$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/99e36b6b-0208-44a2-a5f3-df3bd254fcda.roa File: 99e36b6b-0208-44a2-a5f3-df3bd254fcda.roa (raw, json) Hash identifier: hcC92C4GIlQPbCBRklKRGGhUU4Dl4myJO3lPnC8uIRs= Subject key identifier: 50:71:11:E5:2E:65:EE:8B:EA:97:B3:64:E7:3D:04:BA:BF:78:6A:4C Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 1AFE6C754B91235459EC7BF8D0D79495C3701913 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/99e36b6b-0208-44a2-a5f3-df3bd254fcda.roa Signing time: Wed 11 Feb 2026 00:30:51 +0000 ROA not before: Wed 11 Feb 2026 00:30:51 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:fe:6c:75:4b:91:23:54:59:ec:7b:f8:d0:d7:94:95:c3:70:19:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 11 00:30:51 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=428c65d8bafb5623f0b37f9c3820a96800a0d68e298dcf2a7aacb9744fd52cf3, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1c:af:8b:0a:39:07:f6:7a:7a:35:6b:35:dd: 57:2f:b1:e1:94:c1:d1:64:48:47:85:78:49:73:8a: eb:fd:61:1d:ec:64:03:dc:b2:47:14:bb:73:c5:76: 07:c7:e3:5e:bc:df:42:a8:f6:dd:98:ed:89:2b:c0: 78:23:b0:f2:d6:9b:97:1b:b2:a8:89:5d:8e:d0:65: f5:47:37:94:d8:0e:3e:7b:0b:96:d6:4c:dd:4b:e2: 96:31:c1:f9:db:84:f0:40:e0:26:e4:b7:13:76:96: 77:d5:4f:c4:2f:52:46:07:b7:0d:fe:6f:c7:39:cb: 5e:8e:c1:ce:7e:85:57:cc:dc:d4:49:80:14:88:ea: e1:5b:ec:bd:69:ee:bb:cf:37:77:26:c5:a8:79:db: a5:99:d8:c0:68:3d:46:b2:c9:da:ea:25:bc:b8:d8: 75:a5:30:27:c0:7c:0f:29:c6:3e:97:52:2c:eb:cc: cb:81:f2:a8:f3:ce:59:9f:08:c4:42:54:74:96:86: 5c:7b:d5:41:76:73:b7:1a:42:0c:ae:95:d5:dc:84: 75:2e:33:e0:f0:e8:40:3e:57:0f:68:8e:0d:b6:fc: 58:2b:f8:73:44:89:c0:cc:82:c1:81:46:ea:59:26: 5c:d1:bb:f8:fa:b7:c4:2c:e9:1e:b4:7b:ab:56:44: c8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:71:11:E5:2E:65:EE:8B:EA:97:B3:64:E7:3D:04:BA:BF:78:6A:4C X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/99e36b6b-0208-44a2-a5f3-df3bd254fcda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.184.0/24 Signature Algorithm: sha256WithRSAEncryption 11:99:7d:b8:3f:27:19:05:85:75:4b:7b:7a:7a:6d:24:97:36: 49:59:fd:f5:1b:e8:4f:46:d7:e8:c9:6e:52:74:4c:6d:e3:24: 86:f5:5b:70:7f:6f:f0:3e:5b:a0:27:9b:f3:62:94:08:5d:68: 10:06:1e:e8:2b:4e:b3:ef:b4:08:fc:9f:ac:1b:43:de:46:94: 64:e6:f1:3a:bb:4c:08:3f:fa:02:8d:89:c5:33:b2:74:51:10: 2e:49:c3:53:aa:95:a7:99:4f:98:bf:f3:5c:23:64:6b:b4:ad: ae:e5:ac:fd:de:4d:22:81:69:1b:6b:41:ea:23:8d:18:e4:62: ac:65:c5:8e:93:0a:34:e4:17:64:d9:49:73:1b:72:8b:1c:53: 50:53:73:a5:d2:30:4b:5f:49:76:ca:bd:5c:f1:89:c5:01:8f: 1e:c9:a3:ac:ca:a8:16:2a:1f:9e:14:ec:ac:ef:64:d1:7b:0b: 71:44:3c:61:4a:3e:d4:5f:71:7e:c6:3a:25:e2:e2:c8:36:fc: 27:cb:98:fa:42:38:50:f5:94:22:2e:ef:4f:09:d5:46:bf:94: 86:f5:c6:26:5e:55:8b:32:13:98:2b:44:74:37:fb:ff:b7:77: 2c:a0:5a:f0:6e:9b:01:37:63:84:4b:d3:8c:51:7e:32:9c:28: 1d:c9:d8:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGv5sdUuRI1RZ7Hv40NeUlcNwGRMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjExMDAzMDUxWhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjhjNjVkOGJhZmI1NjIzZjBiMzdmOWMzODIwYTk2ODAw YTBkNjhlMjk4ZGNmMmE3YWFjYjk3NDRmZDUyY2YzMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiHK+LCjkH9np6NWs13VcvseGUwdFkSEeFeElziuv9YR3s ZAPcskcUu3PFdgfH416830Ko9t2Y7YkrwHgjsPLWm5cbsqiJXY7QZfVHN5TYDj57 C5bWTN1L4pYxwfnbhPBA4CbktxN2lnfVT8QvUkYHtw3+b8c5y16Owc5+hVfM3NRJ gBSI6uFb7L1p7rvPN3cmxah526WZ2MBoPUayydrqJby42HWlMCfAfA8pxj6XUizr zMuB8qjzzlmfCMRCVHSWhlx71UF2c7caQgyuldXchHUuM+Dw6EA+Vw9ojg22/Fgr +HNEicDMgsGBRupZJlzRu/j6t8Qs6R60e6tWRMhFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUHER5S5l7ovql7Nk5z0Eur94akwwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzk5ZTM2YjZiLTAyMDgtNDRhMi1hNWYzLWRmM2JkMjU0ZmNkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37gwDQYJKoZIhvcNAQELBQADggEBABGZfbg/JxkFhXVLe3p6bSSXNklZ /fUb6E9G1+jJblJ0TG3jJIb1W3B/b/A+W6Anm/NilAhdaBAGHugrTrPvtAj8n6wb Q95GlGTm8Tq7TAg/+gKNicUzsnRREC5Jw1OqlaeZT5i/81wjZGu0ra7lrP3eTSKB aRtrQeojjRjkYqxlxY6TCjTkF2TZSXMbcoscU1BTc6XSMEtfSXbKvVzxicUBjx7J o6zKqBYqH54U7KzvZNF7C3FEPGFKPtRfcX7GOiXi4sg2/CfLmPpCOFD1lCIu708J 1Ua/lIb1xiZeVYsyE5grRHQ3+/+3dyygWvBumwE3Y4RL04xRfjKcKB3J2KI= -----END CERTIFICATE-----Generated at Sun Mar 1 23:37:16 2026 by rpki-client