$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69cdda02-3aac-4c54-9544-ac7410b92f36.roa File: 69cdda02-3aac-4c54-9544-ac7410b92f36.roa (raw, json) Hash identifier: yYOoKGfZfQ/thnN99OoVtZEqEZjDHouHP7MmuH1qIVw= Subject key identifier: 58:40:AD:84:86:E8:EF:41:DC:CF:09:26:69:18:9C:A5:C4:63:67:B2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 30DD5176F4546BD397F21A09B49C9F226778B518 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69cdda02-3aac-4c54-9544-ac7410b92f36.roa Signing time: Fri 08 May 2026 00:40:54 +0000 ROA not before: Fri 08 May 2026 00:40:54 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 72.5.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:dd:51:76:f4:54:6b:d3:97:f2:1a:09:b4:9c:9f:22:67:78:b5:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 00:40:54 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=fd96e5c545c69c75b81b0aeac714e191798e478a14f881fefd7e7f67eff8433c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:22:7b:73:c6:54:2c:e7:18:62:5f:a8:67:21: d9:90:af:94:c9:d0:cf:22:fe:2d:83:40:1e:6e:cf: e4:d1:64:14:41:c3:9e:db:11:a0:67:68:f4:80:a4: 5f:1c:b4:6a:3e:2f:af:6e:37:4f:63:bc:9b:85:90: e9:c5:02:e4:b3:dc:1d:30:db:b2:16:49:c3:1b:2b: c2:5d:32:70:62:4b:23:11:af:8b:ea:ef:cd:45:a2: a1:53:e6:75:37:66:20:7f:ad:6b:e2:85:98:30:31: 30:73:4b:a3:9a:c6:57:a5:12:1a:0d:a1:ec:8a:45: 65:79:6b:9a:35:db:9d:d2:dd:3b:a1:d5:96:cd:98: 62:88:90:ab:0e:f6:d8:b2:76:44:f9:15:b0:41:3e: 2a:a3:03:97:56:60:b1:1a:12:78:b5:05:5e:d0:2c: a5:d5:7b:e7:f6:40:fa:b9:1f:b2:71:26:82:ee:c7: 16:a0:86:17:e0:af:35:99:94:6d:ea:b3:4d:43:d8: 64:e3:88:a9:78:13:d9:4d:df:f7:f4:1b:d5:7d:a2: f7:c0:ea:7c:43:e7:1f:79:74:5c:fd:e0:40:10:d5: e2:1e:b8:8c:d5:e6:0a:bc:ac:25:71:c9:b4:13:90: b8:6c:23:a0:a5:66:19:ae:14:4a:64:f3:bf:e8:9b: 2e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:40:AD:84:86:E8:EF:41:DC:CF:09:26:69:18:9C:A5:C4:63:67:B2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69cdda02-3aac-4c54-9544-ac7410b92f36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.5.172.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:a9:98:16:77:d3:bd:d3:23:cb:a5:e0:fc:be:8c:1e:2f:d8: 68:92:86:ca:52:66:65:83:83:b2:35:46:74:a3:10:20:98:49: ff:20:72:f1:38:c7:43:2f:48:1c:19:42:fe:38:97:2e:84:5d: 04:04:97:ca:ab:ed:3f:db:bc:aa:99:40:8b:0b:ea:ef:ad:6d: 4d:5a:81:fd:b1:1f:97:8d:c3:d2:52:e3:57:6e:b5:0d:9f:33: 54:a8:77:b4:22:22:4a:a8:57:b4:85:c4:09:6f:80:01:60:4e: b0:45:33:92:bc:25:fd:1a:72:6f:74:b5:4a:f4:c5:ee:ff:9e: 7d:d8:c0:48:e2:05:fc:58:ca:61:27:40:4c:86:17:ea:68:4b: 49:d9:71:66:73:bd:9e:6c:b6:ff:a7:94:9a:69:ab:86:8d:2c: 07:49:b1:d0:d6:e8:61:cf:85:02:f7:e2:a2:71:40:39:4f:d1: 1f:b4:60:8e:be:22:e7:16:02:b4:8d:75:5d:1c:39:d4:46:d2: 13:60:43:57:39:be:4e:a7:bf:5d:55:e0:8d:30:73:02:aa:f7: c4:d2:6b:4e:1d:d4:b6:97:b3:24:3b:11:62:cc:63:c1:63:47: 75:93:5d:e3:9a:a2:50:f3:de:c7:af:64:0e:7b:d8:ee:47:a4: c4:76:d3:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMN1RdvRUa9OX8hoJtJyfImd4tRgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA4MDA0MDU0WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZDk2ZTVjNTQ1YzY5Yzc1YjgxYjBhZWFjNzE0ZTE5MTc5 OGU0NzhhMTRmODgxZmVmZDdlN2Y2N2VmZjg0MzNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSIntzxlQs5xhiX6hnIdmQr5TJ0M8i/i2DQB5uz+TRZBRB w57bEaBnaPSApF8ctGo+L69uN09jvJuFkOnFAuSz3B0w27IWScMbK8JdMnBiSyMR r4vq781FoqFT5nU3ZiB/rWvihZgwMTBzS6OaxlelEhoNoeyKRWV5a5o1253S3Tuh 1ZbNmGKIkKsO9tiydkT5FbBBPiqjA5dWYLEaEni1BV7QLKXVe+f2QPq5H7JxJoLu xxaghhfgrzWZlG3qs01D2GTjiKl4E9lN3/f0G9V9ovfA6nxD5x95dFz94EAQ1eIe uIzV5gq8rCVxybQTkLhsI6ClZhmuFEpk87/omy6JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWECthIbo70HczwkmaRicpcRjZ7IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY5Y2RkYTAyLTNhYWMtNGM1NC05NTQ0LWFjNzQxMGI5MmYzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJIBawwDQYJKoZIhvcNAQELBQADggEBACqpmBZ3073TI8ul4Py+jB4v2GiS hspSZmWDg7I1RnSjECCYSf8gcvE4x0MvSBwZQv44ly6EXQQEl8qr7T/bvKqZQIsL 6u+tbU1agf2xH5eNw9JS41dutQ2fM1Sod7QiIkqoV7SFxAlvgAFgTrBFM5K8Jf0a cm90tUr0xe7/nn3YwEjiBfxYymEnQEyGF+poS0nZcWZzvZ5stv+nlJppq4aNLAdJ sdDW6GHPhQL34qJxQDlP0R+0YI6+IucWArSNdV0cOdRG0hNgQ1c5vk6nv11V4I0w cwKq98TSa04d1LaXsyQ7EWLMY8FjR3WTXeOaolDz3sevZA572O5HpMR205E= -----END CERTIFICATE-----Generated at Tue May 12 21:42:43 2026 by rpki-client