$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6f85961-ca25-49f8-acb4-411306bae795.roa File: d6f85961-ca25-49f8-acb4-411306bae795.roa (raw, json) Hash identifier: Rqp8Dpy05wui9gVDVLcCwGqdrS5H/2NnUIyAqeoskFU= Subject key identifier: 69:16:12:E6:36:1E:54:1F:36:F5:48:4E:35:C1:1B:84:34:2A:5F:97 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 59BEFF5257E93F5FBF549712E42441659BABDB92 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6f85961-ca25-49f8-acb4-411306bae795.roa Signing time: Fri 06 Feb 2026 00:11:37 +0000 ROA not before: Fri 06 Feb 2026 00:11:37 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 65.9.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:be:ff:52:57:e9:3f:5f:bf:54:97:12:e4:24:41:65:9b:ab:db:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 6 00:11:37 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=8e3eced7dc15743f25cb18b9d32ab0e0053c8f4a8d7d7f41ece78ad5e20297a2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:79:31:8f:38:e2:44:c0:80:1e:aa:28:af:71: 8a:73:63:46:80:c7:23:32:4f:85:68:00:d1:b4:49: d7:80:d5:82:9e:ea:13:7e:5d:75:6f:5c:35:02:c0: b0:83:c2:10:3e:89:b2:22:05:44:fd:26:92:72:fd: 43:a7:69:00:cc:b3:85:66:1e:2e:1e:43:46:a3:f2: c7:1a:87:22:2e:81:c2:37:a8:b4:a1:9c:33:27:de: 6c:07:cb:d8:46:e9:5e:e2:3c:ec:5c:a5:d2:8c:70: db:68:0c:2f:ba:82:79:c7:d6:83:31:21:02:fe:d1: b5:66:a7:80:93:bc:e6:d7:bd:5e:87:c8:77:7e:27: 44:eb:c2:b3:bf:5d:0c:70:08:fa:ab:9c:e5:89:8c: 7d:66:31:81:09:34:8e:d2:cf:66:d6:74:fb:9d:90: 6d:9d:56:d7:04:9e:9e:89:e9:65:19:70:4a:60:d1: 35:fd:fa:a1:26:3c:bd:93:76:8a:de:c4:64:91:09: 8f:3c:de:05:38:a8:62:d5:c7:3f:cf:55:c0:d6:d3: 76:00:ed:3b:34:6e:36:72:79:74:76:fb:12:1a:76: bb:95:db:6f:39:13:94:03:c5:f0:6c:b6:31:ef:6c: ed:17:f3:14:4c:46:ea:c6:cb:1c:84:22:3e:d0:da: 0a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:16:12:E6:36:1E:54:1F:36:F5:48:4E:35:C1:1B:84:34:2A:5F:97 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6f85961-ca25-49f8-acb4-411306bae795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.9.176.0/21 Signature Algorithm: sha256WithRSAEncryption 6b:72:e9:b5:c2:b5:eb:59:71:bd:a2:74:d4:9c:27:98:bd:5f: 1a:5d:c1:8c:af:36:7e:c0:73:f9:94:cf:15:4f:82:52:27:f0: 23:ac:a4:00:57:05:2c:a7:93:95:a4:90:96:09:56:31:ee:dc: 91:95:27:0b:e7:46:2d:c7:45:79:74:6f:14:74:d0:9b:5f:ee: 98:44:87:f2:9f:02:28:ad:e0:62:24:96:ed:c2:66:0a:ac:79: f4:2d:ba:f8:a6:82:13:77:58:fc:79:8f:5c:37:a9:d0:57:6e: b4:8c:47:9b:6f:fc:2c:5c:fd:f3:a5:71:ff:4d:9b:56:9e:63: be:3d:f3:3f:49:63:0e:7e:cb:ae:7e:d6:b9:b3:07:9e:9a:76: 04:62:a6:00:4b:df:b1:40:6c:4a:56:04:07:66:67:cc:1e:dd: 95:fe:52:9f:0f:e7:74:1e:2e:50:a1:de:bd:26:23:85:87:25: 15:d0:05:4c:31:3e:2d:fd:f7:2a:01:79:d0:40:49:02:68:cf: 16:4f:ba:e4:d5:3e:e6:c1:9d:85:4b:72:64:34:2b:ed:da:f6: a5:5c:77:35:d8:79:aa:76:79:c9:bc:a2:e6:1a:2e:dd:76:56: 34:7b:cf:01:6a:c2:a2:f4:29:b5:53:9a:32:bf:a5:b4:64:54: 91:39:84:18 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWb7/UlfpP1+/VJcS5CRBZZur25IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA2MDAxMTM3WhcNMjYwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTNlY2VkN2RjMTU3NDNmMjVjYjE4YjlkMzJhYjBlMDA1 M2M4ZjRhOGQ3ZDdmNDFlY2U3OGFkNWUyMDI5N2EyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCteTGPOOJEwIAeqiivcYpzY0aAxyMyT4VoANG0SdeA1YKe 6hN+XXVvXDUCwLCDwhA+ibIiBUT9JpJy/UOnaQDMs4VmHi4eQ0aj8scahyIugcI3 qLShnDMn3mwHy9hG6V7iPOxcpdKMcNtoDC+6gnnH1oMxIQL+0bVmp4CTvObXvV6H yHd+J0TrwrO/XQxwCPqrnOWJjH1mMYEJNI7Sz2bWdPudkG2dVtcEnp6J6WUZcEpg 0TX9+qEmPL2TdorexGSRCY883gU4qGLVxz/PVcDW03YA7Ts0bjZyeXR2+xIadruV 2285E5QDxfBstjHvbO0X8xRMRurGyxyEIj7Q2gqVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaRYS5jYeVB829UhONcEbhDQqX5cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q2Zjg1OTYxLWNhMjUtNDlmOC1hY2I0LTQxMTMwNmJhZTc5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANBCbAwDQYJKoZIhvcNAQELBQADggEBAGty6bXCtetZcb2idNScJ5i9Xxpd wYyvNn7Ac/mUzxVPglIn8COspABXBSynk5WkkJYJVjHu3JGVJwvnRi3HRXl0bxR0 0Jtf7phEh/KfAiit4GIklu3CZgqsefQtuvimghN3WPx5j1w3qdBXbrSMR5tv/Cxc /fOlcf9Nm1aeY7498z9JYw5+y65+1rmzB56adgRipgBL37FAbEpWBAdmZ8we3ZX+ Up8P53QeLlCh3r0mI4WHJRXQBUwxPi399yoBedBASQJozxZPuuTVPubBnYVLcmQ0 K+3a9qVcdzXYeap2ecm8ouYaLt12VjR7zwFqwqL0KbVTmjK/pbRkVJE5hBg= -----END CERTIFICATE-----Generated at Mon Mar 2 06:37:23 2026 by rpki-client