$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8752aa3-1736-46a6-af08-1ff1a107c6fb.roa File: d8752aa3-1736-46a6-af08-1ff1a107c6fb.roa (raw, json) Hash identifier: Mt43hnm+OjiWJ/YLr62zP1OjP4T/m0wXGaHfE1t8a9Q= Subject key identifier: 56:D9:24:18:96:D6:65:70:D6:13:78:7A:13:7B:8E:E8:E0:35:93:05 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 67E61B2FF096512356FBD5543CEA5ECB2D8A91F2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8752aa3-1736-46a6-af08-1ff1a107c6fb.roa Signing time: Wed 18 Feb 2026 00:21:03 +0000 ROA not before: Wed 18 Feb 2026 00:21:03 +0000 ROA not after: Tue 19 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.190.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e6:1b:2f:f0:96:51:23:56:fb:d5:54:3c:ea:5e:cb:2d:8a:91:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 18 00:21:03 2026 GMT Not After : May 19 23:59:59 2026 GMT Subject: serialNumber=c853dbe4f7b31faa56e23890650b9f91852d58d78cef704d4c57729e61155c3c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f8:20:d5:14:35:c9:df:4c:83:2b:86:45:09: 52:74:d4:17:d5:dc:dc:65:75:a1:a7:69:3c:d7:1f: b6:91:38:e3:1f:8d:47:ba:09:4b:4b:6d:22:af:49: 10:5d:14:e7:5e:46:ab:a8:e5:8a:83:eb:4b:ec:ea: 71:a4:fe:ed:08:cb:2c:a5:c7:6b:b8:ba:e7:31:01: 85:53:70:01:95:8d:52:a1:bd:8a:67:83:20:56:22: 11:7d:9b:0c:bd:f9:38:3b:4c:e6:6e:4c:26:e3:46: 8b:40:96:cf:cd:ab:09:b4:38:51:25:65:35:8f:34: 78:cd:4f:dc:8c:1a:7b:c5:4f:29:f4:31:9a:c7:1e: fe:7d:d6:60:bd:18:5d:20:a5:c2:f3:fc:4e:f2:b2: 58:46:4c:84:79:f3:62:f3:3d:db:91:5b:cd:9a:92: 61:1a:03:fe:64:a7:bc:31:72:3a:2d:b9:77:d9:08: ea:26:87:1d:cf:b1:3b:b3:21:a4:2f:49:59:7a:31: 0d:a9:54:56:50:2b:8f:35:55:94:b2:3a:a7:2f:a0: 4c:14:ee:42:ce:bc:92:dd:bd:24:c4:f5:8b:ab:0d: f0:1b:5b:46:77:4b:e6:05:47:59:08:c7:a9:7a:00: c7:99:9d:ca:6e:d1:4d:3c:21:58:dc:e7:18:0f:34: 61:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D9:24:18:96:D6:65:70:D6:13:78:7A:13:7B:8E:E8:E0:35:93:05 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8752aa3-1736-46a6-af08-1ff1a107c6fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.190.84.0/22 Signature Algorithm: sha256WithRSAEncryption b8:b0:4f:47:c5:13:2f:05:7a:b4:00:e5:88:4c:7e:3e:c9:d4: fe:5c:7d:fe:b6:97:df:64:1e:d4:73:e3:4f:6c:1d:00:ee:bf: 5b:26:06:8e:4e:b8:86:96:08:69:b8:cc:92:ce:95:c4:8f:b7: a8:f8:97:3c:f7:ff:fd:6a:e1:65:5e:d5:6d:e0:db:1b:2d:46: 86:ad:82:4f:15:22:8e:a8:56:05:fa:5d:73:e6:b2:ca:88:3d: e3:c0:b1:de:e7:29:91:4a:a2:d8:63:f1:fc:be:38:06:b5:d2: 9b:d7:36:4d:cb:e6:9c:9b:07:76:97:71:cf:79:0b:7d:5f:76: 4e:5c:d5:8d:26:d3:fd:e9:d1:f7:87:af:3f:a3:2d:28:c8:86: 3e:24:e5:f2:c4:00:d0:ac:5b:63:44:6a:e1:02:d9:69:aa:ad: f8:97:c7:7b:7b:66:f8:7d:2b:73:29:57:6a:6b:74:c7:59:b6: 43:63:7b:53:32:42:db:ba:54:e4:27:bd:3f:1b:a5:87:06:6d: c0:87:ab:5a:e2:0c:23:55:fa:cf:84:7a:3b:00:3a:19:31:36: b1:83:aa:3e:d6:a5:11:2e:93:a9:29:fd:97:b5:9b:6d:15:26: 0f:7b:b1:22:e9:ba:a6:ee:67:2e:aa:54:24:da:cf:b1:8c:70: f9:a4:fe:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ+YbL/CWUSNW+9VUPOpeyy2KkfIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE4MDAyMTAzWhcNMjYwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjODUzZGJlNGY3YjMxZmFhNTZlMjM4OTA2NTBiOWY5MTg1 MmQ1OGQ3OGNlZjcwNGQ0YzU3NzI5ZTYxMTU1YzNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDO+CDVFDXJ30yDK4ZFCVJ01BfV3NxldaGnaTzXH7aROOMf jUe6CUtLbSKvSRBdFOdeRquo5YqD60vs6nGk/u0Iyyylx2u4uucxAYVTcAGVjVKh vYpngyBWIhF9mwy9+Tg7TOZuTCbjRotAls/Nqwm0OFElZTWPNHjNT9yMGnvFTyn0 MZrHHv591mC9GF0gpcLz/E7yslhGTIR582LzPduRW82akmEaA/5kp7wxcjotuXfZ COomhx3PsTuzIaQvSVl6MQ2pVFZQK481VZSyOqcvoEwU7kLOvJLdvSTE9YurDfAb W0Z3S+YFR1kIx6l6AMeZncpu0U08IVjc5xgPNGFBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVtkkGJbWZXDWE3h6E3uO6OA1kwUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4NzUyYWEzLTE3MzYtNDZhNi1hZjA4LTFmZjFhMTA3YzZmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJAvlQwDQYJKoZIhvcNAQELBQADggEBALiwT0fFEy8FerQA5YhMfj7J1P5c ff62l99kHtRz409sHQDuv1smBo5OuIaWCGm4zJLOlcSPt6j4lzz3//1q4WVe1W3g 2xstRoatgk8VIo6oVgX6XXPmssqIPePAsd7nKZFKothj8fy+OAa10pvXNk3L5pyb B3aXcc95C31fdk5c1Y0m0/3p0feHrz+jLSjIhj4k5fLEANCsW2NEauEC2WmqrfiX x3t7Zvh9K3MpV2prdMdZtkNje1MyQtu6VOQnvT8bpYcGbcCHq1riDCNV+s+EejsA OhkxNrGDqj7WpREuk6kp/Ze1m20VJg97sSLpuqbuZy6qVCTaz7GMcPmk/o4= -----END CERTIFICATE-----Generated at Mon Mar 2 01:57:56 2026 by rpki-client