$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f008be40-067d-4092-8172-f0447898279b.roa File: f008be40-067d-4092-8172-f0447898279b.roa (raw, json) Hash identifier: yPkQJ40B5L2q4BFzsbOL2Mp49LR9/WuJIRVj2HMko/g= Subject key identifier: 01:34:33:81:3F:DB:5C:CD:FE:A8:88:82:55:70:34:F9:55:89:8E:4F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7FC105FCF019F137D2CBA64103B754A97BEC311C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f008be40-067d-4092-8172-f0447898279b.roa Signing time: Fri 13 Feb 2026 00:51:00 +0000 ROA not before: Fri 13 Feb 2026 00:51:00 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 166.117.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c1:05:fc:f0:19:f1:37:d2:cb:a6:41:03:b7:54:a9:7b:ec:31:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 13 00:51:00 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=cb9b3f9263ab457726cdb77fe592763c5951c27c3460324718c78b18499933dc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4b:f3:50:bf:93:b5:97:3a:50:8a:1a:d5:19: 1b:0b:16:f2:71:9f:b8:00:b0:9e:22:ec:7d:39:9a: f2:a9:62:c1:db:0f:fe:c2:db:17:69:41:b4:d8:ba: 50:bd:2e:e5:62:c9:9e:b4:7a:5a:47:29:81:f1:cb: 6e:01:ab:97:62:5a:5d:fa:b1:d8:16:6f:f1:40:ff: a3:8e:c9:9a:ea:24:61:b1:e2:66:e0:56:6a:e3:02: 07:10:48:15:35:c9:44:9c:fc:a8:dd:8c:7a:b2:da: 8c:71:aa:71:02:55:b9:a5:55:28:ff:b3:35:68:81: 88:f6:03:e4:67:6d:1e:e1:f2:47:23:32:f7:28:f4: b2:60:dd:e3:d1:ae:c5:8a:92:e5:77:b3:d7:82:f5: bf:8d:41:d3:2d:11:97:e8:e2:a0:83:9d:71:83:67: 45:9a:4b:b7:c1:79:65:ac:b1:01:ed:ec:05:c2:0b: ff:1f:ab:88:61:10:34:aa:42:a8:9d:e6:81:d1:b1: 8c:52:94:dd:13:19:3f:6b:26:72:4b:10:00:84:84: 84:79:98:dd:82:94:e0:e7:7e:d7:1b:51:37:fc:f9: fe:1f:58:a3:a4:45:ab:a2:84:37:2f:56:87:23:a2: 11:28:b4:d9:b7:a4:a5:5b:65:df:a7:1a:73:a0:64: 7b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:34:33:81:3F:DB:5C:CD:FE:A8:88:82:55:70:34:F9:55:89:8E:4F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f008be40-067d-4092-8172-f0447898279b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 166.117.96.0/20 Signature Algorithm: sha256WithRSAEncryption a9:db:a9:e8:ef:35:27:bd:ee:2f:2d:eb:95:a5:2e:9f:cb:b5: de:25:70:cb:fa:37:47:36:3a:b7:8a:2a:65:55:a6:2f:08:87: 8b:ed:4f:a7:7c:a9:0d:1c:f3:1f:92:38:36:1d:f5:59:59:48: b0:16:16:03:45:0f:f5:79:c0:d4:81:6b:fa:1f:5a:08:83:86: b6:c9:0a:89:8d:a0:a5:d1:89:b7:74:70:14:be:b6:54:ba:2a: 54:cc:73:d1:91:a3:e6:07:32:0d:56:d8:48:e6:0c:68:81:99: b4:97:fc:18:68:96:d5:e7:ba:36:95:3b:f1:91:62:eb:74:46: 2e:ad:b1:c4:f3:ab:45:bc:50:b3:d3:f0:de:b9:c4:51:9f:c6: a4:4d:5f:3c:db:73:86:16:88:15:8f:71:90:bd:12:fe:70:e0: 6d:51:35:8a:53:fc:fa:72:2e:3a:b8:4c:c3:d1:3d:11:44:63: 9e:ba:17:ac:64:f9:b1:86:13:4c:a0:2e:b5:78:94:58:2f:0a: 53:d8:ee:47:19:c2:b4:e5:20:f6:2c:44:cf:85:cf:27:50:7e: 06:f1:46:e5:58:1d:cc:94:18:af:50:9d:11:96:71:ea:9e:40: 4b:e4:db:72:5d:05:c8:c7:16:e4:f5:3c:2c:42:fb:22:43:93: e2:c6:1b:df -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUf8EF/PAZ8TfSy6ZBA7dUqXvsMRwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEzMDA1MTAwWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYjliM2Y5MjYzYWI0NTc3MjZjZGI3N2ZlNTkyNzYzYzU5 NTFjMjdjMzQ2MDMyNDcxOGM3OGIxODQ5OTkzM2RjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmS/NQv5O1lzpQihrVGRsLFvJxn7gAsJ4i7H05mvKpYsHb D/7C2xdpQbTYulC9LuViyZ60elpHKYHxy24Bq5diWl36sdgWb/FA/6OOyZrqJGGx 4mbgVmrjAgcQSBU1yUSc/KjdjHqy2oxxqnECVbmlVSj/szVogYj2A+RnbR7h8kcj Mvco9LJg3ePRrsWKkuV3s9eC9b+NQdMtEZfo4qCDnXGDZ0WaS7fBeWWssQHt7AXC C/8fq4hhEDSqQqid5oHRsYxSlN0TGT9rJnJLEACEhIR5mN2ClODnftcbUTf8+f4f WKOkRauihDcvVocjohEotNm3pKVbZd+nGnOgZHvZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUATQzgT/bXM3+qIiCVXA0+VWJjk8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YwMDhiZTQwLTA2N2QtNDA5Mi04MTcyLWYwNDQ3ODk4Mjc5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASmdWAwDQYJKoZIhvcNAQELBQADggEBAKnbqejvNSe97i8t65WlLp/Ltd4l cMv6N0c2OreKKmVVpi8Ih4vtT6d8qQ0c8x+SODYd9VlZSLAWFgNFD/V5wNSBa/of WgiDhrbJComNoKXRibd0cBS+tlS6KlTMc9GRo+YHMg1W2EjmDGiBmbSX/BholtXn ujaVO/GRYut0Ri6tscTzq0W8ULPT8N65xFGfxqRNXzzbc4YWiBWPcZC9Ev5w4G1R NYpT/PpyLjq4TMPRPRFEY566F6xk+bGGE0ygLrV4lFgvClPY7kcZwrTlIPYsRM+F zydQfgbxRuVYHcyUGK9QnRGWceqeQEvk23JdBcjHFuT1PCxC+yJDk+LGG98= -----END CERTIFICATE-----Generated at Sun Mar 1 22:56:05 2026 by rpki-client