$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/681dd84d-f118-4b24-948b-08dfaeab0932.roa File: 681dd84d-f118-4b24-948b-08dfaeab0932.roa (raw, json) Hash identifier: jTRZ0BmuuoDR96ffVof/p5nP4nOrayk4LsAi2IIx+kg= Subject key identifier: DB:9F:1D:CE:73:3E:3D:7E:8E:3D:44:94:DA:24:16:77:81:79:E1:02 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4BFE582AB0D4E22499CF27B7F0B3EF36B2176D5B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/681dd84d-f118-4b24-948b-08dfaeab0932.roa Signing time: Tue 12 May 2026 01:41:39 +0000 ROA not before: Tue 12 May 2026 01:41:39 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:fe:58:2a:b0:d4:e2:24:99:cf:27:b7:f0:b3:ef:36:b2:17:6d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:41:39 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=ec31279ad965785c7723e52244bacd3f0d745a738cf1f87bf77563ebe1faa258, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9f:b1:d2:83:2b:93:5b:98:a2:f8:08:e8:e3: 5c:be:3b:82:21:4f:a8:e2:01:27:e1:9f:9e:d0:5f: 5e:fd:3f:df:1a:97:8c:4f:aa:ce:de:2e:f5:6d:10: 11:6a:10:f6:1a:dd:be:23:dd:9c:d2:0f:c5:ad:55: 40:8b:ae:ed:c2:e3:6b:e4:c7:c8:ff:96:c0:ad:7c: a4:3d:ab:95:d4:65:1a:33:64:45:19:d7:8d:e1:07: 4a:c2:cc:eb:64:8b:08:0c:fd:a2:17:83:8c:c2:ba: 24:17:c2:06:05:55:65:65:4a:17:af:5a:00:a5:a6: 6a:72:53:bb:b8:5a:0b:59:c5:96:93:8f:db:8a:08: 6f:5f:68:a7:3f:7f:fb:0b:4e:b2:99:66:2a:b3:ab: d4:7d:6b:53:b2:30:80:39:2b:da:e4:e4:a7:87:ec: 51:2d:11:be:27:a8:99:85:a5:88:09:0a:72:41:65: 13:ae:b3:a3:74:30:79:52:2e:cb:17:ab:ae:fa:0f: 3f:fe:87:f7:b7:66:2c:c1:e6:24:75:09:a9:f7:a2: 54:61:2c:a4:2f:87:dc:49:ec:0c:f1:ea:46:8e:f4: b3:d8:16:fc:86:e6:89:40:1d:1e:a5:4e:40:08:83: 02:07:e5:1d:69:e3:a7:80:ae:1d:52:84:c8:19:68: 5e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9F:1D:CE:73:3E:3D:7E:8E:3D:44:94:DA:24:16:77:81:79:E1:02 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/681dd84d-f118-4b24-948b-08dfaeab0932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.202.0/24 Signature Algorithm: sha256WithRSAEncryption 34:ec:0c:75:ff:76:d3:db:46:8f:3a:fc:44:44:ce:8b:f3:97: 59:60:04:f4:9c:ea:0f:9a:30:1b:2f:1c:df:27:56:ba:35:99: 9d:f8:1e:33:5c:c6:4e:3b:90:38:b0:af:a2:4e:0e:a6:f6:c3: e8:e5:2f:f1:95:17:ec:98:42:d5:2e:c6:20:e6:42:bd:d3:03: bc:3c:a2:42:1b:72:33:24:e1:50:49:79:34:1c:6f:c4:30:79: 42:48:70:61:c3:67:e4:d2:5f:79:16:ac:ea:57:4e:75:f4:cb: fc:84:0e:5f:e4:e1:de:73:e5:c5:be:4c:7c:2b:da:6c:dd:61: 53:be:4b:2f:b1:50:f9:cd:ae:12:a3:05:d2:72:3b:d5:e2:d7: e8:2b:8c:04:d7:aa:58:f2:8e:e0:d8:14:80:c2:8c:6b:30:9d: bd:95:77:d1:90:66:17:64:80:8d:68:b3:16:61:82:d3:6a:46: 00:bd:17:9c:14:e1:c8:67:1c:69:7c:09:76:fc:ae:be:74:9f: ae:e9:13:df:72:82:1d:11:74:51:d2:b6:a2:15:21:09:07:39: da:ce:5a:28:53:94:ba:3b:e6:74:a3:d7:ab:9c:f9:da:83:17: b7:80:37:35:2f:73:7a:b6:b1:cb:3c:26:8a:b2:9e:33:18:44: f9:8c:5d:59 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS/5YKrDU4iSZzye38LPvNrIXbVswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDE0MTM5WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzMxMjc5YWQ5NjU3ODVjNzcyM2U1MjI0NGJhY2QzZjBk NzQ1YTczOGNmMWY4N2JmNzc1NjNlYmUxZmFhMjU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTn7HSgyuTW5ii+Ajo41y+O4IhT6jiASfhn57QX179P98a l4xPqs7eLvVtEBFqEPYa3b4j3ZzSD8WtVUCLru3C42vkx8j/lsCtfKQ9q5XUZRoz ZEUZ143hB0rCzOtkiwgM/aIXg4zCuiQXwgYFVWVlShevWgClpmpyU7u4WgtZxZaT j9uKCG9faKc/f/sLTrKZZiqzq9R9a1OyMIA5K9rk5KeH7FEtEb4nqJmFpYgJCnJB ZROus6N0MHlSLssXq676Dz/+h/e3ZizB5iR1Can3olRhLKQvh9xJ7Azx6kaO9LPY FvyG5olAHR6lTkAIgwIH5R1p46eArh1ShMgZaF7pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU258dznM+PX6OPUSU2iQWd4F54QIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4MWRkODRkLWYxMTgtNGIyNC05NDhiLTA4ZGZhZWFiMDkzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsMowDQYJKoZIhvcNAQELBQADggEBADTsDHX/dtPbRo86/EREzovzl1lg BPSc6g+aMBsvHN8nVro1mZ34HjNcxk47kDiwr6JODqb2w+jlL/GVF+yYQtUuxiDm Qr3TA7w8okIbcjMk4VBJeTQcb8QweUJIcGHDZ+TSX3kWrOpXTnX0y/yEDl/k4d5z 5cW+THwr2mzdYVO+Sy+xUPnNrhKjBdJyO9Xi1+grjATXqljyjuDYFIDCjGswnb2V d9GQZhdkgI1osxZhgtNqRgC9F5wU4chnHGl8CXb8rr50n67pE99ygh0RdFHStqIV IQkHOdrOWihTlLo75nSj16uc+dqDF7eANzUvc3q2scs8JoqynjMYRPmMXVk= -----END CERTIFICATE-----Generated at Wed May 13 04:06:13 2026 by rpki-client