$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1528885d-cc61-410a-a838-47cc54d32053.roa File: 1528885d-cc61-410a-a838-47cc54d32053.roa (raw, json) Hash identifier: 2yUv0YyvbvtU9YIaZfprQsTt+d8HhxvnATZZ/m8rWyc= Subject key identifier: 95:BE:EE:90:D5:B4:67:1A:35:08:18:59:B6:BC:FC:42:40:85:6E:2C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2451EFB4C77551F3D9F1C4F6524CD98097D793A6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1528885d-cc61-410a-a838-47cc54d32053.roa Signing time: Tue 12 May 2026 01:41:42 +0000 ROA not before: Tue 12 May 2026 01:41:42 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:51:ef:b4:c7:75:51:f3:d9:f1:c4:f6:52:4c:d9:80:97:d7:93:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:41:42 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=911ccc6619cf6c47b1c38171d82162b208a099898632a5713670aa0404d31bd5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:9d:bb:67:2f:8c:ea:cd:64:e0:78:4f:22: 6f:b0:3b:31:15:fd:13:e7:c8:56:ce:35:d4:1b:0f: ba:66:85:06:15:68:b6:4f:5b:5a:bc:46:5b:93:34: d2:23:47:b0:45:c1:a9:25:a6:bf:7f:ba:6b:8d:a7: 3e:c4:1f:5e:8b:58:52:e3:3e:9a:3b:f0:c4:00:07: 92:33:d2:9a:cb:56:fb:47:4a:1d:15:05:97:ef:f8: 96:98:c7:fe:ff:a1:5b:37:ad:6a:f2:cb:e6:6d:55: 64:bf:3a:0f:b8:88:fc:3f:1b:c9:ba:24:07:2d:3f: 22:c1:be:c7:ea:21:33:6b:f4:f4:f4:c8:8c:fe:6e: 5a:31:34:60:f7:ac:cc:2a:6b:e8:a8:42:de:d1:8a: 90:5b:c1:be:77:92:86:fa:53:aa:37:78:1c:12:b4: 9d:e5:e5:93:1e:65:e9:54:c3:90:d0:4b:a3:af:47: 13:db:56:4c:de:5b:8c:87:b7:e1:0c:6a:40:50:47: 57:7d:04:c4:a5:72:df:b2:01:55:90:54:72:0e:98: 94:a8:d4:97:58:ba:04:1a:7f:93:49:73:73:ac:0a: 16:5d:08:27:f5:5f:34:54:99:4f:b5:ea:c5:27:27: c1:9d:36:54:f2:d0:b6:50:85:7b:c9:1e:c0:75:39: 8e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BE:EE:90:D5:B4:67:1A:35:08:18:59:B6:BC:FC:42:40:85:6E:2C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1528885d-cc61-410a-a838-47cc54d32053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.145.0/24 Signature Algorithm: sha256WithRSAEncryption 35:09:e3:f0:8b:4e:fb:a0:26:0d:68:61:7a:01:49:17:31:9c: b7:77:d9:37:53:d3:d7:06:78:3b:e8:bb:67:e4:18:27:34:d0: d6:26:16:1c:d0:aa:5e:32:6d:75:22:d8:62:a4:cc:b3:84:9c: fe:52:b6:71:e3:81:44:ee:a5:4f:a8:33:95:a4:e9:72:e5:38: c0:f5:62:72:74:3a:4c:3a:cb:fa:3b:69:a0:44:af:04:4e:1a: 5d:8f:5d:9b:87:78:f0:75:18:49:7c:83:af:e8:8d:63:29:be: a0:99:86:7d:60:2f:d7:a6:cd:90:05:e4:cd:06:a3:f8:ae:4e: dc:55:d1:9e:14:97:00:f2:a5:f6:0c:e2:30:1a:85:df:cb:68: 92:94:ad:f3:2e:15:a6:30:0e:32:11:7d:6d:a7:77:83:b8:db: fb:48:2e:5c:dc:3b:11:36:37:83:49:1d:01:4d:34:5e:e1:a6: 73:f7:31:83:37:e2:e2:73:ef:15:76:a4:2a:8b:a1:48:46:f4: 49:fa:be:45:57:41:82:ef:40:7d:d3:ad:88:81:91:62:ac:54: ea:d1:f7:c3:cb:2c:a3:20:1c:95:c7:2f:6c:01:a5:3b:99:6b: 1c:62:de:84:0e:f0:24:9e:5f:16:87:5f:80:8d:4e:20:ce:42: 67:3d:f1:65 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJFHvtMd1UfPZ8cT2UkzZgJfXk6YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDE0MTQyWhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTFjY2M2NjE5Y2Y2YzQ3YjFjMzgxNzFkODIxNjJiMjA4 YTA5OTg5ODYzMmE1NzEzNjcwYWEwNDA0ZDMxYmQ1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBUp27Zy+M6s1k4HhPIm+wOzEV/RPnyFbONdQbD7pmhQYV aLZPW1q8RluTNNIjR7BFwaklpr9/umuNpz7EH16LWFLjPpo78MQAB5Iz0prLVvtH Sh0VBZfv+JaYx/7/oVs3rWryy+ZtVWS/Og+4iPw/G8m6JActPyLBvsfqITNr9PT0 yIz+bloxNGD3rMwqa+ioQt7RipBbwb53kob6U6o3eBwStJ3l5ZMeZelUw5DQS6Ov RxPbVkzeW4yHt+EMakBQR1d9BMSlct+yAVWQVHIOmJSo1JdYugQaf5NJc3OsChZd CCf1XzRUmU+16sUnJ8GdNlTy0LZQhXvJHsB1OY55AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlb7ukNW0Zxo1CBhZtrz8QkCFbiwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE1Mjg4ODVkLWNjNjEtNDEwYS1hODM4LTQ3Y2M1NGQzMjA1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsJEwDQYJKoZIhvcNAQELBQADggEBADUJ4/CLTvugJg1oYXoBSRcxnLd3 2TdT09cGeDvou2fkGCc00NYmFhzQql4ybXUi2GKkzLOEnP5StnHjgUTupU+oM5Wk 6XLlOMD1YnJ0Okw6y/o7aaBErwROGl2PXZuHePB1GEl8g6/ojWMpvqCZhn1gL9em zZAF5M0Go/iuTtxV0Z4UlwDypfYM4jAahd/LaJKUrfMuFaYwDjIRfW2nd4O42/tI LlzcOxE2N4NJHQFNNF7hpnP3MYM34uJz7xV2pCqLoUhG9En6vkVXQYLvQH3TrYiB kWKsVOrR98PLLKMgHJXHL2wBpTuZaxxi3oQO8CSeXxaHX4CNTiDOQmc98WU= -----END CERTIFICATE-----Generated at Wed May 13 04:08:07 2026 by rpki-client