$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c9955eb-b353-47f1-92e9-9fa09d187037.roa File: 4c9955eb-b353-47f1-92e9-9fa09d187037.roa (raw, json) Hash identifier: gb6oSUFQ9iZaYDY3qaZtpzQ61CLW5hFRaKlgORQREBA= Subject key identifier: 44:E1:61:99:95:AC:22:D7:8D:DA:99:BD:53:CB:10:BC:AC:66:F4:4A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 301CB278DDA40A42FB01F5F51059B37A81BEAAE0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c9955eb-b353-47f1-92e9-9fa09d187037.roa Signing time: Tue 12 May 2026 01:20:07 +0000 ROA not before: Tue 12 May 2026 01:20:07 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1c:b2:78:dd:a4:0a:42:fb:01:f5:f5:10:59:b3:7a:81:be:aa:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:20:07 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=88ab7c365708d8876e0eca2cdea55c7c17d7cb02753829c07ee4f9b33a59534e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d3:b2:b6:bb:db:8c:a7:97:28:f3:73:3e:55: 9b:75:5e:1a:dc:27:08:5a:a8:1d:d4:25:df:02:c6: b7:a3:9d:2c:63:fa:76:bc:83:c4:83:fc:e5:8e:12: 52:33:ff:00:0b:db:8a:69:96:4b:11:e1:4b:1c:25: 6c:47:f1:23:15:fb:5d:8d:b6:bd:88:ba:2d:99:86: db:a0:92:9f:7b:94:e2:8c:3e:f5:57:1b:8e:0b:c6: d5:82:d3:e8:06:41:f0:d6:5d:8e:22:c4:28:63:c8: fd:5e:b0:07:d4:01:04:37:53:8b:73:e4:93:ad:58: 5d:12:82:82:90:54:67:4f:de:d9:0c:f2:0b:e2:f6: e4:7f:be:bd:11:bc:68:a0:9e:0d:9c:d4:cb:ab:04: 69:ad:1d:60:76:3d:ad:f6:6c:5c:7a:65:54:66:2a: 95:9b:dd:db:48:f7:f5:40:16:75:24:7e:a3:0f:ea: 12:5c:17:31:54:dc:25:6f:49:37:77:bd:98:32:30: dc:a8:de:c8:45:cc:d6:c6:e1:72:1c:b1:12:b3:e6: 27:1c:1f:ca:62:cd:9e:21:a6:9b:d8:24:41:b3:ba: 9e:3a:51:15:2b:8d:67:4c:22:d1:e5:b8:f3:98:ad: 6d:9b:84:a1:55:16:83:47:27:3e:74:fa:36:db:82: 6e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E1:61:99:95:AC:22:D7:8D:DA:99:BD:53:CB:10:BC:AC:66:F4:4A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c9955eb-b353-47f1-92e9-9fa09d187037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.224.0/20 Signature Algorithm: sha256WithRSAEncryption 68:2a:e8:97:46:99:f0:70:bd:d3:ac:00:0a:83:07:6f:f8:39: 7b:44:af:5d:9a:4e:0b:c4:71:7b:49:68:89:dc:c2:1c:53:f1: fe:65:78:c2:a5:74:bb:a4:32:2c:dc:2e:a1:bf:1d:f3:a9:94: 7e:48:10:d7:64:68:a0:ae:02:b2:de:9f:3a:9b:d6:71:0a:07: 1c:c5:79:ec:03:33:11:bb:18:dc:e1:67:a6:89:83:fd:7e:3c: 4e:7a:81:5b:3f:15:1f:7f:b5:36:23:0c:b9:22:a6:d9:b8:df: b7:6a:65:77:4e:bb:7c:f5:be:09:ca:07:85:b1:68:0b:8c:df: 6f:81:f7:d5:9e:21:d7:82:60:a6:fb:53:05:21:0d:52:e8:92: ce:05:68:f7:20:df:a2:a5:5d:d3:84:0a:69:b1:c2:00:7f:01: 7b:f2:87:02:30:bd:5d:25:41:db:19:4c:b8:ac:a3:aa:ce:06: 0d:c1:71:77:3b:a7:58:9f:10:12:a9:e6:2f:8b:01:e9:5d:43: 8b:8e:c1:ce:6b:c7:f6:6a:f8:0f:6d:8a:53:21:4a:dc:69:b8: 0b:7c:c1:17:17:a5:bf:ec:f5:74:93:ac:d6:78:a1:df:b4:f0: 29:e2:87:c9:e1:d5:e1:97:75:45:07:ac:3b:7f:91:a8:90:5e: 66:7a:2a:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMByyeN2kCkL7AfX1EFmzeoG+quAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDEyMDA3WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4OGFiN2MzNjU3MDhkODg3NmUwZWNhMmNkZWE1NWM3YzE3 ZDdjYjAyNzUzODI5YzA3ZWU0ZjliMzNhNTk1MzRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZ07K2u9uMp5co83M+VZt1XhrcJwhaqB3UJd8CxrejnSxj +na8g8SD/OWOElIz/wAL24pplksR4UscJWxH8SMV+12Ntr2Iui2Zhtugkp97lOKM PvVXG44LxtWC0+gGQfDWXY4ixChjyP1esAfUAQQ3U4tz5JOtWF0SgoKQVGdP3tkM 8gvi9uR/vr0RvGigng2c1MurBGmtHWB2Pa32bFx6ZVRmKpWb3dtI9/VAFnUkfqMP 6hJcFzFU3CVvSTd3vZgyMNyo3shFzNbG4XIcsRKz5iccH8pizZ4hppvYJEGzup46 URUrjWdMItHluPOYrW2bhKFVFoNHJz50+jbbgm49AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUROFhmZWsIteN2pm9U8sQvKxm9EowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjOTk1NWViLWIzNTMtNDdmMS05MmU5LTlmYTA5ZDE4NzAzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASCsOAwDQYJKoZIhvcNAQELBQADggEBAGgq6JdGmfBwvdOsAAqDB2/4OXtE r12aTgvEcXtJaIncwhxT8f5leMKldLukMizcLqG/HfOplH5IENdkaKCuArLenzqb 1nEKBxzFeewDMxG7GNzhZ6aJg/1+PE56gVs/FR9/tTYjDLkiptm437dqZXdOu3z1 vgnKB4WxaAuM32+B99WeIdeCYKb7UwUhDVLoks4FaPcg36KlXdOECmmxwgB/AXvy hwIwvV0lQdsZTLiso6rOBg3BcXc7p1ifEBKp5i+LAeldQ4uOwc5rx/Zq+A9tilMh StxpuAt8wRcXpb/s9XSTrNZ4od+08Cnih8nh1eGXdUUHrDt/kaiQXmZ6Kkk= -----END CERTIFICATE-----Generated at Tue May 12 21:42:58 2026 by rpki-client