$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c65c37c1-97c6-4cfe-ac24-10e474d1d380.roa File: c65c37c1-97c6-4cfe-ac24-10e474d1d380.roa (raw, json) Hash identifier: ml9UXA7w3yFdSYiXe+x7HukLaidV39tN5O5sM1svZmA= Subject key identifier: 4D:6C:87:AB:31:F3:3F:BF:5F:87:71:1D:43:BD:C4:89:57:5A:2B:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E6C2999A3E6DF2FBF0486CEFF20BC5A47DA706A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c65c37c1-97c6-4cfe-ac24-10e474d1d380.roa Signing time: Tue 12 May 2026 00:30:50 +0000 ROA not before: Tue 12 May 2026 00:30:50 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:6c:29:99:a3:e6:df:2f:bf:04:86:ce:ff:20:bc:5a:47:da:70:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 00:30:50 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=59dbe2533d2d58065bbdbaed5a5f0f2921d0c109df9bc0d0de111477a8ec27c2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:10:63:85:c1:d8:5d:0b:2a:c8:d5:34:15:98: 1b:8c:3a:3d:3b:e7:34:34:fe:6e:36:4d:64:59:8a: e6:60:09:3d:56:fa:b0:cf:c1:4a:b8:5a:8b:2b:a1: 45:5b:90:f2:ed:17:db:66:ee:a1:58:a4:02:8e:3d: fe:e6:76:8c:44:a8:30:08:62:cb:bc:80:a4:34:c1: d7:b9:54:9d:06:01:06:1f:04:f7:d5:93:25:c8:5d: 27:bd:5a:fc:1c:18:ad:32:ee:23:52:fa:1c:18:27: 82:bd:18:38:83:19:01:31:47:d3:34:79:a0:6c:20: a7:3d:ff:b4:78:1b:ec:ff:d5:de:b3:24:4a:e5:c4: c3:23:08:4c:06:9e:49:5e:23:2a:26:db:65:3a:5f: 15:05:d9:01:8e:e9:91:2c:de:41:64:06:eb:6f:12: d8:19:12:89:6b:84:cb:4b:54:e2:4b:bd:c5:fc:b7: 6a:42:f1:ea:fc:10:23:b0:37:0e:19:70:86:75:44: 97:38:8e:d0:3e:de:95:12:9b:94:36:eb:8b:50:21: 76:74:fe:b2:76:7f:27:16:40:cd:c0:18:5b:13:ec: 32:e2:60:af:9f:97:62:59:83:29:b2:bb:4b:ac:f2: 63:c4:a3:94:ae:78:85:9f:70:06:96:73:de:3f:ff: 26:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6C:87:AB:31:F3:3F:BF:5F:87:71:1D:43:BD:C4:89:57:5A:2B:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c65c37c1-97c6-4cfe-ac24-10e474d1d380.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.208.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:bd:c3:75:f1:df:c9:8b:c9:b5:f0:04:b7:db:dc:1d:e4:36: f3:7a:08:e3:c7:6a:b4:fc:47:be:47:06:08:dc:7c:29:44:83: b3:00:70:16:3d:26:2a:81:7c:25:fa:f0:e6:31:f4:eb:62:e7: dc:fa:96:14:38:9c:56:c3:de:90:97:bf:05:79:9d:29:4a:11: 76:31:c3:4f:08:19:3e:22:45:ce:fe:d1:af:88:7f:64:40:ee: f8:e7:73:41:22:18:de:01:4d:6c:d9:f0:a7:9f:c4:cf:17:89: ee:20:69:7d:8a:af:2b:e5:1e:3c:90:72:17:f0:ce:5e:ba:f9: b9:9d:6c:41:6b:cc:7a:65:6c:4f:bf:82:16:36:ec:3e:57:6c: 33:8c:a4:5b:24:a8:3e:8b:e3:87:29:c1:c1:6a:36:c3:86:67: 65:0a:d9:4a:ce:12:db:96:32:34:6b:49:33:82:b8:3c:76:85: cc:c3:3f:f8:d2:6d:19:76:50:9c:ff:bd:5d:49:41:07:54:4b: 27:36:e7:f8:a3:74:4e:35:57:a5:f3:81:3e:30:f5:1a:e4:f3: 2e:db:70:c8:fe:33:f6:0f:bc:38:2e:5f:fa:1a:48:e0:92:ad: 30:d3:b6:58:3b:25:f0:5b:ba:27:ad:16:ad:e7:e3:9e:69:db: ec:bb:93:c1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULmwpmaPm3y+/BIbO/yC8WkfacGowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDAzMDUwWhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1OWRiZTI1MzNkMmQ1ODA2NWJiZGJhZWQ1YTVmMGYyOTIx ZDBjMTA5ZGY5YmMwZDBkZTExMTQ3N2E4ZWMyN2MyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLEGOFwdhdCyrI1TQVmBuMOj075zQ0/m42TWRZiuZgCT1W +rDPwUq4WosroUVbkPLtF9tm7qFYpAKOPf7mdoxEqDAIYsu8gKQ0wde5VJ0GAQYf BPfVkyXIXSe9WvwcGK0y7iNS+hwYJ4K9GDiDGQExR9M0eaBsIKc9/7R4G+z/1d6z JErlxMMjCEwGnkleIyom22U6XxUF2QGO6ZEs3kFkButvEtgZEolrhMtLVOJLvcX8 t2pC8er8ECOwNw4ZcIZ1RJc4jtA+3pUSm5Q264tQIXZ0/rJ2fycWQM3AGFsT7DLi YK+fl2JZgymyu0us8mPEo5SueIWfcAaWc94//yY1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTWyHqzHzP79fh3EdQ73EiVdaK4AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M2NWMzN2MxLTk3YzYtNGNmZS1hYzI0LTEwZTQ3NGQxZDM4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsNAwDQYJKoZIhvcNAQELBQADggEBAI69w3Xx38mLybXwBLfb3B3kNvN6 COPHarT8R75HBgjcfClEg7MAcBY9JiqBfCX68OYx9Oti59z6lhQ4nFbD3pCXvwV5 nSlKEXYxw08IGT4iRc7+0a+If2RA7vjnc0EiGN4BTWzZ8KefxM8Xie4gaX2Kryvl HjyQchfwzl66+bmdbEFrzHplbE+/ghY27D5XbDOMpFskqD6L44cpwcFqNsOGZ2UK 2UrOEtuWMjRrSTOCuDx2hczDP/jSbRl2UJz/vV1JQQdUSyc25/ijdE41V6XzgT4w 9Rrk8y7bcMj+M/YPvDguX/oaSOCSrTDTtlg7JfBbuietFq3n455p2+y7k8E= -----END CERTIFICATE-----Generated at Wed May 13 07:19:09 2026 by rpki-client