:3D:AB:89:C4:0B:AE:DD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a0b22a0-ba9a-4be1-b539-8dc4983ff1e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.135.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4f:0b:1f:d0:e5:18:d8:10:5c:84:46:b1:72:c1:f0:15:2b:d2: 8f:ac:9a:41:73:2c:c8:61:58:40:09:c4:39:ca:d5:29:5f:b0: bf:a4:ca:a0:57:8d:44:13:21:95:e0:97:66:dd:54:26:e0:a7: 4e:26:10:6d:26:3f:21:ce:87:4c:65:2d:0d:41:e4:23:55:74: 69:46:07:54:d6:99:24:bd:74:69:9b:0e:8d:2f:a8:86:2f:96: 2b:f8:81:fc:61:4e:7b:49:a0:c5:f2:0e:95:08:5c:fc:19:e2: 3a:81:41:bc:13:29:87:e7:a0:3b:d7:68:db:74:5f:6f:45:0e: 5b:2a:2c:2f:bb:c1:52:b0:3e:73:03:e6:42:65:ab:b9:3f:4e: 2b:59:70:29:e4:a2:8f:bf:5d:78:50:f3:c8:a9:a6:0d:9b:73: 7b:90:fd:b9:ff:e6:ee:5f:6f:d6:e5:de:47:02:f3:03:7e:63: f2:d2:c1:c6:56:f2:bb:e5:d9:fd:64:d3:81:af:63:8a:18:a3: 80:c3:6c:4a:c7:5a:18:f9:3d:9b:7c:cc:d6:cf:bc:53:f4:94: 97:65:30:cc:4a:e3:65:f4:c9:78:1c:35:56:af:60:4d:a3:e0: 50:18:94:f6:d2:1e:df:93:52:8d:3b:c0:d1:22:cd:73:fa:35: 59:be:62:0c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUciwG538LZDQAoSac3TagkTGx554wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA3MDAyMTA4WhcNMjYwNTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNmY3YWQ0NmQ5ZTA3YzllMzM3OGQyMDllMGU4MmVkYWEy YjY4MDkyZTg1ZTlkOTRhMWEyMmRlZjNhMjU3MGNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChMNl3LU62W44LiBWzDY9NZ7khSfka2qkj/IuKsfEe+twJ 8YLUkRfcJeYE7NNQNaCOwv6JDxeIynqX8NLeVWWx/QP01wMNobLbuaBJoVoFag2h vlp34v2BAsseBoBbM7MZCHgxH8E9kTsihvsiUQDHClpgslBor+Oqm9Cu6TGhKC59 HU9YOcBf2kv7oHPU0zgmfPQD6G3jkKhoyDNHESGNAD4j+kz5I+XzhvrsFPc7+/o+ BDO/Bw5dIN8/kGBaY47f++uBbOVyrvqYTX6rezNCjrMBgnyWeJryyEzG+x/uM8fO bqyl8jfYVpAjdw8Q+QQE0gOKI7c7fX7tH+O0HNP9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUNsiQoGwOiNJnrJzMBT2ricQLrt0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlhMGIyMmEwLWJhOWEtNGJlMS1iNTM5LThkYzQ5ODNmZjFlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQhzANBgkqhkiG9w0BAQsFAAOCAQEATwsf0OUY2BBchEaxcsHwFSvSj6ya QXMsyGFYQAnEOcrVKV+wv6TKoFeNRBMhleCXZt1UJuCnTiYQbSY/Ic6HTGUtDUHk I1V0aUYHVNaZJL10aZsOjS+ohi+WK/iB/GFOe0mgxfIOlQhc/BniOoFBvBMph+eg O9do23Rfb0UOWyosL7vBUrA+cwPmQmWruT9OK1lwKeSij79deFDzyKmmDZtze5D9 uf/m7l9v1uXeRwLzA35j8tLBxlbyu+XZ/WTTga9jihijgMNsSsdaGPk9m3zM1s+8 U/SUl2UwzErjZfTJeBw1Vq9gTaPgUBiU9tIe35NSjTvA0SLNc/o1Wb5iDA== -----END CERTIFICATE-----Generated at Mon Mar 2 03:06:28 2026 by rpki-client