$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa File: cc204192-f54a-4a24-b693-905fbf433b73.roa (raw, json) Hash identifier: MVPgousD2qAqRHNYKPb25xWMZ+1sczCMabc2o9/y21A= Subject key identifier: 86:27:DA:59:15:9D:13:7E:CD:2E:5F:83:64:50:1D:62:2A:23:AF:C6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 61882FB6F91EB3E2B3F0289755C2075C6F8D50DD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa Signing time: Wed 06 May 2026 00:20:08 +0000 ROA not before: Wed 06 May 2026 00:20:08 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.81.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:88:2f:b6:f9:1e:b3:e2:b3:f0:28:97:55:c2:07:5c:6f:8d:50:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 6 00:20:08 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=5fc733f5c26ec2335506d1413d461aae4cac971f293ebb3058dc3e1d1399d0df, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:6e:b5:78:96:2c:04:7a:7c:cd:91:97:72: 4b:fb:82:cb:ca:8a:ad:c2:02:9b:28:5c:53:57:48: 33:7b:cd:07:82:e5:87:5a:56:d9:41:ab:53:db:95: b3:8b:1f:63:5f:32:3f:6f:cd:3b:3c:9d:a0:04:02: c5:ff:ae:92:59:b6:3f:86:17:16:b4:7a:e1:47:24: 5d:e1:8a:db:28:ba:84:b0:85:77:42:bf:f5:10:71: aa:71:a5:42:0d:d8:35:ae:d4:97:1d:34:8b:32:03: 11:d3:38:7a:27:d6:3a:05:88:70:2b:1e:db:c6:95: b5:da:32:26:a3:01:d7:e0:4d:ec:42:fd:f9:8d:f7: 8f:84:68:e7:79:05:33:ac:49:66:35:a2:c4:14:92: 42:fc:ed:65:58:06:24:54:6f:84:e5:6b:36:52:44: 1f:cc:fc:8b:c8:ab:45:6e:69:91:07:15:e5:a8:a9: 8f:d6:d6:39:27:67:0e:6b:ae:73:0a:4e:53:0b:9c: 20:00:92:af:9e:73:4a:5d:35:ac:37:6e:01:8d:e2: f7:0f:7c:19:a1:73:18:ce:50:6e:da:62:42:b4:15: a0:53:ff:05:f3:e9:d3:03:2d:f4:48:6f:d4:94:e3: fb:3b:14:ea:f9:b3:e3:82:40:ba:84:fc:d8:00:3a: e7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:27:DA:59:15:9D:13:7E:CD:2E:5F:83:64:50:1D:62:2A:23:AF:C6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc204192-f54a-4a24-b693-905fbf433b73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.81.0.0/16 Signature Algorithm: sha256WithRSAEncryption 67:6f:64:ca:68:59:3d:6d:cf:19:8a:f5:db:c9:ff:05:b3:66: fc:91:0d:d6:49:9a:32:db:d7:74:d7:ef:09:52:a2:8c:55:e8: a4:7d:e5:39:dd:29:d3:52:98:9c:a3:1d:f9:d1:2e:17:31:4a: 7d:b3:49:0a:6c:a1:a6:7c:32:69:8f:c8:23:87:07:de:5e:2f: 9f:c3:9c:77:5b:d9:d9:e7:20:d2:44:06:42:62:c5:3b:22:ad: 87:1e:5b:cf:36:dc:86:73:1e:0b:d9:90:c5:c5:6a:f4:3b:09: b2:9a:c0:c7:fe:f9:21:dd:22:cb:ff:73:a6:fe:ef:b8:4e:e4: f5:3b:37:63:7a:77:a3:9c:32:fe:7f:70:0f:9a:55:d7:8f:81: 01:5d:f7:59:3a:7b:11:3a:a6:56:9c:65:3d:08:39:20:52:e4: c4:9d:cb:ed:29:9b:20:2d:38:08:d9:e0:d1:37:da:9d:0a:43: 97:86:5d:3f:18:7b:ce:23:f7:a9:22:d6:ad:25:1b:4b:5a:91: db:33:e3:cf:f4:7c:12:0f:37:c5:d4:3f:95:47:45:6c:cc:52: cc:bd:ad:cd:ad:a2:5b:32:9d:5b:bc:13:2a:61:65:17:cd:d5: a4:f4:35:0e:ee:5c:94:0a:aa:46:6c:d2:84:d9:78:e7:22:33: 6a:16:e7:c0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYYgvtvkes+Kz8CiXVcIHXG+NUN0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA2MDAyMDA4WhcNMjYwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmM3MzNmNWMyNmVjMjMzNTUwNmQxNDEzZDQ2MWFhZTRj YWM5NzFmMjkzZWJiMzA1OGRjM2UxZDEzOTlkMGRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtdG61eJYsBHp8zZGXckv7gsvKiq3CApsoXFNXSDN7zQeC 5YdaVtlBq1PblbOLH2NfMj9vzTs8naAEAsX/rpJZtj+GFxa0euFHJF3hitsouoSw hXdCv/UQcapxpUIN2DWu1JcdNIsyAxHTOHon1joFiHArHtvGlbXaMiajAdfgTexC /fmN94+EaOd5BTOsSWY1osQUkkL87WVYBiRUb4TlazZSRB/M/IvIq0VuaZEHFeWo qY/W1jknZw5rrnMKTlMLnCAAkq+ec0pdNaw3bgGN4vcPfBmhcxjOUG7aYkK0FaBT /wXz6dMDLfRIb9SU4/s7FOr5s+OCQLqE/NgAOueNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUhifaWRWdE37NLl+DZFAdYiojr8YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NjMjA0MTkyLWY1NGEtNGEyNC1iNjkzLTkwNWZiZjQzM2I3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4UTANBgkqhkiG9w0BAQsFAAOCAQEAZ29kymhZPW3PGYr128n/BbNm/JEN 1kmaMtvXdNfvCVKijFXopH3lOd0p01KYnKMd+dEuFzFKfbNJCmyhpnwyaY/II4cH 3l4vn8Ocd1vZ2ecg0kQGQmLFOyKthx5bzzbchnMeC9mQxcVq9DsJsprAx/75Id0i y/9zpv7vuE7k9Ts3Y3p3o5wy/n9wD5pV14+BAV33WTp7ETqmVpxlPQg5IFLkxJ3L 7SmbIC04CNng0TfanQpDl4ZdPxh7ziP3qSLWrSUbS1qR2zPjz/R8Eg83xdQ/lUdF bMxSzL2tza2iWzKdW7wTKmFlF83VpPQ1Du5clAqqRmzShNl45yIzahbnwA== -----END CERTIFICATE-----Generated at Wed May 13 07:53:08 2026 by rpki-client