$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3dd10443-0b96-450b-8a58-0da2b4ad7028.roa File: 3dd10443-0b96-450b-8a58-0da2b4ad7028.roa (raw, json) Hash identifier: QoG/qj7nqHK1rraFkvl/bs7KewwhEIuta2534v/PTMQ= Subject key identifier: 36:F7:4E:6E:FD:C2:C1:99:56:07:F7:AF:3A:76:95:93:CE:26:EC:95 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 057F384F5AEEF31A2045D2F2F8D57AAEE816F63B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3dd10443-0b96-450b-8a58-0da2b4ad7028.roa Signing time: Fri 08 May 2026 00:20:07 +0000 ROA not before: Fri 08 May 2026 00:20:07 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.82.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:7f:38:4f:5a:ee:f3:1a:20:45:d2:f2:f8:d5:7a:ae:e8:16:f6:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 00:20:07 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=96f6b67933a61c6446b6c777fac58bd770c9ee1a745a2826007679aced52fad2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cf:eb:6b:b3:c0:12:04:39:6d:60:9d:cd:52: f2:44:4c:21:41:88:35:0d:29:0a:26:ab:41:0b:fa: 95:bf:50:19:a5:fa:c8:fb:a6:98:82:e5:89:e7:34: 3d:7d:53:99:28:d7:67:cb:4e:35:3c:4e:f7:3b:af: 21:4f:61:8e:cf:52:58:87:a7:67:c1:3f:22:2a:25: b8:74:e6:f3:3f:84:81:72:bc:a3:de:83:d7:2f:b2: 2d:c4:5f:6b:43:a8:06:71:30:20:43:76:44:f5:89: c8:9f:e6:3a:a5:fe:b0:ff:7d:15:e0:5e:f0:9e:f1: 5a:0a:c8:0e:6b:1b:73:28:04:a3:e6:fd:7c:a5:51: c2:a0:41:71:bb:41:4f:3c:93:44:07:3e:19:b4:b4: 0f:23:b8:20:e1:c4:65:85:c6:40:08:53:91:2f:37: a2:67:f6:3e:f7:68:7e:6d:50:26:99:89:0c:aa:f9: 7d:11:e3:ba:52:83:2a:9c:e3:fd:c0:9d:29:5e:33: 46:3a:13:49:34:89:0d:49:48:6d:39:34:67:b8:02: 14:59:a9:b4:48:0e:d2:b1:49:74:e8:f5:c5:f2:33: 7b:82:a7:4b:cb:a3:f5:bb:35:8d:e0:f1:98:08:0c: 09:5c:0f:4a:f9:b0:0b:75:61:84:d3:22:02:f3:8d: e1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F7:4E:6E:FD:C2:C1:99:56:07:F7:AF:3A:76:95:93:CE:26:EC:95 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3dd10443-0b96-450b-8a58-0da2b4ad7028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.82.0.0/17 Signature Algorithm: sha256WithRSAEncryption 66:91:23:4a:a1:89:78:fd:74:09:14:85:04:ea:00:cf:92:16: 32:49:12:1a:21:c4:4e:e1:2b:bb:86:a9:58:18:3b:06:5a:73: 91:95:c3:9d:87:6c:81:65:08:68:3c:a7:62:4e:bc:97:77:51: a0:0a:57:41:e6:0f:41:7c:36:7d:2a:f4:08:e8:f8:70:34:23: ad:4c:d3:45:f2:aa:c3:87:c7:21:d3:22:d8:78:27:4d:0b:dc: 04:fe:4e:cc:c2:0b:1e:88:10:1e:aa:cb:bd:e7:bf:18:22:ce: 3d:34:7c:6b:e2:d2:ab:f6:f3:d3:05:84:07:10:a4:91:43:17: c7:dc:0d:f8:2c:da:7e:f4:fc:47:dc:bb:3c:78:2b:eb:a3:86: 64:2c:5b:15:b4:b9:58:b7:a7:6b:7c:21:41:62:8b:f9:22:ce: 2e:14:d4:e6:54:92:95:36:ed:44:67:b6:0a:54:55:c6:64:4c: bd:88:95:90:51:53:b4:f8:dc:56:5a:6f:59:b0:be:d1:27:04: 6f:ec:30:51:03:bf:be:0a:04:42:d8:e9:d0:0d:36:b3:0b:41: 2d:be:7e:19:d7:c7:d8:d9:26:f5:d1:8d:76:a6:a1:fc:73:db: 94:fb:b7:5d:a7:ee:2c:82:5b:0d:4b:25:e8:92:a3:e5:09:7e: 35:90:8a:64 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBX84T1ru8xogRdLy+NV6rugW9jswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA4MDAyMDA3WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NmY2YjY3OTMzYTYxYzY0NDZiNmM3NzdmYWM1OGJkNzcw YzllZTFhNzQ1YTI4MjYwMDc2NzlhY2VkNTJmYWQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyz+trs8ASBDltYJ3NUvJETCFBiDUNKQomq0EL+pW/UBml +sj7ppiC5YnnND19U5ko12fLTjU8Tvc7ryFPYY7PUliHp2fBPyIqJbh05vM/hIFy vKPeg9cvsi3EX2tDqAZxMCBDdkT1icif5jql/rD/fRXgXvCe8VoKyA5rG3MoBKPm /XylUcKgQXG7QU88k0QHPhm0tA8juCDhxGWFxkAIU5EvN6Jn9j73aH5tUCaZiQyq +X0R47pSgyqc4/3AnSleM0Y6E0k0iQ1JSG05NGe4AhRZqbRIDtKxSXTo9cXyM3uC p0vLo/W7NY3g8ZgIDAlcD0r5sAt1YYTTIgLzjeHtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNvdObv3CwZlWB/evOnaVk84m7JUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNkZDEwNDQzLTBiOTYtNDUwYi04YTU4LTBkYTJiNGFkNzAyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdAUgAwDQYJKoZIhvcNAQELBQADggEBAGaRI0qhiXj9dAkUhQTqAM+SFjJJ EhohxE7hK7uGqVgYOwZac5GVw52HbIFlCGg8p2JOvJd3UaAKV0HmD0F8Nn0q9Ajo +HA0I61M00XyqsOHxyHTIth4J00L3AT+TszCCx6IEB6qy73nvxgizj00fGvi0qv2 89MFhAcQpJFDF8fcDfgs2n70/Efcuzx4K+ujhmQsWxW0uVi3p2t8IUFii/kizi4U 1OZUkpU27URntgpUVcZkTL2IlZBRU7T43FZab1mwvtEnBG/sMFEDv74KBELY6dAN NrMLQS2+fhnXx9jZJvXRjXamofxz25T7t12n7iyCWw1LJeiSo+UJfjWQimQ= -----END CERTIFICATE-----Generated at Wed May 13 00:52:00 2026 by rpki-client