$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21bb0458-625d-4892-a4e1-e544b849201a.roa File: 21bb0458-625d-4892-a4e1-e544b849201a.roa (raw, json) Hash identifier: L/JAlMBpL62ZFOfg0Z9y887ZRzeTQKowWb+8JIFDQUU= Subject key identifier: 54:B1:D7:02:42:03:6E:D2:D9:B2:CB:07:E7:1B:97:F0:2F:AB:F1:6B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5CDA22C2EF2C88F12953B40B0CCDFB2045695A60 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21bb0458-625d-4892-a4e1-e544b849201a.roa Signing time: Fri 01 May 2026 00:40:09 +0000 ROA not before: Fri 01 May 2026 00:40:09 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 63.249.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:da:22:c2:ef:2c:88:f1:29:53:b4:0b:0c:cd:fb:20:45:69:5a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 1 00:40:09 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=5bb4fa5e0567a3427bdca24d481a8bc1659046843ef6ce75bb2f440413ea3ef4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d8:9a:ff:68:cc:89:06:6a:83:ea:3a:6a:ff: 5b:b5:9b:c6:7a:cb:2e:7b:57:e5:70:48:49:fe:2c: 87:02:de:56:83:0b:ca:6e:d6:4a:21:de:b5:8e:7f: 54:20:e9:55:30:05:46:4f:ac:14:17:69:c4:cf:b6: 18:9f:ef:b7:e1:3c:fc:c5:c4:b4:1d:68:d3:54:e5: eb:3b:45:d2:b1:bf:8e:34:8b:0b:a3:ba:f8:a7:74: 83:29:1f:60:17:98:88:0a:4f:fd:c6:56:0e:e1:10: 5a:92:55:ad:3b:b4:b6:4e:7d:25:72:69:ed:fd:5d: b0:74:3b:41:7d:65:d9:b6:46:4d:f3:65:54:61:02: 2b:99:80:27:b6:d4:b9:5a:3d:c8:4e:22:a4:a3:70: 81:4f:65:57:f2:62:b2:c0:61:4b:e2:17:bf:b0:19: 8e:8a:66:58:82:c6:bf:fa:e7:7e:9f:32:12:bf:9d: d4:2d:66:4b:e2:4a:73:26:8a:02:fe:65:49:dd:b0: 5d:de:3b:b4:d5:d8:90:b1:fe:eb:83:d0:a7:6e:32: c1:2d:f0:fe:c9:4f:34:15:0b:82:46:b8:a5:58:72: 94:6d:9f:8d:91:03:ae:fb:da:9a:06:61:ba:60:18: bf:29:80:b8:d0:df:8a:4f:c2:ca:90:27:3a:aa:52: ff:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B1:D7:02:42:03:6E:D2:D9:B2:CB:07:E7:1B:97:F0:2F:AB:F1:6B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21bb0458-625d-4892-a4e1-e544b849201a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 63.249.128.0/17 Signature Algorithm: sha256WithRSAEncryption 1d:7c:37:25:61:1f:24:d8:94:ba:06:0c:33:18:6e:9c:1b:28: aa:c9:43:e2:6a:8a:8a:57:82:4b:0b:23:f6:bb:e4:62:59:21: 8a:61:0b:5c:57:c0:66:ae:2a:29:d1:52:9f:98:5c:17:b1:51: 9d:e0:df:e8:8b:eb:54:8c:a2:f2:97:43:70:d6:3e:70:87:3c: dd:94:4e:2b:57:02:6a:0e:84:9c:d4:46:57:aa:60:f3:1d:90: 7c:18:0f:2c:ad:9d:ba:ec:0a:d8:09:b3:fa:06:83:cd:17:4c: 3f:54:28:e4:2e:2b:ee:5b:36:d7:41:57:99:65:32:52:b0:8e: 9e:ea:9b:a4:f2:26:2b:41:75:f8:a1:61:0a:4d:3a:3e:39:34: d3:aa:65:99:b8:94:9f:67:c6:3e:8c:0f:c5:52:45:9b:24:ab: f5:e2:4f:c3:e1:7c:1e:f3:41:d0:28:4f:5c:41:f4:6a:93:44: 4d:22:d8:68:83:d6:9b:6e:41:2f:30:9b:66:1c:be:7d:b8:46: f6:8f:d6:f4:55:22:ed:e7:08:32:fd:7f:09:de:04:13:c1:01: c6:c4:dd:fb:30:a5:d9:d1:d8:2c:7b:ed:49:43:8f:0f:f1:08: 5a:2a:8c:78:95:d3:dd:bf:96:35:18:7a:a5:af:32:3f:ef:d9: ae:93:41:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXNoiwu8siPEpU7QLDM37IEVpWmAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDA0MDA5WhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YmI0ZmE1ZTA1NjdhMzQyN2JkY2EyNGQ0ODFhOGJjMTY1 OTA0Njg0M2VmNmNlNzViYjJmNDQwNDEzZWEzZWY0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF2Jr/aMyJBmqD6jpq/1u1m8Z6yy57V+VwSEn+LIcC3laD C8pu1koh3rWOf1Qg6VUwBUZPrBQXacTPthif77fhPPzFxLQdaNNU5es7RdKxv440 iwujuvindIMpH2AXmIgKT/3GVg7hEFqSVa07tLZOfSVyae39XbB0O0F9Zdm2Rk3z ZVRhAiuZgCe21LlaPchOIqSjcIFPZVfyYrLAYUviF7+wGY6KZliCxr/6536fMhK/ ndQtZkviSnMmigL+ZUndsF3eO7TV2JCx/uuD0KduMsEt8P7JTzQVC4JGuKVYcpRt n42RA6772poGYbpgGL8pgLjQ34pPwsqQJzqqUv8HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVLHXAkIDbtLZsssH5xuX8C+r8WswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIxYmIwNDU4LTYyNWQtNDg5Mi1hNGUxLWU1NDRiODQ5MjAxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc/+YAwDQYJKoZIhvcNAQELBQADggEBAB18NyVhHyTYlLoGDDMYbpwbKKrJ Q+JqiopXgksLI/a75GJZIYphC1xXwGauKinRUp+YXBexUZ3g3+iL61SMovKXQ3DW PnCHPN2UTitXAmoOhJzURleqYPMdkHwYDyytnbrsCtgJs/oGg80XTD9UKOQuK+5b NtdBV5llMlKwjp7qm6TyJitBdfihYQpNOj45NNOqZZm4lJ9nxj6MD8VSRZskq/Xi T8PhfB7zQdAoT1xB9GqTRE0i2GiD1ptuQS8wm2Ycvn24RvaP1vRVIu3nCDL9fwne BBPBAcbE3fswpdnR2Cx77UlDjw/xCFoqjHiV092/ljUYeqWvMj/v2a6TQXA= -----END CERTIFICATE-----Generated at Tue May 12 21:40:14 2026 by rpki-client