$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12443804-4c8c-4bf4-a6f3-7da42f5818bb.roa File: 12443804-4c8c-4bf4-a6f3-7da42f5818bb.roa (raw, json) Hash identifier: hMbK0zNSi2e0C2H5tj2f8gDrVr34YWvKmSy+PmfK3Qo= Subject key identifier: FD:8B:88:5F:55:21:5A:A0:9C:6C:D7:27:90:80:A8:B8:27:D8:09:75 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D1CE814BE9CC6EF60D072C393E9163D5A372141 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12443804-4c8c-4bf4-a6f3-7da42f5818bb.roa Signing time: Tue 12 May 2026 01:20:07 +0000 ROA not before: Tue 12 May 2026 01:20:07 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:1c:e8:14:be:9c:c6:ef:60:d0:72:c3:93:e9:16:3d:5a:37:21:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:20:07 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=e97e99637a01dd8b73727576d16d368e63e1b2bfb9cd2dc38665a61d7cecf825, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:66:8c:35:37:5c:4d:71:35:bf:63:f5:15:0a: 53:7d:e6:00:32:39:d5:d3:fe:48:32:de:3a:d2:5e: f4:01:61:01:f6:25:72:55:a6:56:ae:5f:d2:fa:8e: 5b:66:c7:2e:6e:3c:14:85:ee:2c:45:82:25:25:be: 12:29:5d:d9:60:e9:72:42:e6:ca:9d:c3:08:ff:3d: d9:33:73:6a:45:49:1f:57:d7:5b:59:91:b7:ce:b4: 7f:2f:72:21:43:f8:60:01:c5:44:f8:ea:f6:64:8a: 3c:46:c4:fc:49:b4:09:96:36:b8:de:ec:c1:e4:29: 74:91:9f:37:eb:a4:6a:d1:a6:9a:27:8e:2d:cc:74: 47:86:f4:3d:8a:29:e9:b5:c0:7b:be:7d:b1:b9:cc: c0:0c:6f:00:8d:29:16:e3:e3:9a:d3:6b:e3:9d:2d: fb:11:fd:c3:f6:de:35:ca:61:c5:46:d3:6d:be:af: 83:4e:89:a8:78:32:de:7f:57:06:ba:55:b9:32:db: 7c:81:0c:34:9f:4d:1d:31:9f:1a:26:13:8a:38:d0: 23:af:5d:92:74:6c:04:4c:50:9f:a2:ed:38:49:22: 0e:1d:1d:fa:3e:e8:c6:a3:1e:72:40:3f:eb:1a:44: 03:09:fd:cf:b4:c4:ca:f2:01:b4:23:96:c2:02:b1: ae:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8B:88:5F:55:21:5A:A0:9C:6C:D7:27:90:80:A8:B8:27:D8:09:75 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12443804-4c8c-4bf4-a6f3-7da42f5818bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.52.0/24 Signature Algorithm: sha256WithRSAEncryption 54:1f:68:6d:dc:2d:1a:02:2a:19:25:37:ba:40:ac:cc:5a:7b: a4:58:0f:86:e9:ba:ae:86:db:56:9b:63:cb:cb:d1:34:0e:1b: e2:10:d1:8f:47:cd:fa:93:d1:7f:9a:d9:62:25:89:02:75:17: b7:06:5e:51:82:2c:58:c6:20:f6:77:6a:9e:28:0b:1b:3e:1c: cb:8f:95:a4:59:28:e4:3f:81:62:50:dc:03:60:92:91:e5:e0: 9c:eb:d4:3c:15:e6:da:2c:85:30:a0:58:c4:67:a1:1d:cd:58: 96:1c:47:d0:4b:2e:12:82:80:b6:d9:41:20:45:a1:6b:bf:6c: 04:40:6f:7d:3c:b1:11:da:70:41:bb:94:3b:a9:53:cc:24:b1: 38:5a:e7:53:eb:37:71:50:2e:c4:f9:1c:d3:78:de:3f:ab:4e: 11:07:b0:c1:18:96:e0:f9:d3:86:93:54:57:67:72:e7:43:87: fe:09:dc:1e:9b:69:f1:27:e3:d2:f0:7b:90:52:94:9d:84:80: ac:96:e5:e0:c8:7e:5d:1e:4c:4b:61:73:24:b7:5b:d5:38:66: 90:ef:22:78:c1:72:74:03:79:b5:62:79:a4:03:7b:d6:71:cf: 6d:0d:b4:8a:f5:ed:fa:09:a6:de:05:87:8a:2c:f2:15:e9:64: 6d:20:4e:df -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbRzoFL6cxu9g0HLDk+kWPVo3IUEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDEyMDA3WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlOTdlOTk2MzdhMDFkZDhiNzM3Mjc1NzZkMTZkMzY4ZTYz ZTFiMmJmYjljZDJkYzM4NjY1YTYxZDdjZWNmODI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQZow1N1xNcTW/Y/UVClN95gAyOdXT/kgy3jrSXvQBYQH2 JXJVplauX9L6jltmxy5uPBSF7ixFgiUlvhIpXdlg6XJC5sqdwwj/Pdkzc2pFSR9X 11tZkbfOtH8vciFD+GABxUT46vZkijxGxPxJtAmWNrje7MHkKXSRnzfrpGrRppon ji3MdEeG9D2KKem1wHu+fbG5zMAMbwCNKRbj45rTa+OdLfsR/cP23jXKYcVG022+ r4NOiah4Mt5/Vwa6Vbky23yBDDSfTR0xnxomE4o40COvXZJ0bARMUJ+i7ThJIg4d Hfo+6MajHnJAP+saRAMJ/c+0xMryAbQjlsICsa6dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/YuIX1UhWqCcbNcnkICouCfYCXUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEyNDQzODA0LTRjOGMtNGJmNC1hNmYzLTdkYTQyZjU4MThiYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmDQwDQYJKoZIhvcNAQELBQADggEBAFQfaG3cLRoCKhklN7pArMxae6RY D4bpuq6G21abY8vL0TQOG+IQ0Y9HzfqT0X+a2WIliQJ1F7cGXlGCLFjGIPZ3ap4o Cxs+HMuPlaRZKOQ/gWJQ3ANgkpHl4Jzr1DwV5toshTCgWMRnoR3NWJYcR9BLLhKC gLbZQSBFoWu/bARAb308sRHacEG7lDupU8wksTha51PrN3FQLsT5HNN43j+rThEH sMEYluD504aTVFdncudDh/4J3B6bafEn49Lwe5BSlJ2EgKyW5eDIfl0eTEthcyS3 W9U4ZpDvInjBcnQDebVieaQDe9Zxz20NtIr17foJpt4Fh4os8hXpZG0gTt8= -----END CERTIFICATE-----Generated at Wed May 13 00:57:03 2026 by rpki-client