$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9f6b130-b872-44a5-81fd-7378d400647c.roa File: f9f6b130-b872-44a5-81fd-7378d400647c.roa (raw, json) Hash identifier: hEEYV5PZQwOgkf9gyKloBvRcvjD6u2t9Dt6HkvFbdq8= Subject key identifier: 00:2D:EF:6D:E4:2D:46:74:72:A3:5A:94:9D:EC:99:0F:D2:C1:92:B9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 56BCB75807FE898B1492B0E9B9EF81B5F833848B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9f6b130-b872-44a5-81fd-7378d400647c.roa Signing time: Sat 07 Feb 2026 00:30:41 +0000 ROA not before: Sat 07 Feb 2026 00:30:41 +0000 ROA not after: Fri 08 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 136.2.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:bc:b7:58:07:fe:89:8b:14:92:b0:e9:b9:ef:81:b5:f8:33:84:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 7 00:30:41 2026 GMT Not After : May 8 23:59:59 2026 GMT Subject: serialNumber=3c888ef61c9d64af551e878f14c329a0b436e35c18b47a72a07fd9035bd272cd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:8e:c9:38:4d:21:03:f9:7a:a6:68:a1:36: cc:37:ac:c7:36:51:b3:50:c2:86:b1:98:1c:3a:76: d0:de:62:0d:f9:4a:f3:bc:2b:48:5c:9d:00:3e:58: c8:34:5f:2b:2f:14:82:1f:26:6b:dd:e6:05:fb:77: 46:d2:1d:c1:5e:b0:05:ca:ed:48:3e:17:fe:b9:20: bd:03:cd:4e:0d:6f:eb:85:35:0a:5a:b1:c5:db:f0: dd:94:e9:b0:27:0a:26:f6:93:38:18:b9:02:26:f9: 9d:f5:4f:13:fe:a8:72:c6:09:67:50:80:e1:bc:1c: cc:fc:10:0e:ef:cb:d5:b7:5f:95:89:6c:c1:51:23: 00:7c:e4:21:37:5d:5f:e0:3b:6f:80:c3:53:82:b7: 85:76:0d:23:b8:68:2d:c6:ca:4b:0f:39:85:b8:db: eb:24:3a:ea:ac:fd:f7:cd:be:49:b1:43:36:ac:3c: db:b4:3b:3c:6e:f8:cd:b5:6f:64:b0:cc:4a:5b:df: 14:b1:04:b9:5d:06:f3:8b:33:a9:e7:ca:df:68:78: 28:1c:f3:a0:30:83:bd:73:bf:d3:7f:12:0a:e9:79: 8d:19:9a:ba:f7:b0:0d:97:d3:8c:81:ee:ef:5d:e7: ab:96:5d:2f:75:a6:e1:02:88:c2:ae:15:a6:8b:45: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2D:EF:6D:E4:2D:46:74:72:A3:5A:94:9D:EC:99:0F:D2:C1:92:B9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9f6b130-b872-44a5-81fd-7378d400647c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.2.0.0/16 Signature Algorithm: sha256WithRSAEncryption 38:b9:60:d3:cf:fa:f4:cf:f5:65:cd:a0:92:78:fb:f2:fc:dc: 82:82:94:71:47:ab:62:da:9d:d3:7e:c9:de:e9:49:6b:07:de: 3d:b3:aa:82:26:37:5d:81:2b:de:2b:45:60:89:12:4b:b1:c2: 3c:25:c1:d3:3f:33:10:b3:13:cc:7e:67:34:08:4e:6b:c2:7b: 6b:b6:ae:a8:2f:be:fb:2d:31:de:e3:a5:ca:ce:8c:40:32:fa: 43:24:e6:e8:25:d2:24:4a:47:9c:cf:d2:ac:68:21:eb:8a:5a: f6:77:ee:a3:df:cb:92:98:5f:a7:ab:1d:52:8a:54:3f:51:d5: dd:35:77:61:8f:a7:4f:ae:70:24:a0:f6:37:d4:74:e2:df:60: 03:55:7f:50:b9:4b:3e:b9:2b:50:d3:48:62:f6:ff:8f:1a:ea: 07:6f:b3:59:6a:77:84:32:a7:a0:a5:5a:5b:76:ca:85:a0:c7: bd:ef:51:b7:63:95:2e:be:c3:90:80:e7:cc:53:b0:08:ec:13: 54:ff:f6:b4:78:5a:e4:51:a2:be:c2:ae:c5:27:85:c0:f1:35: d9:40:72:5c:05:82:cb:ec:2f:cb:21:57:3e:50:5b:80:05:0d: 2f:98:9a:e0:12:a5:c2:5e:d6:bc:9b:84:41:74:ef:ef:6a:d4: 55:c7:5f:62 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVry3WAf+iYsUkrDpue+BtfgzhIswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA3MDAzMDQxWhcNMjYwNTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzg4OGVmNjFjOWQ2NGFmNTUxZTg3OGYxNGMzMjlhMGI0 MzZlMzVjMThiNDdhNzJhMDdmZDkwMzViZDI3MmNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCovI7JOE0hA/l6pmihNsw3rMc2UbNQwoaxmBw6dtDeYg35 SvO8K0hcnQA+WMg0XysvFIIfJmvd5gX7d0bSHcFesAXK7Ug+F/65IL0DzU4Nb+uF NQpascXb8N2U6bAnCib2kzgYuQIm+Z31TxP+qHLGCWdQgOG8HMz8EA7vy9W3X5WJ bMFRIwB85CE3XV/gO2+Aw1OCt4V2DSO4aC3GyksPOYW42+skOuqs/ffNvkmxQzas PNu0Ozxu+M21b2SwzEpb3xSxBLldBvOLM6nnyt9oeCgc86Awg71zv9N/EgrpeY0Z mrr3sA2X04yB7u9d56uWXS91puECiMKuFaaLRXx5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUAC3vbeQtRnRyo1qUneyZD9LBkrkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y5ZjZiMTMwLWI4NzItNDRhNS04MWZkLTczNzhkNDAwNjQ3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCIAjANBgkqhkiG9w0BAQsFAAOCAQEAOLlg08/69M/1Zc2gknj78vzcgoKU cUerYtqd037J3ulJawfePbOqgiY3XYEr3itFYIkSS7HCPCXB0z8zELMTzH5nNAhO a8J7a7auqC+++y0x3uOlys6MQDL6QyTm6CXSJEpHnM/SrGgh64pa9nfuo9/Lkphf p6sdUopUP1HV3TV3YY+nT65wJKD2N9R04t9gA1V/ULlLPrkrUNNIYvb/jxrqB2+z WWp3hDKnoKVaW3bKhaDHve9Rt2OVLr7DkIDnzFOwCOwTVP/2tHha5FGivsKuxSeF wPE12UByXAWCy+wvyyFXPlBbgAUNL5ia4BKlwl7WvJuEQXTv72rUVcdfYg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:36:53 2026 by rpki-client