$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8997655-16da-44c4-b39e-dcdc8d70704f.roa File: b8997655-16da-44c4-b39e-dcdc8d70704f.roa (raw, json) Hash identifier: sNeeaZUPLNJN1PvyA9Rl87Z+lOC1KEmHWNO0pIujAxw= Subject key identifier: EA:57:49:E1:6C:1E:89:03:22:86:97:27:93:88:BA:0B:35:70:93:7A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 60972D137660199286EB579BF76D18A9B7003859 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8997655-16da-44c4-b39e-dcdc8d70704f.roa Signing time: Tue 05 May 2026 01:00:54 +0000 ROA not before: Tue 05 May 2026 01:00:54 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 199.83.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:97:2d:13:76:60:19:92:86:eb:57:9b:f7:6d:18:a9:b7:00:38:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 01:00:54 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=e07daf0ecd609523ff6e57ec43332a4f987f9046f2b7fb6e53f9f4b57ebba830, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:98:c9:b5:bc:b1:0d:9a:67:9d:fd:b9:19:95: fe:84:a6:4f:53:cb:47:7c:bd:48:2d:e4:dd:4a:18: bf:50:61:a7:20:62:4f:aa:de:5a:49:81:df:2c:47: 71:8b:33:6b:14:b5:cb:b0:52:4d:c7:9d:5c:ae:db: fc:ee:e3:7e:98:66:86:c9:af:6b:a9:6e:c1:e1:35: fd:29:2d:bd:20:2d:ec:a4:2e:a3:c3:e3:46:9e:f3: 80:39:ed:85:d6:4e:8d:67:80:b6:ae:62:2a:43:14: 22:ac:6d:86:ee:21:4c:d2:90:91:7a:64:f5:b5:6e: 82:2d:a0:b9:6a:72:c7:a5:77:de:19:ba:d1:21:7f: a3:1e:ae:61:94:b6:8d:de:be:43:e7:9c:0c:d3:31: 11:6f:fe:f6:ef:ff:fc:0f:70:88:21:e5:eb:36:9f: 4e:09:77:dd:a4:98:e8:6a:45:19:35:4e:6e:6d:ac: e7:10:1a:ff:0b:c8:b2:63:7d:3a:b2:68:9a:60:af: 8e:aa:83:70:d0:02:af:ef:aa:b8:3a:a2:ed:bd:db: 4a:ba:01:0d:4c:2e:d6:32:7f:0f:87:73:6d:f7:3f: 3a:af:a7:e8:f4:26:6e:8d:ae:0a:6a:af:9c:1e:12: c0:d4:f9:51:d2:79:bc:d4:6f:42:ab:57:4e:87:86: 2b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:57:49:E1:6C:1E:89:03:22:86:97:27:93:88:BA:0B:35:70:93:7A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8997655-16da-44c4-b39e-dcdc8d70704f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.83.88.0/21 Signature Algorithm: sha256WithRSAEncryption 54:7d:96:bc:c7:12:f5:e4:d9:ff:06:a9:42:2e:7b:8a:5c:ea: c3:61:34:02:72:be:a8:72:ea:75:90:e7:9f:4f:39:57:11:f8: 27:83:00:fb:86:0f:94:f9:61:f6:29:03:61:d0:84:36:f9:4f: fe:07:4e:c6:98:61:c6:f9:94:29:6c:63:23:68:c0:29:0e:4b: d6:e4:37:58:d5:42:48:86:90:63:53:8d:18:59:2b:10:4d:59: fe:a3:84:7f:4e:8f:5c:ed:9d:d8:d1:99:b8:8b:72:54:36:b8: 61:2f:4e:23:5c:8c:a6:e1:d9:75:c4:d7:65:e5:97:59:be:42: 09:28:56:77:5d:60:2a:5f:99:24:71:2b:d8:8a:e8:8c:3e:6e: e1:1a:e3:88:cb:08:5f:8c:be:2e:58:12:0f:f8:f3:7b:f7:09: c8:75:3e:ba:02:97:67:b8:66:62:1c:8d:4f:05:14:00:b9:f4: 64:69:47:67:93:33:e8:8f:2c:3f:7c:f2:89:1d:1e:10:43:98: bd:58:e4:00:f4:67:9b:99:c5:a7:01:82:7b:78:41:ac:2d:da: 01:65:54:06:b4:dd:4e:ac:41:1a:4c:58:76:f2:30:89:88:b8: da:7a:42:39:b7:be:4a:72:08:87:58:6b:e1:27:d5:28:b7:b1: 24:fc:c8:eb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYJctE3ZgGZKG61eb920YqbcAOFkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA1MDEwMDU0WhcNMjYwODAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMDdkYWYwZWNkNjA5NTIzZmY2ZTU3ZWM0MzMzMmE0Zjk4 N2Y5MDQ2ZjJiN2ZiNmU1M2Y5ZjRiNTdlYmJhODMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvmMm1vLENmmed/bkZlf6Epk9Ty0d8vUgt5N1KGL9QYacg Yk+q3lpJgd8sR3GLM2sUtcuwUk3HnVyu2/zu436YZobJr2upbsHhNf0pLb0gLeyk LqPD40ae84A57YXWTo1ngLauYipDFCKsbYbuIUzSkJF6ZPW1boItoLlqcseld94Z utEhf6MermGUto3evkPnnAzTMRFv/vbv//wPcIgh5es2n04Jd92kmOhqRRk1Tm5t rOcQGv8LyLJjfTqyaJpgr46qg3DQAq/vqrg6ou2920q6AQ1MLtYyfw+Hc233Pzqv p+j0Jm6Nrgpqr5weEsDU+VHSebzUb0KrV06HhitlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6ldJ4WweiQMihpcnk4i6CzVwk3owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4OTk3NjU1LTE2ZGEtNDRjNC1iMzllLWRjZGM4ZDcwNzA0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPHU1gwDQYJKoZIhvcNAQELBQADggEBAFR9lrzHEvXk2f8GqUIue4pc6sNh NAJyvqhy6nWQ559POVcR+CeDAPuGD5T5YfYpA2HQhDb5T/4HTsaYYcb5lClsYyNo wCkOS9bkN1jVQkiGkGNTjRhZKxBNWf6jhH9Oj1ztndjRmbiLclQ2uGEvTiNcjKbh 2XXE12Xll1m+QgkoVnddYCpfmSRxK9iK6Iw+buEa44jLCF+Mvi5YEg/483v3Cch1 ProCl2e4ZmIcjU8FFAC59GRpR2eTM+iPLD988okdHhBDmL1Y5AD0Z5uZxacBgnt4 Qawt2gFlVAa03U6sQRpMWHbyMImIuNp6Qjm3vkpyCIdYa+En1Si3sST8yOs= -----END CERTIFICATE-----Generated at Tue May 12 21:40:05 2026 by rpki-client