$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9e2606a-70b0-45cc-a03d-b5a54fb9b75a.roa File: b9e2606a-70b0-45cc-a03d-b5a54fb9b75a.roa (raw, json) Hash identifier: QhDrrBpJWocJUqaKycSPiQnyXdE9czKGtCKpbIvknIQ= Subject key identifier: F4:08:06:24:95:8F:7C:2D:5E:DE:FC:D8:14:34:2D:D6:76:68:88:DC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E7FDAD489F21E05BE97C82894DA84E572C74374 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9e2606a-70b0-45cc-a03d-b5a54fb9b75a.roa Signing time: Tue 28 Apr 2026 00:00:05 +0000 ROA not before: Tue 28 Apr 2026 00:00:05 +0000 ROA not after: Mon 27 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.150.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:7f:da:d4:89:f2:1e:05:be:97:c8:28:94:da:84:e5:72:c7:43:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 00:00:05 2026 GMT Not After : Jul 27 23:59:59 2026 GMT Subject: serialNumber=736b3a8fbb3f8c125ebf299eb03426efaeda0c2c2bc121810c566385aa0b7cd4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4b:6b:35:f4:65:78:b5:39:18:b5:a0:1e:dc: 70:b8:7a:95:bf:a0:43:6d:02:3c:e8:85:c7:b5:1c: 5e:26:dc:cc:b4:e3:ab:0f:2d:01:6f:e4:3b:ee:76: af:9f:84:af:fe:d3:75:c4:5e:97:ce:a5:06:71:1a: ea:ee:96:f4:87:4a:42:58:4c:b1:1a:62:5a:cb:ef: 25:5b:bf:b7:c3:77:43:0b:8d:4e:3e:6e:01:6e:ee: 26:52:18:e6:e0:46:be:64:26:23:f8:83:66:da:cc: 79:98:53:ac:06:0e:c4:c0:a7:2b:1d:d2:ea:b1:f1: 84:0c:49:79:70:4e:ba:93:00:bb:2d:47:52:49:59: 4d:1e:98:b9:50:1a:2a:4b:10:50:51:a7:f6:f2:6a: d3:2d:af:1c:d2:af:7a:9e:fe:46:8d:82:d8:7c:1b: 6a:e1:30:53:71:f5:4f:68:e8:fb:08:a8:b9:9d:7f: 94:46:88:c8:fd:35:cf:58:1b:28:35:c3:9f:5b:26: 9c:f9:c7:17:6c:3f:4e:e7:bf:19:ac:6e:d2:e7:f5: ed:b2:50:1b:24:73:c3:87:c8:12:7c:7c:b4:13:f2: bc:50:7d:c9:cc:f8:65:15:46:20:4c:32:29:b5:1e: 20:e0:2a:75:e8:e8:89:d5:32:9c:8e:22:a5:81:b3: d4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:08:06:24:95:8F:7C:2D:5E:DE:FC:D8:14:34:2D:D6:76:68:88:DC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9e2606a-70b0-45cc-a03d-b5a54fb9b75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.150.0.0/16 Signature Algorithm: sha256WithRSAEncryption 34:c1:a6:5d:6b:cb:e5:13:bc:81:4d:b5:25:47:46:f7:48:d2: 78:38:a5:a5:67:fc:ab:22:8f:4a:a6:d8:72:96:f7:9b:af:b3: 16:da:5d:45:e5:eb:c3:5c:1b:f7:75:3d:ab:0a:64:85:66:6b: 02:53:42:db:ce:25:11:5c:5f:5b:4e:9b:c6:a9:54:69:f5:db: 34:b5:76:6f:bf:b2:aa:f8:e0:9b:17:67:83:8b:cf:68:2c:a0: 35:93:b7:0c:73:76:25:f7:72:a8:27:b8:a6:fd:7b:bf:c5:dd: e8:d7:a7:92:67:7c:a2:91:6f:48:c5:13:51:89:6b:3a:9f:8a: 97:5c:c8:34:30:7d:29:a8:97:7f:e5:a7:7c:b2:02:22:29:89: af:de:a2:f7:38:05:94:9a:3b:54:3b:ac:7e:51:69:bc:49:c0: 77:69:70:2c:80:d1:0a:5c:72:6b:a7:c5:1d:fa:15:09:b8:f7: 0a:72:50:0a:f7:0e:09:72:99:53:39:45:a0:87:79:13:2c:37: 94:1b:b6:e0:cb:2d:10:11:1c:f9:79:9f:cb:35:bc:54:6c:22: 44:ea:cb:b8:ea:cd:44:f5:6e:20:e4:18:a3:cf:c6:2d:2f:39: a7:e6:91:cc:6c:61:4a:42:db:ad:70:c3:01:de:dc:ee:03:7d: 56:1f:31:98 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTn/a1InyHgW+l8golNqE5XLHQ3QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI4MDAwMDA1WhcNMjYwNzI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzZiM2E4ZmJiM2Y4YzEyNWViZjI5OWViMDM0MjZlZmFl ZGEwYzJjMmJjMTIxODEwYzU2NjM4NWFhMGI3Y2Q0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyS2s19GV4tTkYtaAe3HC4epW/oENtAjzohce1HF4m3My0 46sPLQFv5Dvudq+fhK/+03XEXpfOpQZxGurulvSHSkJYTLEaYlrL7yVbv7fDd0ML jU4+bgFu7iZSGObgRr5kJiP4g2bazHmYU6wGDsTApysd0uqx8YQMSXlwTrqTALst R1JJWU0emLlQGipLEFBRp/byatMtrxzSr3qe/kaNgth8G2rhMFNx9U9o6PsIqLmd f5RGiMj9Nc9YGyg1w59bJpz5xxdsP07nvxmsbtLn9e2yUBskc8OHyBJ8fLQT8rxQ fcnM+GUVRiBMMim1HiDgKnXo6InVMpyOIqWBs9QxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU9AgGJJWPfC1e3vzYFDQt1nZoiNwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I5ZTI2MDZhLTcwYjAtNDVjYy1hMDNkLWI1YTU0ZmI5Yjc1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQljANBgkqhkiG9w0BAQsFAAOCAQEANMGmXWvL5RO8gU21JUdG90jSeDil pWf8qyKPSqbYcpb3m6+zFtpdReXrw1wb93U9qwpkhWZrAlNC284lEVxfW06bxqlU afXbNLV2b7+yqvjgmxdng4vPaCygNZO3DHN2JfdyqCe4pv17v8Xd6Nenkmd8opFv SMUTUYlrOp+Kl1zINDB9KaiXf+WnfLICIimJr96i9zgFlJo7VDusflFpvEnAd2lw LIDRClxya6fFHfoVCbj3CnJQCvcOCXKZUzlFoId5Eyw3lBu24MstEBEc+XmfyzW8 VGwiROrLuOrNRPVuIOQYo8/GLS85p+aRzGxhSkLbrXDDAd7c7gN9Vh8xmA== -----END CERTIFICATE-----Generated at Tue May 12 21:58:17 2026 by rpki-client