$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9d1ebba-14fa-4b1f-b3c0-13a5bae7391f.roa File: a9d1ebba-14fa-4b1f-b3c0-13a5bae7391f.roa (raw, json) Hash identifier: d/e1LugHwAr+Opqdoq41xSEKzNKH/xIhwZXtbr66Cy4= Subject key identifier: 87:2F:49:89:8F:63:1A:8B:89:CB:92:12:26:93:84:B0:BD:FE:0B:B7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 31CA73014E46B55F3BA6CA3BC981E0DE2A602674 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9d1ebba-14fa-4b1f-b3c0-13a5bae7391f.roa Signing time: Mon 02 Mar 2026 00:00:07 +0000 ROA not before: Mon 02 Mar 2026 00:00:07 +0000 ROA not after: Sun 31 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.86.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ca:73:01:4e:46:b5:5f:3b:a6:ca:3b:c9:81:e0:de:2a:60:26:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 2 00:00:07 2026 GMT Not After : May 31 23:59:59 2026 GMT Subject: serialNumber=402b5919084d8bf219279f781fe10356abe7ec603e89d7ee4bb65d776977ddc3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:aa:61:08:e7:b5:b7:69:c7:c7:15:fc:6a:d9: 39:0e:ef:dd:88:dc:ff:dd:6d:20:5c:8d:86:dd:e1: 9c:8f:5d:86:d6:5d:27:ed:6d:97:cf:a9:f0:43:c0: 3c:6d:af:2b:a1:dd:f2:c3:0f:f6:d1:07:39:df:fc: a0:f6:29:d9:d8:e8:2d:b9:a3:a8:e2:7d:70:dd:e3: ac:dc:28:0e:6c:39:d4:d2:c4:00:e8:fb:53:de:f3: 69:3f:42:05:0a:09:ac:b2:a7:4f:67:70:41:de:9f: bb:8a:c6:33:32:71:a9:5a:cf:6a:1c:da:fd:cf:bb: 5d:24:2e:af:9a:a7:9a:f5:bf:2c:72:c3:1a:17:bd: d9:81:4a:1e:fe:80:fe:92:0f:a8:12:5d:8e:6f:4f: e7:37:2a:c0:5f:e7:9d:e2:a8:c0:5e:37:34:ae:7c: 6f:4b:5c:6c:a7:d5:a4:96:c1:93:15:73:ba:60:da: aa:2b:08:fd:fd:4d:41:6d:eb:2f:79:1d:19:0b:2a: d5:46:9a:26:37:e4:24:e7:ff:87:f2:66:11:88:b7: dd:e7:28:91:47:34:90:9a:f8:6f:26:a7:d7:69:99: 1c:29:2e:e1:d7:68:05:e1:9a:c8:46:a4:0b:2e:9d: 62:88:80:c0:7e:41:39:b6:a7:63:27:8b:1b:54:ab: 99:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2F:49:89:8F:63:1A:8B:89:CB:92:12:26:93:84:B0:BD:FE:0B:B7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9d1ebba-14fa-4b1f-b3c0-13a5bae7391f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.86.0.0/16 Signature Algorithm: sha256WithRSAEncryption 39:84:51:b7:e2:32:57:a6:19:15:b0:a0:8e:62:f0:82:ef:6c: 8d:ba:47:1f:60:c1:75:c9:1c:9a:be:21:fa:6a:8f:7b:1d:5a: 28:cd:6d:1b:9b:aa:99:19:0c:6b:75:85:1a:ec:69:95:1d:eb: 34:bb:fe:2a:87:5a:9e:b5:b4:51:45:8d:2e:9c:13:59:a3:39: f7:0f:87:84:2c:98:bb:00:28:12:21:5b:89:35:d6:dc:15:51: d0:bc:75:b6:e0:6d:5a:ff:ef:00:eb:e0:c6:5b:56:f0:28:df: 3b:98:4a:7d:35:a1:0c:32:be:31:66:e6:ae:f8:c8:9c:56:79: ed:4c:e2:d6:73:f7:d0:7a:a4:dd:ba:fc:ad:4c:a1:bb:1f:23: a6:81:63:aa:9c:41:67:73:fb:38:ad:92:76:d5:ff:7b:76:bf: d6:a8:85:3f:ae:0c:e9:b1:f3:62:6d:60:f2:87:3a:32:7f:59: 2a:18:62:61:5a:49:e7:bc:17:7b:4f:7b:de:28:65:d0:9f:b9: 5a:11:2b:dc:c9:45:fd:69:3a:d2:be:ea:c5:5d:8b:29:12:ed: f9:c4:65:8b:e0:1d:dc:8c:e3:1e:3a:7e:a4:71:62:52:48:b9: 1e:4c:70:8c:96:ef:23:5c:e5:9c:68:c5:dd:94:66:ed:85:25: f2:81:72:d2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMcpzAU5GtV87pso7yYHg3ipgJnQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzAyMDAwMDA3WhcNMjYwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDJiNTkxOTA4NGQ4YmYyMTkyNzlmNzgxZmUxMDM1NmFi ZTdlYzYwM2U4OWQ3ZWU0YmI2NWQ3NzY5NzdkZGMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0qmEI57W3acfHFfxq2TkO792I3P/dbSBcjYbd4ZyPXYbW XSftbZfPqfBDwDxtryuh3fLDD/bRBznf/KD2KdnY6C25o6jifXDd46zcKA5sOdTS xADo+1Pe82k/QgUKCayyp09ncEHen7uKxjMycalaz2oc2v3Pu10kLq+ap5r1vyxy wxoXvdmBSh7+gP6SD6gSXY5vT+c3KsBf553iqMBeNzSufG9LXGyn1aSWwZMVc7pg 2qorCP39TUFt6y95HRkLKtVGmiY35CTn/4fyZhGIt93nKJFHNJCa+G8mp9dpmRwp LuHXaAXhmshGpAsunWKIgMB+QTm2p2MnixtUq5nHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUhy9JiY9jGouJy5ISJpOEsL3+C7cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E5ZDFlYmJhLTE0ZmEtNGIxZi1iM2MwLTEzYTViYWU3MzkxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBjVjANBgkqhkiG9w0BAQsFAAOCAQEAOYRRt+IyV6YZFbCgjmLwgu9sjbpH H2DBdckcmr4h+mqPex1aKM1tG5uqmRkMa3WFGuxplR3rNLv+KodanrW0UUWNLpwT WaM59w+HhCyYuwAoEiFbiTXW3BVR0Lx1tuBtWv/vAOvgxltW8CjfO5hKfTWhDDK+ MWbmrvjInFZ57Uzi1nP30Hqk3br8rUyhux8jpoFjqpxBZ3P7OK2SdtX/e3a/1qiF P64M6bHzYm1g8oc6Mn9ZKhhiYVpJ57wXe0973ihl0J+5WhEr3MlF/Wk60r7qxV2L KRLt+cRli+Ad3IzjHjp+pHFiUki5HkxwjJbvI1zlnGjF3ZRm7YUl8oFy0g== -----END CERTIFICATE-----Generated at Tue Mar 17 10:04:03 2026 by rpki-client