$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbc2b1a5-5365-48b4-affd-3867c265d11a.roa File: bbc2b1a5-5365-48b4-affd-3867c265d11a.roa (raw, json) Hash identifier: XOwMnGKuYw47tZFP3uFoaMUsNK+gKd2RtR3ACzDoo1E= Subject key identifier: 35:20:07:F7:5B:F6:4C:67:62:0F:E8:6B:48:6B:25:7E:88:78:B5:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 44999236507B700924BEC341C37088024C827068 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbc2b1a5-5365-48b4-affd-3867c265d11a.roa Signing time: Sat 09 May 2026 00:31:06 +0000 ROA not before: Sat 09 May 2026 00:31:06 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 89.254.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:99:92:36:50:7b:70:09:24:be:c3:41:c3:70:88:02:4c:82:70:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 9 00:31:06 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=4108d5fa4a816dc4a96afaddd90833bc6b70497c4391b7afb184828d53296c35, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:19:b9:5a:9c:41:f8:7d:06:f0:e8:ad:d1:a9: 93:c9:fe:8f:b8:7e:cb:54:59:2a:1d:2c:90:15:34: 4d:22:96:45:c3:22:ee:d0:cc:90:bd:41:00:3a:f4: 0d:a1:eb:75:7a:02:88:81:58:3e:37:6d:ca:16:d6: 91:b8:be:f7:ba:af:ad:f1:b3:0b:1e:01:9f:77:e6: b9:a8:0b:63:3d:c8:da:1e:e8:b6:d9:68:f3:f5:14: e9:47:49:f7:8b:99:4b:9d:56:70:78:0f:44:b1:00: 52:d3:af:9a:bd:e0:ec:68:10:af:2f:2f:b6:aa:72: 22:58:5a:da:42:65:d6:66:a9:7f:fe:4b:c8:fa:6a: 20:ed:4e:7f:fa:5e:2a:30:6b:ab:29:b1:cd:09:b1: ef:7a:f0:fb:de:17:46:9f:9d:5b:f5:c9:eb:a3:89: ee:f9:f9:e9:e0:44:a6:f5:84:43:9a:88:bd:a2:f7: 04:5c:d2:8e:68:62:0f:47:f1:c8:b5:aa:1d:c6:21: 86:9b:58:36:20:06:57:27:1e:65:1f:1b:38:4e:b5: 64:08:d3:e5:3e:d9:a1:f2:46:14:7b:68:b2:ff:62: f6:20:b6:44:9b:e9:a9:cb:34:95:71:11:57:4a:48: df:00:79:eb:68:59:93:2c:6f:14:a3:e1:e7:35:00: ce:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:20:07:F7:5B:F6:4C:67:62:0F:E8:6B:48:6B:25:7E:88:78:B5:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbc2b1a5-5365-48b4-affd-3867c265d11a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.254.8.0/21 Signature Algorithm: sha256WithRSAEncryption bf:15:00:0e:40:da:39:2e:53:92:9d:18:fb:91:2f:94:a3:d7: db:4d:c5:22:f3:0d:c8:a5:33:3d:2f:c2:d8:df:d8:fb:e6:8c: a5:75:59:51:61:2d:52:21:7d:f7:4d:42:d6:81:c6:82:5e:14: 43:d8:ad:ae:74:fe:a4:05:75:df:44:bc:4f:ad:10:b9:7d:58: c6:74:f6:df:c0:2b:5d:52:05:52:86:6d:fd:09:92:59:fd:fb: 58:53:9c:de:ba:40:c7:c9:32:f1:36:4c:4e:82:cd:26:78:27: 2b:37:56:5a:2f:63:7b:70:73:94:32:68:9d:9c:14:d3:49:c7: 8f:47:1d:65:cb:1a:c6:b5:6e:a2:1a:cf:bf:ba:e0:52:90:30: 9d:96:41:0a:2c:41:07:59:4a:68:d2:57:37:43:ad:2e:2c:ee: d9:11:80:33:10:00:e1:f4:bc:3b:95:61:d9:6a:f3:ad:79:62: 21:f4:90:17:e3:56:18:32:a5:48:87:19:16:aa:1c:22:15:ee: ca:42:e0:82:96:11:8a:d5:7b:5b:46:3e:65:4b:42:4f:5d:9a: f3:76:6c:d9:8f:05:53:ad:55:82:72:41:9d:c3:1c:5a:1c:c8: 11:49:b2:fc:86:03:67:87:b9:b6:26:34:7b:6b:d6:ba:cf:f8: 14:fd:e0:1b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURJmSNlB7cAkkvsNBw3CIAkyCcGgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA5MDAzMTA2WhcNMjYwODA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTA4ZDVmYTRhODE2ZGM0YTk2YWZhZGRkOTA4MzNiYzZi NzA0OTdjNDM5MWI3YWZiMTg0ODI4ZDUzMjk2YzM1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2GblanEH4fQbw6K3RqZPJ/o+4fstUWSodLJAVNE0ilkXD Iu7QzJC9QQA69A2h63V6AoiBWD43bcoW1pG4vve6r63xswseAZ935rmoC2M9yNoe 6LbZaPP1FOlHSfeLmUudVnB4D0SxAFLTr5q94OxoEK8vL7aqciJYWtpCZdZmqX/+ S8j6aiDtTn/6Xiowa6spsc0Jse968PveF0afnVv1yeujie75+engRKb1hEOaiL2i 9wRc0o5oYg9H8ci1qh3GIYabWDYgBlcnHmUfGzhOtWQI0+U+2aHyRhR7aLL/YvYg tkSb6anLNJVxEVdKSN8AeetoWZMsbxSj4ec1AM7hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNSAH91v2TGdiD+hrSGslfoh4tRMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JiYzJiMWE1LTUzNjUtNDhiNC1hZmZkLTM4NjdjMjY1ZDExYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANZ/ggwDQYJKoZIhvcNAQELBQADggEBAL8VAA5A2jkuU5KdGPuRL5Sj19tN xSLzDcilMz0vwtjf2PvmjKV1WVFhLVIhffdNQtaBxoJeFEPYra50/qQFdd9EvE+t ELl9WMZ09t/AK11SBVKGbf0Jkln9+1hTnN66QMfJMvE2TE6CzSZ4Jys3VlovY3tw c5QyaJ2cFNNJx49HHWXLGsa1bqIaz7+64FKQMJ2WQQosQQdZSmjSVzdDrS4s7tkR gDMQAOH0vDuVYdlq8615YiH0kBfjVhgypUiHGRaqHCIV7spC4IKWEYrVe1tGPmVL Qk9dmvN2bNmPBVOtVYJyQZ3DHFocyBFJsvyGA2eHubYmNHtr1rrP+BT94Bs= -----END CERTIFICATE-----Generated at Tue May 12 21:58:42 2026 by rpki-client