$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dad3826f-c445-41df-ba08-d08040b8b288.roa File: dad3826f-c445-41df-ba08-d08040b8b288.roa (raw, json) Hash identifier: s9b4PFUfjP9x+6vaw/d4oHpF9nlnNCzbyWvV27AvuJI= Subject key identifier: 5D:62:CF:3B:97:D0:42:3E:02:8C:81:60:8E:86:25:CC:D0:23:D1:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 253916D3871099A130E35AC204BBFE8DE0A4898D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dad3826f-c445-41df-ba08-d08040b8b288.roa Signing time: Fri 06 Feb 2026 00:11:03 +0000 ROA not before: Fri 06 Feb 2026 00:11:03 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.155.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:39:16:d3:87:10:99:a1:30:e3:5a:c2:04:bb:fe:8d:e0:a4:89:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 6 00:11:03 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=09545850af8ff177fc08c940d59cdf9f74783dc8f0af664cfc5d83fc2e253d17, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:14:2b:85:59:78:ff:c7:e3:57:56:24:0d:d8: fc:fd:b9:e8:74:97:05:83:aa:5e:03:cb:70:c6:7e: 13:ec:9c:9a:ee:98:0b:63:1b:22:17:21:49:1a:91: f5:2a:d6:e0:06:14:96:c5:39:7e:14:df:9b:bd:66: 64:f7:b9:77:16:e6:08:c8:ce:bb:b1:ec:38:30:00: 6a:5a:45:56:f0:a9:12:fd:2b:b7:8e:3a:4e:f0:07: b2:04:be:56:54:82:ba:5a:90:0d:aa:f1:b0:f3:62: 24:1a:be:48:dd:db:6f:d0:cc:4e:84:99:15:a7:eb: ad:c8:aa:20:e3:50:7c:e5:ec:05:b3:5c:84:e4:a2: 28:33:4c:d1:b3:bf:02:22:42:9e:30:d9:3c:1c:61: 51:bc:51:0b:f0:c3:40:57:3d:c3:a9:9f:03:21:de: 94:14:f7:f8:f0:6b:44:11:cf:29:af:c5:64:12:14: 74:2d:28:e5:1d:f6:9b:3b:c7:67:8e:6f:8e:b1:8f: a2:92:82:e6:26:24:1a:dd:6a:d7:3a:f8:02:49:da: 6e:ee:d6:97:1d:6d:dd:b1:2c:d9:fa:75:69:15:a1: b8:29:8d:38:d7:f2:8a:1e:df:2e:42:15:e7:f7:ca: 08:b8:69:a5:2a:34:e9:7c:eb:46:dc:02:61:e1:63: 4f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:62:CF:3B:97:D0:42:3E:02:8C:81:60:8E:86:25:CC:D0:23:D1:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dad3826f-c445-41df-ba08-d08040b8b288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.155.19.0/24 Signature Algorithm: sha256WithRSAEncryption 44:68:b2:3b:69:80:a9:4d:b0:b1:18:19:64:29:d0:3b:04:0c: d3:9c:88:f5:fe:37:a1:97:fa:e0:1c:9f:c9:a8:e5:14:c4:45: c4:c0:d9:ad:c8:3a:ad:76:d8:41:69:aa:29:9f:01:02:38:1a: f9:54:1e:3c:a1:ba:45:e3:16:ea:be:de:a5:ab:37:05:40:90: 2a:d9:61:1d:05:52:fc:26:03:87:68:c0:94:91:cc:c7:15:d8: 9e:d7:1c:12:ff:46:40:3c:5f:c8:15:24:f3:55:cc:aa:3b:8a: ae:79:30:a0:b3:4f:9c:22:b1:13:f1:f1:7f:8f:4f:ae:24:ed: 89:b1:6d:e9:43:f5:ad:aa:bc:84:12:fa:8c:a1:8f:43:1c:82: 6d:66:44:ca:2d:58:a7:0d:0a:f6:b3:6a:ee:7b:83:2f:11:df: 43:9e:09:f4:b0:48:bb:52:a7:46:ab:fd:22:04:3a:c9:be:77: 52:36:5a:4c:34:dd:e8:a1:76:0a:1f:ce:a5:bf:c4:8e:6d:e6: 66:05:0f:e2:a1:a8:0a:86:ef:90:d5:4f:44:81:aa:b7:48:dc: 7b:5d:b5:38:fc:f6:39:1e:45:94:3d:00:13:db:e3:fe:cf:ea: 46:9e:b6:53:7f:0f:19:dc:c3:d7:86:80:ed:3d:c5:20:e3:9f: bb:c3:64:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJTkW04cQmaEw41rCBLv+jeCkiY0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA2MDAxMTAzWhcNMjYwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwOTU0NTg1MGFmOGZmMTc3ZmMwOGM5NDBkNTljZGY5Zjc0 NzgzZGM4ZjBhZjY2NGNmYzVkODNmYzJlMjUzZDE3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKFCuFWXj/x+NXViQN2Pz9ueh0lwWDql4Dy3DGfhPsnJru mAtjGyIXIUkakfUq1uAGFJbFOX4U35u9ZmT3uXcW5gjIzrux7DgwAGpaRVbwqRL9 K7eOOk7wB7IEvlZUgrpakA2q8bDzYiQavkjd22/QzE6EmRWn663IqiDjUHzl7AWz XITkoigzTNGzvwIiQp4w2TwcYVG8UQvww0BXPcOpnwMh3pQU9/jwa0QRzymvxWQS FHQtKOUd9ps7x2eOb46xj6KSguYmJBrdatc6+AJJ2m7u1pcdbd2xLNn6dWkVobgp jTjX8ooe3y5CFef3ygi4aaUqNOl860bcAmHhY0/pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXWLPO5fQQj4CjIFgjoYlzNAj0Q4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RhZDM4MjZmLWM0NDUtNDFkZi1iYTA4LWQwODA0MGI4YjI4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA4mxMwDQYJKoZIhvcNAQELBQADggEBAERosjtpgKlNsLEYGWQp0DsEDNOc iPX+N6GX+uAcn8mo5RTERcTA2a3IOq122EFpqimfAQI4GvlUHjyhukXjFuq+3qWr NwVAkCrZYR0FUvwmA4dowJSRzMcV2J7XHBL/RkA8X8gVJPNVzKo7iq55MKCzT5wi sRPx8X+PT64k7YmxbelD9a2qvIQS+oyhj0Mcgm1mRMotWKcNCvazau57gy8R30Oe CfSwSLtSp0ar/SIEOsm+d1I2Wkw03eihdgofzqW/xI5t5mYFD+KhqAqG75DVT0SB qrdI3HtdtTj89jkeRZQ9ABPb4/7P6kaetlN/Dxncw9eGgO09xSDjn7vDZAY= -----END CERTIFICATE-----Generated at Mon Mar 2 04:55:10 2026 by rpki-client