$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2565a3ad-74c8-4465-b499-1a3d93bc9946.roa File: 2565a3ad-74c8-4465-b499-1a3d93bc9946.roa (raw, json) Hash identifier: paaGnD4p27VVzWYqDPePGXwrhLla0g097nZGSML2nws= Subject key identifier: B5:10:ED:66:27:BA:C4:BC:13:FF:29:72:44:4A:F2:97:70:A8:82:30 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 77419D2B1C3BB03ECAF38F8E421273710E02A684 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2565a3ad-74c8-4465-b499-1a3d93bc9946.roa Signing time: Tue 03 Mar 2026 19:21:55 +0000 ROA not before: Tue 03 Mar 2026 19:21:55 +0000 ROA not after: Mon 01 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.180.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:41:9d:2b:1c:3b:b0:3e:ca:f3:8f:8e:42:12:73:71:0e:02:a6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 3 19:21:55 2026 GMT Not After : Jun 1 23:59:59 2026 GMT Subject: serialNumber=967074f6f5eb53ea75536f86e47c47fd188c881fc6243903644a69eb36bd808b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:33:e6:18:93:1c:46:71:62:a3:09:e5:a0: 6d:5d:78:16:00:e2:37:ef:0d:95:6f:78:fe:b2:be: b5:24:62:8a:1e:1d:f7:6b:33:39:c0:c2:69:4d:15: 24:50:e0:5e:53:4e:90:7f:e3:7e:85:75:36:20:58: 78:9e:a9:5e:dd:62:a5:6b:ae:c2:e6:aa:83:f5:0b: 92:c6:2a:78:52:1a:1a:18:e1:58:40:d1:78:7e:e2: 35:cc:89:ac:c9:b9:4b:a5:52:f9:7b:bc:66:f9:24: a1:58:4f:20:ec:77:c8:a2:c8:d4:76:9a:41:26:31: 9f:6a:f9:37:67:77:a4:51:9b:04:64:49:c8:2a:31: 38:89:77:2b:6d:d2:1a:fe:f4:72:2e:c6:37:00:40: e5:f9:b0:8f:4f:92:81:85:d0:87:a1:3c:67:c7:8c: 89:e9:2f:0e:6b:1e:64:52:e2:12:97:42:11:e2:41: 0f:cf:41:bd:9e:1c:81:dc:2b:d7:14:da:db:ae:56: 2b:87:9f:17:8b:27:88:a5:71:52:1d:9e:c4:42:7d: 88:60:f7:da:26:ef:dd:69:7a:a1:71:dd:ed:1d:4e: 71:9a:d1:81:2d:16:c6:be:8e:80:8a:b6:d4:87:c8: af:00:bd:a3:22:1f:c3:3b:f1:cb:ed:07:06:69:7f: 25:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:10:ED:66:27:BA:C4:BC:13:FF:29:72:44:4A:F2:97:70:A8:82:30 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2565a3ad-74c8-4465-b499-1a3d93bc9946.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.180.0.0/17 Signature Algorithm: sha256WithRSAEncryption 41:13:44:3d:d7:82:30:f8:96:87:68:e9:2f:61:09:c4:01:b0: 76:01:19:1a:82:d5:5a:c8:f4:b7:b7:08:3c:3a:6b:f8:8f:44: 12:36:fa:42:7f:b5:88:47:04:2e:2f:d6:2f:a2:bd:0f:34:a1: 52:90:ab:3c:0c:e5:3f:9e:92:8f:01:69:94:9c:98:ec:f3:68: 7d:15:82:a6:2e:94:86:15:9d:a9:54:8b:b2:fa:08:f8:72:1f: 43:cf:97:8d:8d:b9:17:25:21:51:c3:41:40:58:06:ba:26:4b: e0:b2:b0:36:da:69:8c:ec:b4:9d:a8:05:6b:9e:d0:c3:13:4e: 50:9a:22:74:fa:62:6a:7f:36:1f:e0:eb:0c:d4:24:53:1e:ac: 00:34:8d:f0:60:a8:5a:17:d6:70:08:34:05:71:fb:a8:41:3c: ce:56:48:b8:9f:f8:9c:97:9a:30:1e:8c:7b:9a:98:02:e4:d2: bf:d1:1c:e3:36:31:71:8e:24:82:64:bb:e2:df:f5:87:ab:66: a5:43:11:6d:29:56:ae:ac:bd:ac:dd:c0:0f:6a:76:2c:ae:a3: 90:57:f2:70:1c:3a:65:69:52:87:45:5b:63:dc:e7:d0:1c:22: 08:84:8b:d8:e7:da:7b:f2:1b:a0:59:0b:86:ac:a5:be:db:ab: ec:a9:c2:fb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUd0GdKxw7sD7K84+OQhJzcQ4CpoQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzAzMTkyMTU1WhcNMjYwNjAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjcwNzRmNmY1ZWI1M2VhNzU1MzZmODZlNDdjNDdmZDE4 OGM4ODFmYzYyNDM5MDM2NDRhNjllYjM2YmQ4MDhiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8ZTPmGJMcRnFiownloG1deBYA4jfvDZVveP6yvrUkYooe HfdrMznAwmlNFSRQ4F5TTpB/436FdTYgWHieqV7dYqVrrsLmqoP1C5LGKnhSGhoY 4VhA0Xh+4jXMiazJuUulUvl7vGb5JKFYTyDsd8iiyNR2mkEmMZ9q+Tdnd6RRmwRk ScgqMTiJdytt0hr+9HIuxjcAQOX5sI9PkoGF0IehPGfHjInpLw5rHmRS4hKXQhHi QQ/PQb2eHIHcK9cU2tuuViuHnxeLJ4ilcVIdnsRCfYhg99om791peqFx3e0dTnGa 0YEtFsa+joCKttSHyK8AvaMiH8M78cvtBwZpfyVdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtRDtZie6xLwT/ylyREryl3CogjAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI1NjVhM2FkLTc0YzgtNDQ2NS1iNDk5LTFhM2Q5M2JjOTk0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcQtAAwDQYJKoZIhvcNAQELBQADggEBAEETRD3XgjD4lodo6S9hCcQBsHYB GRqC1VrI9Le3CDw6a/iPRBI2+kJ/tYhHBC4v1i+ivQ80oVKQqzwM5T+eko8BaZSc mOzzaH0VgqYulIYVnalUi7L6CPhyH0PPl42NuRclIVHDQUBYBromS+CysDbaaYzs tJ2oBWue0MMTTlCaInT6Ymp/Nh/g6wzUJFMerAA0jfBgqFoX1nAINAVx+6hBPM5W SLif+JyXmjAejHuamALk0r/RHOM2MXGOJIJku+Lf9YerZqVDEW0pVq6svazdwA9q diyuo5BX8nAcOmVpUodFW2Pc59AcIgiEi9jn2nvyG6BZC4aspb7bq+ypwvs= -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:11 2026 by rpki-client