$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/78a0cdc2-ea20-466b-be87-e9cd69e17b3e.roa File: 78a0cdc2-ea20-466b-be87-e9cd69e17b3e.roa (raw, json) Hash identifier: JGa7MIsTLy5K9KszQWPDK43TrflOWmNvxGUDzuysJfY= Subject key identifier: A8:9D:BB:54:BB:A9:58:45:F3:AD:34:D3:B0:7D:CB:7C:85:F4:92:A1 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 611E74414BFA3BCC22656276531DA334F3BD2098 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/78a0cdc2-ea20-466b-be87-e9cd69e17b3e.roa Signing time: Wed 11 Feb 2026 00:30:30 +0000 ROA not before: Wed 11 Feb 2026 00:30:30 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:1e:74:41:4b:fa:3b:cc:22:65:62:76:53:1d:a3:34:f3:bd:20:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 11 00:30:30 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=17f079dfc7352895e8bc6b5d74fa29831bfc1af85e7872c290296cd29c046e86, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:44:4c:20:40:7b:dd:fa:9b:84:2b:61:66:cf: a2:16:cc:b1:be:e4:66:48:4b:43:e1:ec:c0:68:69: 26:c2:a7:9e:be:1f:b9:f7:5e:97:c7:90:1a:9d:33: cb:93:a3:1b:ae:26:51:22:b2:fd:0e:2b:3e:d6:1b: 74:a1:e9:d8:9f:70:98:43:70:f6:a6:f9:f8:d2:d2: d0:48:82:2d:0b:34:f2:a5:60:00:2b:6f:73:3c:a2: df:ba:75:33:1e:2f:89:b8:9f:f6:c2:7c:66:9a:b2: 42:3f:83:0d:18:bb:44:17:f0:3a:f9:6f:31:fe:8a: 0e:d5:29:15:5d:ff:6d:da:e9:bb:ec:6b:ce:09:8b: 2d:4b:04:e8:a3:01:96:63:e9:d0:84:db:5e:48:6e: 66:31:18:ca:a9:4e:ea:80:ba:5f:b2:ea:fa:08:47: d0:d3:e8:a6:f4:f0:a4:61:be:55:37:df:7c:7d:76: e0:cd:95:5e:77:53:43:ad:31:fb:ba:7e:ca:10:39: 69:41:d9:a8:1d:e8:96:8e:b1:3f:97:14:b2:80:23: 2b:9e:55:86:db:ac:e6:88:03:e2:6a:a9:93:d5:07: 12:d0:b7:c6:57:82:dd:19:d7:f8:03:35:2f:8b:7c: bf:28:d0:92:66:d5:7f:63:b0:48:e9:8c:87:60:64: fd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9D:BB:54:BB:A9:58:45:F3:AD:34:D3:B0:7D:CB:7C:85:F4:92:A1 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/78a0cdc2-ea20-466b-be87-e9cd69e17b3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.185.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:f7:88:01:73:36:90:e8:f7:f3:d4:a9:81:9c:1c:5e:3d:71: 80:d7:9e:e3:c1:4b:7f:50:e7:e4:1f:a2:c6:5a:a3:d6:4b:7e: 0c:6e:f7:07:20:03:04:2a:1e:f2:dc:22:3d:be:10:65:90:4b: 6e:c5:6e:4c:e3:4a:09:96:fa:e8:6a:bd:16:90:fd:a7:90:4b: 49:40:cc:5c:32:0c:cc:86:e5:0f:92:a9:5c:e7:56:c0:65:2d: 63:f4:62:55:03:4e:6b:7b:47:24:6f:b7:06:3d:61:8a:7b:4c: 4b:4f:d1:11:b8:06:b3:12:38:ec:01:a2:6e:42:15:75:72:75: f7:c4:82:6a:69:f2:79:41:50:5b:b4:f8:3f:e3:f1:e7:17:19: 5e:bb:49:9a:20:0c:6e:41:4c:8b:5a:54:53:93:fc:56:8e:fe: a7:77:40:bd:6d:fc:70:8f:c9:e0:5f:26:b8:61:0d:cd:94:d0: d0:71:ec:23:a0:9b:2a:4c:06:25:a2:4a:b3:08:a8:3f:57:ca: c5:b8:aa:59:c1:20:ff:e9:0d:4a:2a:98:d2:fe:24:04:4a:c1: ed:f7:cf:20:3b:a2:e2:eb:37:65:3e:6c:6d:41:b4:3d:ee:bc: b4:63:17:af:db:6d:ef:0a:ac:d4:99:9b:50:f9:03:ec:c0:c8: d1:b3:af:dc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYR50QUv6O8wiZWJ2Ux2jNPO9IJgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjExMDAzMDMwWhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxN2YwNzlkZmM3MzUyODk1ZThiYzZiNWQ3NGZhMjk4MzFi ZmMxYWY4NWU3ODcyYzI5MDI5NmNkMjljMDQ2ZTg2MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlREwgQHvd+puEK2Fmz6IWzLG+5GZIS0Ph7MBoaSbCp56+ H7n3XpfHkBqdM8uToxuuJlEisv0OKz7WG3Sh6difcJhDcPam+fjS0tBIgi0LNPKl YAArb3M8ot+6dTMeL4m4n/bCfGaaskI/gw0Yu0QX8Dr5bzH+ig7VKRVd/23a6bvs a84Jiy1LBOijAZZj6dCE215IbmYxGMqpTuqAul+y6voIR9DT6Kb08KRhvlU333x9 duDNlV53U0OtMfu6fsoQOWlB2agd6JaOsT+XFLKAIyueVYbbrOaIA+JqqZPVBxLQ t8ZXgt0Z1/gDNS+LfL8o0JJm1X9jsEjpjIdgZP1ZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqJ27VLupWEXzrTTTsH3LfIX0kqEwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzc4YTBjZGMyLWVhMjAtNDY2Yi1iZTg3LWU5Y2Q2OWUxN2IzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37kwDQYJKoZIhvcNAQELBQADggEBACr3iAFzNpDo9/PUqYGcHF49cYDX nuPBS39Q5+QfosZao9ZLfgxu9wcgAwQqHvLcIj2+EGWQS27FbkzjSgmW+uhqvRaQ /aeQS0lAzFwyDMyG5Q+SqVznVsBlLWP0YlUDTmt7RyRvtwY9YYp7TEtP0RG4BrMS OOwBom5CFXVydffEgmpp8nlBUFu0+D/j8ecXGV67SZogDG5BTItaVFOT/FaO/qd3 QL1t/HCPyeBfJrhhDc2U0NBx7COgmypMBiWiSrMIqD9XysW4qlnBIP/pDUoqmNL+ JARKwe33zyA7ouLrN2U+bG1BtD3uvLRjF6/bbe8KrNSZm1D5A+zAyNGzr9w= -----END CERTIFICATE-----Generated at Sun Mar 1 23:20:23 2026 by rpki-client