$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d06c4360-59d9-4f8a-9e60-9ad149bb4f4a.roa File: d06c4360-59d9-4f8a-9e60-9ad149bb4f4a.roa (raw, json) Hash identifier: 9MXF+TIfae48ERpS/Izj22e6OC6oMYoN6sPuv+WXlyE= Subject key identifier: 30:02:AB:AF:D2:51:3B:BE:BA:7D:60:CB:2D:9A:77:6B:F4:11:B7:EB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3CEFDDFA4381C3AC49800A2F0366574A9270E610 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d06c4360-59d9-4f8a-9e60-9ad149bb4f4a.roa Signing time: Wed 25 Feb 2026 01:30:14 +0000 ROA not before: Wed 25 Feb 2026 01:30:14 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.22.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ef:dd:fa:43:81:c3:ac:49:80:0a:2f:03:66:57:4a:92:70:e6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 25 01:30:14 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=43c739e550d87c7278e8335eeffa1d1a3050ac6a55951969c300940cbee93976, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:57:a8:db:e2:46:7e:0a:e8:b4:09:c4:84:0b: 26:c3:d7:5a:8f:4d:51:cf:c2:a6:e9:62:6b:c5:79: dd:9d:ef:e3:0a:2b:7f:59:10:c5:fc:9d:da:b9:eb: 1b:fb:03:fa:eb:b6:35:7f:3e:f7:a5:8c:48:98:b8: c5:b2:1f:d5:97:a9:16:a6:6c:50:5a:ba:ff:e6:fb: 41:8d:19:0b:56:3d:ab:3b:08:c1:41:0f:f5:03:c4: 5b:f5:a5:db:19:0b:2f:3d:29:f9:6f:f5:65:a1:c2: 64:74:e7:3e:70:8a:20:a7:89:30:61:10:f6:c6:a5: f7:60:77:0c:d1:ed:d8:12:25:fb:ea:49:e5:f8:42: ac:e7:a5:d0:57:cb:bb:31:a1:ba:4d:1f:88:fe:de: 70:d5:cd:cd:1d:60:9f:88:89:67:35:d7:2e:1b:c5: 97:77:7f:b1:77:d3:a5:ca:89:80:aa:ae:bd:0b:b8: 00:67:37:7c:1e:39:92:c1:ec:42:7f:b8:f8:65:21: 72:1d:8c:c3:d3:5b:ad:1e:f6:6d:b5:e5:76:bb:96: a3:78:2a:0e:08:18:f6:90:ac:ac:32:cd:ff:42:94: b5:91:94:b8:2f:26:cc:b2:d4:95:b3:15:b8:a6:b6: 9e:1b:e5:43:c0:c3:e7:73:38:af:0c:f3:f3:70:1c: 40:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:02:AB:AF:D2:51:3B:BE:BA:7D:60:CB:2D:9A:77:6B:F4:11:B7:EB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d06c4360-59d9-4f8a-9e60-9ad149bb4f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.22.80.0/20 Signature Algorithm: sha256WithRSAEncryption aa:98:4e:73:48:9f:fd:b7:9e:53:e3:24:3d:63:43:2f:49:ba: 35:b0:48:93:34:7a:bf:13:bb:b7:be:bf:cb:98:a4:cb:fd:47: 67:60:e0:82:f8:80:2f:f8:fd:be:cd:43:2f:ed:e2:fa:ba:2b: f3:87:2b:9e:8d:45:86:26:7e:af:c7:f8:23:95:d1:cf:f2:8d: 1a:3c:24:3a:50:33:f2:77:05:ee:40:a4:39:c2:45:c1:1e:2e: 86:f6:44:f4:87:d0:76:fa:50:6c:5e:b3:9b:d1:a1:49:50:53: ff:81:b4:e6:b9:6a:0e:46:8e:2b:34:68:2a:5a:b2:ba:af:09: fa:51:55:83:42:e2:aa:28:40:fc:8c:eb:a8:5e:a3:57:54:8d: a5:1b:35:06:40:76:c7:4a:09:cf:3a:f3:e0:e7:fd:46:ba:69: df:cb:4e:94:33:0f:c4:da:ee:2b:b0:52:19:df:14:46:8c:96: 6e:eb:a2:80:31:01:19:c9:ee:63:21:72:d0:c6:86:f2:71:82: 0f:48:b1:e2:76:27:4b:3f:d7:c9:4a:f6:05:ca:57:11:e9:10: 96:23:0b:e7:de:2c:e9:2a:93:4b:b5:8b:01:0d:2f:6f:ff:81: aa:ce:6a:26:48:21:ad:8c:42:1b:81:c3:21:64:73:d8:92:84: 80:2d:a2:dc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPO/d+kOBw6xJgAovA2ZXSpJw5hAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDEzMDE0WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0M2M3MzllNTUwZDg3YzcyNzhlODMzNWVlZmZhMWQxYTMw NTBhYzZhNTU5NTE5NjljMzAwOTQwY2JlZTkzOTc2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcV6jb4kZ+Cui0CcSECybD11qPTVHPwqbpYmvFed2d7+MK K39ZEMX8ndq56xv7A/rrtjV/PveljEiYuMWyH9WXqRambFBauv/m+0GNGQtWPas7 CMFBD/UDxFv1pdsZCy89Kflv9WWhwmR05z5wiiCniTBhEPbGpfdgdwzR7dgSJfvq SeX4QqznpdBXy7sxobpNH4j+3nDVzc0dYJ+IiWc11y4bxZd3f7F306XKiYCqrr0L uABnN3weOZLB7EJ/uPhlIXIdjMPTW60e9m215Xa7lqN4Kg4IGPaQrKwyzf9ClLWR lLgvJsyy1JWzFbimtp4b5UPAw+dzOK8M8/NwHEDxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMAKrr9JRO766fWDLLZp3a/QRt+swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QwNmM0MzYwLTU5ZDktNGY4YS05ZTYwLTlhZDE0OWJiNGY0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQXFlAwDQYJKoZIhvcNAQELBQADggEBAKqYTnNIn/23nlPjJD1jQy9JujWw SJM0er8Tu7e+v8uYpMv9R2dg4IL4gC/4/b7NQy/t4vq6K/OHK56NRYYmfq/H+COV 0c/yjRo8JDpQM/J3Be5ApDnCRcEeLob2RPSH0Hb6UGxes5vRoUlQU/+BtOa5ag5G jis0aCpasrqvCfpRVYNC4qooQPyM66heo1dUjaUbNQZAdsdKCc868+Dn/Ua6ad/L TpQzD8Ta7iuwUhnfFEaMlm7rooAxARnJ7mMhctDGhvJxgg9IseJ2J0s/18lK9gXK VxHpEJYjC+feLOkqk0u1iwENL2//garOaiZIIa2MQhuBwyFkc9iShIAtotw= -----END CERTIFICATE-----Generated at Sun Mar 1 22:19:24 2026 by rpki-client