$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee522d32-18fa-41ec-9fef-6162dfabf12f.roa File: ee522d32-18fa-41ec-9fef-6162dfabf12f.roa (raw, json) Hash identifier: ILP/czPTfp+rzHeQ68j7hfEGjVlPbsYBiBNKY1vYI98= Subject key identifier: 7D:0D:53:FF:87:AB:03:FD:37:C6:1E:DC:72:6F:78:8F:BB:EB:39:9A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 38229D9B47D310BD5186C8C3ACF1D7FBAD674CD6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee522d32-18fa-41ec-9fef-6162dfabf12f.roa Signing time: Sun 01 Mar 2026 00:30:19 +0000 ROA not before: Sun 01 Mar 2026 00:30:19 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 203.88.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:22:9d:9b:47:d3:10:bd:51:86:c8:c3:ac:f1:d7:fb:ad:67:4c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 1 00:30:19 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=80c4568d79ff57d2bc19d139e085cec680f4f5b9fd85c96bace41e72181c59e8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:10:b4:42:09:fe:b8:da:e3:f9:8f:6d:55:b8: d1:19:72:d6:01:fe:72:fb:79:19:bb:a0:26:e8:15: c3:e0:f4:78:11:8c:0a:65:db:fb:c4:9e:96:2b:7e: be:57:e2:7c:1b:5a:23:0f:f1:b5:59:36:a5:5e:6f: 2c:28:fe:fb:5e:60:ca:10:a6:f9:95:02:42:71:1c: ef:46:72:57:42:0b:80:72:0b:fe:f0:c2:1d:f6:57: 45:51:87:3c:29:2b:61:cf:cc:9c:cd:98:df:08:a0: bc:a5:06:f5:14:75:2b:69:db:09:84:d8:fa:9e:fd: c0:cb:88:d3:3d:2f:41:0c:94:0b:36:72:78:a7:1b: d4:db:ac:a8:94:bd:6a:b3:da:84:3f:5e:4b:01:09: 99:18:ab:9e:ee:a6:a7:c7:5f:e2:94:f6:ad:9d:a9: 5a:50:27:35:b7:b0:47:f5:1a:00:82:0e:fd:5a:10: 3d:9e:28:89:1e:be:16:a7:f5:4d:06:02:21:5b:ed: 00:87:d3:c5:36:3e:fa:2b:fb:28:49:de:4a:c4:9b: 69:78:b3:a9:b5:9c:f0:1b:4d:31:5a:bb:2a:36:96: 9d:ee:69:c2:ec:85:97:c4:9e:54:c5:3b:54:28:eb: 05:db:18:9e:64:4b:fa:4f:ad:96:ea:91:a8:41:3b: 7b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0D:53:FF:87:AB:03:FD:37:C6:1E:DC:72:6F:78:8F:BB:EB:39:9A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee522d32-18fa-41ec-9fef-6162dfabf12f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.88.92.0/23 Signature Algorithm: sha256WithRSAEncryption 89:3d:98:33:9f:b5:3d:4b:9a:32:a2:15:18:1c:3a:b6:d0:d6: ec:1e:1d:84:d3:af:65:1e:c4:16:a9:32:85:71:84:e8:db:5e: 6f:bf:ad:dc:58:2c:05:2e:d0:85:18:39:41:91:ca:b2:71:c6: 71:8c:c7:11:7e:9c:0f:bc:15:7a:2c:21:90:a9:f4:89:96:b7: 6d:38:4c:4e:09:21:ab:39:3a:5b:fd:41:72:11:75:0a:98:ed: 38:91:54:5e:00:15:7e:3a:2d:89:5e:85:89:c4:14:5e:45:f9: fb:d5:5b:eb:f2:da:99:44:f4:6e:37:16:15:97:ca:c4:7b:e1: 89:d8:d3:15:cb:5d:81:37:63:d2:12:e1:d4:a3:83:31:34:af: 5f:aa:24:bd:7c:99:da:ec:ff:70:a1:7b:e3:b3:ef:a3:6f:0e: dc:53:38:2e:f6:de:56:8b:00:2f:f2:3d:76:34:04:1e:3b:8a: be:b9:e1:38:75:99:11:7b:99:75:58:a6:4c:29:d2:54:91:18: 60:08:19:d2:b4:e6:e6:d7:8a:f7:30:dd:98:3a:39:07:2d:0f: 15:c1:88:8b:0d:41:ad:01:da:c3:de:b2:09:6c:20:7a:68:39: 9d:b2:bf:01:35:ab:e2:87:5c:cb:7f:a4:13:ee:68:5b:36:5a: 90:17:5a:a0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOCKdm0fTEL1RhsjDrPHX+61nTNYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzAxMDAzMDE5WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MGM0NTY4ZDc5ZmY1N2QyYmMxOWQxMzllMDg1Y2VjNjgw ZjRmNWI5ZmQ4NWM5NmJhY2U0MWU3MjE4MWM1OWU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkELRCCf642uP5j21VuNEZctYB/nL7eRm7oCboFcPg9HgR jApl2/vEnpYrfr5X4nwbWiMP8bVZNqVebywo/vteYMoQpvmVAkJxHO9GcldCC4By C/7wwh32V0VRhzwpK2HPzJzNmN8IoLylBvUUdStp2wmE2Pqe/cDLiNM9L0EMlAs2 cninG9TbrKiUvWqz2oQ/XksBCZkYq57upqfHX+KU9q2dqVpQJzW3sEf1GgCCDv1a ED2eKIkevhan9U0GAiFb7QCH08U2Pvor+yhJ3krEm2l4s6m1nPAbTTFauyo2lp3u acLshZfEnlTFO1Qo6wXbGJ5kS/pPrZbqkahBO3shAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfQ1T/4erA/03xh7ccm94j7vrOZowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VlNTIyZDMyLTE4ZmEtNDFlYy05ZmVmLTYxNjJkZmFiZjEyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHLWFwwDQYJKoZIhvcNAQELBQADggEBAIk9mDOftT1LmjKiFRgcOrbQ1uwe HYTTr2UexBapMoVxhOjbXm+/rdxYLAUu0IUYOUGRyrJxxnGMxxF+nA+8FXosIZCp 9ImWt204TE4JIas5Olv9QXIRdQqY7TiRVF4AFX46LYlehYnEFF5F+fvVW+vy2plE 9G43FhWXysR74YnY0xXLXYE3Y9IS4dSjgzE0r1+qJL18mdrs/3Che+Oz76NvDtxT OC723laLAC/yPXY0BB47ir654Th1mRF7mXVYpkwp0lSRGGAIGdK05ubXivcw3Zg6 OQctDxXBiIsNQa0B2sPesglsIHpoOZ2yvwE1q+KHXMt/pBPuaFs2WpAXWqA= -----END CERTIFICATE-----Generated at Sun Mar 1 22:08:50 2026 by rpki-client