$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cebbc506-7144-44f7-a4d5-27edc84857be.roa File: cebbc506-7144-44f7-a4d5-27edc84857be.roa (raw, json) Hash identifier: 8Kjxvbqu07r88eKga80ouH6nx/FU8IJdxcl82KtaSoQ= Subject key identifier: 76:0F:BB:20:00:4C:00:EA:49:15:CC:13:93:B9:B9:44:5E:2D:81:B0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 12F9B2E836D32A4C5DCCE08C5B84B74372EBE6E6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cebbc506-7144-44f7-a4d5-27edc84857be.roa Signing time: Fri 08 May 2026 00:40:13 +0000 ROA not before: Fri 08 May 2026 00:40:13 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 72.5.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f9:b2:e8:36:d3:2a:4c:5d:cc:e0:8c:5b:84:b7:43:72:eb:e6:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 00:40:13 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=81f05085070baf5c02efff81fcd116dee98d36c2bd8be8b5effd4cf40ead309d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:79:29:d0:f3:1b:6d:06:d5:15:b3:46:4f: fe:d2:5f:f0:c2:ee:cb:ad:cd:9c:53:29:18:a6:bc: 8d:45:47:28:52:7c:06:a5:19:54:e1:96:9b:b1:f1: 99:b7:8d:62:a7:8f:58:de:31:12:18:b1:8f:93:fa: 76:58:6c:98:04:bd:93:a5:7e:b9:48:c1:d5:3a:09: 26:b0:21:ab:e2:7f:01:4f:e6:81:1f:ed:95:48:73: d4:18:6f:48:40:36:da:e0:c0:25:e1:93:32:5c:1a: a5:fa:d6:e5:1f:f7:01:89:35:4b:d6:d7:05:81:21: ca:34:5f:a0:91:eb:19:0f:d4:6f:48:c9:78:30:98: f4:e5:a8:fc:c8:2c:7a:61:5a:9c:9c:51:6f:7b:ae: 01:0e:09:85:52:2c:de:56:23:39:dc:76:99:99:23: 2f:24:53:29:49:dc:7a:64:58:6e:9b:bd:62:db:5e: a1:f6:03:fc:c1:b2:38:7b:fb:63:c7:bb:30:b6:ee: 7a:06:a7:f7:ac:17:81:67:81:2c:1e:b6:13:d5:59: 8e:31:dd:e5:b3:49:f6:56:0c:87:2f:4b:77:72:5f: ed:f5:1f:58:d5:2e:e0:01:b1:12:2c:5e:c4:ce:f5: 12:33:95:42:8e:64:73:a3:ea:df:29:42:0b:0c:85: f3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0F:BB:20:00:4C:00:EA:49:15:CC:13:93:B9:B9:44:5E:2D:81:B0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cebbc506-7144-44f7-a4d5-27edc84857be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.5.96.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:de:67:18:fa:fe:39:c5:c5:8d:b5:31:e5:d3:1e:bb:d2:54: 03:bf:ee:0b:06:38:7e:c9:b9:c6:c4:b6:f1:5c:58:3d:91:81: d9:45:3f:d7:9e:64:8c:79:57:78:2d:a9:16:87:11:45:a6:34: 93:5e:d2:3f:a4:ae:6e:d4:45:02:fb:2c:b5:7a:3c:3d:5f:1f: e1:f9:08:a4:9d:de:78:60:c3:d8:41:e0:d7:99:9b:e5:9c:9a: 37:46:98:d5:9c:cd:a8:78:45:e7:3d:e3:93:09:e7:79:8f:e3: f2:cf:5f:88:58:79:8e:6f:fb:33:3c:fe:89:77:d8:73:7b:22: 41:16:6f:ae:48:44:5b:25:d4:62:7a:48:f5:09:41:be:19:4f: 09:be:8d:10:0b:ff:ee:40:7f:4e:c7:10:e9:31:dd:96:f2:7a: 49:8a:b3:59:05:e8:83:ed:eb:f2:75:71:fc:ec:10:d8:b9:96: bb:e5:1f:ba:94:82:38:e1:a6:d6:a2:85:a6:56:75:8a:3a:de: 02:14:92:b8:3f:ca:e0:d7:cf:ff:df:f9:f0:50:de:f6:90:d5: dc:1f:71:e6:46:68:19:39:c4:f5:a4:fc:66:cb:a4:29:f0:df: d6:60:4a:09:71:df:8e:12:c9:70:d6:99:ca:d3:23:46:f8:4e: d8:37:ad:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEvmy6DbTKkxdzOCMW4S3Q3Lr5uYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA4MDA0MDEzWhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MWYwNTA4NTA3MGJhZjVjMDJlZmZmODFmY2QxMTZkZWU5 OGQzNmMyYmQ4YmU4YjVlZmZkNGNmNDBlYWQzMDlkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHwnkp0PMbbQbVFbNGT/7SX/DC7sutzZxTKRimvI1FRyhS fAalGVThlpux8Zm3jWKnj1jeMRIYsY+T+nZYbJgEvZOlfrlIwdU6CSawIavifwFP 5oEf7ZVIc9QYb0hANtrgwCXhkzJcGqX61uUf9wGJNUvW1wWBIco0X6CR6xkP1G9I yXgwmPTlqPzILHphWpycUW97rgEOCYVSLN5WIzncdpmZIy8kUylJ3HpkWG6bvWLb XqH2A/zBsjh7+2PHuzC27noGp/esF4FngSwethPVWY4x3eWzSfZWDIcvS3dyX+31 H1jVLuABsRIsXsTO9RIzlUKOZHOj6t8pQgsMhfNVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdg+7IABMAOpJFcwTk7m5RF4tgbAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlYmJjNTA2LTcxNDQtNDRmNy1hNGQ1LTI3ZWRjODQ4NTdiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJIBWAwDQYJKoZIhvcNAQELBQADggEBAAveZxj6/jnFxY21MeXTHrvSVAO/ 7gsGOH7JucbEtvFcWD2RgdlFP9eeZIx5V3gtqRaHEUWmNJNe0j+krm7URQL7LLV6 PD1fH+H5CKSd3nhgw9hB4NeZm+WcmjdGmNWczah4Rec945MJ53mP4/LPX4hYeY5v +zM8/ol32HN7IkEWb65IRFsl1GJ6SPUJQb4ZTwm+jRAL/+5Af07HEOkx3ZbyekmK s1kF6IPt6/J1cfzsENi5lrvlH7qUgjjhptaihaZWdYo63gIUkrg/yuDXz//f+fBQ 3vaQ1dwfceZGaBk5xPWk/GbLpCnw39ZgSglx344SyXDWmcrTI0b4Ttg3rQo= -----END CERTIFICATE-----Generated at Wed May 13 08:16:49 2026 by rpki-client