$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03dd229f-85c7-4158-82b5-da756c839c84.roa File: 03dd229f-85c7-4158-82b5-da756c839c84.roa (raw, json) Hash identifier: UIUPIPpLesUpo2Dp3WAvSAxoV0YIHRPdhhDGz8jMmzo= Subject key identifier: E6:63:53:C4:D9:F1:C4:FE:EA:71:26:AA:AB:B0:06:90:DB:3D:FF:27 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 25D7C324C47CE696A8E8D49009724E7FADEBD9A1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03dd229f-85c7-4158-82b5-da756c839c84.roa Signing time: Tue 19 May 2026 00:10:37 +0000 ROA not before: Tue 19 May 2026 00:10:37 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.249.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d7:c3:24:c4:7c:e6:96:a8:e8:d4:90:09:72:4e:7f:ad:eb:d9:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 00:10:37 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=31020dc9e0c8448bdc1147b7fa81ef0c1e03daf80816e7042d2bfd165b64a359, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7c:4b:bb:e9:73:e4:81:ff:f6:d1:8a:48:d3: f6:8b:b4:0d:3d:85:4c:1a:40:2b:bb:8d:41:12:5e: fe:5e:d7:5c:a3:6f:a0:a3:65:c1:d6:83:04:3d:86: 5c:62:6d:87:07:b7:bb:b7:9b:0c:17:3c:2b:28:db: b0:bf:08:83:5f:f9:a9:94:df:c8:47:87:4e:54:c5: 2c:14:e5:0c:87:80:22:d3:92:22:44:fc:18:ea:ec: 76:95:67:95:62:2c:97:7e:61:65:2c:f6:a2:4c:71: 8b:5e:60:db:12:d5:11:a9:4f:94:53:8a:71:3b:2f: 6e:fe:c1:e8:e3:06:4c:b2:2f:47:03:bb:6d:a7:42: ff:de:23:e1:6f:70:6d:5c:d9:ac:5c:31:31:00:d6: 2e:e5:17:8d:34:8c:60:d6:bc:c9:cd:d8:8f:e1:41: 95:75:bc:4f:40:7a:34:2d:44:68:5a:a6:de:70:72: bc:ac:4b:f5:87:49:cd:a5:ae:ca:93:ac:af:e4:8a: 15:6a:fa:42:2e:f1:fb:fb:12:ae:88:cd:71:98:bf: 16:50:65:83:f7:80:5f:98:15:8f:63:4b:99:8e:3e: 50:b3:37:6f:d8:84:7a:e1:c1:fe:d7:29:9e:fa:70: cd:87:1e:16:3c:89:bf:b4:21:07:cc:06:be:e3:70: 1e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:63:53:C4:D9:F1:C4:FE:EA:71:26:AA:AB:B0:06:90:DB:3D:FF:27 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03dd229f-85c7-4158-82b5-da756c839c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.249.0.0/16 Signature Algorithm: sha256WithRSAEncryption ad:20:7e:da:d1:0d:b8:68:71:96:25:10:07:12:41:3f:41:cb: 1d:e5:e1:40:f5:9f:59:39:72:b9:15:f4:aa:36:09:85:f3:ca: 61:0c:b3:ba:37:92:42:53:db:33:3f:9d:ae:9d:5b:28:72:9e: 67:ef:cd:a0:8f:45:7e:13:4f:bc:62:bf:80:e4:71:97:f9:d7: 7b:e7:3f:54:0b:34:7f:13:51:2c:2e:c7:74:41:68:83:81:1d: 61:98:c5:1c:38:aa:a5:90:67:96:c1:56:61:d1:44:c9:07:bb: 26:ba:6d:aa:d2:4a:56:70:5e:ad:91:5a:67:86:80:28:5a:a8: c6:a5:dc:49:18:9c:e3:e9:e0:5d:41:e5:b1:ab:58:a1:f3:69: 30:7d:9c:1f:fc:9d:81:d2:3f:c9:cb:6b:72:eb:f9:eb:8d:d9: 30:7f:6b:18:f5:4d:38:4c:0c:0e:a6:92:da:25:36:de:7a:33: 69:d9:40:54:b3:d0:f1:8f:7f:f7:86:5a:00:74:6d:19:53:23: 4c:3a:51:9b:9b:72:ce:ff:cf:2c:41:27:97:04:af:a4:0e:f9: 52:25:ca:55:8b:b1:ed:99:8e:34:53:4c:ac:20:ea:2d:9f:94: f5:e6:0f:e7:71:73:e0:29:88:43:a8:e2:fa:f8:db:26:3c:a9: d0:e0:ad:31 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJdfDJMR85pao6NSQCXJOf63r2aEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE5MDAxMDM3WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTAyMGRjOWUwYzg0NDhiZGMxMTQ3YjdmYTgxZWYwYzFl MDNkYWY4MDgxNmU3MDQyZDJiZmQxNjViNjRhMzU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpfEu76XPkgf/20YpI0/aLtA09hUwaQCu7jUESXv5e11yj b6CjZcHWgwQ9hlxibYcHt7u3mwwXPCso27C/CINf+amU38hHh05UxSwU5QyHgCLT kiJE/Bjq7HaVZ5ViLJd+YWUs9qJMcYteYNsS1RGpT5RTinE7L27+wejjBkyyL0cD u22nQv/eI+FvcG1c2axcMTEA1i7lF400jGDWvMnN2I/hQZV1vE9AejQtRGhapt5w crysS/WHSc2lrsqTrK/kihVq+kIu8fv7Eq6IzXGYvxZQZYP3gF+YFY9jS5mOPlCz N2/YhHrhwf7XKZ76cM2HHhY8ib+0IQfMBr7jcB4ZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU5mNTxNnxxP7qcSaqq7AGkNs9/ycwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzZGQyMjlmLTg1YzctNDE1OC04MmI1LWRhNzU2YzgzOWM4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP+TANBgkqhkiG9w0BAQsFAAOCAQEArSB+2tENuGhxliUQBxJBP0HLHeXh QPWfWTlyuRX0qjYJhfPKYQyzujeSQlPbMz+drp1bKHKeZ+/NoI9FfhNPvGK/gORx l/nXe+c/VAs0fxNRLC7HdEFog4EdYZjFHDiqpZBnlsFWYdFEyQe7JrptqtJKVnBe rZFaZ4aAKFqoxqXcSRic4+ngXUHlsatYofNpMH2cH/ydgdI/yctrcuv5643ZMH9r GPVNOEwMDqaS2iU23nozadlAVLPQ8Y9/94ZaAHRtGVMjTDpRm5tyzv/PLEEnlwSv pA75UiXKVYux7ZmONFNMrCDqLZ+U9eYP53Fz4CmIQ6ji+vjbJjyp0OCtMQ== -----END CERTIFICATE-----Generated at Sat Jun 13 15:45:12 2026 by rpki-client