$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa File: dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa (raw, json) Hash identifier: 1MggFfNtOAmNC2R3NxVbajxPqvkAtXKVqDzaNcPwTl4= Subject key identifier: 83:DC:C1:DF:D8:35:8B:11:30:23:F2:17:8B:75:64:69:03:22:40:47 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 49A75FFFFA2AAABF6FC6A130CF93867E8EDD628B Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa Signing time: Wed 11 Feb 2026 00:30:18 +0000 ROA not before: Wed 11 Feb 2026 00:30:18 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a7:5f:ff:fa:2a:aa:bf:6f:c6:a1:30:cf:93:86:7e:8e:dd:62:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 11 00:30:18 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=3fc826f2cc10d2be015ed8c473784559975376d7c18717563bd05aee951e75c7, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ec:c2:c9:c4:01:ef:e8:d6:d6:39:6a:ad:1a: 4f:74:f9:ec:4d:5e:28:55:aa:4c:4b:8f:94:56:a2: 57:f8:f8:c8:b8:42:3a:19:65:2c:97:0a:3a:2d:39: 75:8c:dc:93:11:1e:19:0d:12:fd:09:68:b2:3c:f2: ee:2a:db:40:48:a3:39:bd:7d:1a:7e:32:24:a1:00: 56:21:95:c5:62:0f:30:cf:4d:63:ca:bf:31:03:37: e0:08:48:df:2d:9f:0b:66:67:08:52:cd:bd:08:7b: d8:39:06:32:74:63:a7:6d:5c:44:ed:91:59:a0:ba: 93:1e:49:c2:1c:35:ec:09:e7:7c:29:f3:47:bd:3b: 18:a6:29:c1:3f:bb:cc:fd:b2:85:dc:ca:03:12:05: c4:ea:fe:88:f9:54:b8:9f:1c:a9:19:b6:c9:4c:84: d1:b9:df:ff:3e:67:c5:dd:16:81:9b:32:f5:c7:5e: 10:5a:0d:43:26:57:60:2e:2a:1e:5a:6e:46:d1:9d: 09:0b:61:d5:f8:0d:d5:af:d3:2b:af:8f:da:16:68: 13:34:2b:3c:ae:b7:76:9e:a2:23:3d:13:38:c0:98: 54:8e:2d:78:47:fc:e7:af:1a:30:88:c0:24:c4:de: 93:8f:3f:be:be:96:f3:89:4f:3c:48:d2:7d:21:a1: 5f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DC:C1:DF:D8:35:8B:11:30:23:F2:17:8B:75:64:69:03:22:40:47 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.189.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:0f:a6:1e:d9:b3:01:66:af:7a:d1:15:8b:87:4f:92:15:40: e3:fd:b0:e3:32:2e:17:cb:80:62:d2:5d:21:f0:25:fe:f2:16: 3d:d2:e1:7e:53:2a:7e:44:ce:95:e7:be:06:b2:58:3f:69:80: d4:f7:12:35:31:23:73:b1:70:a8:9d:15:4e:3a:a3:1f:62:c9: 2e:a2:b2:aa:b5:e4:c1:35:fd:71:ff:97:bf:78:14:fe:00:3c: e0:05:9e:99:14:5c:74:02:46:8c:dd:53:63:b2:5d:58:9c:f2: 27:01:5c:c9:65:11:cc:b2:40:a2:90:46:d1:35:78:08:4c:83: 4f:97:b4:12:85:21:9f:60:65:97:71:82:83:76:87:c9:d0:ec: ff:09:63:6f:28:83:a2:26:94:29:c4:cd:ab:33:72:63:c9:b4: 87:1b:97:96:28:c3:88:a0:e9:91:a7:c9:70:32:fe:5a:31:31: 76:f4:f2:9e:42:ea:35:a9:3f:1e:4c:a5:db:7c:44:99:0f:ed: b4:2c:69:5c:e4:0a:8f:8e:59:da:ba:99:31:ce:40:99:ab:10: 59:56:89:2d:3b:0b:a2:2b:27:fd:c0:6c:eb:25:af:23:0a:cf: a2:fc:55:1f:6b:7a:f1:86:03:9f:e7:33:44:49:5d:a7:f4:16: 00:b6:45:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSadf//oqqr9vxqEwz5OGfo7dYoswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwMjExMDAzMDE4WhcNMjYwNTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZmM4MjZmMmNjMTBkMmJlMDE1ZWQ4YzQ3Mzc4NDU1OTk3 NTM3NmQ3YzE4NzE3NTYzYmQwNWFlZTk1MWU3NWM3MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC7MLJxAHv6NbWOWqtGk90+exNXihVqkxLj5RWolf4+Mi4 QjoZZSyXCjotOXWM3JMRHhkNEv0JaLI88u4q20BIozm9fRp+MiShAFYhlcViDzDP TWPKvzEDN+AISN8tnwtmZwhSzb0Ie9g5BjJ0Y6dtXETtkVmgupMeScIcNewJ53wp 80e9OximKcE/u8z9soXcygMSBcTq/oj5VLifHKkZtslMhNG53/8+Z8XdFoGbMvXH XhBaDUMmV2AuKh5abkbRnQkLYdX4DdWv0yuvj9oWaBM0Kzyut3aeoiM9EzjAmFSO LXhH/OevGjCIwCTE3pOPP76+lvOJTzxI0n0hoV9NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUg9zB39g1ixEwI/IXi3VkaQMiQEcwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2RjZTJkYjkzLThmYjctNDJiOS1iZTU2LTIzZjQ2YjViZjRlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM370wDQYJKoZIhvcNAQELBQADggEBAIoPph7ZswFmr3rRFYuHT5IVQOP9 sOMyLhfLgGLSXSHwJf7yFj3S4X5TKn5EzpXnvgayWD9pgNT3EjUxI3OxcKidFU46 ox9iyS6isqq15ME1/XH/l794FP4APOAFnpkUXHQCRozdU2OyXVic8icBXMllEcyy QKKQRtE1eAhMg0+XtBKFIZ9gZZdxgoN2h8nQ7P8JY28og6ImlCnEzaszcmPJtIcb l5Yow4ig6ZGnyXAy/loxMXb08p5C6jWpPx5Mpdt8RJkP7bQsaVzkCo+OWdq6mTHO QJmrEFlWiS07C6IrJ/3AbOslryMKz6L8VR9revGGA5/nM0RJXaf0FgC2RQk= -----END CERTIFICATE-----Generated at Sun Mar 1 21:45:08 2026 by rpki-client