$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e63948c4-177f-4f28-8fa2-fb55ae945417.roa File: e63948c4-177f-4f28-8fa2-fb55ae945417.roa (raw, json) Hash identifier: iBfCWj3yoOMQunjpCHigATF1InXAThO3Xmxe2y5zTrE= Subject key identifier: 7F:46:89:36:6A:72:27:FA:C5:48:C0:F5:7E:ED:42:93:D1:A9:59:86 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 157104B66FBF8B823D1524C78602B548546F8B12 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e63948c4-177f-4f28-8fa2-fb55ae945417.roa Signing time: Sat 21 Feb 2026 01:40:33 +0000 ROA not before: Sat 21 Feb 2026 01:40:33 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:71:04:b6:6f:bf:8b:82:3d:15:24:c7:86:02:b5:48:54:6f:8b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 01:40:33 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=87c9d25353742872db7f9030b4dbbab4731bf4262e0fddd70a3a88d3b6e025ea, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:62:7b:be:03:56:27:34:3f:2e:4e:62:66:68: a4:15:e5:72:3d:c3:6c:f0:5b:93:49:cc:11:98:6b: 10:e6:71:92:ef:ba:d1:40:38:89:a5:32:75:c5:7b: 4d:31:91:9a:cc:2b:ea:cc:41:88:74:37:3b:a5:b0: bc:c5:c9:9c:5b:ae:25:de:cb:12:95:0e:e2:ad:d4: 4c:3f:1e:3e:22:2c:ab:ce:cb:f9:44:8e:c3:54:dc: 83:7a:10:5c:77:e2:20:f5:b9:77:94:8c:18:99:2f: 90:22:fa:56:e0:69:4a:3d:1d:88:12:4d:e4:2c:8e: 66:32:25:9e:5e:32:24:55:d6:a6:3c:a0:fe:fe:f9: 58:e7:c9:28:63:d2:9e:6e:c1:38:8b:05:09:25:bf: 6a:dc:4f:0d:29:0b:ae:cc:3f:4d:b1:61:65:39:b5: c4:53:1d:6e:54:29:54:e6:ef:f7:93:9e:30:8b:db: 1b:7a:bc:4a:be:d4:70:d5:ae:e1:29:fb:c5:06:61: 53:d2:87:55:5a:c9:53:e8:36:57:57:f9:c0:90:33: 20:ea:2a:a7:bb:65:bc:eb:2c:b6:49:3b:bd:06:5c: 24:8e:2c:65:c6:68:d5:1e:77:d7:5d:0d:8a:42:1f: 8e:5b:a6:1b:fc:1d:ab:c5:c4:0e:d2:52:73:b0:fa: 7a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:46:89:36:6A:72:27:FA:C5:48:C0:F5:7E:ED:42:93:D1:A9:59:86 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e63948c4-177f-4f28-8fa2-fb55ae945417.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.95.0/24 Signature Algorithm: sha256WithRSAEncryption a9:e0:cc:7e:2b:a7:1d:4a:e2:f0:aa:5a:14:08:af:d5:1d:88: 5a:29:98:bf:58:64:a0:07:00:6b:db:55:cb:52:4b:0a:ae:1b: b2:12:b5:ab:02:9d:b5:6f:68:4f:c9:83:f5:5b:06:2b:81:06: 30:70:5b:31:4a:f8:e2:93:6e:b8:94:10:b3:cd:51:92:95:0c: f3:2d:4d:10:c2:c0:44:ca:dc:06:03:13:75:ff:7e:0d:08:c2: cb:03:23:99:15:f5:a2:69:38:53:90:51:fb:2e:a2:a1:8d:9b: 37:0c:78:44:02:58:77:c1:29:02:a1:9c:13:2c:37:f1:12:e6: c2:aa:b0:41:49:f9:3a:b6:62:a0:aa:ba:61:df:23:ba:21:77: e6:bc:ee:74:0d:18:9c:09:4e:a1:c5:fd:12:71:a1:87:c3:93: 46:7c:c0:56:93:74:15:46:7c:d8:b3:15:46:ff:8c:57:ef:aa: dd:42:c3:26:f2:e2:4d:d4:7f:2a:9c:99:e8:30:2c:c9:ed:d8: 41:6c:ae:08:2a:a6:14:4e:9a:11:c6:dd:fc:79:73:e3:57:b4: e7:98:6e:c6:d8:fa:cd:bf:ff:49:f9:bd:51:7e:f0:30:bf:8b: a6:59:e2:5c:b2:26:cc:fa:a2:1e:4a:34:79:32:24:9f:68:4c: 9e:1c:bd:1b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFXEEtm+/i4I9FSTHhgK1SFRvixIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDE0MDMzWhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4N2M5ZDI1MzUzNzQyODcyZGI3ZjkwMzBiNGRiYmFiNDcz MWJmNDI2MmUwZmRkZDcwYTNhODhkM2I2ZTAyNWVhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4Ynu+A1YnND8uTmJmaKQV5XI9w2zwW5NJzBGYaxDmcZLv utFAOImlMnXFe00xkZrMK+rMQYh0NzulsLzFyZxbriXeyxKVDuKt1Ew/Hj4iLKvO y/lEjsNU3IN6EFx34iD1uXeUjBiZL5Ai+lbgaUo9HYgSTeQsjmYyJZ5eMiRV1qY8 oP7++VjnyShj0p5uwTiLBQklv2rcTw0pC67MP02xYWU5tcRTHW5UKVTm7/eTnjCL 2xt6vEq+1HDVruEp+8UGYVPSh1VayVPoNldX+cCQMyDqKqe7ZbzrLLZJO70GXCSO LGXGaNUed9ddDYpCH45bphv8HavFxA7SUnOw+nrlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUf0aJNmpyJ/rFSMD1fu1Ck9GpWYYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U2Mzk0OGM0LTE3N2YtNGYyOC04ZmEyLWZiNTVhZTk0NTQxNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmF8wDQYJKoZIhvcNAQELBQADggEBAKngzH4rpx1K4vCqWhQIr9UdiFop mL9YZKAHAGvbVctSSwquG7IStasCnbVvaE/Jg/VbBiuBBjBwWzFK+OKTbriUELPN UZKVDPMtTRDCwETK3AYDE3X/fg0IwssDI5kV9aJpOFOQUfsuoqGNmzcMeEQCWHfB KQKhnBMsN/ES5sKqsEFJ+Tq2YqCqumHfI7ohd+a87nQNGJwJTqHF/RJxoYfDk0Z8 wFaTdBVGfNizFUb/jFfvqt1Cwyby4k3UfyqcmegwLMnt2EFsrggqphROmhHG3fx5 c+NXtOeYbsbY+s2//0n5vVF+8DC/i6ZZ4lyyJsz6oh5KNHkyJJ9oTJ4cvRs= -----END CERTIFICATE-----Generated at Sun Mar 1 22:31:28 2026 by rpki-client