$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ef35af6-a704-4311-b43f-c62b39327200.roa File: 5ef35af6-a704-4311-b43f-c62b39327200.roa (raw, json) Hash identifier: TjT7etIIEdKnVIz3hcTzCM8yLNqCtgo+6Yr+PVScZLI= Subject key identifier: 64:A9:43:27:F3:76:52:B5:33:88:01:DF:63:2A:BD:C4:AA:56:A4:20 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 207DFADAD80F72EAEA880298481F555C8310B254 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ef35af6-a704-4311-b43f-c62b39327200.roa Signing time: Wed 29 Apr 2026 00:40:11 +0000 ROA not before: Wed 29 Apr 2026 00:40:11 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.105.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:7d:fa:da:d8:0f:72:ea:ea:88:02:98:48:1f:55:5c:83:10:b2:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:40:11 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=946a138a69eb549d2293c0339b5a0d86c8fc720b7011419e467d85e42dbdc373, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4d:07:61:d0:2a:f7:20:7c:7f:f0:96:30:f5: 62:a9:d6:21:d4:da:f9:33:0d:82:97:e6:96:b1:b3: 3d:46:4a:a8:d4:54:96:29:c0:66:3d:a5:e8:1e:07: 4b:7f:51:42:4c:e6:37:1f:9b:41:9b:cb:16:21:cb: 4e:1b:2b:37:18:a3:39:b8:4f:e6:4a:d4:97:17:44: f6:a9:32:b7:00:47:31:0c:db:bb:36:bd:14:b5:34: 0d:6f:5c:4f:31:af:e8:3f:2d:11:84:40:c0:9c:4f: a5:86:4f:77:1e:5c:73:e9:32:82:55:46:07:e4:a9: 56:b1:84:90:17:53:bc:88:51:f6:ae:0c:e9:85:76: 60:87:15:51:c2:9b:90:3f:02:df:c3:43:2f:bc:6e: 5f:4f:8c:1a:db:2f:84:73:cb:c1:9e:50:2a:9f:be: 2f:27:fe:c1:5d:d2:ba:47:c6:b4:39:cc:17:72:bc: c7:ca:f0:3f:3d:bb:6a:28:45:c4:22:f1:78:08:91: 55:95:16:04:ff:82:76:1c:b3:6e:4e:9a:e8:c3:a7: 4e:f3:01:d2:15:a9:a2:a1:f9:56:ac:c9:88:24:dd: 67:d1:82:46:5d:59:d2:e8:73:7a:65:13:6a:fe:8f: 73:76:e4:63:f5:aa:31:a5:e5:ad:1b:1e:7b:cd:2b: 59:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A9:43:27:F3:76:52:B5:33:88:01:DF:63:2A:BD:C4:AA:56:A4:20 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ef35af6-a704-4311-b43f-c62b39327200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.105.128.0/18 Signature Algorithm: sha256WithRSAEncryption 88:1d:42:cd:eb:87:e8:cf:16:68:16:6a:bd:a3:e4:d3:e8:ad: e6:81:1f:f7:69:00:6e:30:f0:60:21:6d:e2:cc:f6:8d:28:11: a0:d3:4f:46:b7:b9:83:6f:5e:99:65:e0:1d:eb:82:13:4b:4e: 91:b5:9b:28:3b:13:9c:c7:34:62:15:7b:f3:d3:d2:dd:90:3b: 53:9d:eb:66:2a:a1:58:8e:c9:a7:5c:db:36:b9:9d:6f:1d:62: 3c:95:0f:ec:f6:4e:9a:66:4a:76:69:1f:41:d1:45:00:3b:46: d3:dc:db:6c:12:5d:2b:e6:e3:e4:ee:26:46:b2:53:2c:5c:fd: a5:29:50:94:81:48:37:ae:44:74:ca:29:a0:45:7b:11:0c:c4: eb:29:59:9a:07:23:22:63:de:85:fc:27:5a:5f:81:c3:b8:e3: ef:71:3c:c2:4f:af:f3:3e:c5:59:81:c8:fc:00:43:3f:9b:11: 89:af:93:41:78:45:09:76:b5:84:6d:32:1b:e9:4f:d8:13:12: 50:8b:c1:29:72:8e:fc:9d:84:0f:96:6d:cf:49:40:5c:46:98: de:08:82:8d:4a:21:ea:ed:55:ed:ef:57:86:22:0b:af:da:9e: 64:d4:de:bd:51:43:2c:d2:b5:bd:98:70:fe:97:b5:cf:03:c3: d7:d1:3e:45 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIH362tgPcurqiAKYSB9VXIMQslQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDA0MDExWhcNMjYwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDZhMTM4YTY5ZWI1NDlkMjI5M2MwMzM5YjVhMGQ4NmM4 ZmM3MjBiNzAxMTQxOWU0NjdkODVlNDJkYmRjMzczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfTQdh0Cr3IHx/8JYw9WKp1iHU2vkzDYKX5paxsz1GSqjU VJYpwGY9pegeB0t/UUJM5jcfm0GbyxYhy04bKzcYozm4T+ZK1JcXRPapMrcARzEM 27s2vRS1NA1vXE8xr+g/LRGEQMCcT6WGT3ceXHPpMoJVRgfkqVaxhJAXU7yIUfau DOmFdmCHFVHCm5A/At/DQy+8bl9PjBrbL4Rzy8GeUCqfvi8n/sFd0rpHxrQ5zBdy vMfK8D89u2ooRcQi8XgIkVWVFgT/gnYcs25OmujDp07zAdIVqaKh+VasyYgk3WfR gkZdWdLoc3plE2r+j3N25GP1qjGl5a0bHnvNK1nRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZKlDJ/N2UrUziAHfYyq9xKpWpCAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlZjM1YWY2LWE3MDQtNDMxMS1iNDNmLWM2MmIzOTMyNzIwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZjaYAwDQYJKoZIhvcNAQELBQADggEBAIgdQs3rh+jPFmgWar2j5NPoreaB H/dpAG4w8GAhbeLM9o0oEaDTT0a3uYNvXpll4B3rghNLTpG1myg7E5zHNGIVe/PT 0t2QO1Od62YqoViOyadc2za5nW8dYjyVD+z2TppmSnZpH0HRRQA7RtPc22wSXSvm 4+TuJkayUyxc/aUpUJSBSDeuRHTKKaBFexEMxOspWZoHIyJj3oX8J1pfgcO44+9x PMJPr/M+xVmByPwAQz+bEYmvk0F4RQl2tYRtMhvpT9gTElCLwSlyjvydhA+Wbc9J QFxGmN4Igo1KIertVe3vV4YiC6/anmTU3r1RQyzStb2YcP6Xtc8Dw9fRPkU= -----END CERTIFICATE-----Generated at Wed May 13 03:01:55 2026 by rpki-client