$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1ec3b8-12a2-4eec-90c7-cad9f1823955.roa File: ba1ec3b8-12a2-4eec-90c7-cad9f1823955.roa (raw, json) Hash identifier: zARp6VTK8xl8tNMLyA+FcJEV0QI5Md1WwTLuv8rjNU8= Subject key identifier: 5C:DE:E1:1D:C0:7C:CA:C6:B3:D0:0B:F1:74:76:AD:CD:66:CA:C4:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1C5267989368606BCD9FC3A64486D419DA47224D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1ec3b8-12a2-4eec-90c7-cad9f1823955.roa Signing time: Mon 16 Feb 2026 00:00:02 +0000 ROA not before: Mon 16 Feb 2026 00:00:02 +0000 ROA not after: Sun 17 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 16.140.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:52:67:98:93:68:60:6b:cd:9f:c3:a6:44:86:d4:19:da:47:22:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 16 00:00:02 2026 GMT Not After : May 17 23:59:59 2026 GMT Subject: serialNumber=b03edd9eef049d767bd47e9474d8bfc67dfe670406134979ec1571aed3a604ea, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5a:31:5c:bb:38:a3:da:d3:47:24:df:bc:af: bb:a5:53:a6:5c:93:eb:ed:e7:9d:c6:36:3c:41:a5: 98:4c:1e:34:d9:61:c5:72:4f:ae:0e:37:6c:21:b1: 79:8b:40:4d:9e:10:af:4b:e1:cb:64:8a:0d:c6:63: ac:81:28:26:39:fc:77:bd:6a:d4:d8:a5:ff:05:65: 0f:4a:8e:54:c7:1e:dd:f6:aa:be:2a:a5:ee:c8:5c: 63:bc:99:c2:62:d3:72:d4:7a:8d:0c:e9:c5:cb:29: ba:ae:45:11:01:a5:02:89:90:c8:1a:66:97:34:d3: 02:61:b2:c7:01:bd:7e:f4:a3:5e:fe:7f:6e:72:e0: eb:1a:a6:f7:54:78:00:f1:cd:54:e5:02:19:6b:d6: 40:e1:fe:20:fa:63:66:67:05:ee:ca:82:a2:a6:4d: de:1e:55:1b:f8:84:9a:31:e7:18:7f:ec:6a:e6:11: 60:ef:a3:ea:62:78:de:e2:13:02:bf:43:e0:bc:a4: f9:e4:c3:f3:80:91:98:15:5f:25:3c:54:f2:e5:75: d9:0e:07:7e:42:36:fc:cf:f2:d5:e8:f0:bd:c8:07: b3:a5:c0:89:ee:77:5f:d6:9e:62:eb:3b:f4:f8:b4: 1f:a6:11:fd:9c:8c:24:3a:87:6e:20:cd:a3:1c:c1: 2a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DE:E1:1D:C0:7C:CA:C6:B3:D0:0B:F1:74:76:AD:CD:66:CA:C4:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1ec3b8-12a2-4eec-90c7-cad9f1823955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.140.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2a:82:8d:49:8c:79:83:d7:1a:f5:91:20:f4:f5:34:37:fd:16: a9:fc:98:c8:90:ee:af:56:82:68:2b:cf:c2:9a:73:0b:7f:35: 79:c0:35:4a:20:c5:17:82:26:65:44:65:5f:3b:a3:6e:f5:2c: 24:ca:bf:ff:05:12:70:38:42:b0:3a:77:2d:eb:0d:8b:13:1f: 53:aa:90:9e:d9:a5:44:88:7c:15:fb:d2:51:fe:58:45:0d:af: 8d:b7:21:73:92:93:ce:ba:b5:06:3f:1c:65:cf:d0:e9:a9:11: cd:42:23:1e:00:f0:75:36:04:04:41:53:0f:99:0e:db:fb:e8: 5f:47:da:d6:0a:47:22:b5:7a:24:e7:96:3f:2f:7d:ff:4c:cd: a5:5e:ff:19:6a:f5:d0:3c:2d:cc:c5:74:2e:02:e5:dd:be:ba: 36:85:5f:b8:9b:95:36:c6:f8:bd:fb:a8:c4:53:28:0c:e5:b5: 42:81:3e:9a:2d:9b:0a:13:b9:a7:9f:86:f7:6b:f6:0a:5a:31: d7:fe:53:80:63:5d:54:42:86:e4:c5:d7:33:83:58:7e:62:b9: 4a:75:1b:53:0c:05:a4:11:db:f4:1f:b8:6f:39:c7:89:51:88: cd:af:7f:ac:e0:11:56:02:1d:de:73:34:c6:22:fa:4f:f7:a2: 2d:71:85:63 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHFJnmJNoYGvNn8OmRIbUGdpHIk0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE2MDAwMDAyWhcNMjYwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMDNlZGQ5ZWVmMDQ5ZDc2N2JkNDdlOTQ3NGQ4YmZjNjdk ZmU2NzA0MDYxMzQ5NzllYzE1NzFhZWQzYTYwNGVhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIWjFcuzij2tNHJN+8r7ulU6Zck+vt553GNjxBpZhMHjTZ YcVyT64ON2whsXmLQE2eEK9L4ctkig3GY6yBKCY5/He9atTYpf8FZQ9KjlTHHt32 qr4qpe7IXGO8mcJi03LUeo0M6cXLKbquRREBpQKJkMgaZpc00wJhsscBvX70o17+ f25y4OsapvdUeADxzVTlAhlr1kDh/iD6Y2ZnBe7KgqKmTd4eVRv4hJox5xh/7Grm EWDvo+pieN7iEwK/Q+C8pPnkw/OAkZgVXyU8VPLlddkOB35CNvzP8tXo8L3IB7Ol wInud1/WnmLrO/T4tB+mEf2cjCQ6h24gzaMcwSrPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUXN7hHcB8ysaz0AvxdHatzWbKxLgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhMWVjM2I4LTEyYTItNGVlYy05MGM3LWNhZDlmMTgyMzk1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQjDANBgkqhkiG9w0BAQsFAAOCAQEAKoKNSYx5g9ca9ZEg9PU0N/0WqfyY yJDur1aCaCvPwppzC381ecA1SiDFF4ImZURlXzujbvUsJMq//wUScDhCsDp3LesN ixMfU6qQntmlRIh8FfvSUf5YRQ2vjbchc5KTzrq1Bj8cZc/Q6akRzUIjHgDwdTYE BEFTD5kO2/voX0fa1gpHIrV6JOeWPy99/0zNpV7/GWr10DwtzMV0LgLl3b66NoVf uJuVNsb4vfuoxFMoDOW1QoE+mi2bChO5p5+G92v2Clox1/5TgGNdVEKG5MXXM4NY fmK5SnUbUwwFpBHb9B+4bznHiVGIza9/rOARVgId3nM0xiL6T/eiLXGFYw== -----END CERTIFICATE-----Generated at Mon Mar 2 03:07:45 2026 by rpki-client