$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5b719c48-5ad8-440e-87e5-abf7ba604b9c.roa File: 5b719c48-5ad8-440e-87e5-abf7ba604b9c.roa (raw, json) Hash identifier: VkK3L47CPUKDGYzgJ7pIOC3KqBekQrTFkryVsSA0F8E= Subject key identifier: 2A:14:E9:19:D1:71:5B:80:43:7D:46:1E:82:56:21:BE:D8:FE:C3:13 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 24EB24EE9C1A74116C3DC2C7418C9FEEF35BA7B7 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5b719c48-5ad8-440e-87e5-abf7ba604b9c.roa Signing time: Wed 25 Feb 2026 00:00:05 +0000 ROA not before: Wed 25 Feb 2026 00:00:05 +0000 ROA not after: Tue 26 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 199.255.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:eb:24:ee:9c:1a:74:11:6c:3d:c2:c7:41:8c:9f:ee:f3:5b:a7:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 25 00:00:05 2026 GMT Not After : May 26 23:59:59 2026 GMT Subject: serialNumber=6437ea1c6f904ff29c3e8da696dc27030f4dea5b81c43822094fe38571854933, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0b:50:88:a2:98:65:aa:90:df:96:1e:81:8b: 57:03:26:8d:50:aa:b7:82:39:6f:5e:8a:e7:9a:fe: 9f:02:61:84:c9:64:a2:66:f3:e3:dd:52:b4:76:48: 93:e6:4b:2d:7c:b2:ff:53:b8:74:42:ed:c9:ce:2f: f9:95:58:89:3b:21:ed:08:02:19:3e:96:d7:1b:13: 8d:6f:ef:4a:79:5a:97:35:79:09:b4:94:c5:e2:26: 45:08:d6:25:2e:04:56:df:6c:e6:1f:62:ad:ed:13: f6:ac:ac:5e:66:a7:73:9a:b3:14:60:17:52:c3:29: a2:b9:61:2b:b0:45:e2:9f:c7:31:fe:d6:78:1a:b3: f1:24:21:16:27:4b:a0:3b:18:03:b4:c3:0b:80:73: cb:99:17:5d:60:fe:e5:72:3b:47:49:d6:d9:ca:94: 15:78:df:ad:b3:7f:35:4f:de:18:93:5c:eb:10:b3: 1c:75:10:6c:eb:7e:03:a8:88:7c:67:41:81:9e:4e: bb:8d:6e:df:2c:15:d3:5c:7e:60:c2:db:be:ba:c0: be:d1:2e:b0:d8:7f:07:4c:96:16:af:ad:e1:f1:88: 13:93:cd:52:98:4d:b2:63:7f:02:c1:a3:df:44:a5: 9b:6a:5a:b8:d4:69:ca:71:82:ea:c0:2d:56:20:63: d9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:14:E9:19:D1:71:5B:80:43:7D:46:1E:82:56:21:BE:D8:FE:C3:13 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5b719c48-5ad8-440e-87e5-abf7ba604b9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.255.192.0/22 Signature Algorithm: sha256WithRSAEncryption 19:46:91:d4:d8:73:39:95:63:6d:ac:44:e3:53:51:bf:55:11: e0:8a:ae:00:69:5d:42:1d:ad:df:81:e2:9b:d4:48:ea:4c:a1: 0f:40:49:6b:45:2b:08:fc:60:07:05:61:4e:4c:2c:6e:22:14: 66:a6:16:4f:8c:41:02:3c:dc:05:16:7d:96:05:19:c7:15:67: 74:e6:2e:b3:55:e1:c8:4e:9f:53:bd:4f:a6:c4:bb:1f:48:73: ed:92:22:2b:ef:5b:0d:e3:10:8d:aa:b4:6c:72:05:43:e3:cf: 08:0f:97:9a:b2:e1:c2:71:11:d8:f3:c1:0d:b4:f4:df:e2:6e: f0:f4:f1:f4:a9:2c:bd:28:00:6c:2b:c9:14:ca:68:96:d0:1f: 64:f0:3c:e4:00:4b:44:68:63:e4:51:bd:d1:a1:a4:b0:34:03: 52:dc:a1:78:3d:8b:f4:e1:f8:e7:3a:97:57:5c:70:16:d9:77: c5:69:5c:1b:e7:2a:fa:53:36:a2:8a:34:d8:2c:7d:c1:82:07: 6f:d3:fd:58:7b:c3:1c:e6:8d:be:54:c5:9c:e4:18:72:c4:07: cd:68:12:20:7c:d3:0a:d3:14:56:2b:b6:f8:c4:a6:d6:31:77: 52:be:c9:31:49:53:8f:35:ee:b3:92:f2:36:11:a1:43:73:ff: 3a:8e:e3:05 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJOsk7pwadBFsPcLHQYyf7vNbp7cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjI1MDAwMDA1WhcNMjYwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NDM3ZWExYzZmOTA0ZmYyOWMzZThkYTY5NmRjMjcwMzBm NGRlYTViODFjNDM4MjIwOTRmZTM4NTcxODU0OTMzMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuC1CIophlqpDflh6Bi1cDJo1QqreCOW9eiuea/p8CYYTJ ZKJm8+PdUrR2SJPmSy18sv9TuHRC7cnOL/mVWIk7Ie0IAhk+ltcbE41v70p5Wpc1 eQm0lMXiJkUI1iUuBFbfbOYfYq3tE/asrF5mp3OasxRgF1LDKaK5YSuwReKfxzH+ 1ngas/EkIRYnS6A7GAO0wwuAc8uZF11g/uVyO0dJ1tnKlBV4362zfzVP3hiTXOsQ sxx1EGzrfgOoiHxnQYGeTruNbt8sFdNcfmDC2766wL7RLrDYfwdMlhavreHxiBOT zVKYTbJjfwLBo99EpZtqWrjUacpxgurALVYgY9kZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKhTpGdFxW4BDfUYeglYhvtj+wxMwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzViNzE5YzQ4LTVhZDgtNDQwZS04N2U1LWFiZjdiYTYwNGI5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALH/8AwDQYJKoZIhvcNAQELBQADggEBABlGkdTYczmVY22sRONTUb9VEeCK rgBpXUIdrd+B4pvUSOpMoQ9ASWtFKwj8YAcFYU5MLG4iFGamFk+MQQI83AUWfZYF GccVZ3TmLrNV4chOn1O9T6bEux9Ic+2SIivvWw3jEI2qtGxyBUPjzwgPl5qy4cJx EdjzwQ209N/ibvD08fSpLL0oAGwryRTKaJbQH2TwPOQAS0RoY+RRvdGhpLA0A1Lc oXg9i/Th+Oc6l1dccBbZd8VpXBvnKvpTNqKKNNgsfcGCB2/T/Vh7wxzmjb5UxZzk GHLEB81oEiB80wrTFFYrtvjEptYxd1K+yTFJU4817rOS8jYRoUNz/zqO4wU= -----END CERTIFICATE-----Generated at Mon Mar 2 01:35:40 2026 by rpki-client