$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c21f62f7-9ba2-4f86-a311-feb71e000965.roa File: c21f62f7-9ba2-4f86-a311-feb71e000965.roa (raw, json) Hash identifier: 7taZKiyYmuFRhGnigftWYthHIoNzUclHr6Z0aouyBIc= Subject key identifier: F1:70:03:83:42:B8:93:8E:2E:B7:1C:17:4E:ED:71:A7:DC:9B:AD:20 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2684F920CAB625CDDE8AAA152DDB0E36628A3432 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c21f62f7-9ba2-4f86-a311-feb71e000965.roa Signing time: Fri 13 Feb 2026 00:31:23 +0000 ROA not before: Fri 13 Feb 2026 00:31:23 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.177.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:84:f9:20:ca:b6:25:cd:de:8a:aa:15:2d:db:0e:36:62:8a:34:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 13 00:31:23 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=010295a647e5a06b0ad0e5b587548dfbabcbc13eba487e6d520cdfbfec2a4adc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:57:81:f8:4f:0a:34:4c:94:6d:4a:87:6e:26: cd:7c:ed:57:d2:68:b3:96:50:5e:55:60:f8:09:82: 4d:88:4c:74:a5:87:44:31:bb:3d:9b:a7:43:d8:38: 61:cb:18:5e:ea:94:ad:09:20:fe:7c:76:82:d8:a1: 07:cb:3f:93:83:78:8a:4d:31:88:25:c8:bf:fe:38: ac:70:a0:13:61:dd:da:92:dc:4e:7a:2e:25:54:d9: 61:25:57:06:57:00:86:fe:a3:2e:e8:44:8c:2d:49: 87:62:99:77:17:25:44:7d:23:54:cc:34:c7:fc:f6: 45:bd:c2:66:2a:7c:98:88:7b:e3:0c:b7:2e:5d:ed: 3e:2b:0e:ac:44:e0:c3:99:b5:22:ff:e2:3d:15:17: 29:f0:40:82:b3:71:5e:a8:0a:73:09:3d:53:21:bb: c9:28:42:fc:d9:16:8e:2a:e6:c2:bb:5f:f3:5b:54: 78:32:34:f7:1f:68:c1:b1:74:a0:3c:5d:12:c2:a0: 27:89:75:55:a1:9e:0e:01:2f:87:6c:f3:3f:94:d3: f4:44:3c:e4:9f:87:1b:16:31:8a:c4:35:5d:9a:08: e1:5c:82:ce:78:3c:c2:c2:e0:fe:b7:ad:a7:67:56: ee:03:81:2c:c9:bc:47:6c:1c:f0:56:7a:c3:e2:36: 01:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:70:03:83:42:B8:93:8E:2E:B7:1C:17:4E:ED:71:A7:DC:9B:AD:20 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c21f62f7-9ba2-4f86-a311-feb71e000965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.177.0.0/16 Signature Algorithm: sha256WithRSAEncryption af:18:15:a4:50:1f:fb:b2:cc:f7:3f:94:97:de:41:3e:29:12: ee:28:07:5b:8d:0f:83:c7:d3:94:b6:76:ec:4c:71:b5:d6:89: a5:d9:8e:00:bb:92:9a:96:1d:cf:df:f8:4e:99:4a:ed:93:01: 42:bf:ba:58:7d:cf:39:05:1d:1f:45:91:29:75:8b:9d:38:c0: 5d:10:20:92:19:50:41:49:3e:ae:db:c9:3c:2f:0f:5f:c5:d8: 07:de:98:69:f2:66:ae:bf:f0:44:e2:3b:06:4e:a1:44:e4:5a: b3:b5:3c:59:54:9e:c1:ab:d6:90:1d:b9:f4:d9:39:cb:2b:b6: b2:8c:4d:51:44:82:05:73:8c:88:7a:2d:06:13:36:bf:ab:37: 21:7e:7d:3d:38:a3:74:a0:2a:23:ff:a9:82:db:ff:cc:37:f0: b2:2e:69:d1:0a:a2:17:8c:19:d0:f1:1e:22:f6:9c:93:da:80: 73:28:e1:83:e8:9f:85:4d:e6:66:60:b6:40:8a:83:41:c6:ea: 35:f9:2b:c9:7d:02:f3:67:db:2f:79:d6:9c:58:f3:c1:27:9f: eb:a7:d6:e0:2f:20:c1:bb:a9:41:93:d7:a5:6c:d6:35:22:ef: b9:ec:13:3e:22:bb:05:92:5f:31:41:58:b1:47:8f:73:af:f7: b1:13:db:73 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJoT5IMq2Jc3eiqoVLdsONmKKNDIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEzMDAzMTIzWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTAyOTVhNjQ3ZTVhMDZiMGFkMGU1YjU4NzU0OGRmYmFi Y2JjMTNlYmE0ODdlNmQ1MjBjZGZiZmVjMmE0YWRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVV4H4Two0TJRtSoduJs187VfSaLOWUF5VYPgJgk2ITHSl h0Qxuz2bp0PYOGHLGF7qlK0JIP58doLYoQfLP5ODeIpNMYglyL/+OKxwoBNh3dqS 3E56LiVU2WElVwZXAIb+oy7oRIwtSYdimXcXJUR9I1TMNMf89kW9wmYqfJiIe+MM ty5d7T4rDqxE4MOZtSL/4j0VFynwQIKzcV6oCnMJPVMhu8koQvzZFo4q5sK7X/Nb VHgyNPcfaMGxdKA8XRLCoCeJdVWhng4BL4ds8z+U0/REPOSfhxsWMYrENV2aCOFc gs54PMLC4P63radnVu4DgSzJvEdsHPBWesPiNgERAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU8XADg0K4k44utxwXTu1xp9ybrSAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MyMWY2MmY3LTliYTItNGY4Ni1hMzExLWZlYjcxZTAwMDk2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQsTANBgkqhkiG9w0BAQsFAAOCAQEArxgVpFAf+7LM9z+Ul95BPikS7igH W40Pg8fTlLZ27ExxtdaJpdmOALuSmpYdz9/4TplK7ZMBQr+6WH3POQUdH0WRKXWL nTjAXRAgkhlQQUk+rtvJPC8PX8XYB96YafJmrr/wROI7Bk6hRORas7U8WVSewavW kB259Nk5yyu2soxNUUSCBXOMiHotBhM2v6s3IX59PTijdKAqI/+pgtv/zDfwsi5p 0QqiF4wZ0PEeIvack9qAcyjhg+ifhU3mZmC2QIqDQcbqNfkryX0C82fbL3nWnFjz wSef66fW4C8gwbupQZPXpWzWNSLvuewTPiK7BZJfMUFYsUePc6/3sRPbcw== -----END CERTIFICATE-----Generated at Sun Mar 1 22:35:18 2026 by rpki-client