$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235994eb-0dcc-451c-aa65-4ce458218f3a.roa File: 235994eb-0dcc-451c-aa65-4ce458218f3a.roa (raw, json) Hash identifier: /lhY/Figfqy3aJf8vkXqkCUm52ygvQWkESdxhiLXIFI= Subject key identifier: A1:42:FF:91:6E:8C:99:3A:07:4E:AE:36:F4:FD:84:7B:90:2D:F4:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7C40EA03305887F4654C96695B9266E51C04C6E8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235994eb-0dcc-451c-aa65-4ce458218f3a.roa Signing time: Wed 06 May 2026 00:31:19 +0000 ROA not before: Wed 06 May 2026 00:31:19 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:40:ea:03:30:58:87:f4:65:4c:96:69:5b:92:66:e5:1c:04:c6:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 6 00:31:19 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=a6ee529e1074e584737b4137e9274fefaa1d8d1746679ad6d0cbd07f363d805b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dd:3f:50:af:20:1e:93:db:44:33:77:ad:9b: 53:66:a4:76:ec:c2:95:10:36:ce:78:a9:2d:a4:af: 63:a9:b5:1c:6b:56:fd:07:4c:b5:17:a9:b1:2a:21: e5:e8:79:d3:36:4b:02:22:c1:9b:6e:a0:00:65:3a: cd:fc:ec:a0:db:9c:d4:9d:70:35:f5:d3:09:2f:8c: f2:9d:65:65:2f:d7:8f:41:0d:61:e7:37:45:2b:ff: fb:30:ea:99:18:21:02:07:e4:e7:ec:9d:cb:9e:f7: 04:5a:d7:87:f3:4a:5f:15:ea:26:50:d3:1f:49:71: 9e:d0:cb:03:ef:6b:9c:30:59:6b:32:11:f5:9c:b2: 02:be:56:b6:94:a3:f0:68:d5:6e:50:54:70:69:98: f9:87:02:67:74:e1:ff:b0:9c:86:fb:66:be:e9:9c: b7:73:ab:70:eb:0c:e4:0a:84:fe:71:57:89:6d:c9: 15:79:35:6d:51:01:d0:5a:1f:ec:15:97:72:d1:9b: d0:55:24:93:a0:1a:44:95:24:eb:1a:5d:76:40:45: 7c:3a:62:50:0e:a8:ae:2a:5f:6c:a9:9f:d4:3d:74: b2:b9:15:c4:5f:af:99:b1:68:80:25:70:c7:a1:bc: 6a:b4:86:17:68:3e:30:2a:0b:ca:df:4e:91:13:fd: ab:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:42:FF:91:6E:8C:99:3A:07:4E:AE:36:F4:FD:84:7B:90:2D:F4:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235994eb-0dcc-451c-aa65-4ce458218f3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.40.0/21 Signature Algorithm: sha256WithRSAEncryption 40:3b:08:63:35:8a:a5:91:e0:f3:fa:cb:56:1d:86:3d:4c:65: 2b:d4:8f:0f:ab:20:9e:d2:03:c3:44:61:93:54:81:a3:d6:6c: 2d:47:5e:67:55:b9:4f:bd:fb:fd:06:bb:08:fa:bb:f3:17:ed: 3c:47:31:0a:79:10:66:b2:b8:9a:b9:9e:77:29:16:59:64:55: 46:aa:e8:75:68:09:e9:31:1e:4f:94:b7:9a:58:7c:ac:cd:ee: e3:53:50:9c:fc:79:25:ba:d6:ff:bd:f2:fd:de:88:7b:c6:7d: 68:34:c3:78:c7:19:7e:9c:3e:a8:4a:f3:44:9b:f5:35:19:13: 35:d1:9f:b6:af:c8:fc:88:22:34:f2:e0:1f:45:e7:6a:de:fc: ea:a7:c0:cc:fe:b6:01:4f:44:01:16:45:a4:08:f7:18:39:f5: 71:7a:24:ca:1d:68:2f:57:64:00:f1:d4:1a:e3:bd:45:59:96: 58:e3:1f:35:ad:04:83:2b:82:61:bd:a6:0c:1c:a0:45:7b:bf: 2b:6b:ca:a7:84:1d:bf:45:72:f2:2b:93:46:ff:97:84:7c:ff: 27:47:cd:e8:40:ce:53:95:a0:7f:c6:d1:5f:96:a9:47:a5:0a: a1:e4:4b:17:2d:d1:51:20:25:87:86:fa:08:95:9d:ed:db:b0: bc:e3:21:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfEDqAzBYh/RlTJZpW5Jm5RwExugwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA2MDAzMTE5WhcNMjYwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNmVlNTI5ZTEwNzRlNTg0NzM3YjQxMzdlOTI3NGZlZmFh MWQ4ZDE3NDY2NzlhZDZkMGNiZDA3ZjM2M2Q4MDViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCV3T9QryAek9tEM3etm1NmpHbswpUQNs54qS2kr2OptRxr Vv0HTLUXqbEqIeXoedM2SwIiwZtuoABlOs387KDbnNSdcDX10wkvjPKdZWUv149B DWHnN0Ur//sw6pkYIQIH5Ofsncue9wRa14fzSl8V6iZQ0x9JcZ7QywPva5wwWWsy EfWcsgK+VraUo/Bo1W5QVHBpmPmHAmd04f+wnIb7Zr7pnLdzq3DrDOQKhP5xV4lt yRV5NW1RAdBaH+wVl3LRm9BVJJOgGkSVJOsaXXZARXw6YlAOqK4qX2ypn9Q9dLK5 FcRfr5mxaIAlcMehvGq0hhdoPjAqC8rfTpET/atJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoUL/kW6MmToHTq429P2Ee5At9OEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzNTk5NGViLTBkY2MtNDUxYy1hYTY1LTRjZTQ1ODIxOGYzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjligwDQYJKoZIhvcNAQELBQADggEBAEA7CGM1iqWR4PP6y1Ydhj1MZSvU jw+rIJ7SA8NEYZNUgaPWbC1HXmdVuU+9+/0Guwj6u/MX7TxHMQp5EGayuJq5nncp FllkVUaq6HVoCekxHk+Ut5pYfKzN7uNTUJz8eSW61v+98v3eiHvGfWg0w3jHGX6c PqhK80Sb9TUZEzXRn7avyPyIIjTy4B9F52re/OqnwMz+tgFPRAEWRaQI9xg59XF6 JModaC9XZADx1BrjvUVZlljjHzWtBIMrgmG9pgwcoEV7vytryqeEHb9FcvIrk0b/ l4R8/ydHzehAzlOVoH/G0V+WqUelCqHkSxct0VEgJYeG+giVne3bsLzjIY4= -----END CERTIFICATE-----Generated at Tue May 12 21:51:00 2026 by rpki-client