$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcd11cce-f1d8-4dbf-9a1a-edb0b2784d8d.roa File: dcd11cce-f1d8-4dbf-9a1a-edb0b2784d8d.roa (raw, json) Hash identifier: EuMqsH3fMLT14WN8c/f6S+iubJo3RhmZju20JD9qk0s= Subject key identifier: 87:54:75:EA:E9:11:25:77:5B:13:00:70:9F:BA:AB:11:CC:90:37:AD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 700FB85EA6FF0CC6CA321352815B6573BD1AB10A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcd11cce-f1d8-4dbf-9a1a-edb0b2784d8d.roa Signing time: Sat 21 Feb 2026 00:41:58 +0000 ROA not before: Sat 21 Feb 2026 00:41:58 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:0f:b8:5e:a6:ff:0c:c6:ca:32:13:52:81:5b:65:73:bd:1a:b1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:41:58 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=4352471a2b1115ca93fea219243d9c126d3f81a67fba0e96af1b09fe3ab7fac3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1e:77:42:be:ed:70:26:1b:dd:19:b8:dc:ad: 0b:ed:d0:fe:d8:66:ff:73:52:e5:80:29:48:0c:31: ca:22:e4:5a:1f:c5:e6:1a:2d:93:b7:cb:aa:91:82: 24:27:72:ce:fa:f3:17:b7:5a:d8:3e:8e:d8:7e:4e: 7e:61:b5:a3:15:e6:43:9f:49:c6:38:40:dc:36:3c: 47:3c:be:32:9b:d4:c1:ad:f2:ef:8c:9d:38:37:fa: dc:14:8f:2e:41:37:3d:c9:04:15:c9:de:d6:2c:36: 00:4b:6e:02:fc:42:7b:29:7b:74:b6:ea:97:b6:09: 85:0f:d8:22:d4:12:b0:bc:a6:1c:65:95:e3:5d:44: 73:12:ea:44:9d:b0:23:0e:94:24:11:78:22:d2:1f: ac:f2:39:dc:f7:ac:fa:cb:59:12:5d:58:6c:21:5e: 0d:cb:49:31:e2:0d:02:d2:0f:9d:fb:e7:a5:dc:15: 08:1d:15:fd:2a:ea:0f:07:6d:8e:64:13:ca:56:87: f7:5b:4d:92:2f:da:e1:c0:06:e9:00:fa:e7:52:c8: cf:ad:54:63:9e:21:75:3d:a8:80:97:a3:2c:bf:0e: 2a:75:71:6d:33:4d:04:fb:de:16:23:dd:3e:1b:57: f2:19:c8:4c:eb:eb:5c:d0:a0:e9:62:9c:34:12:c4: 6f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:54:75:EA:E9:11:25:77:5B:13:00:70:9F:BA:AB:11:CC:90:37:AD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcd11cce-f1d8-4dbf-9a1a-edb0b2784d8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.113.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:d2:d4:b3:1a:2d:c2:21:8b:32:fd:31:93:ea:e6:95:98:4a: d1:75:19:8e:fd:ac:8c:44:87:70:99:e4:10:e6:e6:12:19:bd: 14:68:c2:da:b7:6f:cb:39:68:61:f9:7c:10:99:04:1a:e7:59: e1:b6:4b:6a:ab:ef:5a:1c:74:96:c8:3a:4a:82:b5:c0:b5:c3: 03:27:b3:18:2a:f9:c5:75:7a:75:fc:f6:f4:81:dc:83:da:a1: 32:ed:ae:97:e1:cc:01:de:35:d9:a5:a9:2b:53:11:08:1e:47: c9:75:6f:95:f2:c6:37:7f:05:18:1e:21:59:21:da:53:62:33: eb:27:8f:19:9a:bb:18:11:32:69:91:82:b6:40:8f:12:07:f5: c4:fb:af:b8:7b:e1:a1:a5:f7:98:1c:27:65:46:9b:b0:96:d9: 61:86:fa:f7:78:c7:0f:1d:f1:88:77:44:dd:9e:bb:65:4e:dd: 53:fc:5a:91:0e:88:6d:28:22:db:28:4f:fe:94:b3:4d:46:79: 11:56:f8:68:d2:b2:e1:92:54:25:25:f8:e1:89:d7:79:ff:44: 96:2a:86:58:33:0a:e5:47:70:fe:51:4d:27:ce:4c:f6:4f:3e: 8a:7b:dc:94:56:72:ad:46:01:74:07:38:1e:17:3d:da:44:18: 1f:4b:a7:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcA+4Xqb/DMbKMhNSgVtlc70asQowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDA0MTU4WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MzUyNDcxYTJiMTExNWNhOTNmZWEyMTkyNDNkOWMxMjZk M2Y4MWE2N2ZiYTBlOTZhZjFiMDlmZTNhYjdmYWMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdHndCvu1wJhvdGbjcrQvt0P7YZv9zUuWAKUgMMcoi5Fof xeYaLZO3y6qRgiQncs768xe3Wtg+jth+Tn5htaMV5kOfScY4QNw2PEc8vjKb1MGt 8u+MnTg3+twUjy5BNz3JBBXJ3tYsNgBLbgL8Qnspe3S26pe2CYUP2CLUErC8phxl leNdRHMS6kSdsCMOlCQReCLSH6zyOdz3rPrLWRJdWGwhXg3LSTHiDQLSD53756Xc FQgdFf0q6g8HbY5kE8pWh/dbTZIv2uHABukA+udSyM+tVGOeIXU9qICXoyy/Dip1 cW0zTQT73hYj3T4bV/IZyEzr61zQoOlinDQSxG8tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUh1R16ukRJXdbEwBwn7qrEcyQN60wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RjZDExY2NlLWYxZDgtNGRiZi05YTFhLWVkYjBiMjc4NGQ4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsHEwDQYJKoZIhvcNAQELBQADggEBAErS1LMaLcIhizL9MZPq5pWYStF1 GY79rIxEh3CZ5BDm5hIZvRRowtq3b8s5aGH5fBCZBBrnWeG2S2qr71ocdJbIOkqC tcC1wwMnsxgq+cV1enX89vSB3IPaoTLtrpfhzAHeNdmlqStTEQgeR8l1b5Xyxjd/ BRgeIVkh2lNiM+snjxmauxgRMmmRgrZAjxIH9cT7r7h74aGl95gcJ2VGm7CW2WGG +vd4xw8d8Yh3RN2eu2VO3VP8WpEOiG0oItsoT/6Us01GeRFW+GjSsuGSVCUl+OGJ 13n/RJYqhlgzCuVHcP5RTSfOTPZPPop73JRWcq1GAXQHOB4XPdpEGB9Lp7s= -----END CERTIFICATE-----Generated at Mon Mar 2 00:05:35 2026 by rpki-client