$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d514f93c-3d1e-4f12-90bf-7988de3178c5.roa File: d514f93c-3d1e-4f12-90bf-7988de3178c5.roa (raw, json) Hash identifier: c+psYa9OVcnyUuZ/EDlv8d0ZC/J734/Ur1m2EThEZ48= Subject key identifier: 70:0B:76:16:BA:BB:97:34:F0:8C:65:65:8B:29:FF:42:8A:DA:E2:D0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 76604A65E02C7B534959098615680F6EE1856DF1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d514f93c-3d1e-4f12-90bf-7988de3178c5.roa Signing time: Mon 04 May 2026 00:30:48 +0000 ROA not before: Mon 04 May 2026 00:30:48 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 24.110.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:60:4a:65:e0:2c:7b:53:49:59:09:86:15:68:0f:6e:e1:85:6d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 00:30:48 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=9b06edea588fe56d6764722900b234b914c7ddba05f5951a1e909da52d530a1c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:42:29:34:c6:f5:3f:56:cb:dc:47:db:6b:eb: fe:1f:36:7f:02:83:09:a4:e1:b7:07:15:52:37:58: ab:35:68:3f:b2:2a:af:9e:a2:4e:46:63:33:1c:8b: 74:ec:d4:0c:5e:2f:53:0c:8f:62:ab:98:8e:2f:9d: 06:ab:df:8d:54:1a:be:70:7c:42:70:4a:77:1b:8a: 1b:82:04:40:c6:4c:38:2f:5e:6d:2a:43:e0:87:4a: 42:b2:d3:e3:dc:f7:44:73:57:fd:06:ad:78:b2:00: 4e:c8:0e:7a:ea:d3:f9:a6:e5:f6:c4:f5:52:8d:f5: 94:bf:12:74:7a:84:5d:77:71:56:a7:88:c9:90:12: 7d:eb:cc:8e:eb:2f:87:52:bb:e5:24:4d:57:02:6b: b1:23:2c:d5:20:d8:5e:d9:c1:58:78:27:a7:a8:20: c1:22:60:34:d6:b0:46:10:6c:d5:e3:a6:7b:5c:ae: 1d:bf:00:1f:f6:ff:5c:d9:24:a6:f8:1a:1e:44:69: 63:e0:44:ec:3a:31:4a:5d:fe:95:8d:aa:46:90:a2: 36:0d:a4:a3:fc:3d:94:5a:9d:c0:a3:3b:25:bd:6a: b5:8d:ca:5b:70:d8:96:63:57:71:6f:9b:ce:80:f8: 94:eb:52:37:47:a2:75:55:4f:2d:f5:c3:12:1a:73: 45:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0B:76:16:BA:BB:97:34:F0:8C:65:65:8B:29:FF:42:8A:DA:E2:D0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d514f93c-3d1e-4f12-90bf-7988de3178c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.110.128.0/17 Signature Algorithm: sha256WithRSAEncryption 28:4e:9c:6c:24:1a:44:b0:81:17:57:2d:b9:ec:78:81:85:45: d5:0e:e6:c9:0c:65:2a:0f:b6:7a:16:46:bf:94:5a:46:5c:87: 6b:1b:db:a4:04:97:50:ab:3c:85:1e:be:bf:07:ea:e7:02:79: 1e:4c:73:40:a0:20:59:30:7a:44:77:bc:89:a1:18:65:95:08: 0f:a3:9d:63:c5:f9:df:84:92:38:e7:06:50:5e:ad:79:76:7b: df:9d:f2:cc:ae:bf:1e:8c:4a:d3:1c:c6:2b:7c:b7:f5:09:21: fb:68:a4:4c:af:ab:c1:d3:97:46:f3:e4:1d:fe:34:cd:3f:b6: 4a:d8:97:8e:3b:e7:4b:b9:c1:a0:f7:25:2b:08:45:e7:35:b3: 80:4e:c9:32:4b:a1:6d:f4:d6:36:04:6d:0b:71:6e:f4:dd:fb: ba:7c:13:a1:56:05:b8:95:bc:47:32:9c:e4:53:84:2d:fe:b2: f3:f5:8b:ce:22:0f:aa:61:36:59:db:7c:9f:9f:e8:54:7c:f4: c4:7f:9d:ff:5d:11:49:f8:d0:ad:7b:23:01:a3:03:55:e4:74: 0e:29:5a:6c:c8:36:29:e3:24:75:ee:5b:6d:a6:a4:7d:8e:b8: 1a:56:64:02:a2:06:45:ef:ae:56:ce:f9:c4:d6:a8:51:f0:2c: ee:76:d8:c1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdmBKZeAse1NJWQmGFWgPbuGFbfEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDAzMDQ4WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YjA2ZWRlYTU4OGZlNTZkNjc2NDcyMjkwMGIyMzRiOTE0 YzdkZGJhMDVmNTk1MWExZTkwOWRhNTJkNTMwYTFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2Qik0xvU/VsvcR9tr6/4fNn8Cgwmk4bcHFVI3WKs1aD+y Kq+eok5GYzMci3Ts1AxeL1MMj2KrmI4vnQar341UGr5wfEJwSncbihuCBEDGTDgv Xm0qQ+CHSkKy0+Pc90RzV/0GrXiyAE7IDnrq0/mm5fbE9VKN9ZS/EnR6hF13cVan iMmQEn3rzI7rL4dSu+UkTVcCa7EjLNUg2F7ZwVh4J6eoIMEiYDTWsEYQbNXjpntc rh2/AB/2/1zZJKb4Gh5EaWPgROw6MUpd/pWNqkaQojYNpKP8PZRancCjOyW9arWN yltw2JZjV3Fvm86A+JTrUjdHonVVTy31wxIac0XZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcAt2Frq7lzTwjGVliyn/Qora4tAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q1MTRmOTNjLTNkMWUtNGYxMi05MGJmLTc5ODhkZTMxNzhjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcYboAwDQYJKoZIhvcNAQELBQADggEBAChOnGwkGkSwgRdXLbnseIGFRdUO 5skMZSoPtnoWRr+UWkZch2sb26QEl1CrPIUevr8H6ucCeR5Mc0CgIFkwekR3vImh GGWVCA+jnWPF+d+EkjjnBlBerXl2e9+d8syuvx6MStMcxit8t/UJIftopEyvq8HT l0bz5B3+NM0/tkrYl44750u5waD3JSsIRec1s4BOyTJLoW301jYEbQtxbvTd+7p8 E6FWBbiVvEcynORThC3+svP1i84iD6phNlnbfJ+f6FR89MR/nf9dEUn40K17IwGj A1XkdA4pWmzINinjJHXuW22mpH2OuBpWZAKiBkXvrlbO+cTWqFHwLO522ME= -----END CERTIFICATE-----Generated at Wed May 13 08:16:42 2026 by rpki-client