$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc3648a6-d865-4070-b75a-da865a98b376.roa File: bc3648a6-d865-4070-b75a-da865a98b376.roa (raw, json) Hash identifier: GW5H+sUr0kVTH4thwEE2nXxzUHRiU3IK6UeezJQKsis= Subject key identifier: B3:1E:21:AD:9D:C7:5B:0B:C0:C4:3D:1A:4F:C9:AC:12:DB:FB:58:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 082EA96DAFA300817CC1C6F57AC82A7A5943BEF8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc3648a6-d865-4070-b75a-da865a98b376.roa Signing time: Wed 11 Feb 2026 01:01:49 +0000 ROA not before: Wed 11 Feb 2026 01:01:49 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 167.223.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:2e:a9:6d:af:a3:00:81:7c:c1:c6:f5:7a:c8:2a:7a:59:43:be:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 11 01:01:49 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=4f528b51f45c24306571140d091d5e81890980d4509aa129d0d03090622ae26a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e1:85:ea:00:5e:9b:42:b8:ff:8f:da:44:17: f9:ac:4f:0b:8c:39:f7:95:c5:36:24:67:ee:09:ef: 96:c4:af:64:f6:78:83:bc:82:fa:c6:cf:b0:2e:b2: ea:ca:6f:51:30:52:70:3e:e1:0e:ad:f4:f9:00:cc: b0:ec:37:90:80:02:d0:bf:0e:ce:64:6d:5e:9d:e0: 61:45:af:89:b8:cf:15:9f:ce:59:de:c0:f3:d8:7e: 41:53:60:c7:45:66:00:e1:ee:33:b9:43:de:bb:26: b5:1c:ed:ea:d0:18:cf:78:a4:7a:95:09:bd:5d:d2: 75:9a:70:83:87:98:07:b0:53:2e:37:37:fe:43:e3: e1:45:4a:53:94:90:de:9d:92:e9:a7:e3:49:a2:5a: 85:17:2b:14:3e:3a:86:ee:31:8c:fd:29:2c:99:a6: 99:ce:25:59:63:f7:2e:da:82:ab:e2:18:ea:8a:5c: 38:52:ec:a0:f3:8b:9a:e6:03:2d:b1:f4:d2:e9:15: c4:98:05:fd:6f:44:01:c0:01:a4:a0:84:ca:85:4c: a6:cf:e5:d2:a5:e1:60:54:84:b9:e5:4a:dd:4b:85: 29:52:a1:9c:59:e7:0c:4b:d4:98:aa:32:01:dd:26: ff:6f:f6:89:b3:7e:db:61:76:86:e0:f7:64:b3:2f: 90:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1E:21:AD:9D:C7:5B:0B:C0:C4:3D:1A:4F:C9:AC:12:DB:FB:58:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc3648a6-d865-4070-b75a-da865a98b376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.223.0.0/16 Signature Algorithm: sha256WithRSAEncryption 46:0f:45:a2:51:67:0c:72:28:5c:e1:c6:07:9b:40:7f:5f:77: 66:c2:55:38:e0:ff:0c:5e:92:20:9a:f9:29:a4:18:59:b5:49: f0:7c:7b:b1:0b:85:01:23:01:4c:b4:00:60:1c:2d:b3:23:2d: e8:48:bf:5e:f3:85:58:9a:1b:4f:72:da:5a:86:7a:b1:6c:16: ce:d5:c1:5b:de:3f:3f:69:77:fc:4f:a2:00:be:9e:e7:f2:11: 9c:35:d2:d9:de:b7:aa:21:1a:84:05:77:ff:0e:f6:fa:59:13: 20:c1:ea:54:c8:df:4d:7c:b8:03:67:07:7b:fd:13:b9:67:7e: 8e:b1:40:1c:d0:51:d6:4c:58:53:ee:c6:c5:7e:26:a5:86:0c: 3b:fb:68:6b:3e:77:a4:52:87:24:2c:1b:4a:21:03:f5:5e:99: 8b:30:ca:7a:ab:ae:60:85:94:0d:63:e8:77:5a:81:77:51:6b: 23:6f:28:87:2f:d4:0a:73:de:cd:ba:3d:5f:eb:e1:c9:5b:82: b9:d1:41:22:d7:d8:9f:f5:16:07:70:56:bb:77:56:25:ea:d6: 94:a4:9b:d6:17:05:aa:dd:71:b6:ec:7e:b8:b2:05:14:7a:b2: e8:3d:de:ac:c6:ef:ea:d5:9c:10:37:10:ff:2b:52:2a:7a:0c: 79:78:0f:b6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCC6pba+jAIF8wcb1esgqellDvvgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjExMDEwMTQ5WhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZjUyOGI1MWY0NWMyNDMwNjU3MTE0MGQwOTFkNWU4MTg5 MDk4MGQ0NTA5YWExMjlkMGQwMzA5MDYyMmFlMjZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJ4YXqAF6bQrj/j9pEF/msTwuMOfeVxTYkZ+4J75bEr2T2 eIO8gvrGz7AusurKb1EwUnA+4Q6t9PkAzLDsN5CAAtC/Ds5kbV6d4GFFr4m4zxWf zlnewPPYfkFTYMdFZgDh7jO5Q967JrUc7erQGM94pHqVCb1d0nWacIOHmAewUy43 N/5D4+FFSlOUkN6dkumn40miWoUXKxQ+OobuMYz9KSyZppnOJVlj9y7agqviGOqK XDhS7KDzi5rmAy2x9NLpFcSYBf1vRAHAAaSghMqFTKbP5dKl4WBUhLnlSt1LhSlS oZxZ5wxL1JiqMgHdJv9v9omzftthdobg92SzL5AVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUsx4hrZ3HWwvAxD0aT8msEtv7WFMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JjMzY0OGE2LWQ4NjUtNDA3MC1iNzVhLWRhODY1YTk4YjM3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCn3zANBgkqhkiG9w0BAQsFAAOCAQEARg9FolFnDHIoXOHGB5tAf193ZsJV OOD/DF6SIJr5KaQYWbVJ8Hx7sQuFASMBTLQAYBwtsyMt6Ei/XvOFWJobT3LaWoZ6 sWwWztXBW94/P2l3/E+iAL6e5/IRnDXS2d63qiEahAV3/w72+lkTIMHqVMjfTXy4 A2cHe/0TuWd+jrFAHNBR1kxYU+7GxX4mpYYMO/toaz53pFKHJCwbSiED9V6ZizDK equuYIWUDWPod1qBd1FrI28ohy/UCnPezbo9X+vhyVuCudFBItfYn/UWB3BWu3dW JerWlKSb1hcFqt1xtux+uLIFFHqy6D3erMbv6tWcEDcQ/ytSKnoMeXgPtg== -----END CERTIFICATE-----Generated at Mon Mar 2 02:00:44 2026 by rpki-client