$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b86f75e7-7efa-4e39-ad58-afde66bdd22c.roa File: b86f75e7-7efa-4e39-ad58-afde66bdd22c.roa (raw, json) Hash identifier: UCc9ZMgtzoxwekv8YnhOq9K0so5yxXjdLFU8h7l6lAk= Subject key identifier: E8:85:BD:4E:57:40:AB:4C:C8:41:C3:EC:A6:E8:EC:19:1F:2F:2F:AE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: D4C409DEE25CBBA66471ED8E2F76815DF4916A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b86f75e7-7efa-4e39-ad58-afde66bdd22c.roa Signing time: Fri 08 May 2026 00:30:52 +0000 ROA not before: Fri 08 May 2026 00:30:52 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 206.191.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d4:c4:09:de:e2:5c:bb:a6:64:71:ed:8e:2f:76:81:5d:f4:91:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 00:30:52 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=5804e57ff6e99cce2ba930b7d0bb5ccb5a9fbfaa5941a74597f412dfe6ff0977, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4e:de:67:f4:34:f0:c8:15:8f:f4:ee:34:1a: 22:46:49:fa:ef:31:3b:3f:51:ce:f5:c1:99:b5:6d: c2:cb:4d:2a:18:d9:0e:b1:73:f8:57:d8:5b:f2:64: ac:0f:50:f2:18:0b:4f:c4:79:29:bc:6c:af:56:18: 97:a4:1b:76:38:f2:83:ad:1d:c7:0f:2d:07:58:06: ae:6b:ab:9a:96:37:d1:b6:19:04:68:e8:ea:f8:da: d6:ca:60:42:42:14:91:72:75:c7:c5:45:64:a8:59: 1a:57:96:dc:de:9c:08:31:c1:b6:0c:ea:a7:bc:a5: dd:dd:6a:d8:55:7b:f8:eb:b5:ee:4a:38:3e:2d:78: f7:a7:0a:62:54:50:a0:57:e8:f8:a2:19:1f:2f:bd: 40:b6:bf:75:9b:00:a7:a8:72:58:5f:14:e6:64:09: 81:5e:c1:54:5f:1d:37:c2:ac:b2:85:b4:01:97:f8: 1d:fa:ff:9b:3e:92:8f:cc:06:28:b6:cc:64:49:f6: a4:49:78:06:2c:cf:a6:f7:69:bb:be:4e:b7:ff:67: 46:72:86:39:03:a7:a5:dc:f3:47:ee:a3:e0:0e:55: fb:bc:2b:34:63:eb:7c:10:0e:40:bb:24:8f:fc:55: b3:ec:c7:63:1a:88:e9:98:d2:fa:9a:b8:03:97:f4: 59:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:85:BD:4E:57:40:AB:4C:C8:41:C3:EC:A6:E8:EC:19:1F:2F:2F:AE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b86f75e7-7efa-4e39-ad58-afde66bdd22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.191.184.0/21 Signature Algorithm: sha256WithRSAEncryption 5d:4d:23:d4:b8:56:ed:d9:8f:39:28:4f:a1:f5:f6:63:9c:65: a8:29:41:89:44:90:1d:b1:fa:a1:ef:61:b3:f1:79:c7:ee:b5: e6:69:11:3d:8f:71:74:03:69:bf:a9:e7:33:04:39:4e:8b:40: 0a:25:dc:80:a4:7a:82:f9:10:da:a2:1f:1a:54:06:55:b4:48: de:dd:d3:1e:53:18:4c:61:38:40:dc:92:03:f6:67:43:e6:86: 35:1b:ff:32:ac:de:fa:68:51:e0:5f:92:a5:aa:6f:d7:d8:f1: 13:60:0c:91:79:33:11:f0:77:db:79:ea:61:47:ea:5d:98:eb: ac:a5:bb:e5:27:5d:0d:4e:25:9d:b0:36:80:69:ce:39:62:6c: ba:57:7b:51:73:93:05:27:58:b5:55:b1:29:73:bb:7c:0b:44: e6:49:09:f6:7d:44:1c:7d:a0:dd:78:07:a8:49:72:7e:22:10: d8:e7:76:4b:1a:b2:83:47:40:8d:93:9c:b1:17:8d:d7:bf:25: b3:52:1f:a8:1c:71:ac:d2:cb:bd:29:4c:25:ec:97:62:85:52: cc:35:cb:08:b4:75:a9:ca:b3:19:0a:fb:6d:57:e3:e8:94:ca: c6:52:24:bf:65:81:cf:3c:ae:fc:a8:6d:a1:ee:0a:a5:19:65: fa:3a:07:d7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUANTECd7iXLumZHHtji92gV30kWowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA4MDAzMDUyWhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODA0ZTU3ZmY2ZTk5Y2NlMmJhOTMwYjdkMGJiNWNjYjVh OWZiZmFhNTk0MWE3NDU5N2Y0MTJkZmU2ZmYwOTc3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdTt5n9DTwyBWP9O40GiJGSfrvMTs/Uc71wZm1bcLLTSoY 2Q6xc/hX2FvyZKwPUPIYC0/EeSm8bK9WGJekG3Y48oOtHccPLQdYBq5rq5qWN9G2 GQRo6Or42tbKYEJCFJFydcfFRWSoWRpXltzenAgxwbYM6qe8pd3dathVe/jrte5K OD4tePenCmJUUKBX6PiiGR8vvUC2v3WbAKeoclhfFOZkCYFewVRfHTfCrLKFtAGX +B36/5s+ko/MBii2zGRJ9qRJeAYsz6b3abu+Trf/Z0ZyhjkDp6Xc80fuo+AOVfu8 KzRj63wQDkC7JI/8VbPsx2MaiOmY0vqauAOX9FmnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6IW9TldAq0zIQcPspujsGR8vL64wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4NmY3NWU3LTdlZmEtNGUzOS1hZDU4LWFmZGU2NmJkZDIyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPOv7gwDQYJKoZIhvcNAQELBQADggEBAF1NI9S4Vu3ZjzkoT6H19mOcZagp QYlEkB2x+qHvYbPxecfuteZpET2PcXQDab+p5zMEOU6LQAol3ICkeoL5ENqiHxpU BlW0SN7d0x5TGExhOEDckgP2Z0PmhjUb/zKs3vpoUeBfkqWqb9fY8RNgDJF5MxHw d9t56mFH6l2Y66ylu+UnXQ1OJZ2wNoBpzjlibLpXe1FzkwUnWLVVsSlzu3wLROZJ CfZ9RBx9oN14B6hJcn4iENjndksasoNHQI2TnLEXjde/JbNSH6gccazSy70pTCXs l2KFUsw1ywi0danKsxkK+21X4+iUysZSJL9lgc88rvyobaHuCqUZZfo6B9c= -----END CERTIFICATE-----Generated at Tue May 12 21:49:17 2026 by rpki-client