$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78235117-1eed-40c3-8939-247d6c313e16.roa File: 78235117-1eed-40c3-8939-247d6c313e16.roa (raw, json) Hash identifier: hNA1E25JdA2LCCdVWTg1r51KEfms/Mx+udnGX35smPA= Subject key identifier: BB:20:48:D3:B7:19:F9:39:71:FD:9B:2E:B9:2A:DF:64:F1:F7:16:1F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 18D62C37A2F09EA2F8E2238E5737D37F12ECE007 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78235117-1eed-40c3-8939-247d6c313e16.roa Signing time: Mon 04 May 2026 01:21:50 +0000 ROA not before: Mon 04 May 2026 01:21:50 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 99.83.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d6:2c:37:a2:f0:9e:a2:f8:e2:23:8e:57:37:d3:7f:12:ec:e0:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 01:21:50 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=9fb01525a09af5d853928a806207af6458e510d1b0bd9cc493aceb26511b174f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:6e:3b:31:ef:37:9d:1d:a5:b5:b3:cc:ae: 03:49:1d:26:6d:54:8a:c1:73:b8:69:0b:a0:65:fd: 3b:00:af:3b:f2:bb:14:d2:3b:28:2b:14:7b:1e:5c: 11:93:71:b3:46:0c:8e:3c:9a:1e:06:15:89:f7:c8: 83:e2:4e:89:cd:08:08:78:a0:05:97:dc:a1:28:61: 29:be:fd:ce:91:1c:f9:9d:3c:45:06:5a:88:03:a5: 04:66:8a:28:79:96:46:73:d0:8d:36:02:73:cf:ca: 7f:47:b1:50:7a:83:d7:16:29:dc:c5:fd:0b:9a:93: b1:eb:23:c3:5c:15:fa:82:d1:d5:70:9a:48:11:89: 52:9e:0b:e7:30:99:67:5a:4f:29:0c:6f:e5:21:ad: b9:15:b6:c7:2c:92:24:74:59:77:5c:bc:e2:2c:71: 28:37:37:a0:f5:33:cb:03:2f:83:bb:bf:96:f3:ac: 59:93:45:a5:e8:88:bb:41:04:70:43:5d:06:3a:48: a7:3a:bc:ea:8a:f4:d3:fc:d4:25:57:71:af:a5:db: 23:5c:e8:ba:c4:e8:24:2d:c7:a8:bd:58:4f:d4:84: 49:c1:9a:9e:61:4a:54:54:2e:82:47:15:f5:2e:eb: b2:a9:c5:7c:e4:4b:51:12:35:99:39:ea:b1:db:90: 2c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:20:48:D3:B7:19:F9:39:71:FD:9B:2E:B9:2A:DF:64:F1:F7:16:1F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78235117-1eed-40c3-8939-247d6c313e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.83.128.0/20 Signature Algorithm: sha256WithRSAEncryption b0:8d:20:44:b5:42:b9:3a:cd:5c:fa:7c:08:1f:15:95:80:32: f0:ca:e4:52:ea:16:be:a5:4e:8e:69:cf:0a:ea:0b:63:3f:96: 04:d3:a2:09:2c:68:e3:8d:5e:7c:f3:6c:08:c6:0b:6f:95:f1: c4:2e:2f:eb:14:27:9f:6f:30:2b:3c:2a:ba:2d:8f:a5:72:4c: a7:66:29:a7:83:20:88:73:0c:cd:09:c5:d2:e5:25:f8:af:48: 90:8e:68:db:c7:07:79:7d:dc:9e:99:9e:f5:22:96:d5:38:22: c2:b9:47:c2:ee:14:7c:b8:66:ec:51:ee:41:91:b1:b2:2c:85: 78:05:1e:07:a9:47:3b:28:cb:65:c2:83:b1:af:d6:07:2c:8c: 1b:f0:a6:6a:ea:24:87:34:89:b3:b1:26:ec:df:57:f0:d9:25: 6a:6e:8b:53:40:5a:76:44:d8:e0:81:a6:43:c2:23:4e:c6:fe: 19:60:16:be:f6:42:a1:89:50:44:fb:58:c6:77:7d:33:80:e0: fe:89:70:26:b8:ff:43:1d:e0:9e:b6:46:82:23:95:64:1c:36: d3:dc:e2:b2:aa:73:c8:0d:c1:48:87:1d:c7:66:4f:86:d7:4a: a0:e2:e9:10:a8:4b:3f:df:dd:aa:c2:63:c8:07:76:d0:2d:8f: 23:9c:54:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGNYsN6LwnqL44iOOVzfTfxLs4AcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDEyMTUwWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZmIwMTUyNWEwOWFmNWQ4NTM5MjhhODA2MjA3YWY2NDU4 ZTUxMGQxYjBiZDljYzQ5M2FjZWIyNjUxMWIxNzRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5M247Me83nR2ltbPMrgNJHSZtVIrBc7hpC6Bl/TsArzvy uxTSOygrFHseXBGTcbNGDI48mh4GFYn3yIPiTonNCAh4oAWX3KEoYSm+/c6RHPmd PEUGWogDpQRmiih5lkZz0I02AnPPyn9HsVB6g9cWKdzF/Quak7HrI8NcFfqC0dVw mkgRiVKeC+cwmWdaTykMb+UhrbkVtscskiR0WXdcvOIscSg3N6D1M8sDL4O7v5bz rFmTRaXoiLtBBHBDXQY6SKc6vOqK9NP81CVXca+l2yNc6LrE6CQtx6i9WE/UhEnB mp5hSlRULoJHFfUu67KpxXzkS1ESNZk56rHbkCyxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuyBI07cZ+Tlx/ZsuuSrfZPH3Fh8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4MjM1MTE3LTFlZWQtNDBjMy04OTM5LTI0N2Q2YzMxM2UxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARjU4AwDQYJKoZIhvcNAQELBQADggEBALCNIES1Qrk6zVz6fAgfFZWAMvDK 5FLqFr6lTo5pzwrqC2M/lgTTogksaOONXnzzbAjGC2+V8cQuL+sUJ59vMCs8Krot j6VyTKdmKaeDIIhzDM0JxdLlJfivSJCOaNvHB3l93J6ZnvUiltU4IsK5R8LuFHy4 ZuxR7kGRsbIshXgFHgepRzsoy2XCg7Gv1gcsjBvwpmrqJIc0ibOxJuzfV/DZJWpu i1NAWnZE2OCBpkPCI07G/hlgFr72QqGJUET7WMZ3fTOA4P6JcCa4/0Md4J62RoIj lWQcNtPc4rKqc8gNwUiHHcdmT4bXSqDi6RCoSz/f3arCY8gHdtAtjyOcVA0= -----END CERTIFICATE-----Generated at Wed May 13 04:10:25 2026 by rpki-client