$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce2fae80-d610-4666-9018-7eb9a4b508c4.roa File: ce2fae80-d610-4666-9018-7eb9a4b508c4.roa (raw, json) Hash identifier: E6TCiWBLPNfu8khCjmtIuqd3PVqtH7OTLj3kYlUcVJ8= Subject key identifier: FE:FC:02:0D:D9:B6:FF:2C:EB:AF:A9:38:C7:6E:85:E5:1D:9F:15:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1AECEDD2FC7F8041B164B39724F9CC0EB338EA85 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce2fae80-d610-4666-9018-7eb9a4b508c4.roa Signing time: Fri 08 May 2026 00:11:10 +0000 ROA not before: Fri 08 May 2026 00:11:10 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 35.44.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ec:ed:d2:fc:7f:80:41:b1:64:b3:97:24:f9:cc:0e:b3:38:ea:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 00:11:10 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=3237d7c619a05e90c907674943cd97ff046afee2d3833a8c136c36b411c642e6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dc:27:87:eb:56:a4:5b:03:d4:12:e4:a9:4b: 22:0e:1a:d1:ff:60:ea:4a:86:55:73:d1:2d:f5:af: e0:32:58:3c:ec:7f:09:90:7a:97:e0:15:f2:b0:96: 8e:71:61:50:3a:ac:d1:3a:1a:f8:94:ad:c6:4e:f9: b6:e2:ab:7b:e0:bc:e4:40:11:e9:59:60:66:e9:9c: d6:bc:9d:c3:2d:ce:5e:4d:1c:4d:85:6b:65:e6:62: 69:42:c7:0a:42:13:43:a1:66:22:f9:d3:07:73:0a: 92:35:86:d4:42:47:b9:92:d0:9f:2c:1b:3f:d6:9e: 54:81:a2:c0:fe:5c:c5:8b:85:11:80:e5:87:85:b4: 70:ee:aa:f3:26:88:c9:93:7f:9e:09:c7:52:f7:13: ff:ba:f8:36:3b:e8:f3:d5:e5:48:06:b3:7f:23:0e: 86:6b:cb:3b:71:2c:dd:bd:4a:18:2e:6f:60:22:34: d9:63:0d:ac:38:c7:8a:95:4c:be:d6:7c:17:eb:c4: 42:fb:85:01:d6:9a:8d:1a:e6:2e:fe:43:57:16:8a: a5:a7:3c:d7:6b:84:76:fa:12:14:ad:74:82:59:74: 73:73:ff:d7:7e:f1:4c:89:b3:c1:28:64:c7:e3:81: 89:b3:b6:04:20:88:a9:34:d2:16:15:be:15:26:29: 8c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FC:02:0D:D9:B6:FF:2C:EB:AF:A9:38:C7:6E:85:E5:1D:9F:15:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce2fae80-d610-4666-9018-7eb9a4b508c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.44.0.0/15 Signature Algorithm: sha256WithRSAEncryption aa:bd:f9:76:3c:93:e8:8c:83:28:28:f4:cf:b3:70:7f:e5:d7: 66:40:89:13:d1:dc:5a:81:df:7d:5d:fa:40:79:3d:ce:08:02: e9:af:f0:e9:d3:bd:84:f1:be:a4:cb:38:97:5f:60:33:39:4e: 64:95:87:da:67:aa:06:61:7b:b9:4f:f3:91:60:32:65:b7:ab: 7f:3f:c5:a7:a4:ef:97:27:d5:40:28:fb:bb:59:c8:d9:41:bd: 39:69:cc:d3:fb:31:07:2a:e0:7f:64:f6:85:7a:41:ac:3e:3e: f8:f4:50:2c:63:cb:f2:49:2c:48:05:3f:66:2e:8b:e4:88:f0: d3:e2:a8:22:68:30:78:43:32:fa:2f:7e:08:41:22:18:e7:b7: e1:09:a3:d7:c1:75:d8:5b:c1:be:c4:d0:97:2e:89:5d:0b:4e: 52:63:c1:95:c8:4d:d9:d6:1c:5b:46:97:7d:f8:2e:4c:d0:14: 74:f5:f7:96:94:ad:c9:fc:48:9f:27:27:0c:8e:27:fb:9e:45: e9:8e:93:67:de:e5:32:69:1c:b5:f4:8d:3b:7d:ad:12:b9:79: 9f:eb:d0:31:39:ad:fd:0e:94:df:a1:b4:16:56:bc:5a:0d:c5: a9:bb:d9:9c:23:e8:fa:ea:d8:5a:83:e7:48:47:db:58:d3:6d: e7:08:34:96 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUGuzt0vx/gEGxZLOXJPnMDrM46oUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA4MDAxMTEwWhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjM3ZDdjNjE5YTA1ZTkwYzkwNzY3NDk0M2NkOTdmZjA0 NmFmZWUyZDM4MzNhOGMxMzZjMzZiNDExYzY0MmU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCn3CeH61akWwPUEuSpSyIOGtH/YOpKhlVz0S31r+AyWDzs fwmQepfgFfKwlo5xYVA6rNE6GviUrcZO+bbiq3vgvORAEelZYGbpnNa8ncMtzl5N HE2Fa2XmYmlCxwpCE0OhZiL50wdzCpI1htRCR7mS0J8sGz/WnlSBosD+XMWLhRGA 5YeFtHDuqvMmiMmTf54Jx1L3E/+6+DY76PPV5UgGs38jDoZryztxLN29Shgub2Ai NNljDaw4x4qVTL7WfBfrxEL7hQHWmo0a5i7+Q1cWiqWnPNdrhHb6EhStdIJZdHNz /9d+8UyJs8EoZMfjgYmztgQgiKk00hYVvhUmKYzrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU/vwCDdm2/yzrr6k4x26F5R2fFQ4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlMmZhZTgwLWQ2MTAtNDY2Ni05MDE4LTdlYjlhNGI1MDhjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEjLDANBgkqhkiG9w0BAQsFAAOCAQEAqr35djyT6IyDKCj0z7Nwf+XXZkCJ E9HcWoHffV36QHk9zggC6a/w6dO9hPG+pMs4l19gMzlOZJWH2meqBmF7uU/zkWAy Zberfz/Fp6TvlyfVQCj7u1nI2UG9OWnM0/sxByrgf2T2hXpBrD4++PRQLGPL8kks SAU/Zi6L5Ijw0+KoImgweEMy+i9+CEEiGOe34Qmj18F12FvBvsTQly6JXQtOUmPB lchN2dYcW0aXffguTNAUdPX3lpStyfxInycnDI4n+55F6Y6TZ97lMmkctfSNO32t Erl5n+vQMTmt/Q6U36G0Fla8Wg3FqbvZnCPo+urYWoPnSEfbWNNt5wg0lg== -----END CERTIFICATE-----Generated at Wed May 13 08:17:06 2026 by rpki-client