$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12cea5c8-fa20-49e2-853f-dc186ae6b6df.roa File: 12cea5c8-fa20-49e2-853f-dc186ae6b6df.roa (raw, json) Hash identifier: Yku+8Y62xVRbWIYLTVcMj2W7QztzShuJoo5uzyLIJgc= Subject key identifier: D8:37:93:C5:EE:E1:DD:A8:8B:D5:22:7B:A7:D1:1D:9A:C8:19:25:64 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2C153D1199217F900446A4FE1631605FE1101314 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12cea5c8-fa20-49e2-853f-dc186ae6b6df.roa Signing time: Sat 09 May 2026 00:11:31 +0000 ROA not before: Sat 09 May 2026 00:11:31 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.226.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:15:3d:11:99:21:7f:90:04:46:a4:fe:16:31:60:5f:e1:10:13:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:11:31 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=ebb7a28bb590ad567c370f05500ee01344b9cacaff8d017d72e484f92b2c3373, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a9:92:45:ac:c2:a6:20:61:b3:32:00:4d:ac: eb:81:3c:20:85:99:97:9a:98:86:db:f0:f3:c3:b9: e7:97:1f:5a:a2:c4:66:ee:f9:c4:f0:6b:84:59:d3: 2b:e0:2f:9a:92:38:d4:e7:88:f5:c7:90:70:75:1b: 02:09:f1:0e:3e:f2:38:2d:12:6a:04:48:36:7e:0b: 82:7d:f8:95:6f:5d:70:d3:fe:22:77:9e:b6:6f:e4: 30:2e:6e:c5:aa:6f:fd:4e:9e:b0:7b:c2:2c:75:b9: 12:77:12:3b:e8:7f:65:87:c8:84:a3:87:ef:0e:09: dc:63:2e:b2:f4:bf:2e:da:b9:62:19:96:fe:cc:1f: f8:ef:d3:0e:41:eb:9e:ad:b9:15:12:cf:87:f6:40: 1e:bb:bb:e0:1d:c5:37:9c:0c:82:c2:61:c1:fe:47: c3:05:b9:dd:83:2c:c1:4e:0d:40:31:4c:eb:9a:32: 79:d5:ce:1b:a5:5d:93:66:7b:4e:e5:a5:04:2a:8f: 4f:f4:e1:ad:07:9d:aa:22:f4:b1:2e:27:c7:01:ae: 26:7a:8d:29:85:0a:3d:e1:95:ce:c9:32:e2:71:16: 2b:79:fd:07:ee:a5:50:17:30:e0:0c:eb:51:99:7e: 10:e7:cb:c6:35:d8:ee:7d:ce:cc:3f:90:b9:64:93: f3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:37:93:C5:EE:E1:DD:A8:8B:D5:22:7B:A7:D1:1D:9A:C8:19:25:64 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12cea5c8-fa20-49e2-853f-dc186ae6b6df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.226.248.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:08:cb:18:e7:e4:4f:26:8d:96:58:61:b4:73:00:35:32:4c: 94:a5:75:99:69:1d:30:11:09:3f:ab:82:e0:9c:02:de:f6:7f: f7:08:40:1a:1f:2c:df:e6:35:ac:09:c6:9e:54:61:c8:f4:ef: 20:17:10:af:71:8c:87:cc:80:ba:09:e2:57:80:b1:59:32:99: e5:1e:fd:9e:c0:56:2b:52:f2:e1:2f:ad:e3:7a:2d:a3:e7:24: 18:6e:89:66:9d:94:ee:4c:72:05:c3:15:f2:0e:cb:24:e1:16: 02:fa:6a:b9:46:02:7c:3b:e0:49:e9:5d:bc:a7:0f:1f:0a:60: 3e:e5:21:f8:ce:0f:e5:0c:cf:01:8c:be:c0:1e:a9:fc:6d:fe: c0:34:96:2e:13:60:ef:29:79:49:8e:2c:8f:a3:6f:69:3a:02: 06:c6:44:21:dc:d4:a8:44:cc:3a:af:b1:e6:ec:c4:46:0e:9f: 74:0c:2b:0d:46:73:27:cc:7b:2e:c6:a1:07:13:79:b9:6d:46: 84:b1:35:7a:4c:46:ca:07:fa:e2:d7:e9:27:bf:7c:ee:b2:ef: 0e:eb:e2:65:a3:78:ff:1b:8e:7f:20:03:47:49:34:87:94:2d: ee:5d:22:d8:10:63:d7:f3:e2:ab:26:c6:89:19:e2:9e:00:d3: 87:39:ef:88 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULBU9EZkhf5AERqT+FjFgX+EQExQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA5MDAxMTMxWhcNMjYwODA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYmI3YTI4YmI1OTBhZDU2N2MzNzBmMDU1MDBlZTAxMzQ0 YjljYWNhZmY4ZDAxN2Q3MmU0ODRmOTJiMmMzMzczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRqZJFrMKmIGGzMgBNrOuBPCCFmZeamIbb8PPDueeXH1qi xGbu+cTwa4RZ0yvgL5qSONTniPXHkHB1GwIJ8Q4+8jgtEmoESDZ+C4J9+JVvXXDT /iJ3nrZv5DAubsWqb/1OnrB7wix1uRJ3Ejvof2WHyISjh+8OCdxjLrL0vy7auWIZ lv7MH/jv0w5B656tuRUSz4f2QB67u+AdxTecDILCYcH+R8MFud2DLMFODUAxTOua MnnVzhulXZNme07lpQQqj0/04a0Hnaoi9LEuJ8cBriZ6jSmFCj3hlc7JMuJxFit5 /QfupVAXMOAM61GZfhDny8Y12O59zsw/kLlkk/OnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2DeTxe7h3aiL1SJ7p9EdmsgZJWQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEyY2VhNWM4LWZhMjAtNDllMi04NTNmLWRjMTg2YWU2YjZkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJA4vgwDQYJKoZIhvcNAQELBQADggEBAF4Iyxjn5E8mjZZYYbRzADUyTJSl dZlpHTARCT+rguCcAt72f/cIQBofLN/mNawJxp5UYcj07yAXEK9xjIfMgLoJ4leA sVkymeUe/Z7AVitS8uEvreN6LaPnJBhuiWadlO5McgXDFfIOyyThFgL6arlGAnw7 4EnpXbynDx8KYD7lIfjOD+UMzwGMvsAeqfxt/sA0li4TYO8peUmOLI+jb2k6AgbG RCHc1KhEzDqvsebsxEYOn3QMKw1GcyfMey7GoQcTebltRoSxNXpMRsoH+uLX6Se/ fO6y7w7r4mWjeP8bjn8gA0dJNIeULe5dItgQY9fz4qsmxokZ4p4A04c574g= -----END CERTIFICATE-----Generated at Tue May 12 21:49:32 2026 by rpki-client