$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68af9002-6d9c-4a97-b412-41140a596dc9.roa File: 68af9002-6d9c-4a97-b412-41140a596dc9.roa (raw, json) Hash identifier: aOEnBXkdtDvutyAI1sUkPKwYu1AcJeW8VvrVR+97sbY= Subject key identifier: FF:54:4E:15:1A:3B:6A:24:52:E1:56:E6:5D:D9:50:22:95:55:69:4B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 29F4A25AC3572BAECD3B26DBFB8E21B44E3CAE89 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68af9002-6d9c-4a97-b412-41140a596dc9.roa Signing time: Wed 06 May 2026 00:11:12 +0000 ROA not before: Wed 06 May 2026 00:11:12 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.150.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f4:a2:5a:c3:57:2b:ae:cd:3b:26:db:fb:8e:21:b4:4e:3c:ae:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 6 00:11:12 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=a55a7d5b4162d7a0883f185921d3563d5bdc0d8895b9ab34f929313b65ce09f7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:83:25:95:65:97:78:9d:e3:ef:7f:51:f7: 7a:01:c5:47:a3:d2:8c:6a:2d:9d:32:19:6c:25:b8: ae:c4:2d:02:f5:7b:1f:ca:bb:b5:82:48:ea:9b:bc: d6:fe:db:67:85:8b:a4:2b:e4:cc:f1:6e:ce:b5:38: 78:1c:b9:c3:89:82:86:97:cf:b7:41:b0:8b:5b:87: 8c:3b:82:7d:ef:45:69:df:34:c9:7e:73:d8:ac:15: 22:c3:74:de:3f:a3:d4:a6:62:23:22:01:e0:25:91: 57:8f:3a:39:4d:e0:46:1a:ef:4a:d7:3d:87:11:88: 23:d9:f2:e6:25:84:bb:5f:c9:38:51:8e:f4:22:67: 88:85:5e:b7:77:59:51:2f:21:df:08:d4:5e:a2:f3: b5:69:8c:ae:83:44:94:e8:50:37:e9:9d:15:52:81: a0:bd:07:ec:31:7d:9b:31:20:93:0b:11:3b:d2:af: 29:45:dd:d8:d5:54:4a:c9:ff:c7:52:ef:c2:5d:0b: 02:5b:6b:7d:96:95:65:2f:9a:db:5f:b5:74:24:c4: 87:be:04:d1:60:15:fc:f5:6a:ab:1d:03:cb:2d:cc: be:b5:a7:06:34:80:10:61:bf:e1:77:e5:a2:cf:18: 03:8a:1a:95:eb:82:11:a7:08:09:56:5d:68:2a:57: 61:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:54:4E:15:1A:3B:6A:24:52:E1:56:E6:5D:D9:50:22:95:55:69:4B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68af9002-6d9c-4a97-b412-41140a596dc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.150.56.0/21 Signature Algorithm: sha256WithRSAEncryption 26:1b:5f:45:23:8d:23:c2:a5:42:73:eb:5a:b4:db:87:af:2e: 96:7a:1a:32:56:3e:e7:7d:86:d3:b6:39:ef:d6:49:fb:80:2a: 3c:41:4b:ff:09:0d:8b:1e:11:e8:60:85:a0:67:bb:ef:3a:b9: fe:24:09:e7:ac:e8:b7:6d:25:5f:c3:2e:83:83:8d:ef:c0:6a: 70:73:02:8a:34:b6:04:70:8a:2e:f2:a9:04:79:69:f2:ee:85: 78:0e:38:ed:15:b7:37:e5:7b:ee:de:28:14:cb:50:19:f9:69: 31:f4:1d:cb:82:cf:72:fd:2a:6a:9b:59:41:0b:cb:54:e8:a5: 19:4d:ba:ab:63:d3:0e:cd:4a:75:c2:17:d4:dc:42:c3:0a:77: 21:35:a2:e7:dd:6c:f0:a4:c6:4a:fb:5d:8f:b0:43:17:ce:19: 21:d9:93:b4:ef:ed:c8:78:cb:26:9d:b4:66:56:68:3d:f0:bf: b2:7f:da:07:c5:d3:da:ca:9e:66:58:77:2e:41:d0:31:44:3d: f4:7b:9d:a4:d0:b4:d9:23:8b:1b:72:6d:ef:0f:e3:77:70:3b: c3:5d:85:51:4c:f2:c8:9d:05:64:cd:8e:e0:ea:80:f5:91:48: 0a:56:43:ad:15:80:b9:54:98:02:80:32:06:17:f1:e6:71:a4: a8:f2:81:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKfSiWsNXK67NOybb+44htE48rokwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA2MDAxMTEyWhcNMjYwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTVhN2Q1YjQxNjJkN2EwODgzZjE4NTkyMWQzNTYzZDVi ZGMwZDg4OTViOWFiMzRmOTI5MzEzYjY1Y2UwOWY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxeYMllWWXeJ3j739R93oBxUej0oxqLZ0yGWwluK7ELQL1 ex/Ku7WCSOqbvNb+22eFi6Qr5Mzxbs61OHgcucOJgoaXz7dBsItbh4w7gn3vRWnf NMl+c9isFSLDdN4/o9SmYiMiAeAlkVePOjlN4EYa70rXPYcRiCPZ8uYlhLtfyThR jvQiZ4iFXrd3WVEvId8I1F6i87VpjK6DRJToUDfpnRVSgaC9B+wxfZsxIJMLETvS rylF3djVVErJ/8dS78JdCwJba32WlWUvmttftXQkxIe+BNFgFfz1aqsdA8stzL61 pwY0gBBhv+F35aLPGAOKGpXrghGnCAlWXWgqV2HnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/1ROFRo7aiRS4VbmXdlQIpVVaUswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4YWY5MDAyLTZkOWMtNGE5Ny1iNDEyLTQxMTQwYTU5NmRjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANjljgwDQYJKoZIhvcNAQELBQADggEBACYbX0UjjSPCpUJz61q024evLpZ6 GjJWPud9htO2Oe/WSfuAKjxBS/8JDYseEehghaBnu+86uf4kCees6LdtJV/DLoOD je/AanBzAoo0tgRwii7yqQR5afLuhXgOOO0Vtzfle+7eKBTLUBn5aTH0HcuCz3L9 KmqbWUELy1TopRlNuqtj0w7NSnXCF9TcQsMKdyE1oufdbPCkxkr7XY+wQxfOGSHZ k7Tv7ch4yyadtGZWaD3wv7J/2gfF09rKnmZYdy5B0DFEPfR7naTQtNkjixtybe8P 43dwO8NdhVFM8sidBWTNjuDqgPWRSApWQ60VgLlUmAKAMgYX8eZxpKjygVI= -----END CERTIFICATE-----Generated at Wed May 13 01:22:57 2026 by rpki-client