$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd521a01-1b09-4583-84c9-7dba7c86b768.roa File: cd521a01-1b09-4583-84c9-7dba7c86b768.roa (raw, json) Hash identifier: hFnMqevigpWsVOPISUgyuEIhb+J5GBoRjXwZs25hENo= Subject key identifier: B4:08:3D:86:5C:41:DC:8D:E4:3A:C0:3B:A4:F4:FF:62:77:7D:53:A3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 257F81C1765364098E6917DCC0FA06FA6F04259E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd521a01-1b09-4583-84c9-7dba7c86b768.roa Signing time: Tue 05 May 2026 00:20:11 +0000 ROA not before: Tue 05 May 2026 00:20:11 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 184.72.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:7f:81:c1:76:53:64:09:8e:69:17:dc:c0:fa:06:fa:6f:04:25:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 00:20:11 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=f9084d15e78ab09caf8f5d65a23f6bd79844bb22a7731438fa4f3a8c88478899, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b9:5f:ff:94:5e:61:0c:62:09:d6:fb:ad:36: b6:e2:84:a7:a7:a5:d6:c0:4f:ab:5e:1e:d3:90:42: e0:f3:14:98:2d:f6:65:a9:35:a2:ff:e9:c9:05:8d: 5b:5e:2c:59:6d:c4:30:76:19:82:b3:ff:eb:6b:a2: ab:e2:d5:1c:63:eb:17:b5:30:4d:39:63:5f:bd:63: d5:68:83:63:3b:82:f7:92:b6:bf:13:f7:2d:56:07: a3:1c:54:ef:62:fd:6e:b8:fe:71:2e:86:3c:3f:57: 43:66:89:c3:67:78:7b:f7:c5:8b:b3:9e:5e:30:a2: 4b:f5:17:fd:29:34:fe:34:c2:93:45:c2:20:a9:5a: 49:54:97:1b:69:ba:c9:1e:a4:b4:70:04:49:e1:08: ba:70:1d:8c:23:4e:14:f4:d3:74:ea:15:ed:95:32: c9:fb:b5:57:ad:56:91:24:1b:40:76:68:ba:80:e4: 63:3a:d1:16:cd:f4:72:51:33:ff:c1:5a:be:3c:a8: 0e:e5:f6:92:3a:16:89:14:cd:f7:43:46:41:4e:65: e8:6e:35:23:8c:03:f7:68:44:29:02:f9:50:13:7d: 59:61:e1:1b:74:df:7c:3d:83:79:f2:66:de:3b:df: a8:04:bb:9d:de:a2:f9:99:66:38:63:03:3d:23:58: bf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:08:3D:86:5C:41:DC:8D:E4:3A:C0:3B:A4:F4:FF:62:77:7D:53:A3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd521a01-1b09-4583-84c9-7dba7c86b768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.72.94.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:78:47:a5:9a:80:cc:a2:eb:71:f2:5f:bb:66:d9:a2:03:c9: e2:5e:95:49:7d:91:a3:e5:8d:a4:59:a3:2c:98:b9:3a:6e:b0: 0a:1a:88:e2:f9:53:99:24:51:03:3b:10:3e:8e:6c:54:43:df: ee:20:0f:2e:4b:49:33:f8:b4:70:6a:7a:0d:87:65:d0:5e:8b: 8d:76:ef:e6:78:7f:a8:9c:05:dc:ba:c8:c3:cc:bb:e7:3c:26: 23:23:7b:f8:91:1b:c3:2e:76:53:42:78:d4:e9:e1:78:fb:f8: 5a:07:96:87:38:87:68:fb:01:7b:82:84:10:06:2b:d3:93:a7: 58:c4:9e:4c:86:85:a4:e0:17:6d:b6:70:c7:d7:4d:f6:b6:f7: 38:51:69:b5:1c:b8:ff:b5:03:34:ef:ac:ad:50:90:d7:c3:2a: d2:19:38:f7:9e:12:30:fd:13:9e:1b:99:8e:a1:f0:2a:20:00: 58:2e:49:a2:fe:ac:c0:8d:a5:5d:b7:7a:46:8f:29:5d:9e:ad: 6f:c4:7f:2b:4b:7b:ce:00:b5:f7:56:cb:35:30:5f:32:8a:5e: 03:9d:5e:e8:5f:72:85:5b:0d:1c:92:08:50:80:10:dd:04:ba: 82:1e:40:25:9c:a5:42:e3:f7:75:e9:b1:2c:d1:e9:49:37:8a: cf:5b:00:3e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJX+BwXZTZAmOaRfcwPoG+m8EJZ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA1MDAyMDExWhcNMjYwODAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTA4NGQxNWU3OGFiMDljYWY4ZjVkNjVhMjNmNmJkNzk4 NDRiYjIyYTc3MzE0MzhmYTRmM2E4Yzg4NDc4ODk5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbuV//lF5hDGIJ1vutNrbihKenpdbAT6teHtOQQuDzFJgt 9mWpNaL/6ckFjVteLFltxDB2GYKz/+troqvi1Rxj6xe1ME05Y1+9Y9Vog2M7gveS tr8T9y1WB6McVO9i/W64/nEuhjw/V0NmicNneHv3xYuznl4wokv1F/0pNP40wpNF wiCpWklUlxtpuskepLRwBEnhCLpwHYwjThT003TqFe2VMsn7tVetVpEkG0B2aLqA 5GM60RbN9HJRM//BWr48qA7l9pI6FokUzfdDRkFOZehuNSOMA/doRCkC+VATfVlh 4Rt033w9g3nyZt4736gEu53eovmZZjhjAz0jWL9JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtAg9hlxB3I3kOsA7pPT/Ynd9U6MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkNTIxYTAxLTFiMDktNDU4My04NGM5LTdkYmE3Yzg2Yjc2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC4SF4wDQYJKoZIhvcNAQELBQADggEBABx4R6WagMyi63HyX7tm2aIDyeJe lUl9kaPljaRZoyyYuTpusAoaiOL5U5kkUQM7ED6ObFRD3+4gDy5LSTP4tHBqeg2H ZdBei4127+Z4f6icBdy6yMPMu+c8JiMje/iRG8MudlNCeNTp4Xj7+FoHloc4h2j7 AXuChBAGK9OTp1jEnkyGhaTgF222cMfXTfa29zhRabUcuP+1AzTvrK1QkNfDKtIZ OPeeEjD9E54bmY6h8CogAFguSaL+rMCNpV23ekaPKV2erW/EfytLe84AtfdWyzUw XzKKXgOdXuhfcoVbDRySCFCAEN0EuoIeQCWcpULj93XpsSzR6Uk3is9bAD4= -----END CERTIFICATE-----Generated at Wed May 13 07:19:51 2026 by rpki-client