$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4471b16-ee1b-4a8c-b5c1-a7d1695edabb.roa File: d4471b16-ee1b-4a8c-b5c1-a7d1695edabb.roa (raw, json) Hash identifier: 8uSDFvi1BbU1PaoOXR/3B+A5A+Sob0FkMHus+lTmT2I= Subject key identifier: 7B:79:82:57:9A:8B:AC:91:DC:5A:EB:F5:C3:82:E7:0F:9F:A2:A2:56 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 428C5618CC8350EE0E26A0652A818BD1526C2345 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4471b16-ee1b-4a8c-b5c1-a7d1695edabb.roa Signing time: Mon 11 May 2026 00:30:51 +0000 ROA not before: Mon 11 May 2026 00:30:51 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.91.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:8c:56:18:cc:83:50:ee:0e:26:a0:65:2a:81:8b:d1:52:6c:23:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 11 00:30:51 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=c8689a111dac4be420055d4eecd443c32c1799e69d9c3469a6610e8e3efae7ca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1d:95:e3:48:71:25:ac:09:81:b4:3f:ca:ba: 2f:d6:2e:b1:78:c1:2b:e3:4f:67:76:7a:a6:22:dd: d2:e9:18:a8:30:63:48:85:d5:e2:9a:bc:06:39:ac: 3e:3b:e3:7d:f4:3b:a6:c2:76:c5:6f:4f:6d:3a:cc: 31:22:e2:3d:8f:7c:d4:f6:26:0b:97:61:20:9a:13: 9f:12:f4:4f:9d:8c:0b:16:9e:26:8e:56:e7:5e:5e: 9b:35:ef:c9:b7:fd:03:27:39:ef:62:32:01:c6:a8: 88:70:d9:e4:c6:69:fb:99:67:63:1a:af:a2:20:6e: 1b:44:79:27:72:e9:6b:ce:e1:3a:be:ae:05:44:7f: 85:f6:71:54:1e:90:9d:99:60:bd:a8:40:0f:59:9f: 8a:bc:e0:f3:a3:b7:7b:72:0f:96:a2:86:47:be:2d: 5a:5c:47:44:be:32:45:9b:45:7a:22:1d:7e:11:54: 6b:b0:ea:08:84:95:69:d6:a4:70:d9:b7:a7:30:40: 75:33:82:5d:b4:e1:70:34:68:4f:b3:6a:ed:ac:d1: a8:70:7e:0c:88:90:f4:93:6d:89:1f:f8:6a:d0:26: d7:7e:4c:26:48:98:a6:99:76:45:0e:56:28:00:08: 58:4b:30:24:f5:6a:23:fd:cc:78:e5:22:d5:99:fa: 30:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:79:82:57:9A:8B:AC:91:DC:5A:EB:F5:C3:82:E7:0F:9F:A2:A2:56 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4471b16-ee1b-4a8c-b5c1-a7d1695edabb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.91.11.0/24 Signature Algorithm: sha256WithRSAEncryption 55:4f:dd:86:6f:a5:2c:d8:32:61:c6:7e:64:63:41:4f:ff:a3: 72:8f:07:18:69:98:c0:80:4d:c5:5a:7c:4b:ac:bf:21:0d:46: 71:e2:a3:2d:36:b7:ae:0e:c4:be:e5:10:f4:7f:d2:d7:07:70: 90:c0:74:e6:63:72:e5:e3:7f:46:b9:64:a7:05:e3:d2:18:ef: bd:1b:e5:45:c8:fb:40:ff:64:7a:bd:3b:2f:17:49:12:b5:fc: 95:7f:26:85:9f:b6:41:8c:f8:5c:34:2d:9b:a8:37:7b:9e:dd: d8:50:cd:b4:f7:fc:17:f2:c7:24:35:3d:fb:4a:7e:6c:b1:5f: 46:ba:ac:a9:09:61:21:cf:f9:5e:21:63:e0:32:b1:25:f2:75: fb:c9:e9:d1:80:be:d3:f0:c3:de:ca:7d:18:ce:d4:38:f4:cc: 56:a7:06:c2:bf:fc:4b:e9:ae:37:e5:fa:a8:48:0b:02:5a:84: c4:08:70:26:22:b4:89:36:7c:3d:ce:72:22:b5:55:8c:c3:4c: 93:2a:4c:c3:ba:2f:94:0d:77:37:75:2c:ac:6d:4b:f5:33:ad: 52:92:90:5e:23:e8:74:4e:67:00:78:0d:b7:91:ec:1d:e8:c8: 67:8f:a7:a6:b2:b2:c7:21:71:a1:79:ec:74:40:23:a7:f5:e1: 87:6c:a4:59 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQoxWGMyDUO4OJqBlKoGL0VJsI0UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTExMDAzMDUxWhcNMjYwODA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjODY4OWExMTFkYWM0YmU0MjAwNTVkNGVlY2Q0NDNjMzJj MTc5OWU2OWQ5YzM0NjlhNjYxMGU4ZTNlZmFlN2NhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEHZXjSHElrAmBtD/Kui/WLrF4wSvjT2d2eqYi3dLpGKgw Y0iF1eKavAY5rD474330O6bCdsVvT206zDEi4j2PfNT2JguXYSCaE58S9E+djAsW niaOVudeXps178m3/QMnOe9iMgHGqIhw2eTGafuZZ2Mar6IgbhtEeSdy6WvO4Tq+ rgVEf4X2cVQekJ2ZYL2oQA9Zn4q84POjt3tyD5aihke+LVpcR0S+MkWbRXoiHX4R VGuw6giElWnWpHDZt6cwQHUzgl204XA0aE+zau2s0ahwfgyIkPSTbYkf+GrQJtd+ TCZImKaZdkUOVigACFhLMCT1aiP9zHjlItWZ+jC3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUe3mCV5qLrJHcWuv1w4LnD5+iolYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q0NDcxYjE2LWVlMWItNGE4Yy1iNWMxLWE3ZDE2OTVlZGFiYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAXWwswDQYJKoZIhvcNAQELBQADggEBAFVP3YZvpSzYMmHGfmRjQU//o3KP BxhpmMCATcVafEusvyENRnHioy02t64OxL7lEPR/0tcHcJDAdOZjcuXjf0a5ZKcF 49IY770b5UXI+0D/ZHq9Oy8XSRK1/JV/JoWftkGM+Fw0LZuoN3ue3dhQzbT3/Bfy xyQ1PftKfmyxX0a6rKkJYSHP+V4hY+AysSXydfvJ6dGAvtPww97KfRjO1Dj0zFan BsK//Evprjfl+qhICwJahMQIcCYitIk2fD3OciK1VYzDTJMqTMO6L5QNdzd1LKxt S/UzrVKSkF4j6HROZwB4DbeR7B3oyGePp6aysschcaF57HRAI6f14YdspFk= -----END CERTIFICATE-----Generated at Wed May 13 08:16:49 2026 by rpki-client