$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f3125c-a240-4e96-98f9-38d7861a1143.roa File: 40f3125c-a240-4e96-98f9-38d7861a1143.roa (raw, json) Hash identifier: 9ZzMBFTzttD0B0xMDuaYlwYJrB22PaNhhcp1uNe3UA8= Subject key identifier: 2C:2A:F7:67:03:EA:22:25:C5:2D:D0:0C:67:89:22:FD:14:8A:F9:0F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 77A67516825D5E64FF5675ED74884DC4C0616206 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f3125c-a240-4e96-98f9-38d7861a1143.roa Signing time: Tue 05 May 2026 00:11:06 +0000 ROA not before: Tue 05 May 2026 00:11:06 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 184.73.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a6:75:16:82:5d:5e:64:ff:56:75:ed:74:88:4d:c4:c0:61:62:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 00:11:06 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=ef4fe8883c42da5c02fbfcbf0098213e87e7b1b07b4074dc6fec65976eec1d87, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b2:2c:92:13:ff:fe:fc:d6:a6:46:06:e1:1f: fd:62:3a:5e:04:68:a0:a5:ea:c3:c4:7d:27:20:68: 1c:d2:8f:0c:c3:19:53:2c:4b:92:7d:0d:fa:5c:a4: ad:98:6d:bf:fc:2e:92:f6:7d:e4:92:5c:47:d3:ac: c5:49:e4:2b:23:d2:6c:00:54:42:0c:4a:4b:4f:12: 06:96:79:d5:ee:97:dd:8a:04:23:ef:ef:25:40:41: df:5b:5c:3d:74:a7:f0:b4:7f:ed:36:73:b1:d8:bf: 12:72:1a:93:32:75:55:73:d9:cf:30:52:2d:87:db: 62:46:8b:d3:97:eb:9a:07:ed:7c:4b:3c:f2:1b:18: 3b:35:41:3b:6d:d3:b2:54:64:38:09:c9:b4:54:e1: d6:c1:48:7b:5d:c9:37:41:3d:25:ab:5d:d2:a6:43: a6:e0:1a:0b:5b:68:ae:ac:6a:97:43:97:78:9a:63: 86:61:3b:9a:91:8c:f2:d9:5e:d5:7c:c6:38:14:34: bd:4b:89:8c:39:40:95:ca:76:93:16:b8:a4:81:9c: ec:b5:b6:10:26:09:d3:19:b7:53:14:2e:84:c8:0e: 78:7d:8d:ab:8e:d2:9b:ba:45:aa:39:9c:4b:82:53: 45:c6:f6:a5:72:bb:b4:21:14:c6:21:95:80:f7:a5: d9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2A:F7:67:03:EA:22:25:C5:2D:D0:0C:67:89:22:FD:14:8A:F9:0F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40f3125c-a240-4e96-98f9-38d7861a1143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.73.152.0/21 Signature Algorithm: sha256WithRSAEncryption 27:b9:79:4c:71:ff:55:a2:f5:11:87:c6:40:aa:fc:64:0d:11: 66:f7:8e:6e:2d:f6:76:f0:6f:9c:1e:b1:70:06:08:4a:d7:8c: f1:5d:0f:b5:d4:24:e0:58:2a:f7:20:01:8f:88:71:d0:c8:d9: ff:c2:40:d9:12:ee:77:3e:cb:93:17:a0:e1:8b:1e:18:a2:ff: d3:f8:5d:e0:c1:41:ae:75:1c:25:59:e8:ab:9c:9c:8a:56:73: 81:0a:b7:e3:37:35:cf:a9:c1:ba:e5:90:fd:4e:3b:d5:24:cc: f8:84:25:20:93:f5:7d:6c:fb:6a:20:44:71:cb:04:ff:a0:6a: 6a:6d:9b:0c:b0:a9:00:2b:41:4a:1f:20:55:5d:7e:da:f7:a1: ae:e9:df:11:39:c6:ef:20:8f:75:3a:23:98:1c:c0:3b:9a:c0: 34:2e:13:87:74:64:70:db:98:58:67:bf:d6:68:9b:fb:ab:4b: e6:ff:85:f9:82:33:2f:0b:b2:ba:20:7d:b5:3a:3c:24:ed:46: 0d:80:19:a4:a4:ec:dd:b1:53:52:67:b0:c1:2a:dc:d1:a7:33: d9:2e:c0:62:12:41:4c:b5:20:08:56:6f:f6:08:23:cd:19:e2: cf:a8:05:80:da:5f:da:cd:c1:c3:3b:12:c6:f9:23:b4:ed:d1: 86:4a:8b:a4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUd6Z1FoJdXmT/VnXtdIhNxMBhYgYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA1MDAxMTA2WhcNMjYwODAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjRmZTg4ODNjNDJkYTVjMDJmYmZjYmYwMDk4MjEzZTg3 ZTdiMWIwN2I0MDc0ZGM2ZmVjNjU5NzZlZWMxZDg3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHsiySE//+/NamRgbhH/1iOl4EaKCl6sPEfScgaBzSjwzD GVMsS5J9DfpcpK2Ybb/8LpL2feSSXEfTrMVJ5Csj0mwAVEIMSktPEgaWedXul92K BCPv7yVAQd9bXD10p/C0f+02c7HYvxJyGpMydVVz2c8wUi2H22JGi9OX65oH7XxL PPIbGDs1QTtt07JUZDgJybRU4dbBSHtdyTdBPSWrXdKmQ6bgGgtbaK6sapdDl3ia Y4ZhO5qRjPLZXtV8xjgUNL1LiYw5QJXKdpMWuKSBnOy1thAmCdMZt1MULoTIDnh9 jauO0pu6Rao5nEuCU0XG9qVyu7QhFMYhlYD3pdnHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULCr3ZwPqIiXFLdAMZ4ki/RSK+Q8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQwZjMxMjVjLWEyNDAtNGU5Ni05OGY5LTM4ZDc4NjFhMTE0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO4SZgwDQYJKoZIhvcNAQELBQADggEBACe5eUxx/1Wi9RGHxkCq/GQNEWb3 jm4t9nbwb5wesXAGCErXjPFdD7XUJOBYKvcgAY+IcdDI2f/CQNkS7nc+y5MXoOGL Hhii/9P4XeDBQa51HCVZ6KucnIpWc4EKt+M3Nc+pwbrlkP1OO9UkzPiEJSCT9X1s +2ogRHHLBP+gamptmwywqQArQUofIFVdftr3oa7p3xE5xu8gj3U6I5gcwDuawDQu E4d0ZHDbmFhnv9Zom/urS+b/hfmCMy8LsrogfbU6PCTtRg2AGaSk7N2xU1JnsMEq 3NGnM9kuwGISQUy1IAhWb/YII80Z4s+oBYDaX9rNwcM7Esb5I7Tt0YZKi6Q= -----END CERTIFICATE-----Generated at Wed May 13 01:17:21 2026 by rpki-client