$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7511727c-3470-481c-a527-6610004e3acd.roa File: 7511727c-3470-481c-a527-6610004e3acd.roa (raw, json) Hash identifier: NU6eBGaR0pdwhdWzWIjnZszXethcs6mlEWrx0kobmds= Subject key identifier: 5D:16:C1:A6:0D:47:22:A3:69:B4:5A:9B:58:13:4E:0C:A1:CB:2F:A8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6198DFB1C67C5EB591A34358E77D6AC7D0B24864 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7511727c-3470-481c-a527-6610004e3acd.roa Signing time: Fri 01 May 2026 00:51:07 +0000 ROA not before: Fri 01 May 2026 00:51:07 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:98:df:b1:c6:7c:5e:b5:91:a3:43:58:e7:7d:6a:c7:d0:b2:48:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 1 00:51:07 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=2d93c8c63669b78ad6d2338e636a6fa8382f8a5ff98284a0e9b7444c0450a030, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:17:e6:f1:4e:83:db:dc:ea:3e:75:15:50:2f: 44:08:9e:27:d7:3b:bd:90:c2:21:28:eb:f8:d6:84: de:c9:eb:e5:bb:28:68:6f:56:23:7d:fe:e2:47:75: bc:5b:cb:32:eb:3c:4b:da:69:2c:13:17:50:9a:5c: 0a:a5:8b:96:d3:c1:d7:7b:51:81:5c:0d:13:02:bb: 25:7b:29:be:42:e7:d1:d1:92:fb:4a:b6:d0:aa:02: f9:5b:6b:58:f0:56:01:38:2a:0a:bf:5c:ab:88:6d: d7:e0:95:5e:44:83:e7:80:88:77:6e:2e:bb:20:69: 0d:0e:c6:ac:5c:c8:78:a0:91:9d:ca:b1:77:d7:c9: f9:5f:4a:a5:53:21:aa:de:76:a3:e2:93:c1:31:c6: 0a:05:41:01:6b:55:5a:fb:9e:51:12:73:73:83:37: a5:c4:61:47:7f:de:6e:a7:e5:39:9e:d9:67:01:b0: 60:d1:95:3b:89:cc:61:0f:5e:b2:7d:e2:18:78:b1: 33:cf:3a:e0:26:12:f8:c3:2d:45:1c:bd:64:f8:16: e4:39:7c:84:26:af:48:f1:77:96:7e:c6:50:35:82: 35:78:39:e9:c2:f4:aa:01:bb:49:48:54:d6:24:a6: 1f:4b:1a:17:6a:da:75:a9:f6:0d:f2:f8:7d:4b:5a: e3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:16:C1:A6:0D:47:22:A3:69:B4:5A:9B:58:13:4E:0C:A1:CB:2F:A8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7511727c-3470-481c-a527-6610004e3acd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.124.0/24 Signature Algorithm: sha256WithRSAEncryption d5:c5:66:a3:20:20:3d:a3:21:22:a8:b0:02:8c:65:8b:93:48: 73:05:b6:a3:0a:3f:49:5f:62:5c:3a:d7:10:db:e9:58:c1:4d: fc:33:ad:fb:18:5d:f7:39:ea:82:e5:30:2e:c7:da:92:4d:ca: 45:46:49:29:88:aa:2f:15:9b:ec:fe:5a:57:ba:7a:bb:b9:c7: c1:ea:02:7e:f9:e6:6b:06:b8:d9:37:d5:66:62:42:7f:5f:2d: f1:0f:2b:20:6c:11:4e:df:99:ac:21:28:65:25:67:d4:62:c3: 8d:56:e5:f4:e5:12:9b:fd:2f:cc:a8:8b:1e:59:6d:95:ed:ec: 03:4b:a2:b9:7e:07:90:e7:57:3d:69:29:ef:8b:0c:ff:1e:24: cd:0d:e4:40:b6:32:43:04:9e:44:d6:56:27:1a:1f:7f:2b:dd: b3:52:ac:c4:63:8b:d3:79:d7:86:da:75:04:47:79:b6:19:ad: 19:60:fd:da:fd:4f:55:93:c0:ef:67:70:77:da:82:d3:70:68: 00:69:fc:3b:82:e3:44:bc:30:3e:ae:25:d6:c0:87:41:2f:6b: b9:b3:04:52:5d:5e:6e:12:5e:fc:f8:e5:0b:b8:62:1a:93:68: 15:47:1f:00:47:ae:91:09:c6:4c:4f:da:45:00:a3:70:d3:d7: 67:a1:f9:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYZjfscZ8XrWRo0NY531qx9CySGQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDA1MTA3WhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDkzYzhjNjM2NjliNzhhZDZkMjMzOGU2MzZhNmZhODM4 MmY4YTVmZjk4Mjg0YTBlOWI3NDQ0YzA0NTBhMDMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfF+bxToPb3Oo+dRVQL0QInifXO72QwiEo6/jWhN7J6+W7 KGhvViN9/uJHdbxbyzLrPEvaaSwTF1CaXAqli5bTwdd7UYFcDRMCuyV7Kb5C59HR kvtKttCqAvlba1jwVgE4Kgq/XKuIbdfglV5Eg+eAiHduLrsgaQ0OxqxcyHigkZ3K sXfXyflfSqVTIaredqPik8ExxgoFQQFrVVr7nlESc3ODN6XEYUd/3m6n5Tme2WcB sGDRlTuJzGEPXrJ94hh4sTPPOuAmEvjDLUUcvWT4FuQ5fIQmr0jxd5Z+xlA1gjV4 OenC9KoBu0lIVNYkph9LGhdq2nWp9g3y+H1LWuPJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXRbBpg1HIqNptFqbWBNODKHLL6gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc1MTE3MjdjLTM0NzAtNDgxYy1hNTI3LTY2MTAwMDRlM2FjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/HwwDQYJKoZIhvcNAQELBQADggEBANXFZqMgID2jISKosAKMZYuTSHMF tqMKP0lfYlw61xDb6VjBTfwzrfsYXfc56oLlMC7H2pJNykVGSSmIqi8Vm+z+Wle6 eru5x8HqAn755msGuNk31WZiQn9fLfEPKyBsEU7fmawhKGUlZ9Riw41W5fTlEpv9 L8yoix5ZbZXt7ANLorl+B5DnVz1pKe+LDP8eJM0N5EC2MkMEnkTWVicaH38r3bNS rMRji9N514badQRHebYZrRlg/dr9T1WTwO9ncHfagtNwaABp/DuC40S8MD6uJdbA h0Eva7mzBFJdXm4SXvz45Qu4YhqTaBVHHwBHrpEJxkxP2kUAo3DT12eh+aI= -----END CERTIFICATE-----Generated at Wed May 13 03:03:46 2026 by rpki-client