$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd34ece0-f157-47fb-bb96-b193c7e8966c.roa File: bd34ece0-f157-47fb-bb96-b193c7e8966c.roa (raw, json) Hash identifier: ZUvsWNt81DdWEdAhRZdjltR9IXiT5phPrGEWLEPM+bA= Subject key identifier: DB:7D:EF:17:B7:66:B9:A5:1A:DF:C7:AD:9E:59:21:FF:CF:78:DD:1F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3F74928AA5682E11A3FA380AB746497616070FF1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd34ece0-f157-47fb-bb96-b193c7e8966c.roa Signing time: Fri 20 Feb 2026 00:30:12 +0000 ROA not before: Fri 20 Feb 2026 00:30:12 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.91.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:74:92:8a:a5:68:2e:11:a3:fa:38:0a:b7:46:49:76:16:07:0f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 20 00:30:12 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=6b1d4bead62c97bd2367db007bc3fdeeedf376bc3bb4cb8ead6ad8c7e1b23540, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9d:1c:7b:9e:d4:cd:cd:1e:d1:cf:45:35:59: da:4c:d6:b6:f2:f0:cc:5d:bc:f9:29:46:eb:95:90: 75:31:81:c5:0b:c5:cc:75:d0:56:cb:0a:53:59:4e: 6c:93:17:33:35:3f:63:ed:04:b6:ad:5f:54:85:eb: d8:f7:7b:ee:35:99:96:51:e4:86:e8:b8:b3:f2:72: 65:ff:05:a4:71:d6:fe:34:be:b4:7e:d4:a7:45:87: 8c:3b:a5:42:48:13:ab:a7:81:f7:f3:ac:c5:96:27: b4:e0:81:d8:dc:33:2c:02:fa:0c:51:e0:dd:66:2e: 46:17:75:91:53:c7:57:23:3d:7c:4e:f5:4a:65:5a: 7d:7a:49:2f:27:57:3d:54:5f:6e:99:92:18:61:44: 54:1c:bc:41:f7:fb:1a:45:cf:ca:09:83:1b:26:b3: 1a:ac:9e:16:bc:db:3d:75:ee:06:5e:7c:bc:20:87: 7d:3d:7a:ab:a7:3c:d3:fe:19:a0:d4:bb:dc:8b:29: 70:01:4f:ca:6b:4b:cd:5b:de:b1:2f:45:6c:c5:ca: 4c:42:0b:db:c5:b5:5c:76:e9:80:dc:b9:44:ee:69: a1:83:7b:db:a6:9d:35:24:1a:5e:eb:62:75:f0:56: b7:6e:e1:e5:b6:9a:01:a9:cf:f9:02:d8:b9:b9:91: 55:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7D:EF:17:B7:66:B9:A5:1A:DF:C7:AD:9E:59:21:FF:CF:78:DD:1F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd34ece0-f157-47fb-bb96-b193c7e8966c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.91.3.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:e4:0b:71:ff:96:29:e4:a8:2c:e7:06:33:07:22:2f:41:b0: 69:a7:88:52:df:08:1a:5e:f5:48:c7:b0:95:c6:67:5f:52:44: ea:58:c6:ae:e8:a9:ad:f8:de:8e:b2:b9:0c:77:a8:ce:16:6e: 42:fa:8a:17:1f:a4:cb:92:0a:4f:cb:3d:73:2d:24:02:f4:7c: 51:fe:e9:f5:0d:60:e5:95:0d:9a:9a:ac:ef:bc:3c:83:f1:35: a7:96:5e:30:fd:82:2a:08:37:a7:0c:58:36:c0:cd:36:2b:c7: dd:e5:17:a5:9c:a8:5d:17:0a:32:12:d6:17:a1:ee:36:2b:85: a3:82:57:ab:09:df:27:b6:4a:58:65:2c:a4:5b:ed:f6:d9:12: 2b:de:5d:e6:15:7c:9e:8b:47:4d:43:f4:f7:97:2a:1b:9d:a6: 4c:4e:b2:73:f3:71:ad:c6:80:f6:c1:58:22:8b:94:bc:ff:34: 9e:d1:38:92:5e:c3:90:08:d9:9c:3d:7c:18:44:7f:aa:36:e1: 1e:51:2d:7c:05:54:46:e5:80:45:f5:3f:8d:b6:8b:58:2d:38: a2:0f:95:1f:05:40:e1:32:05:0c:60:93:75:6e:8d:0c:26:06: 8c:a6:3e:19:22:80:a3:1b:36:07:a4:45:89:66:24:31:75:ef: aa:8a:4e:b4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP3SSiqVoLhGj+jgKt0ZJdhYHD/EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIwMDAzMDEyWhcNMjYwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YjFkNGJlYWQ2MmM5N2JkMjM2N2RiMDA3YmMzZmRlZWVk ZjM3NmJjM2JiNGNiOGVhZDZhZDhjN2UxYjIzNTQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQnRx7ntTNzR7Rz0U1WdpM1rby8MxdvPkpRuuVkHUxgcUL xcx10FbLClNZTmyTFzM1P2PtBLatX1SF69j3e+41mZZR5IbouLPycmX/BaRx1v40 vrR+1KdFh4w7pUJIE6ungffzrMWWJ7TggdjcMywC+gxR4N1mLkYXdZFTx1cjPXxO 9UplWn16SS8nVz1UX26ZkhhhRFQcvEH3+xpFz8oJgxsmsxqsnha82z117gZefLwg h309equnPNP+GaDUu9yLKXABT8prS81b3rEvRWzFykxCC9vFtVx26YDcuUTuaaGD e9umnTUkGl7rYnXwVrdu4eW2mgGpz/kC2Lm5kVWxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU233vF7dmuaUa38etnlkh/8943R8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkMzRlY2UwLWYxNTctNDdmYi1iYjk2LWIxOTNjN2U4OTY2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAXWwMwDQYJKoZIhvcNAQELBQADggEBAJzkC3H/linkqCznBjMHIi9BsGmn iFLfCBpe9UjHsJXGZ19SROpYxq7oqa343o6yuQx3qM4WbkL6ihcfpMuSCk/LPXMt JAL0fFH+6fUNYOWVDZqarO+8PIPxNaeWXjD9gioIN6cMWDbAzTYrx93lF6WcqF0X CjIS1heh7jYrhaOCV6sJ3ye2SlhlLKRb7fbZEiveXeYVfJ6LR01D9PeXKhudpkxO snPzca3GgPbBWCKLlLz/NJ7ROJJew5AI2Zw9fBhEf6o24R5RLXwFVEblgEX1P422 i1gtOKIPlR8FQOEyBQxgk3VujQwmBoymPhkigKMbNgekRYlmJDF176qKTrQ= -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:47 2026 by rpki-client