$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/340de785-1a1d-4f4c-b0e5-af7683e9a12a.roa File: 340de785-1a1d-4f4c-b0e5-af7683e9a12a.roa (raw, json) Hash identifier: hPWSly2yVSnl+vZ4x+aaPWkPs0yMdze13nChzIyGUss= Subject key identifier: 5A:AF:10:48:B4:2D:1F:27:EE:1C:73:77:FB:BD:42:4E:77:CD:39:79 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 218B947B90BBA7E8217229F840D94334EE87CF30 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/340de785-1a1d-4f4c-b0e5-af7683e9a12a.roa Signing time: Fri 08 May 2026 00:10:10 +0000 ROA not before: Fri 08 May 2026 00:10:10 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 98.87.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:8b:94:7b:90:bb:a7:e8:21:72:29:f8:40:d9:43:34:ee:87:cf:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 00:10:10 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=818087e4482bd2c9e4c8164f87aba54ddc48c20034a91937dce94c51fca9f843, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:27:f5:52:dc:63:eb:03:5f:68:72:30:17: b7:00:3d:e5:87:07:3c:36:ca:c6:a7:da:66:83:ad: e6:f5:a9:dc:e4:d9:d5:84:d0:23:65:46:a1:7a:73: b5:05:e0:94:2b:95:8e:2f:60:92:fc:92:12:e3:76: 7a:ca:54:f9:f2:22:51:12:3c:5f:3d:7e:9a:5e:4c: fa:ec:0e:98:c1:20:d0:75:7c:6d:f2:09:87:13:ae: c9:85:49:97:f2:0d:52:ad:ba:9c:33:b6:54:2e:0d: f7:3e:5c:22:a2:61:b5:22:34:a4:7d:ce:e7:db:49: 3c:37:99:1b:81:05:46:7f:ce:f9:33:fa:64:03:82: a7:42:a2:d8:91:bf:01:31:f2:b4:8d:71:2b:a1:62: 1c:86:2f:6e:d1:f5:6d:1a:22:de:32:e5:82:18:ae: e0:a2:cb:33:ae:04:6c:96:70:a9:d2:f2:77:7d:49: 4b:ce:5e:d4:f9:f2:2d:b1:26:c3:64:96:e9:2a:90: e7:cf:fb:5a:b0:3f:30:03:db:c4:5a:a5:14:d4:31: 97:ba:cc:0e:4c:b2:77:bd:53:c6:84:f6:7c:e7:24: 87:94:79:9b:39:8d:8b:ea:07:de:ba:67:f6:67:e1: fc:db:8e:b9:28:d8:65:70:a1:72:ef:e2:a5:69:58: a7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AF:10:48:B4:2D:1F:27:EE:1C:73:77:FB:BD:42:4E:77:CD:39:79 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/340de785-1a1d-4f4c-b0e5-af7683e9a12a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.87.174.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:1b:7b:c9:53:f3:59:d1:a1:1f:b3:e9:ee:17:cd:4c:7a:80: 62:ff:fa:bd:8f:fd:48:5b:b1:f8:0f:24:77:01:56:88:a9:0c: ba:70:22:f0:0b:34:7d:92:65:4b:54:92:98:45:2e:3f:e2:57: c4:e5:44:3a:c8:d4:32:07:f7:2e:2a:99:17:88:c6:9c:6b:e4: 8d:83:86:ee:65:35:4a:a7:9b:9b:6e:37:a9:61:66:60:55:0b: 54:d1:81:d2:b4:94:d7:6b:93:71:db:df:62:06:b5:e5:90:84: b9:aa:9e:eb:65:11:c4:96:a3:9c:16:68:5e:f3:3c:6b:76:4a: 76:b1:d8:4a:91:70:ea:95:2d:11:db:01:a6:2e:63:17:4c:24: 11:f5:b0:12:34:88:da:0b:0e:e9:4b:69:39:cc:02:2a:a0:f6: 6d:8d:9f:da:55:ed:3b:db:22:f7:54:96:64:6e:2e:07:50:44: 95:a5:0c:43:16:47:e1:ee:ac:c6:92:d0:4d:9a:85:92:9b:8c: 6e:3a:e9:d0:49:cd:94:00:12:99:4f:96:bd:24:68:e2:78:8c: 25:fd:c3:e4:c3:57:b8:ff:3d:8c:fc:7c:ee:96:96:0e:6e:44: b6:74:a0:99:25:7c:82:31:e2:be:93:ac:26:b9:91:44:42:1f: be:e9:aa:63 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIYuUe5C7p+ghcin4QNlDNO6HzzAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA4MDAxMDEwWhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MTgwODdlNDQ4MmJkMmM5ZTRjODE2NGY4N2FiYTU0ZGRj NDhjMjAwMzRhOTE5MzdkY2U5NGM1MWZjYTlmODQzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC81yf1Utxj6wNfaHIwF7cAPeWHBzw2ysan2maDreb1qdzk 2dWE0CNlRqF6c7UF4JQrlY4vYJL8khLjdnrKVPnyIlESPF89fppeTPrsDpjBINB1 fG3yCYcTrsmFSZfyDVKtupwztlQuDfc+XCKiYbUiNKR9zufbSTw3mRuBBUZ/zvkz +mQDgqdCotiRvwEx8rSNcSuhYhyGL27R9W0aIt4y5YIYruCiyzOuBGyWcKnS8nd9 SUvOXtT58i2xJsNklukqkOfP+1qwPzAD28RapRTUMZe6zA5Msne9U8aE9nznJIeU eZs5jYvqB966Z/Zn4fzbjrko2GVwoXLv4qVpWKcJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWq8QSLQtHyfuHHN3+71CTnfNOXkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM0MGRlNzg1LTFhMWQtNGY0Yy1iMGU1LWFmNzY4M2U5YTEyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFiV64wDQYJKoZIhvcNAQELBQADggEBAH8be8lT81nRoR+z6e4XzUx6gGL/ +r2P/UhbsfgPJHcBVoipDLpwIvALNH2SZUtUkphFLj/iV8TlRDrI1DIH9y4qmReI xpxr5I2Dhu5lNUqnm5tuN6lhZmBVC1TRgdK0lNdrk3Hb32IGteWQhLmqnutlEcSW o5wWaF7zPGt2Snax2EqRcOqVLRHbAaYuYxdMJBH1sBI0iNoLDulLaTnMAiqg9m2N n9pV7TvbIvdUlmRuLgdQRJWlDEMWR+HurMaS0E2ahZKbjG466dBJzZQAEplPlr0k aOJ4jCX9w+TDV7j/PYz8fO6Wlg5uRLZ0oJklfIIx4r6TrCa5kURCH77pqmM= -----END CERTIFICATE-----Generated at Wed May 13 00:53:19 2026 by rpki-client