$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1beabf6f-1295-4f67-b10a-4c38cf5aa3a8.roa File: 1beabf6f-1295-4f67-b10a-4c38cf5aa3a8.roa (raw, json) Hash identifier: e2QKRZext02Dy77983LWiRbqUIilMvy+zpjN/yGU9TU= Subject key identifier: D9:94:32:93:0F:ED:36:42:4E:12:AA:06:0E:8B:48:5E:6E:A9:E7:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 44E0E5600EACCEC73C98358A0B2C571B0F5BD197 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1beabf6f-1295-4f67-b10a-4c38cf5aa3a8.roa Signing time: Tue 12 May 2026 00:20:06 +0000 ROA not before: Tue 12 May 2026 00:20:06 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e0:e5:60:0e:ac:ce:c7:3c:98:35:8a:0b:2c:57:1b:0f:5b:d1:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 00:20:06 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=790e50c4b85756c3292613032aee1df488a6ae18776ae3080a1db1841f94e517, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:0d:c8:68:d1:15:c1:f0:77:11:b4:d7:cc: 4f:47:37:07:04:84:ba:eb:82:0b:50:ca:65:04:61: 69:21:5b:1a:75:b3:73:62:0c:50:b7:4b:1f:66:d9: 69:fd:12:24:71:49:c0:9a:f8:52:ad:de:3f:ed:b1: 51:d1:f7:97:72:4c:47:cc:3a:2d:c1:85:52:68:c8: c0:ae:54:f7:2e:dd:ea:63:14:ab:88:20:cf:d5:96: b7:ee:b9:d2:0a:ee:4b:89:da:2d:bf:c4:f2:d4:5d: 8c:14:73:83:f2:d3:10:56:06:ca:e8:a4:50:fa:d4: 53:d5:00:aa:26:fa:a3:89:02:bf:4e:97:34:31:4f: aa:d0:a0:fd:de:5b:5f:97:43:0c:6f:ad:a8:d7:1a: 08:52:ee:cf:6f:d5:e1:8d:fb:db:4c:b5:81:c7:10: 68:a0:8a:30:81:3e:b8:9b:3a:6a:d0:26:2b:92:38: 4e:92:cd:5c:06:39:3f:51:ee:ea:b8:35:cc:e0:b0: d4:13:45:ce:b7:60:6c:a8:4d:78:84:40:3c:ac:a0: 8c:53:e6:19:4d:01:ba:65:97:59:78:3b:b9:f2:1d: 06:b2:e7:12:7f:57:b6:3f:db:c5:a6:78:18:c7:0b: 39:10:0c:0f:8c:af:4f:0a:b3:9b:5c:5e:4e:14:01: 58:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:94:32:93:0F:ED:36:42:4E:12:AA:06:0E:8B:48:5E:6E:A9:E7:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1beabf6f-1295-4f67-b10a-4c38cf5aa3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.114.0/24 Signature Algorithm: sha256WithRSAEncryption 67:fd:92:e0:be:37:80:11:5e:1e:3e:b6:90:21:fa:ea:ad:2d: 34:6d:dd:43:c4:df:9b:56:26:64:71:a6:1c:74:c7:bf:78:ae: c2:89:46:19:ea:12:de:ea:8c:13:d7:51:7a:a8:02:38:7f:b4: 80:7f:c2:fa:05:c2:14:be:e1:80:aa:73:ed:5a:8f:28:d6:bf: f1:9c:3b:b6:bc:b8:76:9a:cf:66:3c:6a:37:d7:15:75:1e:3e: b7:e0:9b:cc:8b:e7:30:e6:cb:c4:d7:cc:ff:c3:ad:df:aa:d8: 83:d8:eb:6c:9c:7d:3e:64:9b:8f:19:c7:8f:32:1f:65:dd:3a: 0c:bc:42:17:75:f0:ca:95:b0:4b:4a:39:2d:e3:90:65:c9:c3: a9:b4:e8:62:27:56:a6:66:e7:79:3e:5d:eb:77:54:83:9a:26: 31:d2:6b:74:01:61:1a:e8:ae:58:e2:00:60:63:84:81:69:b7: 9f:dd:4c:c7:a7:d7:4f:8f:84:9f:b0:74:6b:99:8b:88:6c:31: c3:0f:4b:0b:d3:b6:1b:67:28:aa:e6:f6:af:9e:47:13:86:6b: 43:04:29:45:b6:08:fa:f6:3c:27:e4:1c:bc:15:74:01:95:1a: a5:b1:32:c0:c0:96:42:86:36:b3:69:a3:d3:36:c0:82:bc:22: c0:e5:3f:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURODlYA6szsc8mDWKCyxXGw9b0ZcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDAyMDA2WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OTBlNTBjNGI4NTc1NmMzMjkyNjEzMDMyYWVlMWRmNDg4 YTZhZTE4Nzc2YWUzMDgwYTFkYjE4NDFmOTRlNTE3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuDA3IaNEVwfB3EbTXzE9HNwcEhLrrggtQymUEYWkhWxp1 s3NiDFC3Sx9m2Wn9EiRxScCa+FKt3j/tsVHR95dyTEfMOi3BhVJoyMCuVPcu3epj FKuIIM/VlrfuudIK7kuJ2i2/xPLUXYwUc4Py0xBWBsropFD61FPVAKom+qOJAr9O lzQxT6rQoP3eW1+XQwxvrajXGghS7s9v1eGN+9tMtYHHEGigijCBPribOmrQJiuS OE6SzVwGOT9R7uq4NczgsNQTRc63YGyoTXiEQDysoIxT5hlNAbpll1l4O7nyHQay 5xJ/V7Y/28WmeBjHCzkQDA+Mr08Ks5tcXk4UAVgbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2ZQykw/tNkJOEqoGDotIXm6p5xcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFiZWFiZjZmLTEyOTUtNGY2Ny1iMTBhLTRjMzhjZjVhYTNhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmHIwDQYJKoZIhvcNAQELBQADggEBAGf9kuC+N4ARXh4+tpAh+uqtLTRt 3UPE35tWJmRxphx0x794rsKJRhnqEt7qjBPXUXqoAjh/tIB/wvoFwhS+4YCqc+1a jyjWv/GcO7a8uHaaz2Y8ajfXFXUePrfgm8yL5zDmy8TXzP/Drd+q2IPY62ycfT5k m48Zx48yH2XdOgy8Qhd18MqVsEtKOS3jkGXJw6m06GInVqZm53k+Xet3VIOaJjHS a3QBYRrorljiAGBjhIFpt5/dTMen10+PhJ+wdGuZi4hsMcMPSwvTthtnKKrm9q+e RxOGa0MEKUW2CPr2PCfkHLwVdAGVGqWxMsDAlkKGNrNpo9M2wIK8IsDlP7M= -----END CERTIFICATE-----Generated at Tue May 12 21:59:00 2026 by rpki-client