$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1ec3b8-12a2-4eec-90c7-cad9f1823955.roa File: ba1ec3b8-12a2-4eec-90c7-cad9f1823955.roa (raw, json) Hash identifier: t1/ZKoyKENdl7NNoz26YC+LaoduJmrllSsvvkKS/wAk= Subject key identifier: 6E:A0:9E:ED:B5:F9:0B:B5:C6:E6:B3:EC:78:A6:6C:53:BE:CD:F5:0B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E7BAE9EFA913E6895CC7B7954F5A5E65628630B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1ec3b8-12a2-4eec-90c7-cad9f1823955.roa Signing time: Thu 07 May 2026 00:00:06 +0000 ROA not before: Thu 07 May 2026 00:00:06 +0000 ROA not after: Wed 05 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 16.140.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:7b:ae:9e:fa:91:3e:68:95:cc:7b:79:54:f5:a5:e6:56:28:63:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:00:06 2026 GMT Not After : Aug 5 23:59:59 2026 GMT Subject: serialNumber=02144178fe7834adfe7c168c7dd8b407b8d3ff43a310a703fcca0e76de5a00d8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:22:66:1f:71:52:a4:cc:dc:05:14:10:e2:74: 18:9d:02:58:e1:4a:14:74:e7:07:17:26:8c:86:d7: e2:b0:63:1e:a3:06:0e:dd:21:b0:6b:a9:75:b4:d3: a7:f8:5d:8e:13:d7:38:9b:8f:e0:25:00:43:da:15: 9f:c6:5f:b3:64:65:9f:d2:44:32:d6:e2:48:b9:e4: 82:6a:49:94:2e:75:92:92:7e:53:a2:98:0c:ee:6c: 7f:ba:1d:a4:50:37:fb:55:e2:59:b0:bc:65:5a:e6: 84:85:4d:aa:df:ff:44:2f:08:32:eb:37:dd:9f:70: d5:9a:0c:cf:3b:83:71:88:a3:3f:c0:80:58:d5:cf: 63:23:d8:c7:78:cc:fa:88:a5:8f:9a:82:69:91:45: 5f:fc:9a:b8:8c:34:0c:5a:a8:12:fe:e4:ae:f3:ee: 51:98:c3:31:ff:8f:60:ec:fb:d0:32:dd:6d:94:23: f5:d1:35:c4:55:bb:ce:34:46:54:37:82:63:b5:9c: 86:d2:66:76:47:ae:7a:11:d9:76:26:25:31:b6:fb: 10:f9:6a:44:a4:3f:01:a0:c8:50:25:79:39:29:ae: 2a:32:7f:6a:67:8b:9f:09:34:29:63:ac:64:f3:81: 25:9a:3d:f6:91:7d:9b:c1:58:65:77:9f:86:d1:49: f8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A0:9E:ED:B5:F9:0B:B5:C6:E6:B3:EC:78:A6:6C:53:BE:CD:F5:0B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1ec3b8-12a2-4eec-90c7-cad9f1823955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.140.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7d:b3:fc:cd:1a:ea:46:34:1d:dc:ac:8e:4e:70:79:ff:95:d0: 92:9b:bb:65:a2:a1:9d:ba:d5:0b:ef:1c:63:f6:50:6a:91:6a: 0d:de:9b:6f:0b:00:9a:84:aa:6a:45:a8:b2:a3:8f:f6:02:fe: 88:5e:74:f2:0f:71:25:11:50:5c:f2:03:6b:0b:9e:52:ae:0b: af:85:ad:f3:b0:e0:9e:7a:21:ad:3b:94:18:34:90:10:94:71: 1a:e4:b7:1c:c9:91:15:28:72:9d:ae:c9:e2:1d:bd:06:da:f7: df:68:be:19:32:a8:4d:51:b6:36:ae:ff:3b:48:14:be:b6:15: df:02:ff:8c:7d:7e:9d:a7:9f:55:f2:59:25:32:7a:db:75:63: 14:f0:70:e3:d2:4b:4f:96:92:6f:3f:95:26:33:dd:f3:40:f0: 9e:04:65:a9:f9:f6:cf:35:3a:a6:8c:fa:37:86:b7:23:20:34: 10:30:62:88:5c:d2:69:1f:7b:6f:58:c9:27:72:16:da:e2:fe: 93:b5:d6:b7:94:34:af:14:44:6b:33:e5:39:22:49:11:bc:88: fa:31:8b:66:30:1f:f1:c0:9b:ea:88:b1:23:f5:c0:3b:b3:2b: 30:28:2c:b9:9c:5e:89:d0:05:aa:4a:d0:71:9f:e9:3e:b9:2a: 08:15:c8:ac -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTnuunvqRPmiVzHt5VPWl5lYoYwswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA3MDAwMDA2WhcNMjYwODA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMjE0NDE3OGZlNzgzNGFkZmU3YzE2OGM3ZGQ4YjQwN2I4 ZDNmZjQzYTMxMGE3MDNmY2NhMGU3NmRlNWEwMGQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYImYfcVKkzNwFFBDidBidAljhShR05wcXJoyG1+KwYx6j Bg7dIbBrqXW006f4XY4T1zibj+AlAEPaFZ/GX7NkZZ/SRDLW4ki55IJqSZQudZKS flOimAzubH+6HaRQN/tV4lmwvGVa5oSFTarf/0QvCDLrN92fcNWaDM87g3GIoz/A gFjVz2Mj2Md4zPqIpY+agmmRRV/8mriMNAxaqBL+5K7z7lGYwzH/j2Ds+9Ay3W2U I/XRNcRVu840RlQ3gmO1nIbSZnZHrnoR2XYmJTG2+xD5akSkPwGgyFAleTkprioy f2pni58JNCljrGTzgSWaPfaRfZvBWGV3n4bRSfgtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUbqCe7bX5C7XG5rPseKZsU77N9QswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhMWVjM2I4LTEyYTItNGVlYy05MGM3LWNhZDlmMTgyMzk1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQjDANBgkqhkiG9w0BAQsFAAOCAQEAfbP8zRrqRjQd3KyOTnB5/5XQkpu7 ZaKhnbrVC+8cY/ZQapFqDd6bbwsAmoSqakWosqOP9gL+iF508g9xJRFQXPIDawue Uq4Lr4Wt87DgnnohrTuUGDSQEJRxGuS3HMmRFShyna7J4h29Btr332i+GTKoTVG2 Nq7/O0gUvrYV3wL/jH1+naefVfJZJTJ623VjFPBw49JLT5aSbz+VJjPd80DwngRl qfn2zzU6poz6N4a3IyA0EDBiiFzSaR97b1jJJ3IW2uL+k7XWt5Q0rxREazPlOSJJ EbyI+jGLZjAf8cCb6oixI/XAO7MrMCgsuZxeidAFqkrQcZ/pPrkqCBXIrA== -----END CERTIFICATE-----Generated at Wed May 13 00:24:12 2026 by rpki-client