$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d259d0cd-bc53-44e8-84f8-a0a96e06af26.roa File: d259d0cd-bc53-44e8-84f8-a0a96e06af26.roa (raw, json) Hash identifier: tI2t7FNAB9HiApMFUECedh1Kw5Hkvu0/+LiPkFCxbH4= Subject key identifier: B2:82:43:04:BF:EE:71:85:21:14:A3:82:81:BB:D2:B5:1D:56:69:0C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0876226CEE1BD9D2A25E2C396993ACCE85377A00 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d259d0cd-bc53-44e8-84f8-a0a96e06af26.roa Signing time: Mon 23 Feb 2026 00:00:06 +0000 ROA not before: Mon 23 Feb 2026 00:00:06 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 209.92.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:76:22:6c:ee:1b:d9:d2:a2:5e:2c:39:69:93:ac:ce:85:37:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 23 00:00:06 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=62a8b08d4c1df675f44154170ae89fd1b9a31ce86cb9894b13bc3b932c01c2b5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0c:04:b9:80:27:73:69:28:e3:33:92:1c:2c: 24:32:b9:dd:5a:ad:04:77:b3:f3:da:cc:9d:6d:94: bb:fb:3c:e0:21:01:d9:af:7b:0a:bf:4c:7f:f4:0d: 50:28:04:39:ce:83:93:57:2b:15:d8:d1:b8:e1:dc: 7a:5a:93:ce:63:fd:37:d4:5c:8a:91:d6:5c:89:a6: 93:e0:54:54:06:c9:9f:c6:36:0e:cb:9a:33:9c:78: 36:ce:2e:5f:0e:1f:7a:32:d0:9b:d8:44:3f:cb:d5: 55:7b:c2:90:24:5b:de:8d:95:96:1d:40:4e:35:8f: 40:8e:82:7d:8e:e7:b9:e3:28:97:d6:6e:48:fd:16: ac:f0:62:97:cf:1d:06:17:24:fc:53:d3:ca:87:60: ab:76:35:05:b3:b0:03:35:24:ae:66:ce:03:4c:bd: 6e:5e:8a:04:a9:1a:20:3d:a5:e1:1b:bd:fc:79:f3: e1:85:23:c2:f4:db:a5:77:69:7f:1b:5a:e0:2f:ea: e8:e8:91:c9:b4:03:04:e0:cb:12:f8:d0:b7:fb:92: 0e:7f:06:06:dc:bf:27:b1:39:23:f9:6a:75:2d:fb: c7:bf:26:62:df:bf:03:75:82:07:14:09:c3:ba:54: c9:a6:32:56:60:17:d2:53:c4:53:77:67:e6:10:31: 69:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:82:43:04:BF:EE:71:85:21:14:A3:82:81:BB:D2:B5:1D:56:69:0C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d259d0cd-bc53-44e8-84f8-a0a96e06af26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.92.76.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:38:96:0c:4c:83:61:4c:d3:0e:2c:3f:4f:ab:80:e4:4a:6b: f4:ca:3f:1f:f1:ea:e1:3b:1e:47:20:51:a8:a9:b5:7f:ac:2e: 5e:68:3f:ef:36:02:13:c1:ab:2a:e1:38:4a:51:67:a8:ca:21: 70:c3:35:28:c8:a6:43:de:9c:3a:45:7c:c5:ce:78:32:bc:5d: 00:77:8a:7f:25:06:04:db:0a:da:ba:46:e9:61:1b:1c:f8:c8: 0e:84:7e:a3:78:24:f5:eb:25:94:28:b6:8e:61:c8:3d:8d:e2: 21:b5:08:0d:c5:3e:99:4a:6d:46:97:63:fc:d1:f4:26:d3:5f: 5b:ed:db:c7:b2:06:80:82:af:4f:57:41:ce:e1:47:84:d6:53: 05:d5:c9:69:69:57:93:81:a7:37:d5:3c:14:25:1f:72:0a:a0: 18:c9:62:3b:11:1c:90:41:14:47:95:3e:e3:b7:4b:5d:65:ce: e9:e5:f1:a8:3a:5b:d7:42:5d:8b:1c:0a:29:a6:35:5c:89:77: 1b:b1:69:6a:ac:08:01:cf:29:eb:b5:6a:20:38:f4:60:fa:cf: 43:8d:b5:2b:73:b7:b7:a4:87:a8:ac:d6:7b:5e:ba:e0:40:1a: 97:18:a1:2a:06:54:9f:53:b6:d9:0a:a1:85:5a:c9:cd:7e:ed: 35:18:36:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCHYibO4b2dKiXiw5aZOszoU3egAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIzMDAwMDA2WhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MmE4YjA4ZDRjMWRmNjc1ZjQ0MTU0MTcwYWU4OWZkMWI5 YTMxY2U4NmNiOTg5NGIxM2JjM2I5MzJjMDFjMmI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6DAS5gCdzaSjjM5IcLCQyud1arQR3s/PazJ1tlLv7POAh Admvewq/TH/0DVAoBDnOg5NXKxXY0bjh3Hpak85j/TfUXIqR1lyJppPgVFQGyZ/G Ng7LmjOceDbOLl8OH3oy0JvYRD/L1VV7wpAkW96NlZYdQE41j0COgn2O57njKJfW bkj9FqzwYpfPHQYXJPxT08qHYKt2NQWzsAM1JK5mzgNMvW5eigSpGiA9peEbvfx5 8+GFI8L026V3aX8bWuAv6ujokcm0AwTgyxL40Lf7kg5/BgbcvyexOSP5anUt+8e/ JmLfvwN1ggcUCcO6VMmmMlZgF9JTxFN3Z+YQMWmlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsoJDBL/ucYUhFKOCgbvStR1WaQwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QyNTlkMGNkLWJjNTMtNDRlOC04NGY4LWEwYTk2ZTA2YWYyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHRXEwwDQYJKoZIhvcNAQELBQADggEBAFs4lgxMg2FM0w4sP0+rgORKa/TK Px/x6uE7HkcgUaiptX+sLl5oP+82AhPBqyrhOEpRZ6jKIXDDNSjIpkPenDpFfMXO eDK8XQB3in8lBgTbCtq6RulhGxz4yA6EfqN4JPXrJZQoto5hyD2N4iG1CA3FPplK bUaXY/zR9CbTX1vt28eyBoCCr09XQc7hR4TWUwXVyWlpV5OBpzfVPBQlH3IKoBjJ YjsRHJBBFEeVPuO3S11lzunl8ag6W9dCXYscCimmNVyJdxuxaWqsCAHPKeu1aiA4 9GD6z0ONtStzt7ekh6is1nteuuBAGpcYoSoGVJ9TttkKoYVayc1+7TUYNgg= -----END CERTIFICATE-----Generated at Mon Mar 2 03:05:24 2026 by rpki-client