$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1129686-a376-483b-8fad-5706691a8138.roa File: e1129686-a376-483b-8fad-5706691a8138.roa (raw, json) Hash identifier: /HQZjo3xvLucVuUESd6obuhepYA1HHvmNSiNm2juw+Q= Subject key identifier: 63:A0:D0:BD:D9:F3:1A:75:86:4F:E8:F8:F8:5E:C5:3F:CE:4F:9D:6E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 730D21923BCB6E8AE812A723EBA1B7ED41D7F289 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1129686-a376-483b-8fad-5706691a8138.roa Signing time: Thu 05 Feb 2026 00:00:07 +0000 ROA not before: Thu 05 Feb 2026 00:00:07 +0000 ROA not after: Wed 06 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.174.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:0d:21:92:3b:cb:6e:8a:e8:12:a7:23:eb:a1:b7:ed:41:d7:f2:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 5 00:00:07 2026 GMT Not After : May 6 23:59:59 2026 GMT Subject: serialNumber=500c2fe532a779e10ce399501b2c9bb8ddd5850ab2bd635f48a92653b16f51c3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f9:c5:ac:30:fa:4a:6b:24:c2:79:1f:af:81: af:76:61:81:f2:47:15:9f:78:cd:92:1a:89:9e:20: da:fe:3b:fa:d5:1d:c6:c7:c2:ba:97:67:60:d9:e8: e2:67:a7:a9:dc:33:d5:cb:f5:e2:71:5f:f8:59:d8: 76:b3:49:d7:a3:5d:39:b2:bc:ff:1e:cd:04:5d:ab: 7a:e4:d2:5c:25:8a:ec:29:80:f4:70:db:bc:34:92: 3f:f0:cb:57:64:fd:35:2a:e3:e4:27:cf:f6:31:6b: 60:e8:fa:30:8a:92:b6:f0:da:1b:f1:3d:d9:6f:6b: ab:7f:41:1c:8f:a4:17:df:30:2a:68:c3:ec:81:a2: fe:ef:a6:86:67:e0:78:fc:a2:20:87:30:2e:22:e9: 65:0f:80:30:d9:d4:89:78:02:48:c9:9d:96:ef:b6: b7:6b:7c:76:aa:19:00:24:46:83:58:64:57:1e:bd: a9:8f:40:3b:1a:7b:ac:e9:75:9c:bb:08:1d:6e:da: 41:4c:3c:de:2e:9b:b8:62:01:69:5d:59:94:3b:04: bc:61:db:e6:7c:73:7b:9f:d2:20:cf:e4:98:78:8d: 2a:a6:b2:e1:ad:23:29:17:1a:b7:de:99:c1:8f:ee: 36:76:49:81:e0:92:db:8e:2b:0d:45:fb:d5:b8:b9: bf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A0:D0:BD:D9:F3:1A:75:86:4F:E8:F8:F8:5E:C5:3F:CE:4F:9D:6E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1129686-a376-483b-8fad-5706691a8138.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.174.128.0/17 Signature Algorithm: sha256WithRSAEncryption 10:8d:a9:71:4b:70:51:3f:02:83:19:b7:00:70:38:2e:af:f0: ef:50:c8:67:05:ed:b8:31:c0:1c:40:93:db:2d:27:c0:b9:bc: 6d:06:b2:85:31:65:1b:e5:bc:4d:4d:17:5e:72:5b:03:89:21: 64:f9:06:6c:6f:46:a8:2e:77:40:4a:99:46:09:b0:c9:ec:92: 0d:44:53:19:74:65:99:0b:43:6b:e4:ca:5f:9c:67:d8:ae:b7: d2:b6:85:bc:dc:cf:12:3c:db:ed:50:a5:5e:38:d0:e5:7b:34: 00:d7:ca:f7:95:81:96:93:a8:5c:75:48:04:80:cc:fe:83:6d: 47:6a:60:ae:5f:a8:02:7a:70:75:72:97:a1:70:ff:cd:49:c2: 23:5f:de:81:63:17:b1:fc:8d:6d:65:78:e6:6c:83:52:38:00: d6:d0:fe:e2:50:32:d1:9a:ea:8f:f4:56:d2:3b:bc:3b:f4:5f: f0:9d:1d:04:a1:bb:01:4d:3a:01:ba:0d:ae:8f:fc:52:09:a3: ba:fe:c5:0b:3d:30:74:96:ea:23:0a:67:51:a6:b8:41:d4:42: 84:34:95:da:f6:18:1d:f5:5b:fe:c6:c7:6c:a4:b3:67:e1:f2: f7:75:2b:c2:38:dd:91:01:0a:c3:7b:b9:2d:85:e2:d9:75:0d: 54:a5:17:a0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcw0hkjvLboroEqcj66G37UHX8okwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA1MDAwMDA3WhcNMjYwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MDBjMmZlNTMyYTc3OWUxMGNlMzk5NTAxYjJjOWJiOGRk ZDU4NTBhYjJiZDYzNWY0OGE5MjY1M2IxNmY1MWMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3+cWsMPpKayTCeR+vga92YYHyRxWfeM2SGomeINr+O/rV HcbHwrqXZ2DZ6OJnp6ncM9XL9eJxX/hZ2HazSdejXTmyvP8ezQRdq3rk0lwliuwp gPRw27w0kj/wy1dk/TUq4+Qnz/Yxa2Do+jCKkrbw2hvxPdlva6t/QRyPpBffMCpo w+yBov7vpoZn4Hj8oiCHMC4i6WUPgDDZ1Il4AkjJnZbvtrdrfHaqGQAkRoNYZFce vamPQDsae6zpdZy7CB1u2kFMPN4um7hiAWldWZQ7BLxh2+Z8c3uf0iDP5Jh4jSqm suGtIykXGrfemcGP7jZ2SYHgktuOKw1F+9W4ub9lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUY6DQvdnzGnWGT+j4+F7FP85PnW4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UxMTI5Njg2LWEzNzYtNDgzYi04ZmFkLTU3MDY2OTFhODEzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcQroAwDQYJKoZIhvcNAQELBQADggEBABCNqXFLcFE/AoMZtwBwOC6v8O9Q yGcF7bgxwBxAk9stJ8C5vG0GsoUxZRvlvE1NF15yWwOJIWT5BmxvRqgud0BKmUYJ sMnskg1EUxl0ZZkLQ2vkyl+cZ9iut9K2hbzczxI82+1QpV440OV7NADXyveVgZaT qFx1SASAzP6DbUdqYK5fqAJ6cHVyl6Fw/81JwiNf3oFjF7H8jW1leOZsg1I4ANbQ /uJQMtGa6o/0VtI7vDv0X/CdHQShuwFNOgG6Da6P/FIJo7r+xQs9MHSW6iMKZ1Gm uEHUQoQ0ldr2GB31W/7Gx2yks2fh8vd1K8I43ZEBCsN7uS2F4tl1DVSlF6A= -----END CERTIFICATE-----Generated at Mon Mar 2 00:17:22 2026 by rpki-client