$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c97886b6-2c08-4b75-9323-cb64be599ce6.roa File: c97886b6-2c08-4b75-9323-cb64be599ce6.roa (raw, json) Hash identifier: W0lLWeJV+M7fWP6AaLO7y0YejsnqiFSuYb7cEB997aI= Subject key identifier: 88:A2:9A:B2:4C:1F:F8:6B:09:BE:4B:DE:66:97:CA:9D:35:21:26:90 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3F14594637930AB3965EAE55A0D851F895C3D5FD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c97886b6-2c08-4b75-9323-cb64be599ce6.roa Signing time: Tue 28 Apr 2026 00:30:15 +0000 ROA not before: Tue 28 Apr 2026 00:30:15 +0000 ROA not after: Mon 27 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 16.214.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:14:59:46:37:93:0a:b3:96:5e:ae:55:a0:d8:51:f8:95:c3:d5:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 00:30:15 2026 GMT Not After : Jul 27 23:59:59 2026 GMT Subject: serialNumber=d822fb8b5fffa4b941136869ee48c7b97419cb9b08b715610a04b0735da2b075, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:6d:57:ca:f1:db:99:a5:8f:7b:9c:ed:3b:19: 7d:e4:9f:60:4d:35:b8:02:5e:f8:29:9f:32:93:48: 95:88:2f:2f:0b:bf:eb:ed:5f:f9:a7:f0:aa:a8:27: 7b:e5:53:79:7b:c7:6c:28:d3:81:f7:46:52:9d:5f: cf:f8:33:a0:f6:fd:1f:9f:0e:ca:40:a0:1e:9d:63: d5:c3:f2:3e:e0:3c:aa:14:89:69:c3:2e:37:34:59: 61:07:0c:04:f5:fb:0b:5e:87:f3:13:e7:30:86:22: fd:6d:43:c9:31:7c:6e:4c:c6:fa:61:81:c9:42:97: 72:af:fa:07:53:7b:1a:7c:e6:bd:9f:da:8f:af:9d: af:19:bb:bc:bf:c0:71:30:78:96:f7:bc:bd:cc:fb: 0b:ea:ab:46:c0:16:ac:ff:bf:34:5e:5e:75:ea:20: 8b:16:6d:ff:4f:eb:d2:70:1f:1e:0e:63:19:86:e9: fe:bf:7e:43:dc:76:cf:80:29:4b:19:e1:24:1f:2f: b9:76:d0:2f:bb:66:cb:b4:ce:af:ef:8b:90:fd:6b: d8:c6:99:a1:8c:45:ca:86:8a:03:82:ef:06:37:c0: df:9f:21:8d:55:bd:9a:b5:a0:96:d1:60:77:1e:d5: 99:95:1c:fe:7a:d1:df:1d:4c:b6:b1:29:62:bb:54: c4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A2:9A:B2:4C:1F:F8:6B:09:BE:4B:DE:66:97:CA:9D:35:21:26:90 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c97886b6-2c08-4b75-9323-cb64be599ce6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.214.0.0/16 Signature Algorithm: sha256WithRSAEncryption 40:09:ba:80:1a:b0:46:44:be:e5:c8:0e:5f:02:3e:a2:cc:05: 32:c6:0c:1b:d2:12:05:d2:91:c4:6b:9b:1b:2c:8b:6a:56:a0: 5a:51:8b:26:58:46:40:66:1d:c8:b6:41:91:e8:c1:34:6f:9a: 13:61:01:68:eb:52:3e:07:ce:49:f2:c0:d1:dd:83:bd:7f:2c: ba:84:34:09:b1:15:0c:3d:fc:c5:f4:6b:77:b8:cd:1b:e6:a6: 51:4c:49:15:a8:63:a9:a4:64:b3:ee:ba:a7:cf:a2:b3:7b:92: 0e:80:c8:a2:ed:e4:2a:55:4c:2d:33:a2:1d:cf:b3:e0:45:71: e2:e4:e2:d4:a7:97:3c:24:5b:ba:f2:7f:13:f4:c4:72:83:e8: 12:dd:3f:b0:2f:04:00:98:19:dc:9b:cc:41:bd:10:50:74:18: 95:67:e2:c7:4f:70:d8:8e:c5:fd:52:0f:61:e6:74:37:82:88: f0:75:a1:5b:33:a8:05:43:d8:06:cd:b7:2c:4b:a3:fd:43:77: 2d:8c:2e:1c:3e:0e:ee:41:3c:07:f7:01:b9:d6:f8:d0:50:2f: 0e:e7:09:44:3f:06:2a:a8:8f:38:99:4a:19:2e:ce:e3:9f:4a: ba:0f:8c:66:a2:33:9a:40:c8:7f:d5:52:e2:15:e0:3a:8c:00: f3:5a:ee:1e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPxRZRjeTCrOWXq5VoNhR+JXD1f0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI4MDAzMDE1WhcNMjYwNzI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkODIyZmI4YjVmZmZhNGI5NDExMzY4NjllZTQ4YzdiOTc0 MTljYjliMDhiNzE1NjEwYTA0YjA3MzVkYTJiMDc1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD2bVfK8duZpY97nO07GX3kn2BNNbgCXvgpnzKTSJWILy8L v+vtX/mn8KqoJ3vlU3l7x2wo04H3RlKdX8/4M6D2/R+fDspAoB6dY9XD8j7gPKoU iWnDLjc0WWEHDAT1+wteh/MT5zCGIv1tQ8kxfG5MxvphgclCl3Kv+gdTexp85r2f 2o+vna8Zu7y/wHEweJb3vL3M+wvqq0bAFqz/vzReXnXqIIsWbf9P69JwHx4OYxmG 6f6/fkPcds+AKUsZ4SQfL7l20C+7Zsu0zq/vi5D9a9jGmaGMRcqGigOC7wY3wN+f IY1VvZq1oJbRYHce1ZmVHP560d8dTLaxKWK7VMRXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUiKKaskwf+GsJvkveZpfKnTUhJpAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M5Nzg4NmI2LTJjMDgtNGI3NS05MzIzLWNiNjRiZTU5OWNlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQ1jANBgkqhkiG9w0BAQsFAAOCAQEAQAm6gBqwRkS+5cgOXwI+oswFMsYM G9ISBdKRxGubGyyLalagWlGLJlhGQGYdyLZBkejBNG+aE2EBaOtSPgfOSfLA0d2D vX8suoQ0CbEVDD38xfRrd7jNG+amUUxJFahjqaRks+66p8+is3uSDoDIou3kKlVM LTOiHc+z4EVx4uTi1KeXPCRbuvJ/E/TEcoPoEt0/sC8EAJgZ3JvMQb0QUHQYlWfi x09w2I7F/VIPYeZ0N4KI8HWhWzOoBUPYBs23LEuj/UN3LYwuHD4O7kE8B/cBudb4 0FAvDucJRD8GKqiPOJlKGS7O459Kug+MZqIzmkDIf9VS4hXgOowA81ruHg== -----END CERTIFICATE-----Generated at Wed May 13 03:13:18 2026 by rpki-client