$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc6c1457-428f-423a-9e20-3ff77c59559e.roa File: bc6c1457-428f-423a-9e20-3ff77c59559e.roa (raw, json) Hash identifier: RhgwVjVcDYnlU6+uRylwOMRBL8ZMiru3iNJ7p1ND4fo= Subject key identifier: 74:E2:21:5D:2D:36:E2:97:79:B3:2A:4E:8F:4A:6A:02:B1:31:E3:B4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 660C08AD7A25EBADE68B5EE8736FAF9071F8C5BD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc6c1457-428f-423a-9e20-3ff77c59559e.roa Signing time: Tue 12 May 2026 01:30:42 +0000 ROA not before: Tue 12 May 2026 01:30:42 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 71.152.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:0c:08:ad:7a:25:eb:ad:e6:8b:5e:e8:73:6f:af:90:71:f8:c5:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 01:30:42 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=51db96d8401b10f198470a09edc73672dbfa6e54304016c2c2c8fe0ceb70cd55, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c5:b0:ee:42:16:8d:6f:88:1b:6e:05:7f:fc: 9c:98:6d:1c:01:5f:dd:e4:20:4a:f7:f9:27:1f:9e: 35:38:67:82:a5:73:a2:66:1f:e2:c8:66:1c:ae:45: 78:f7:fd:21:e3:08:83:bb:1d:d5:6e:65:60:e6:2b: 11:9d:a9:8b:f1:bb:fa:f4:2f:2b:61:6c:7e:97:cc: 99:7e:ad:3e:24:50:9d:57:ab:a5:4f:1b:31:47:86: 9a:77:4a:79:19:71:d5:55:03:74:2e:33:4d:e4:c8: 25:af:1b:6f:ae:e8:5a:bf:f5:69:c4:ce:af:e1:bf: 37:c9:77:7c:31:57:88:d3:b4:75:4b:b7:69:92:97: a5:e6:b2:6a:1e:8d:b5:eb:82:82:fd:eb:7c:5d:af: db:e0:ca:18:8a:ba:36:9a:75:0f:57:d8:7f:09:08: 81:d1:7e:28:d9:da:bb:2e:93:de:ac:4d:be:39:97: 04:9b:63:44:54:6f:1a:70:20:c0:05:1a:99:2e:04: 1a:af:4b:bf:ba:35:cf:ed:93:3b:b5:d0:96:d7:b0: e2:94:0f:94:9a:d1:1e:00:57:90:ad:76:83:6a:b1: 08:a2:91:b9:9b:92:e5:e7:34:55:8c:e5:1b:8c:ec: 40:3d:eb:9a:f0:d0:c0:81:cc:7d:d2:aa:e9:78:d9: 0c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E2:21:5D:2D:36:E2:97:79:B3:2A:4E:8F:4A:6A:02:B1:31:E3:B4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc6c1457-428f-423a-9e20-3ff77c59559e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 71.152.88.0/24 Signature Algorithm: sha256WithRSAEncryption 22:60:da:aa:35:c9:e7:a0:63:d6:84:9e:2d:bc:c0:47:07:e1: cf:6a:b7:54:59:ed:a5:32:10:e5:ae:c5:72:50:45:03:39:17: 52:f7:6c:4a:de:da:5c:bd:79:03:a1:06:d5:79:c1:63:ec:87: 9d:81:77:77:b8:a4:cc:9b:e3:a9:2b:c8:63:61:fc:ff:3b:bc: b4:c8:8a:60:c4:87:e5:a1:de:97:81:0d:cf:97:63:4c:69:f4: e4:9d:13:cc:bf:a6:0d:76:70:5b:4f:bf:fb:03:8a:e5:b9:4f: 2a:68:be:59:ea:ac:db:db:bc:f6:a5:3d:54:cc:f2:80:d2:97: c7:23:d2:b2:6d:7c:5b:cc:f4:61:a7:8e:b7:91:b8:4d:c0:5e: 7f:64:03:52:04:72:50:11:7a:9f:9a:48:f5:9f:91:a2:f4:6e: ca:b9:1c:43:7c:e5:1b:69:90:17:c5:dc:3a:13:d8:04:c0:0f: a1:d9:27:07:8d:d2:dd:ad:1f:26:11:90:c3:42:c8:33:10:55: 83:91:cc:ef:2c:a0:bb:dc:e7:58:b8:56:ae:06:94:aa:30:c8: d4:8c:59:e0:4e:5d:06:cb:9f:bb:2c:53:00:20:8b:4a:e7:33: 6e:06:77:8c:2f:7f:ad:a0:80:39:05:bc:7f:2a:2c:56:7e:32: b4:aa:45:5b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZgwIrXol663mi17oc2+vkHH4xb0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDEzMDQyWhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MWRiOTZkODQwMWIxMGYxOTg0NzBhMDllZGM3MzY3MmRi ZmE2ZTU0MzA0MDE2YzJjMmM4ZmUwY2ViNzBjZDU1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnxbDuQhaNb4gbbgV//JyYbRwBX93kIEr3+ScfnjU4Z4Kl c6JmH+LIZhyuRXj3/SHjCIO7HdVuZWDmKxGdqYvxu/r0LythbH6XzJl+rT4kUJ1X q6VPGzFHhpp3SnkZcdVVA3QuM03kyCWvG2+u6Fq/9WnEzq/hvzfJd3wxV4jTtHVL t2mSl6XmsmoejbXrgoL963xdr9vgyhiKujaadQ9X2H8JCIHRfijZ2rsuk96sTb45 lwSbY0RUbxpwIMAFGpkuBBqvS7+6Nc/tkzu10JbXsOKUD5Sa0R4AV5CtdoNqsQii kbmbkuXnNFWM5RuM7EA965rw0MCBzH3Squl42QyHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdOIhXS024pd5sypOj0pqArEx47QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JjNmMxNDU3LTQyOGYtNDIzYS05ZTIwLTNmZjc3YzU5NTU5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABHmFgwDQYJKoZIhvcNAQELBQADggEBACJg2qo1yeegY9aEni28wEcH4c9q t1RZ7aUyEOWuxXJQRQM5F1L3bEre2ly9eQOhBtV5wWPsh52Bd3e4pMyb46kryGNh /P87vLTIimDEh+Wh3peBDc+XY0xp9OSdE8y/pg12cFtPv/sDiuW5TypovlnqrNvb vPalPVTM8oDSl8cj0rJtfFvM9GGnjreRuE3AXn9kA1IEclARep+aSPWfkaL0bsq5 HEN85RtpkBfF3DoT2ATAD6HZJweN0t2tHyYRkMNCyDMQVYORzO8soLvc51i4Vq4G lKowyNSMWeBOXQbLn7ssUwAgi0rnM24Gd4wvf62ggDkFvH8qLFZ+MrSqRVs= -----END CERTIFICATE-----Generated at Tue May 12 21:54:38 2026 by rpki-client