$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b5097f8-8740-437f-8ecd-21820985b249.roa File: 0b5097f8-8740-437f-8ecd-21820985b249.roa (raw, json) Hash identifier: ynv43aMieD5W5I+zQYxOL1UtJXisFb1qyf8BIQqYAMQ= Subject key identifier: 92:3D:8E:DB:72:1D:CD:A3:7E:AA:3F:25:89:A4:03:CA:CD:83:F1:C6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3495C683DA2DE2AD58AF7C52F1BCF7C72665F914 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b5097f8-8740-437f-8ecd-21820985b249.roa Signing time: Mon 04 May 2026 01:20:55 +0000 ROA not before: Mon 04 May 2026 01:20:55 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 13.152.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:95:c6:83:da:2d:e2:ad:58:af:7c:52:f1:bc:f7:c7:26:65:f9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 01:20:55 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=7fe1886a53a57952003a0755c21e4377863337da369d72449b29f961a0dee772, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6d:4f:8e:0a:22:1c:63:9c:22:bd:31:24:59: 72:70:a0:90:3d:f2:5b:4c:96:e3:a6:61:c6:fc:4a: 9c:ce:8b:0d:89:15:4f:ef:55:96:4b:da:ec:88:62: 44:13:b7:fb:6b:eb:00:28:87:02:96:dd:ec:c2:97: dc:9f:31:26:1b:a0:3b:29:2d:ba:e9:5a:bc:a2:e8: 5c:de:4f:ce:da:1f:11:56:d6:d7:83:61:46:89:9a: 77:ba:01:fa:29:ce:d9:79:cf:30:43:38:e8:e2:36: 3f:78:f8:3e:9f:c4:08:cb:49:83:fd:40:8e:31:be: 02:38:7e:e8:9c:ea:14:95:53:de:18:cf:86:81:ae: 37:24:7c:8e:57:b4:36:55:d8:35:c2:79:aa:fc:35: 1e:85:df:ff:10:a6:e2:5e:ab:66:c6:45:2a:6f:20: b8:b8:b9:a8:5e:c6:e4:86:39:3f:54:ec:47:10:05: 5e:df:d0:b3:72:4d:32:cb:80:ca:b4:b4:06:ac:4a: 70:21:63:97:ea:6f:41:18:8a:4d:95:a1:e8:f7:6c: b0:d2:3c:f0:42:6f:ad:d5:47:38:5d:ad:4a:fd:fd: e4:3e:63:3c:48:0d:e5:4a:cb:62:2a:c6:eb:87:4f: ad:be:5a:e1:93:d9:5f:fd:49:0e:9c:23:4e:72:19: 47:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3D:8E:DB:72:1D:CD:A3:7E:AA:3F:25:89:A4:03:CA:CD:83:F1:C6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b5097f8-8740-437f-8ecd-21820985b249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.152.16.0/21 Signature Algorithm: sha256WithRSAEncryption 6b:56:dc:a8:4c:a5:44:7e:66:50:38:22:4f:87:56:d8:56:9b: a4:f1:b8:97:f9:01:5c:16:36:90:c7:92:a0:40:b1:d7:4d:3f: cc:4b:40:84:42:1e:6f:c9:4d:d4:ef:58:fe:5a:ce:7d:86:2e: 3b:a8:1e:44:e6:27:84:fb:d8:e1:21:0c:db:d2:6a:76:b4:94: a0:dd:47:9b:c7:92:3a:73:29:ad:31:db:fb:dd:1a:0d:b7:96: 74:10:dc:e5:85:06:e5:f0:9d:78:77:60:6a:2e:67:db:7b:13: 3b:48:be:ca:54:74:4e:4f:1e:5e:50:d4:bd:52:58:c5:31:ba: e9:99:02:26:76:d2:b1:d5:0c:1e:28:54:e5:0b:1d:36:66:3c: 21:b2:6b:0b:7a:c3:28:e6:70:fe:6a:5c:ca:d1:d7:8f:1f:c2: 9f:37:e6:bf:6f:04:ce:fc:09:5e:36:8e:61:4e:66:85:9d:5f: 90:3f:88:d0:d2:f6:3e:7d:85:53:8f:d0:a6:71:05:21:11:30: 7e:19:9f:eb:5e:ef:4c:41:1d:a5:d6:7c:4a:04:f8:84:da:82: fb:15:cb:97:be:76:85:ec:b5:11:26:75:52:d6:36:30:91:8c: 0f:10:74:81:15:69:d5:aa:73:f0:fe:7b:b5:0d:af:15:f2:61: 34:00:22:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNJXGg9ot4q1Yr3xS8bz3xyZl+RQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDEyMDU1WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZmUxODg2YTUzYTU3OTUyMDAzYTA3NTVjMjFlNDM3Nzg2 MzMzN2RhMzY5ZDcyNDQ5YjI5Zjk2MWEwZGVlNzcyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvbU+OCiIcY5wivTEkWXJwoJA98ltMluOmYcb8SpzOiw2J FU/vVZZL2uyIYkQTt/tr6wAohwKW3ezCl9yfMSYboDspLbrpWryi6FzeT87aHxFW 1teDYUaJmne6Afopztl5zzBDOOjiNj94+D6fxAjLSYP9QI4xvgI4fuic6hSVU94Y z4aBrjckfI5XtDZV2DXCear8NR6F3/8QpuJeq2bGRSpvILi4uahexuSGOT9U7EcQ BV7f0LNyTTLLgMq0tAasSnAhY5fqb0EYik2Voej3bLDSPPBCb63VRzhdrUr9/eQ+ YzxIDeVKy2IqxuuHT62+WuGT2V/9SQ6cI05yGUcpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkj2O23IdzaN+qj8liaQDys2D8cYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBiNTA5N2Y4LTg3NDAtNDM3Zi04ZWNkLTIxODIwOTg1YjI0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMNmBAwDQYJKoZIhvcNAQELBQADggEBAGtW3KhMpUR+ZlA4Ik+HVthWm6Tx uJf5AVwWNpDHkqBAsddNP8xLQIRCHm/JTdTvWP5azn2GLjuoHkTmJ4T72OEhDNvS ana0lKDdR5vHkjpzKa0x2/vdGg23lnQQ3OWFBuXwnXh3YGouZ9t7EztIvspUdE5P Hl5Q1L1SWMUxuumZAiZ20rHVDB4oVOULHTZmPCGyawt6wyjmcP5qXMrR148fwp83 5r9vBM78CV42jmFOZoWdX5A/iNDS9j59hVOP0KZxBSERMH4Zn+te70xBHaXWfEoE +ITagvsVy5e+doXstREmdVLWNjCRjA8QdIEVadWqc/D+e7UNrxXyYTQAIiM= -----END CERTIFICATE-----Generated at Wed May 13 03:20:13 2026 by rpki-client