$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/809b6125-3665-4b5b-9735-5efa330b3442.roa File: 809b6125-3665-4b5b-9735-5efa330b3442.roa (raw, json) Hash identifier: jw9Tdy9QomBjuATcsuwvkEAGjjerew3GxZyBEN+T00M= Subject key identifier: CB:13:E8:F6:D7:F4:AC:9C:FA:DA:70:33:F9:DD:7A:95:BC:01:CD:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52C409FD378954DCC9D2737F5AABFF5696F297B7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/809b6125-3665-4b5b-9735-5efa330b3442.roa Signing time: Tue 12 May 2026 00:50:48 +0000 ROA not before: Tue 12 May 2026 00:50:48 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 202.174.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c4:09:fd:37:89:54:dc:c9:d2:73:7f:5a:ab:ff:56:96:f2:97:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 00:50:48 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=c38b35065b183715eb1085dcf657a0c625b59773007e3b9b9c04e62022de78b4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e4:f4:59:bb:49:db:d6:ea:9d:26:f8:05:ac: 03:74:f7:78:e8:53:85:3a:17:c7:42:fb:ad:08:7a: 45:fe:c2:bb:4f:8e:a2:3f:3b:a0:69:d0:26:f9:cf: c3:b2:51:a2:ec:92:03:4e:7d:b3:f0:6c:38:95:62: fc:e3:14:b7:57:69:10:ad:4d:34:22:d3:57:27:4c: f4:cd:4a:69:eb:7f:f3:b8:ed:a9:33:b7:29:5a:0a: 33:8f:fa:09:06:8e:7f:eb:1f:74:f7:54:46:54:3f: 52:0c:d0:87:b7:6d:9b:5a:43:4e:2f:31:ad:fd:cc: cf:86:e9:61:1e:73:62:0c:5c:0d:15:77:c1:70:35: 54:47:f8:6b:c7:94:b4:53:a1:c8:68:0a:d1:f3:e7: ad:1f:df:36:95:b6:a9:9e:50:7c:91:91:8f:78:46: 28:e3:e1:6c:5b:cd:4e:4f:68:80:52:c2:62:bf:1c: de:56:56:98:2a:5b:fb:27:e2:89:5d:df:f0:0e:24: 38:51:1c:e8:4b:00:9c:3a:1e:7b:26:4b:07:3e:8d: 2d:3d:19:60:a3:4c:64:70:81:76:10:2f:e7:87:96: 53:82:62:34:cf:83:ee:b5:4d:9d:56:b6:fe:5b:c3: b4:de:80:9c:9e:16:ee:f8:c5:04:2b:74:cc:bf:3b: 7a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:13:E8:F6:D7:F4:AC:9C:FA:DA:70:33:F9:DD:7A:95:BC:01:CD:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/809b6125-3665-4b5b-9735-5efa330b3442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.174.132.0/24 Signature Algorithm: sha256WithRSAEncryption bb:0f:bb:48:3f:20:16:47:13:54:35:4f:df:98:bd:62:12:6f: 20:1d:16:fd:60:47:e9:91:01:bc:6c:a8:87:6d:08:72:a1:6d: 5c:98:7b:7b:76:9d:26:53:89:a3:45:84:45:37:16:4a:33:19: 99:7d:66:81:31:62:96:2d:86:5f:29:b6:d9:be:36:4a:5a:32: 9a:91:7e:19:f6:51:a5:fa:bf:39:bd:25:07:1e:0e:01:13:8d: 8e:a0:11:e2:99:87:37:ae:88:c2:e7:8a:59:76:4b:7e:1c:5b: 81:5b:f1:31:27:81:96:92:99:0b:74:58:b1:a7:18:f5:5d:8c: 15:54:fe:fb:8d:ff:f6:73:f8:ca:a2:88:7a:37:d2:e9:a0:c5: 59:f2:1e:e9:b3:42:5d:30:ff:da:b4:37:b3:f6:da:76:93:1b: 0c:cc:b1:2b:62:e3:bf:1b:af:a4:bf:65:ae:db:39:a3:3f:24: 39:23:d5:24:f8:2c:82:eb:6d:b1:e0:c7:92:11:09:e7:34:bf: 6e:a9:f4:58:6a:0b:f3:b4:dd:60:69:ce:29:96:11:11:ce:43: 0c:d5:0e:74:e4:71:fc:55:59:2c:4d:82:14:36:89:e6:0f:36: 6c:5b:30:15:8b:26:34:0c:24:bc:24:8c:dc:04:9a:4e:01:6e: 63:e2:3d:45 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUsQJ/TeJVNzJ0nN/Wqv/Vpbyl7cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDA1MDQ4WhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMzhiMzUwNjViMTgzNzE1ZWIxMDg1ZGNmNjU3YTBjNjI1 YjU5NzczMDA3ZTNiOWI5YzA0ZTYyMDIyZGU3OGI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf5PRZu0nb1uqdJvgFrAN093joU4U6F8dC+60IekX+wrtP jqI/O6Bp0Cb5z8OyUaLskgNOfbPwbDiVYvzjFLdXaRCtTTQi01cnTPTNSmnrf/O4 7akztylaCjOP+gkGjn/rH3T3VEZUP1IM0Ie3bZtaQ04vMa39zM+G6WEec2IMXA0V d8FwNVRH+GvHlLRTochoCtHz560f3zaVtqmeUHyRkY94Rijj4WxbzU5PaIBSwmK/ HN5WVpgqW/sn4old3/AOJDhRHOhLAJw6HnsmSwc+jS09GWCjTGRwgXYQL+eHllOC YjTPg+61TZ1Wtv5bw7TegJyeFu74xQQrdMy/O3rzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyxPo9tf0rJz62nAz+d16lbwBzZ0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgwOWI2MTI1LTM2NjUtNGI1Yi05NzM1LTVlZmEzMzBiMzQ0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADKroQwDQYJKoZIhvcNAQELBQADggEBALsPu0g/IBZHE1Q1T9+YvWISbyAd Fv1gR+mRAbxsqIdtCHKhbVyYe3t2nSZTiaNFhEU3FkozGZl9ZoExYpYthl8pttm+ NkpaMpqRfhn2UaX6vzm9JQceDgETjY6gEeKZhzeuiMLnill2S34cW4Fb8TEngZaS mQt0WLGnGPVdjBVU/vuN//Zz+MqiiHo30umgxVnyHumzQl0w/9q0N7P22naTGwzM sSti478br6S/Za7bOaM/JDkj1ST4LILrbbHgx5IRCec0v26p9FhqC/O03WBpzimW ERHOQwzVDnTkcfxVWSxNghQ2ieYPNmxbMBWLJjQMJLwkjNwEmk4BbmPiPUU= -----END CERTIFICATE-----Generated at Tue May 12 21:42:54 2026 by rpki-client