$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac3327a9-5f75-4c66-8e2b-77622fdda0ef.roa File: ac3327a9-5f75-4c66-8e2b-77622fdda0ef.roa (raw, json) Hash identifier: RNgNPFXq2ACb2IDH88W+xsn2hsibWoVQMIv6uHQS1FA= Subject key identifier: B4:79:35:C6:A0:81:D6:05:60:C0:E0:D7:A3:A7:65:92:E0:71:48:59 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 374F12E92612DD321BF744CE5064DA2DF70D63E7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac3327a9-5f75-4c66-8e2b-77622fdda0ef.roa Signing time: Sun 08 Feb 2026 01:01:32 +0000 ROA not before: Sun 08 Feb 2026 01:01:32 +0000 ROA not after: Sat 09 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.122.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:4f:12:e9:26:12:dd:32:1b:f7:44:ce:50:64:da:2d:f7:0d:63:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 8 01:01:32 2026 GMT Not After : May 9 23:59:59 2026 GMT Subject: serialNumber=b63d6b92ff83d9c5d5b35f056f816d292cbe3e8405ca0a020fb0cbdbcdf62a1c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:bd:e4:d7:b0:d9:a2:35:69:90:ef:4d:53: 53:84:07:ba:e6:18:ea:66:59:03:68:ff:13:78:e0: 1d:2b:ec:09:ad:44:1f:e5:7a:ba:a8:80:6c:fb:e5: 52:94:9b:0c:a9:50:c1:09:b2:33:36:5c:5d:54:8d: 90:4b:14:b7:6f:e1:8c:0d:45:6d:31:dc:3c:3b:be: 02:ff:6f:02:db:b7:f9:b1:70:86:ac:3a:d2:f2:40: c3:5f:64:71:08:33:7b:e3:5c:d9:35:f5:6b:b2:bd: 7d:00:7d:c7:46:f0:88:20:0e:36:27:a6:4d:5d:4f: 5d:25:0c:a2:a1:53:66:4e:83:f7:e8:c7:aa:f2:db: c3:43:40:4a:6e:6d:ff:8f:1c:45:d6:4e:e7:42:0a: 90:e0:8f:01:56:5c:b0:6c:e6:9b:6f:09:5c:97:ce: ce:7f:38:4e:97:23:de:ff:77:3a:da:8e:34:ca:c9: 20:84:a5:5b:64:1f:50:a7:a1:59:bf:dd:0c:b8:43: 26:83:a9:a4:b9:5f:65:13:3a:99:df:25:70:05:f8: b1:fc:c5:ee:d6:28:72:c7:be:a4:14:a9:93:9d:21: 56:a7:ac:98:87:80:cb:7f:c6:2d:bb:fd:39:ea:30: e9:c9:27:17:29:28:f1:c9:4c:4d:33:7f:60:ca:ad: 04:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:79:35:C6:A0:81:D6:05:60:C0:E0:D7:A3:A7:65:92:E0:71:48:59 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac3327a9-5f75-4c66-8e2b-77622fdda0ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.122.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8c:ee:7c:5e:9e:4d:02:c6:2e:64:a7:88:eb:82:a0:a1:12:b0: 47:cb:30:c3:8b:b3:17:9a:18:e3:5b:ea:40:0d:ea:d3:85:88: 6f:3c:61:f5:60:b4:e3:ac:21:45:78:fa:0f:af:96:2b:92:ac: 72:34:a6:b7:2c:96:b9:f7:ec:bf:0c:f0:3b:15:d1:ad:f7:33: 32:0c:42:11:4d:27:b9:d0:42:d7:71:be:40:7e:f1:2b:57:47: 15:52:05:4a:57:cd:da:38:94:1e:49:f5:5a:10:e4:fc:c6:76: c6:07:a6:b0:7b:09:7a:7e:97:30:7c:79:18:e8:0c:a5:c1:c5: 67:64:c7:b8:6f:72:3b:d7:f7:dd:69:66:3d:de:7a:07:b2:21: 1c:1a:0c:e0:6c:72:5d:2a:5b:8f:9b:78:10:35:37:2b:71:3a: c3:b1:7e:0c:d6:aa:c8:8c:41:78:04:f1:ae:e1:09:ae:a2:3e: ef:d2:ae:bb:5c:a1:cf:70:63:ea:2e:13:b6:70:a9:79:41:b9: 46:89:6a:bb:ee:91:3d:87:15:a3:6d:a9:56:70:82:f9:9c:76: 82:9f:e9:d5:77:ff:c7:41:9f:31:03:0c:9f:90:20:f2:ea:95: 4b:2a:9c:c4:a3:90:e2:6d:c2:aa:24:3c:f7:54:8f:41:6c:12: 79:b2:1f:2d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUN08S6SYS3TIb90TOUGTaLfcNY+cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA4MDEwMTMyWhcNMjYwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNjNkNmI5MmZmODNkOWM1ZDViMzVmMDU2ZjgxNmQyOTJj YmUzZTg0MDVjYTBhMDIwZmIwY2JkYmNkZjYyYTFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2Ar3k17DZojVpkO9NU1OEB7rmGOpmWQNo/xN44B0r7Amt RB/lerqogGz75VKUmwypUMEJsjM2XF1UjZBLFLdv4YwNRW0x3Dw7vgL/bwLbt/mx cIasOtLyQMNfZHEIM3vjXNk19WuyvX0AfcdG8IggDjYnpk1dT10lDKKhU2ZOg/fo x6ry28NDQEpubf+PHEXWTudCCpDgjwFWXLBs5ptvCVyXzs5/OE6XI97/dzrajjTK ySCEpVtkH1CnoVm/3Qy4QyaDqaS5X2UTOpnfJXAF+LH8xe7WKHLHvqQUqZOdIVan rJiHgMt/xi27/TnqMOnJJxcpKPHJTE0zf2DKrQQlAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUtHk1xqCB1gVgwODXo6dlkuBxSFkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FjMzMyN2E5LTVmNzUtNGM2Ni04ZTJiLTc3NjIyZmRkYTBlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4ejANBgkqhkiG9w0BAQsFAAOCAQEAjO58Xp5NAsYuZKeI64KgoRKwR8sw w4uzF5oY41vqQA3q04WIbzxh9WC046whRXj6D6+WK5KscjSmtyyWuffsvwzwOxXR rfczMgxCEU0nudBC13G+QH7xK1dHFVIFSlfN2jiUHkn1WhDk/MZ2xgemsHsJen6X MHx5GOgMpcHFZ2THuG9yO9f33WlmPd56B7IhHBoM4GxyXSpbj5t4EDU3K3E6w7F+ DNaqyIxBeATxruEJrqI+79Kuu1yhz3Bj6i4TtnCpeUG5Rolqu+6RPYcVo22pVnCC +Zx2gp/p1Xf/x0GfMQMMn5Ag8uqVSyqcxKOQ4m3CqiQ891SPQWwSebIfLQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:24:54 2026 by rpki-client