$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d62262e0-df75-4dc8-9ed2-530f6b7cd952.roa File: d62262e0-df75-4dc8-9ed2-530f6b7cd952.roa (raw, json) Hash identifier: wZzYo3CgSBl0GFhEBxBFpJ4u4m7FqGYOB/E0ft5RYl0= Subject key identifier: 30:FE:2B:08:61:80:0D:73:86:C3:E7:34:FE:91:8C:9A:B0:13:96:45 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E915D9A60825DEACA9DCD8703380405F42095 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d62262e0-df75-4dc8-9ed2-530f6b7cd952.roa Signing time: Sat 07 Feb 2026 00:20:05 +0000 ROA not before: Sat 07 Feb 2026 00:20:05 +0000 ROA not after: Fri 08 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 144.168.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:91:5d:9a:60:82:5d:ea:ca:9d:cd:87:03:38:04:05:f4:20:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 7 00:20:05 2026 GMT Not After : May 8 23:59:59 2026 GMT Subject: serialNumber=6dba58fb13e4c7761e6f9adf53ce90210f6e2b63d46aed75377719495df63371, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:9e:37:58:9e:42:9c:55:39:9a:a3:78:63:ed: bb:cc:e1:2f:12:cc:10:e0:8d:f9:d4:00:e9:e0:bc: f4:b7:52:98:e2:fb:5a:25:14:42:c4:ff:a8:67:9d: 93:45:db:86:2f:5a:c4:57:83:31:fa:49:54:3c:84: 13:38:dd:2a:00:24:68:8c:ff:59:c8:1b:10:da:2c: 00:3f:e3:1f:1b:6e:49:d0:4d:13:07:ca:b8:45:79: 1a:37:14:3f:fd:b4:a9:20:8d:56:6e:3f:1a:4b:87: 08:f3:95:95:fa:f7:88:9f:0b:3d:04:ce:65:9f:66: 6d:7e:49:7a:1e:39:60:8b:41:eb:48:31:ee:3f:36: e8:c8:ac:e0:2f:0a:7c:e9:5a:2e:13:4d:5b:8a:6e: 27:b5:0e:3e:ca:a4:d9:7e:60:e3:73:e2:95:90:67: 81:40:04:e6:fc:b7:21:fc:01:fe:2b:b5:68:2c:80: 90:55:c1:e6:d1:d3:50:74:f3:03:81:f1:37:ab:8d: eb:db:0d:d5:f4:10:e6:d1:67:24:b2:d2:66:cf:f5: 0b:b7:39:a4:d7:32:dd:27:29:21:04:10:f2:e4:48: e1:95:37:71:cc:3f:29:68:fe:48:fd:74:c3:37:00: e2:6c:c3:4b:df:d9:15:4d:bc:54:e7:81:cf:c4:c2: fb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FE:2B:08:61:80:0D:73:86:C3:E7:34:FE:91:8C:9A:B0:13:96:45 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d62262e0-df75-4dc8-9ed2-530f6b7cd952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.168.128.0/17 Signature Algorithm: sha256WithRSAEncryption 95:65:1b:82:29:d9:dc:50:75:6e:e1:eb:09:bb:ed:6e:ae:b9: c9:22:0e:52:86:07:e1:cd:24:b7:13:29:97:bd:ba:6b:ca:d6: ac:fe:f9:a4:f5:5a:78:d4:dd:5a:4f:7b:bb:17:19:9b:41:24: 6d:6e:96:31:56:2b:bb:31:df:eb:93:c4:43:57:68:4f:55:f5: 36:bc:74:17:1e:ac:c7:6e:d9:ea:3a:43:a8:da:50:2b:69:bc: fb:47:b7:be:6a:d6:eb:f6:20:0b:3e:31:12:34:90:7a:30:9f: 75:7d:b2:61:3c:e7:2e:69:d2:1e:a5:9a:8d:12:b0:89:9d:8d: 56:51:86:94:30:d1:78:48:5c:51:f5:5a:59:35:d6:ca:66:f2: 4c:44:a8:17:a3:03:b1:62:ac:fe:cd:e6:b2:9d:dc:d0:08:d4: 21:76:b6:d5:bc:6e:28:ce:40:d9:cb:67:dd:b9:bc:df:7f:f5: 4c:3d:ff:9c:1c:5f:88:56:06:c2:1a:fe:f0:72:a1:e7:c5:90: 37:a5:e7:23:9c:99:78:48:07:ec:49:f2:e4:39:2c:0f:ea:ba: eb:64:4e:85:78:9f:3f:fe:b5:e5:33:a2:5c:5b:e1:9c:04:32: 5d:2b:2a:f4:99:fb:d2:e0:b3:9e:e2:1e:69:a5:e0:c3:dc:4c: 8e:c0:d8:9e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITLpFdmmCCXerKnc2HAzgEBfQglTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjAyMDcwMDIwMDVaFw0yNjA1MDgyMzU5NTla MHoxSTBHBgNVBAUTQDZkYmE1OGZiMTNlNGM3NzYxZTZmOWFkZjUzY2U5MDIxMGY2 ZTJiNjNkNDZhZWQ3NTM3NzcxOTQ5NWRmNjMzNzExLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAO6eN1ieQpxVOZqjeGPtu8zhLxLMEOCN+dQA6eC89LdSmOL7 WiUUQsT/qGedk0Xbhi9axFeDMfpJVDyEEzjdKgAkaIz/WcgbENosAD/jHxtuSdBN EwfKuEV5GjcUP/20qSCNVm4/GkuHCPOVlfr3iJ8LPQTOZZ9mbX5Jeh45YItB60gx 7j826Mis4C8KfOlaLhNNW4puJ7UOPsqk2X5g43PilZBngUAE5vy3IfwB/iu1aCyA kFXB5tHTUHTzA4HxN6uN69sN1fQQ5tFnJLLSZs/1C7c5pNcy3ScpIQQQ8uRI4ZU3 ccw/KWj+SP10wzcA4mzDS9/ZFU28VOeBz8TC+w8CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQw/isIYYANc4bD5zT+kYyasBOWRTAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvZDYyMjYyZTAtZGY3NS00ZGM4LTllZDItNTMwZjZiN2NkOTUyLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEB5CogDANBgkqhkiG9w0BAQsFAAOCAQEAlWUbginZ3FB1buHrCbvtbq65ySIO UoYH4c0ktxMpl726a8rWrP75pPVaeNTdWk97uxcZm0EkbW6WMVYruzHf65PEQ1do T1X1Nrx0Fx6sx27Z6jpDqNpQK2m8+0e3vmrW6/YgCz4xEjSQejCfdX2yYTznLmnS HqWajRKwiZ2NVlGGlDDReEhcUfVaWTXWymbyTESoF6MDsWKs/s3msp3c0AjUIXa2 1bxuKM5A2ctn3bm833/1TD3/nBxfiFYGwhr+8HKh58WQN6XnI5yZeEgH7Eny5Dks D+q662ROhXifP/615TOiXFvhnAQyXSsq9Jn70uCznuIeaaXgw9xMjsDYng== -----END CERTIFICATE-----Generated at Mon Mar 2 04:54:54 2026 by rpki-client