$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36ee8694-0818-4109-a12a-7638aec01c2a.roa File: 36ee8694-0818-4109-a12a-7638aec01c2a.roa (raw, json) Hash identifier: rDN72R+jE1i07+tKy8DsL1xwPXGCqrOQmjqzfToQ3u4= Subject key identifier: 3D:17:16:0C:32:50:65:49:92:A9:CD:F6:77:D8:B0:04:12:6F:18:7C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 55224589D6B4CEC1582E3388EBD3CEDF9A99CE14 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36ee8694-0818-4109-a12a-7638aec01c2a.roa Signing time: Wed 06 May 2026 00:31:20 +0000 ROA not before: Wed 06 May 2026 00:31:20 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:22:45:89:d6:b4:ce:c1:58:2e:33:88:eb:d3:ce:df:9a:99:ce:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 6 00:31:20 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=e9eb549cfc00a8c8d49932003fb32367e2a849a47b386af08cb3f0cf11d7db05, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:91:5b:6a:af:f0:2c:05:63:06:b3:b9:a9:32: 44:83:7e:86:88:b2:ff:34:45:07:53:af:1b:af:93: b5:e2:1e:ed:cc:bf:ba:a5:4c:bc:f3:d6:81:41:e9: 9f:23:a1:37:54:5a:04:e3:05:6e:aa:f7:23:06:a1: 59:50:79:c2:41:a7:46:f5:13:67:77:2c:a5:c5:bb: 52:3f:93:a2:64:4b:40:87:19:d3:a9:41:aa:08:b2: 47:42:33:cc:52:6e:f2:61:f7:6b:49:8e:51:5e:7e: 5b:a3:92:8c:d9:6e:f7:56:30:3f:c9:fe:12:44:c6: 97:46:24:20:cb:56:01:b7:e1:70:53:d3:24:57:4f: 75:bd:f7:42:99:ef:2d:ff:3e:ab:62:0f:fe:6f:cc: a3:32:62:97:c2:a6:1b:8e:5e:ad:62:e9:4c:41:8c: 82:18:6b:22:43:0d:7f:63:af:8d:5a:d7:fc:8e:bc: 9f:5c:1d:99:51:d8:6b:8e:62:d1:a0:57:da:a1:d9: 84:db:6f:75:7d:74:8b:96:06:ad:7d:c6:d2:e9:59: 7f:0b:00:cf:25:72:72:29:11:ec:89:24:7c:0b:46: 69:8c:ab:be:35:c8:44:b7:2e:a8:9b:fe:0c:d2:08: 06:e2:c3:eb:b0:2a:87:3d:0c:95:c0:88:70:73:66: 1f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:17:16:0C:32:50:65:49:92:A9:CD:F6:77:D8:B0:04:12:6F:18:7C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36ee8694-0818-4109-a12a-7638aec01c2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.96.0/21 Signature Algorithm: sha256WithRSAEncryption 84:c5:12:89:a1:c5:a6:aa:1e:fa:72:bc:4e:8d:d0:7c:aa:8e: 06:9c:a3:a6:45:99:17:1c:b1:7a:83:b5:b3:d6:5c:1b:e0:5c: d9:f2:72:de:b1:eb:80:ca:74:fd:55:02:8b:76:31:07:25:90: 21:0b:4c:3d:ef:d0:01:7c:2e:4a:b9:df:1b:b3:dc:b6:21:05: c1:77:bc:f3:57:36:57:a1:59:77:67:75:bf:19:5a:22:28:95: 81:a0:21:d2:66:42:7f:65:e3:72:4e:f9:06:92:4b:f6:5c:dc: c4:6d:40:be:2a:17:63:89:b4:1b:95:96:a1:3e:cd:58:b6:ae: 06:05:62:1d:78:08:c3:88:e8:c7:3c:b1:67:d8:88:68:60:98: cb:78:be:b4:13:9b:9c:55:d6:78:00:f9:65:7d:db:32:ba:31: 15:07:29:ba:0e:b3:43:a5:67:82:51:2b:ee:2a:6e:d0:58:f0: 42:80:6e:f4:12:a9:6d:64:ee:71:10:2d:fa:10:ce:e6:cb:c8: 5e:5f:f8:a4:97:74:58:fd:aa:01:f3:6b:4b:e9:24:57:9e:85: fe:d4:32:83:19:73:3f:26:c2:4a:3f:e4:cc:b4:aa:24:d8:58: b8:55:61:42:bf:e9:0f:8a:6d:8e:e7:f0:ed:7d:90:eb:e7:8c: 2d:b4:50:6d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVSJFida0zsFYLjOI69PO35qZzhQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA2MDAzMTIwWhcNMjYwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlOWViNTQ5Y2ZjMDBhOGM4ZDQ5OTMyMDAzZmIzMjM2N2Uy YTg0OWE0N2IzODZhZjA4Y2IzZjBjZjExZDdkYjA1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHkVtqr/AsBWMGs7mpMkSDfoaIsv80RQdTrxuvk7XiHu3M v7qlTLzz1oFB6Z8joTdUWgTjBW6q9yMGoVlQecJBp0b1E2d3LKXFu1I/k6JkS0CH GdOpQaoIskdCM8xSbvJh92tJjlFeflujkozZbvdWMD/J/hJExpdGJCDLVgG34XBT 0yRXT3W990KZ7y3/PqtiD/5vzKMyYpfCphuOXq1i6UxBjIIYayJDDX9jr41a1/yO vJ9cHZlR2GuOYtGgV9qh2YTbb3V9dIuWBq19xtLpWX8LAM8lcnIpEeyJJHwLRmmM q741yES3Lqib/gzSCAbiw+uwKoc9DJXAiHBzZh9jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPRcWDDJQZUmSqc32d9iwBBJvGHwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM2ZWU4Njk0LTA4MTgtNDEwOS1hMTJhLTc2MzhhZWMwMWMyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjlmAwDQYJKoZIhvcNAQELBQADggEBAITFEomhxaaqHvpyvE6N0Hyqjgac o6ZFmRccsXqDtbPWXBvgXNnyct6x64DKdP1VAot2MQclkCELTD3v0AF8Lkq53xuz 3LYhBcF3vPNXNlehWXdndb8ZWiIolYGgIdJmQn9l43JO+QaSS/Zc3MRtQL4qF2OJ tBuVlqE+zVi2rgYFYh14CMOI6Mc8sWfYiGhgmMt4vrQTm5xV1ngA+WV92zK6MRUH KboOs0OlZ4JRK+4qbtBY8EKAbvQSqW1k7nEQLfoQzubLyF5f+KSXdFj9qgHza0vp JFeehf7UMoMZcz8mwko/5My0qiTYWLhVYUK/6Q+KbY7n8O19kOvnjC20UG0= -----END CERTIFICATE-----Generated at Wed May 13 03:50:27 2026 by rpki-client