$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f5250ee-2b70-49b1-9d07-e2e8ac674436.roa File: 9f5250ee-2b70-49b1-9d07-e2e8ac674436.roa (raw, json) Hash identifier: K7lhboOo4j42c8nACQqNBRF/M65UoBJ0th9DztLR1ZE= Subject key identifier: 6D:BE:BE:F4:C1:17:89:1F:22:9C:2A:F9:56:DC:21:F0:4D:21:38:79 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 627BBBF841251085A1506DCB05F57EF98F7BBDB5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f5250ee-2b70-49b1-9d07-e2e8ac674436.roa Signing time: Sat 09 May 2026 00:22:21 +0000 ROA not before: Sat 09 May 2026 00:22:21 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.190.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:7b:bb:f8:41:25:10:85:a1:50:6d:cb:05:f5:7e:f9:8f:7b:bd:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:22:21 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=2b0a6f10fe2d7e89a45187ea6f741392c2fd4e256b8879bb1b590784447fd219, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b0:5b:75:f2:a4:5a:84:8f:f4:a8:14:9d:bc: de:95:c5:96:a5:0d:59:02:3b:78:1e:c3:6b:56:a5: aa:b8:c9:e3:ec:41:cd:5b:f7:25:d2:0a:18:da:48: 22:a9:0c:72:e8:74:86:2c:df:0c:18:1d:11:d8:fc: 0d:8e:1b:d8:a6:0c:48:d0:c3:f4:4e:30:f5:7f:d3: 89:96:eb:3e:d7:66:44:9e:10:22:4b:d1:6e:40:c9: 2f:a4:6a:6c:b3:28:0d:4a:a9:0e:4a:59:eb:6a:36: bf:27:af:31:cf:2e:23:0d:95:c6:c0:0a:44:c9:1f: c7:bc:b8:70:98:17:f1:67:82:51:47:8d:aa:57:79: 88:e8:62:61:d3:64:99:2e:4d:dd:4c:8e:94:2f:4a: 60:30:f2:67:cc:88:20:e9:c6:28:02:bd:f7:c7:56: 66:38:d3:dd:ac:ab:03:6d:2e:62:d0:27:22:b2:03: 80:04:d3:13:18:eb:ed:9e:33:b5:f2:e9:44:86:fd: fe:aa:19:32:0a:bd:06:e2:ce:dc:cf:fe:7a:28:29: 51:f4:af:82:01:20:30:91:37:73:3a:74:5e:36:18: b2:4b:c7:ab:a3:3a:74:cb:52:3c:b8:41:21:ce:02: 85:41:02:17:15:69:a1:f8:37:ab:cc:b9:ab:80:6c: 0f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BE:BE:F4:C1:17:89:1F:22:9C:2A:F9:56:DC:21:F0:4D:21:38:79 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f5250ee-2b70-49b1-9d07-e2e8ac674436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.190.146.0/24 Signature Algorithm: sha256WithRSAEncryption 22:14:50:04:d5:f4:27:55:ec:eb:ba:2b:42:77:7b:36:39:e5: 23:df:21:db:bd:0d:42:59:f6:37:65:e9:18:3a:9a:37:ec:76: e6:82:90:e7:60:42:24:2c:ec:3a:69:52:dc:20:ab:c1:6d:b2: 06:8f:60:2a:fc:89:ff:5b:14:bb:61:26:ec:00:7a:31:ad:ee: 6a:4b:89:ae:4e:93:c0:dd:31:7a:7c:ec:f9:71:82:77:66:53: eb:4a:83:bc:91:95:68:ed:9e:b1:59:3e:68:b8:9e:ca:d6:03: 0c:e9:47:14:16:c3:b6:1a:33:f6:19:58:7f:24:6f:04:9e:09: 0a:c9:b7:db:3e:0a:e6:38:7d:9a:c9:8d:d7:00:cf:4a:53:6d: db:49:d8:c3:c3:4b:b7:f8:ad:5f:80:3d:d2:d6:5f:be:81:65: fe:24:74:8e:e9:9e:c3:1c:af:f3:4b:05:e5:f1:ec:f2:af:56: a4:4e:8a:8b:9c:08:4c:f0:58:ab:5d:72:99:ba:85:2e:e9:7f: 48:9a:09:23:da:bd:60:c0:03:1d:b6:9f:ec:7b:1e:68:8e:f8: 70:a3:ac:22:7b:d7:b4:74:20:1b:57:69:3b:a3:d0:1f:97:7c: d9:65:81:ab:68:2c:09:ce:b6:63:a6:3a:5d:5b:1d:60:e9:43: b4:2f:b3:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYnu7+EElEIWhUG3LBfV++Y97vbUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA5MDAyMjIxWhcNMjYwODA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjBhNmYxMGZlMmQ3ZTg5YTQ1MTg3ZWE2Zjc0MTM5MmMy ZmQ0ZTI1NmI4ODc5YmIxYjU5MDc4NDQ0N2ZkMjE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHsFt18qRahI/0qBSdvN6VxZalDVkCO3gew2tWpaq4yePs Qc1b9yXSChjaSCKpDHLodIYs3wwYHRHY/A2OG9imDEjQw/ROMPV/04mW6z7XZkSe ECJL0W5AyS+kamyzKA1KqQ5KWetqNr8nrzHPLiMNlcbACkTJH8e8uHCYF/FnglFH japXeYjoYmHTZJkuTd1MjpQvSmAw8mfMiCDpxigCvffHVmY4092sqwNtLmLQJyKy A4AE0xMY6+2eM7Xy6USG/f6qGTIKvQbiztzP/nooKVH0r4IBIDCRN3M6dF42GLJL x6ujOnTLUjy4QSHOAoVBAhcVaaH4N6vMuauAbA/lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbb6+9MEXiR8inCr5Vtwh8E0hOHkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlmNTI1MGVlLTJiNzAtNDliMS05ZDA3LWUyZThhYzY3NDQzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABAvpIwDQYJKoZIhvcNAQELBQADggEBACIUUATV9CdV7Ou6K0J3ezY55SPf Idu9DUJZ9jdl6Rg6mjfsduaCkOdgQiQs7DppUtwgq8FtsgaPYCr8if9bFLthJuwA ejGt7mpLia5Ok8DdMXp87PlxgndmU+tKg7yRlWjtnrFZPmi4nsrWAwzpRxQWw7Ya M/YZWH8kbwSeCQrJt9s+CuY4fZrJjdcAz0pTbdtJ2MPDS7f4rV+APdLWX76BZf4k dI7pnsMcr/NLBeXx7PKvVqROioucCEzwWKtdcpm6hS7pf0iaCSPavWDAAx22n+x7 HmiO+HCjrCJ717R0IBtXaTuj0B+XfNllgatoLAnOtmOmOl1bHWDpQ7QvsyY= -----END CERTIFICATE-----Generated at Tue May 12 21:39:46 2026 by rpki-client