$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03ba494e-912d-4221-91f2-fa206eaee885.roa File: 03ba494e-912d-4221-91f2-fa206eaee885.roa (raw, json) Hash identifier: DxeFYxb+HhE5ZoW4403VOrPTCT1Q40nL5VGpRSV4/TM= Subject key identifier: B3:0B:EC:DA:FA:96:15:C9:7B:11:9D:4E:92:B3:0E:34:D4:FF:CA:97 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 03C693087A8619E5125C68D0F7176717CC77ABDF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03ba494e-912d-4221-91f2-fa206eaee885.roa Signing time: Tue 12 May 2026 01:20:55 +0000 ROA not before: Tue 12 May 2026 01:20:55 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c6:93:08:7a:86:19:e5:12:5c:68:d0:f7:17:67:17:cc:77:ab:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:20:55 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=aae00cdaf11ee5b8b611c844066b0ea9e69ac9bf19e5cdccece73a7644667e2a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:02:1c:7b:b7:d6:68:ed:51:da:b5:ee:15:10: 75:fa:2c:64:bd:3e:f7:45:68:45:29:39:fe:25:92: 07:9f:ea:9c:99:b5:75:6c:58:a1:86:93:84:5d:2d: 65:0a:e7:7a:b9:5c:82:0f:a9:50:bd:f7:7c:d3:b9: 9f:39:65:f5:38:fb:5c:ae:99:92:db:aa:bf:80:de: 60:0c:c2:d6:8f:23:f3:e8:d0:a1:e9:98:9e:9a:89: 1f:d5:bb:c8:01:93:ef:41:a1:90:cf:e5:b0:d9:18: 3e:38:d1:e1:13:6c:fb:22:be:7d:b3:17:c3:30:3e: b9:c7:5c:93:aa:af:a9:f0:86:65:0d:6e:31:a1:ec: 4d:55:7b:39:e7:13:43:7d:c2:2a:96:f0:f5:d8:b3: 96:6c:07:b0:4b:5f:54:ff:10:a3:11:90:27:08:fb: d8:fd:4f:e5:cd:5b:37:80:3c:ac:48:c7:dc:db:32: e0:2e:24:94:8c:90:72:d5:43:35:1b:d1:fe:f5:92: f9:14:bc:05:f8:2b:d7:6c:7d:45:86:4a:a4:fd:3c: ad:86:1e:1b:70:82:a5:22:51:8c:95:86:44:67:41: 49:27:b2:fe:57:0f:82:17:13:2c:b9:34:28:f5:f0: 05:b3:2b:67:e0:f6:82:4c:05:54:ee:cf:28:c1:a1: 30:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0B:EC:DA:FA:96:15:C9:7B:11:9D:4E:92:B3:0E:34:D4:FF:CA:97 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03ba494e-912d-4221-91f2-fa206eaee885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.69.0/24 Signature Algorithm: sha256WithRSAEncryption 45:e8:da:f2:65:d6:21:aa:69:34:cb:0f:17:f2:91:b7:1f:e8: 02:7b:bc:dc:19:e7:d5:29:fa:e5:2e:79:e2:5a:0e:3d:d7:13: 5c:43:38:cd:b6:68:2e:45:14:99:a9:d4:ce:be:0a:0e:be:b2: de:39:f5:6b:cb:82:83:6a:0a:28:60:08:b6:86:c2:98:27:3d: 3f:73:7b:19:dc:5f:68:6a:b1:97:82:bf:2b:ce:39:f9:39:8e: 65:1e:a0:14:ef:6d:2b:32:bc:78:d9:73:3f:db:3d:03:8e:34: fd:2a:31:aa:6a:63:78:80:48:e6:3a:27:a2:27:64:70:15:75: 59:8a:ba:ce:6e:f4:8d:b5:70:40:4d:f5:28:dc:46:80:f6:57: 05:fb:7b:c1:fa:2d:8e:c8:3a:59:2b:4a:e2:a6:06:2e:50:8f: 74:8e:45:60:68:9f:c3:b6:34:88:f1:9a:df:3b:71:24:91:8c: b4:f2:f4:89:85:09:ac:22:fb:62:6c:10:c7:e3:ad:5f:8e:60: 93:7c:c5:bd:c5:8e:ee:4e:84:27:35:60:e4:96:eb:84:68:84: 67:48:85:fd:da:cb:0b:ea:0a:bb:c0:4a:a7:97:b9:f7:b0:a6: d1:5d:9a:9b:59:b7:6c:dc:8f:8a:14:28:8f:67:c4:3c:0b:b0: e5:63:39:f0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA8aTCHqGGeUSXGjQ9xdnF8x3q98wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDEyMDU1WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYWUwMGNkYWYxMWVlNWI4YjYxMWM4NDQwNjZiMGVhOWU2 OWFjOWJmMTllNWNkY2NlY2U3M2E3NjQ0NjY3ZTJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQAhx7t9Zo7VHate4VEHX6LGS9PvdFaEUpOf4lkgef6pyZ tXVsWKGGk4RdLWUK53q5XIIPqVC993zTuZ85ZfU4+1yumZLbqr+A3mAMwtaPI/Po 0KHpmJ6aiR/Vu8gBk+9BoZDP5bDZGD440eETbPsivn2zF8MwPrnHXJOqr6nwhmUN bjGh7E1VeznnE0N9wiqW8PXYs5ZsB7BLX1T/EKMRkCcI+9j9T+XNWzeAPKxIx9zb MuAuJJSMkHLVQzUb0f71kvkUvAX4K9dsfUWGSqT9PK2GHhtwgqUiUYyVhkRnQUkn sv5XD4IXEyy5NCj18AWzK2fg9oJMBVTuzyjBoTBVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUswvs2vqWFcl7EZ1OkrMONNT/ypcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzYmE0OTRlLTkxMmQtNDIyMS05MWYyLWZhMjA2ZWFlZTg4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmEUwDQYJKoZIhvcNAQELBQADggEBAEXo2vJl1iGqaTTLDxfykbcf6AJ7 vNwZ59Up+uUueeJaDj3XE1xDOM22aC5FFJmp1M6+Cg6+st459WvLgoNqCihgCLaG wpgnPT9zexncX2hqsZeCvyvOOfk5jmUeoBTvbSsyvHjZcz/bPQOONP0qMapqY3iA SOY6J6InZHAVdVmKus5u9I21cEBN9SjcRoD2VwX7e8H6LY7IOlkrSuKmBi5Qj3SO RWBon8O2NIjxmt87cSSRjLTy9ImFCawi+2JsEMfjrV+OYJN8xb3Fju5OhCc1YOSW 64RohGdIhf3aywvqCrvASqeXufewptFdmptZt2zcj4oUKI9nxDwLsOVjOfA= -----END CERTIFICATE-----Generated at Wed May 13 02:22:43 2026 by rpki-client