$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aabc0a4e-ae35-481a-870c-636ab81ff119.roa File: aabc0a4e-ae35-481a-870c-636ab81ff119.roa (raw, json) Hash identifier: Tzga3NgZK0Bew/lQF/T0q6nhBm7kzRE/1Ni4vc/tj6o= Subject key identifier: A2:ED:AB:76:3C:B2:E1:C9:8F:88:E4:35:C8:FC:9F:96:A8:17:64:A7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 14CA20E3445E5D0A5AD9E38422B20C73B41E6C45 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aabc0a4e-ae35-481a-870c-636ab81ff119.roa Signing time: Sat 28 Feb 2026 02:21:47 +0000 ROA not before: Sat 28 Feb 2026 02:21:47 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 18.246.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ca:20:e3:44:5e:5d:0a:5a:d9:e3:84:22:b2:0c:73:b4:1e:6c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 28 02:21:47 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=3d49b831966a7fbd34e8cebec4cb6649feea6c8ba983ef8f5c9e06d335b710f6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:20:ed:8f:d9:e5:d4:83:09:f3:ec:98:6b:e8: 9a:fa:ef:df:a9:73:09:2a:44:71:ff:3e:55:b1:33: 29:5a:4e:6d:bd:80:52:42:06:93:4b:da:7d:87:c0: b8:bf:9f:3c:ca:b4:b7:6b:79:09:f9:5e:32:22:26: 4e:2f:15:b2:7b:8e:2d:bd:be:f2:f1:a8:c5:40:c1: 5d:3a:42:0b:08:70:ad:a4:df:00:c1:89:d1:39:a3: 4d:cb:2d:04:4e:10:5f:07:79:f7:ad:2d:fe:b1:d9: 33:ec:49:46:b9:14:e8:0c:6a:6c:6c:d5:69:35:cf: 59:36:7d:04:e2:1c:d6:b4:5c:13:3a:95:d5:59:94: 63:e6:12:80:ff:2f:c6:99:29:16:d3:c2:da:21:65: 5f:84:81:b2:b2:8f:8b:af:4e:dd:f2:1d:86:3a:d3: fd:92:4e:93:cc:84:3c:d3:ed:5d:56:25:3a:eb:3d: 72:63:81:d8:6c:4c:f4:92:3b:5a:26:f3:54:3d:dc: f5:b1:86:c2:61:49:fa:42:c4:68:59:a8:c4:28:2f: 5b:e6:93:24:32:12:00:ef:33:4a:06:ae:29:0c:d9: 3f:d8:d4:ce:28:5f:d8:5f:5d:ff:f1:b5:8a:b7:2b: 70:4c:2b:72:0b:3e:2d:bc:88:a8:9c:1e:ea:45:a1: 0e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:ED:AB:76:3C:B2:E1:C9:8F:88:E4:35:C8:FC:9F:96:A8:17:64:A7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aabc0a4e-ae35-481a-870c-636ab81ff119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.246.120.0/22 Signature Algorithm: sha256WithRSAEncryption 80:22:da:a5:9e:91:cd:b8:aa:32:76:b7:a1:56:26:84:b3:7e: 65:f3:11:22:eb:34:0d:0e:d6:30:67:70:e4:3d:c9:40:40:cd: 21:bf:f3:9e:b1:c7:12:07:c2:2f:69:21:6b:49:18:73:6b:76: 0e:47:b5:0f:c4:f3:a5:59:f5:e6:9e:18:22:e1:d5:90:af:23: e3:00:6a:c9:9d:d8:f2:da:3a:8d:af:d2:7b:95:aa:55:7e:a3: 45:c4:e8:89:29:c9:41:93:34:82:c2:f9:c5:52:dc:e9:1d:44: 8c:0d:9a:9a:c3:d8:fa:3f:e7:2f:a2:ae:24:af:6d:b0:0e:e0: 36:64:73:11:66:58:64:ee:51:8a:31:41:bf:7d:4c:4b:cb:b2: 50:cc:b6:1b:9f:41:53:3a:3d:10:f7:ed:01:70:0e:9b:82:ce: 60:88:72:fc:20:c3:b3:b8:bd:87:62:c5:29:e9:65:13:19:68: fb:b8:03:d8:be:b0:63:4c:03:38:66:71:d7:d3:31:40:28:6d: 41:1e:24:43:49:59:ac:f5:d8:e9:94:52:8f:e2:75:bd:07:85: a5:2a:1d:28:ed:e3:31:fb:6a:b8:f0:e6:61:57:4d:92:7c:2e: 8d:77:36:04:1b:71:ef:e6:38:c6:24:9e:56:e5:d7:95:4d:2a: 54:3c:8e:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFMog40ReXQpa2eOEIrIMc7QebEUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDIyMTQ3WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZDQ5YjgzMTk2NmE3ZmJkMzRlOGNlYmVjNGNiNjY0OWZl ZWE2YzhiYTk4M2VmOGY1YzllMDZkMzM1YjcxMGY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSIO2P2eXUgwnz7Jhr6Jr679+pcwkqRHH/PlWxMylaTm29 gFJCBpNL2n2HwLi/nzzKtLdreQn5XjIiJk4vFbJ7ji29vvLxqMVAwV06QgsIcK2k 3wDBidE5o03LLQROEF8HefetLf6x2TPsSUa5FOgMamxs1Wk1z1k2fQTiHNa0XBM6 ldVZlGPmEoD/L8aZKRbTwtohZV+EgbKyj4uvTt3yHYY60/2STpPMhDzT7V1WJTrr PXJjgdhsTPSSO1om81Q93PWxhsJhSfpCxGhZqMQoL1vmkyQyEgDvM0oGrikM2T/Y 1M4oX9hfXf/xtYq3K3BMK3ILPi28iKicHupFoQ5dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUou2rdjyy4cmPiOQ1yPyflqgXZKcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FhYmMwYTRlLWFlMzUtNDgxYS04NzBjLTYzNmFiODFmZjExOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIS9ngwDQYJKoZIhvcNAQELBQADggEBAIAi2qWekc24qjJ2t6FWJoSzfmXz ESLrNA0O1jBncOQ9yUBAzSG/856xxxIHwi9pIWtJGHNrdg5HtQ/E86VZ9eaeGCLh 1ZCvI+MAasmd2PLaOo2v0nuVqlV+o0XE6IkpyUGTNILC+cVS3OkdRIwNmprD2Po/ 5y+iriSvbbAO4DZkcxFmWGTuUYoxQb99TEvLslDMthufQVM6PRD37QFwDpuCzmCI cvwgw7O4vYdixSnpZRMZaPu4A9i+sGNMAzhmcdfTMUAobUEeJENJWaz12OmUUo/i db0HhaUqHSjt4zH7arjw5mFXTZJ8Lo13NgQbce/mOMYknlbl15VNKlQ8jmw= -----END CERTIFICATE-----Generated at Mon Mar 2 01:07:51 2026 by rpki-client