$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab23bc26-73f8-48bf-a790-eb5365c00757.roa File: ab23bc26-73f8-48bf-a790-eb5365c00757.roa (raw, json) Hash identifier: IgSzhpfT2FOdvbe+aupMZo5ayM7S65R9B2MgM8/+n7I= Subject key identifier: B7:3B:AB:01:FE:DF:D4:C2:A6:AE:79:E4:6F:09:E8:80:25:CB:69:7E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 03CF2D7B87ECF13EB6C78008EB3F2A7B256C8DCE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab23bc26-73f8-48bf-a790-eb5365c00757.roa Signing time: Sun 08 Feb 2026 00:40:08 +0000 ROA not before: Sun 08 Feb 2026 00:40:08 +0000 ROA not after: Sat 09 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 75.79.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:cf:2d:7b:87:ec:f1:3e:b6:c7:80:08:eb:3f:2a:7b:25:6c:8d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 8 00:40:08 2026 GMT Not After : May 9 23:59:59 2026 GMT Subject: serialNumber=7486902b67c19e6bae6a85ae92f74c0c88bddf09487898eb50718973635119e2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:ce:51:73:f0:0a:71:64:6f:1f:4e:2d:cd: e4:bc:b5:10:87:e6:2e:43:7c:17:64:0c:62:46:dd: 47:5b:e1:5f:89:5b:8d:85:13:97:86:6d:ce:55:77: 68:44:4a:08:e7:31:26:1f:90:b2:f4:59:3b:a6:14: 5a:f4:5a:75:7b:2e:c4:0b:50:ae:e8:c4:fd:a7:d9: 48:28:e8:51:cb:9b:f4:fb:90:b0:40:c3:74:16:b3: 81:9b:2c:d3:aa:f1:7f:0d:02:7f:99:94:f6:e1:6e: d5:4c:ca:5b:9d:43:4b:9d:f0:4b:60:2f:b0:15:06: f9:b9:1c:95:cf:b7:56:c4:10:01:20:ac:48:3d:92: 49:18:0f:88:e7:1a:e3:56:ba:f3:e8:d9:f4:44:f7: 62:be:32:99:e9:1b:c6:66:23:fc:be:16:06:9d:ab: 8f:9e:3b:d3:0a:01:ba:91:bb:46:bc:0b:b8:10:96: 8c:a2:35:34:b2:8d:53:13:0f:6d:da:c4:f6:32:cd: f7:f2:b4:aa:ef:36:ea:51:97:8a:59:32:a0:25:77: 35:ba:2e:67:57:62:64:28:2a:f5:a0:08:65:13:2e: 3e:90:08:04:71:d2:17:be:ba:72:bf:b6:b7:fb:f8: ee:3d:01:85:9e:b7:1a:33:5a:6f:c4:e7:12:50:69: 51:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3B:AB:01:FE:DF:D4:C2:A6:AE:79:E4:6F:09:E8:80:25:CB:69:7E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab23bc26-73f8-48bf-a790-eb5365c00757.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 75.79.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0b:9d:4a:4d:85:ae:33:6f:44:ce:81:c7:ec:02:e5:0d:88:30: 13:81:a0:63:69:32:8f:83:d7:f8:3b:77:41:bf:06:25:8e:15: 24:41:4c:99:c7:76:50:1d:3b:94:9f:9c:ec:2e:22:6d:87:11: 9e:9a:61:0b:31:02:00:c2:20:0a:09:d3:32:11:d7:c5:74:1c: f4:d6:ba:eb:58:17:01:1a:7c:61:71:d6:60:a5:f9:72:c9:58: 16:d7:0c:98:43:5c:1a:43:01:aa:39:70:68:92:ef:09:56:b6: 4c:e5:a9:ed:e6:b9:68:ab:23:34:75:67:0e:9f:27:3a:e6:39: d0:03:cf:38:b3:ca:f8:7b:63:0a:9a:14:35:59:01:73:ec:cb: 7b:8b:b2:58:eb:90:41:42:6e:db:a6:06:d3:6f:e6:88:28:55: a8:26:1c:07:ef:17:20:30:d3:0e:d6:af:df:c8:f5:80:c3:2c: 40:55:06:dd:2e:c4:da:8f:83:a2:86:ac:30:a5:44:a5:fb:7e: ff:ca:4f:90:a5:a9:97:06:d0:03:07:ae:26:bf:cf:7d:d4:b5: 99:c5:6f:05:25:44:fa:6d:4c:a3:5b:cb:27:9e:af:fb:f2:6c: 81:f1:f0:19:35:3f:9e:20:18:2b:a4:a5:7f:71:8c:a5:0f:f1: a0:bb:f0:62 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUA88te4fs8T62x4AI6z8qeyVsjc4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA4MDA0MDA4WhcNMjYwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDg2OTAyYjY3YzE5ZTZiYWU2YTg1YWU5MmY3NGMwYzg4 YmRkZjA5NDg3ODk4ZWI1MDcxODk3MzYzNTExOWUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2h85Rc/AKcWRvH04tzeS8tRCH5i5DfBdkDGJG3Udb4V+J W42FE5eGbc5Vd2hESgjnMSYfkLL0WTumFFr0WnV7LsQLUK7oxP2n2Ugo6FHLm/T7 kLBAw3QWs4GbLNOq8X8NAn+ZlPbhbtVMyludQ0ud8EtgL7AVBvm5HJXPt1bEEAEg rEg9kkkYD4jnGuNWuvPo2fRE92K+MpnpG8ZmI/y+Fgadq4+eO9MKAbqRu0a8C7gQ loyiNTSyjVMTD23axPYyzffytKrvNupRl4pZMqAldzW6LmdXYmQoKvWgCGUTLj6Q CARx0he+unK/trf7+O49AYWetxozWm/E5xJQaVHPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUtzurAf7f1MKmrnnkbwnogCXLaX4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FiMjNiYzI2LTczZjgtNDhiZi1hNzkwLWViNTM2NWMwMDc1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBLTzANBgkqhkiG9w0BAQsFAAOCAQEAC51KTYWuM29EzoHH7ALlDYgwE4Gg Y2kyj4PX+Dt3Qb8GJY4VJEFMmcd2UB07lJ+c7C4ibYcRnpphCzECAMIgCgnTMhHX xXQc9Na661gXARp8YXHWYKX5cslYFtcMmENcGkMBqjlwaJLvCVa2TOWp7ea5aKsj NHVnDp8nOuY50APPOLPK+HtjCpoUNVkBc+zLe4uyWOuQQUJu26YG02/miChVqCYc B+8XIDDTDtav38j1gMMsQFUG3S7E2o+DooasMKVEpft+/8pPkKWplwbQAweuJr/P fdS1mcVvBSVE+m1Mo1vLJ56v+/JsgfHwGTU/niAYK6Slf3GMpQ/xoLvwYg== -----END CERTIFICATE-----Generated at Mon Mar 2 02:06:12 2026 by rpki-client