$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4f55687-13a4-4d88-adbb-fd74132e68aa.roa File: d4f55687-13a4-4d88-adbb-fd74132e68aa.roa (raw, json) Hash identifier: ns//tL9oXr4rcnYHumpGcmA2dePFL8oJ7opYtd6+bt8= Subject key identifier: 47:C3:75:D9:E6:B4:EC:23:B9:4D:AD:60:5F:D8:1B:B4:B5:91:28:C9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5985081D9E0D992817DBEEE97BFAB0F5FA76D3F8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4f55687-13a4-4d88-adbb-fd74132e68aa.roa Signing time: Sat 14 Feb 2026 00:40:07 +0000 ROA not before: Sat 14 Feb 2026 00:40:07 +0000 ROA not after: Fri 15 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.169.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:85:08:1d:9e:0d:99:28:17:db:ee:e9:7b:fa:b0:f5:fa:76:d3:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 14 00:40:07 2026 GMT Not After : May 15 23:59:59 2026 GMT Subject: serialNumber=38672263e066e56f72bf611de909261293a4795378d91456d6910d90ca9ffa77, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:de:f3:a1:34:52:d1:87:41:b1:8c:3c:70: b1:71:b4:8c:2e:4e:4b:5c:03:1f:ec:9f:5a:d6:85: 5e:b4:66:15:3a:4d:d0:b9:d3:19:d2:a6:b3:e2:bd: 98:dc:6a:9c:41:b4:2b:d3:cd:70:b7:2e:70:e1:ab: 21:23:1d:99:bf:ca:c4:b5:fa:c1:2e:11:95:fc:08: 5b:6e:fa:bf:f4:95:14:cd:aa:64:54:84:06:70:c1: 58:5e:3c:21:72:04:bc:73:06:ce:48:4f:63:49:56: 56:16:67:a3:b2:11:7c:8c:86:74:0f:93:ed:3a:60: a8:45:43:01:e9:cb:3a:ef:e2:2b:50:d7:84:ab:bc: 1b:23:12:97:ff:a5:4a:ea:cc:f0:d9:11:24:68:e4: 28:c8:37:70:b2:f4:40:02:88:36:9b:ef:31:14:35: 07:fd:28:61:39:8d:e7:c8:e6:42:88:ce:87:8d:84: 29:f7:b9:56:60:8a:38:81:f5:be:95:6c:e7:7b:22: 3a:bf:1a:7f:be:91:b7:4e:93:60:af:da:85:60:be: 2b:1b:43:f1:db:60:d3:dd:f4:3c:ad:f2:81:06:86: 9e:ed:9a:18:52:f0:3e:7a:71:fd:51:54:fc:20:de: ae:18:3e:d9:ab:5c:e7:64:e5:b5:4c:49:17:7c:dc: 49:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C3:75:D9:E6:B4:EC:23:B9:4D:AD:60:5F:D8:1B:B4:B5:91:28:C9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4f55687-13a4-4d88-adbb-fd74132e68aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption b8:67:4f:e6:61:19:00:81:27:88:5d:75:88:6b:48:16:25:d1: 61:7b:c6:e9:1a:a5:ea:67:f5:44:01:89:a5:f9:c0:ee:22:eb: 0a:a0:a5:48:80:9e:f3:04:fb:9c:a2:2a:3a:10:88:2b:5a:53: 67:fa:e5:42:5e:40:6e:1e:96:ab:a5:a5:79:ce:ff:ad:2f:c2: f2:eb:20:a7:cb:ff:c0:9f:d3:3b:6f:52:46:f0:e5:3e:6a:6d: f7:0e:34:90:1c:7b:5c:43:55:2a:82:8d:77:bc:ab:71:a6:41: 98:ef:95:ad:0d:14:cc:1e:1e:13:18:7f:37:d6:36:28:da:61: b8:eb:f8:ef:21:5f:c8:6e:55:0e:dc:0a:cb:90:dc:1a:17:ac: f4:f2:02:bd:6b:d0:24:37:25:a8:2f:3e:2d:f8:1d:d2:ae:1e: fd:68:c1:28:82:c6:20:2f:75:1b:67:67:88:60:39:3a:3e:b1: 48:e3:46:21:ac:a3:a5:8d:a5:3b:71:c5:28:25:bf:9a:51:f1: e9:51:a0:15:d6:55:02:6c:2e:70:ea:8e:90:28:f2:5a:35:06: 68:ba:ac:68:0a:fa:2b:6d:ff:d6:87:82:4b:64:94:b4:42:99: ef:07:ab:6a:a1:9f:cf:cf:3d:32:5c:8d:59:83:cf:c6:46:5d: c9:8e:14:a6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWYUIHZ4NmSgX2+7pe/qw9fp20/gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE0MDA0MDA3WhcNMjYwNTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzODY3MjI2M2UwNjZlNTZmNzJiZjYxMWRlOTA5MjYxMjkz YTQ3OTUzNzhkOTE0NTZkNjkxMGQ5MGNhOWZmYTc3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0KN7zoTRS0YdBsYw8cLFxtIwuTktcAx/sn1rWhV60ZhU6 TdC50xnSprPivZjcapxBtCvTzXC3LnDhqyEjHZm/ysS1+sEuEZX8CFtu+r/0lRTN qmRUhAZwwVhePCFyBLxzBs5IT2NJVlYWZ6OyEXyMhnQPk+06YKhFQwHpyzrv4itQ 14SrvBsjEpf/pUrqzPDZESRo5CjIN3Cy9EACiDab7zEUNQf9KGE5jefI5kKIzoeN hCn3uVZgijiB9b6VbOd7Ijq/Gn++kbdOk2Cv2oVgvisbQ/HbYNPd9Dyt8oEGhp7t mhhS8D56cf1RVPwg3q4YPtmrXOdk5bVMSRd83En/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUR8N12ea07CO5Ta1gX9gbtLWRKMkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q0ZjU1Njg3LTEzYTQtNGQ4OC1hZGJiLWZkNzQxMzJlNjhhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4qTANBgkqhkiG9w0BAQsFAAOCAQEAuGdP5mEZAIEniF11iGtIFiXRYXvG 6Rql6mf1RAGJpfnA7iLrCqClSICe8wT7nKIqOhCIK1pTZ/rlQl5Abh6Wq6Wlec7/ rS/C8usgp8v/wJ/TO29SRvDlPmpt9w40kBx7XENVKoKNd7yrcaZBmO+VrQ0UzB4e Exh/N9Y2KNphuOv47yFfyG5VDtwKy5DcGhes9PICvWvQJDclqC8+Lfgd0q4e/WjB KILGIC91G2dniGA5Oj6xSONGIayjpY2lO3HFKCW/mlHx6VGgFdZVAmwucOqOkCjy WjUGaLqsaAr6K23/1oeCS2SUtEKZ7weraqGfz889MlyNWYPPxkZdyY4Upg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:18:44 2026 by rpki-client