$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bec8ff2-821b-445a-ab66-9d044902578e.roa File: 2bec8ff2-821b-445a-ab66-9d044902578e.roa (raw, json) Hash identifier: 9fr/p0+baeGHFtLActLtGZ1TSL2lTs3BSXy+N2s1loE= Subject key identifier: B9:60:F3:AC:D6:38:16:B8:0F:30:95:42:37:92:6D:CD:79:38:B1:96 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 596ED9527D620553851891BD489D16A723D676D7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bec8ff2-821b-445a-ab66-9d044902578e.roa Signing time: Tue 12 May 2026 00:20:48 +0000 ROA not before: Tue 12 May 2026 00:20:48 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:6e:d9:52:7d:62:05:53:85:18:91:bd:48:9d:16:a7:23:d6:76:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 00:20:48 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=a14a5d6e770c3fcc99f96199c01a27376fa5a3becb331d8678998a358df590ff, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4a:c0:5c:5b:c3:5c:ed:84:2b:a2:18:65:ae: 5d:ea:24:10:50:fd:e1:b5:39:9b:7f:2e:f7:d8:de: 05:82:2c:8c:ea:45:6d:e7:33:92:0c:03:28:72:24: 28:8f:1d:97:2b:26:e9:df:43:8c:72:78:47:f8:f7: e8:d6:19:c4:46:24:cd:37:b4:bb:62:88:ec:01:91: fb:67:47:8c:83:6f:8a:65:9a:77:82:6a:0f:b3:b9: 26:16:ad:e6:85:91:f2:97:53:40:04:8d:7b:d7:74: 61:af:91:4b:d8:82:9a:9f:86:7f:0b:6c:13:a6:fb: 3a:a2:62:92:ac:c3:0c:88:5b:61:a7:05:63:1f:d4: 09:50:ca:c2:1a:2b:7d:9a:c0:bf:b3:0d:ba:e3:9c: c1:4a:38:2d:38:8e:c5:bc:f8:d1:c2:16:f4:e4:8d: 92:fe:5b:ed:1a:70:28:9c:7a:66:e6:7f:64:67:ca: 2c:16:6c:87:06:ce:7b:00:fd:a3:e7:11:7d:fe:33: 18:41:fb:8c:11:25:e2:59:84:1c:e9:bc:bd:7c:6a: 2a:5a:5d:3b:9d:9c:a2:01:bd:6d:58:4e:55:d1:8f: 31:48:16:fb:cc:9b:a5:4d:57:2d:33:0f:f7:93:26: 72:72:62:09:45:ee:39:d1:cf:6b:29:99:70:36:36: de:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:60:F3:AC:D6:38:16:B8:0F:30:95:42:37:92:6D:CD:79:38:B1:96 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bec8ff2-821b-445a-ab66-9d044902578e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.97.0/24 Signature Algorithm: sha256WithRSAEncryption 03:1c:de:43:dc:0c:7c:0a:d2:7e:35:9a:cf:69:de:a3:b2:91: a0:ff:31:ab:5b:20:ce:83:4c:5b:73:5f:85:00:9f:ec:f4:47: af:76:0c:73:c7:cd:de:7f:44:62:49:3f:81:b2:15:a9:de:01: 16:4b:88:02:70:28:06:5b:15:83:be:e9:42:8f:91:7f:fe:86: 69:69:e4:1c:19:5d:79:77:49:ec:47:6d:75:a3:1e:d4:13:64: c7:f2:f0:32:e6:ff:c8:a2:f4:60:b7:10:26:a1:fd:e0:e1:e8: 73:60:8d:67:86:cb:7b:9f:a8:05:cb:96:3e:7f:c0:47:a0:79: 36:3f:2a:c3:d9:c7:6e:ca:0a:94:83:a8:bc:37:8a:64:7d:08: 19:2f:64:37:39:2e:11:95:6e:5f:96:a1:0e:b9:24:a7:c2:a4: 4b:13:b6:84:64:64:c0:0c:d4:ac:86:d4:09:67:3c:9d:dd:94: cb:83:c0:8e:2b:ee:06:36:a0:c1:fb:5b:70:5d:4b:6c:14:33: 35:bb:fe:91:10:13:68:e1:2a:fc:b4:8c:06:14:b0:db:40:ed: 80:b4:7e:b5:75:27:92:63:56:c3:a1:6f:94:a5:3b:99:80:23: 07:36:56:80:07:03:76:58:cb:5e:7b:09:46:5e:48:55:72:6a: a9:ec:47:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWW7ZUn1iBVOFGJG9SJ0WpyPWdtcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDAyMDQ4WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTRhNWQ2ZTc3MGMzZmNjOTlmOTYxOTljMDFhMjczNzZm YTVhM2JlY2IzMzFkODY3ODk5OGEzNThkZjU5MGZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfSsBcW8Nc7YQrohhlrl3qJBBQ/eG1OZt/LvfY3gWCLIzq RW3nM5IMAyhyJCiPHZcrJunfQ4xyeEf49+jWGcRGJM03tLtiiOwBkftnR4yDb4pl mneCag+zuSYWreaFkfKXU0AEjXvXdGGvkUvYgpqfhn8LbBOm+zqiYpKswwyIW2Gn BWMf1AlQysIaK32awL+zDbrjnMFKOC04jsW8+NHCFvTkjZL+W+0acCicembmf2Rn yiwWbIcGznsA/aPnEX3+MxhB+4wRJeJZhBzpvL18aipaXTudnKIBvW1YTlXRjzFI FvvMm6VNVy0zD/eTJnJyYglF7jnRz2spmXA2Nt7lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuWDzrNY4FrgPMJVCN5JtzXk4sZYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiZWM4ZmYyLTgyMWItNDQ1YS1hYjY2LTlkMDQ0OTAyNTc4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmGEwDQYJKoZIhvcNAQELBQADggEBAAMc3kPcDHwK0n41ms9p3qOykaD/ MatbIM6DTFtzX4UAn+z0R692DHPHzd5/RGJJP4GyFaneARZLiAJwKAZbFYO+6UKP kX/+hmlp5BwZXXl3SexHbXWjHtQTZMfy8DLm/8ii9GC3ECah/eDh6HNgjWeGy3uf qAXLlj5/wEegeTY/KsPZx27KCpSDqLw3imR9CBkvZDc5LhGVbl+WoQ65JKfCpEsT toRkZMAM1KyG1AlnPJ3dlMuDwI4r7gY2oMH7W3BdS2wUMzW7/pEQE2jhKvy0jAYU sNtA7YC0frV1J5JjVsOhb5SlO5mAIwc2VoAHA3ZYy157CUZeSFVyaqnsR7M= -----END CERTIFICATE-----Generated at Tue May 12 22:14:16 2026 by rpki-client