$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19dbb176-711e-430f-a492-7e57ed06c8f2.roa File: 19dbb176-711e-430f-a492-7e57ed06c8f2.roa (raw, json) Hash identifier: SIqF51BWZDXey/RUoRCvk85ConvifR4q6FbT+Ras2Hg= Subject key identifier: 56:B4:82:20:2F:BC:B6:81:DC:3A:1C:4F:AB:E5:E9:9D:92:BA:B2:9C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 065D9E7C821F1E79A607B8EF1EC8EF75388E6C4A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19dbb176-711e-430f-a492-7e57ed06c8f2.roa Signing time: Fri 15 May 2026 01:01:20 +0000 ROA not before: Fri 15 May 2026 01:01:20 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 107.21.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:5d:9e:7c:82:1f:1e:79:a6:07:b8:ef:1e:c8:ef:75:38:8e:6c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 01:01:20 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=025a6cc19a13f9058067fb1f0294d26e8eb3e64d23d84cbeb21afcaca1307af1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:6d:88:0d:81:87:41:a7:e7:50:52:8d:c4: dd:e9:cf:e3:99:0c:76:33:c5:13:96:46:42:b0:4e: 5f:ea:59:99:ce:0c:30:79:d5:72:62:8d:dc:ab:cc: 96:56:67:78:d2:26:37:82:b7:4f:16:37:95:c3:2b: 44:6c:c8:38:09:99:f9:01:93:9d:45:3a:3a:90:ce: b4:dc:27:8e:41:85:1b:40:97:ba:39:05:02:de:b0: 6f:67:6f:11:c6:60:49:ab:c0:e8:31:63:68:6d:d2: 3c:bf:34:cf:2f:86:c0:0a:c2:6b:8c:53:37:5e:18: f3:2b:ba:eb:2b:79:af:0d:12:f4:98:65:27:e8:60: b0:42:45:6d:a7:ef:af:42:f0:e5:dd:6b:2f:bc:83: a0:46:ca:25:87:8f:c6:d4:57:a0:af:1a:b8:93:d3: c2:6b:72:72:6e:19:a0:19:d3:04:72:6d:e1:04:18: 37:5d:a4:bc:8a:ba:38:de:32:c9:4f:f8:6f:51:26: 9c:2d:b4:2f:8f:9e:1f:40:68:88:a6:9b:02:5e:17: 49:fa:e5:77:49:ff:f2:8f:e4:58:ac:d4:3f:d2:f5: dc:51:16:94:ee:2b:d6:8f:a5:66:80:a4:ae:14:6c: f9:00:ee:8c:06:cc:68:e7:a6:35:e2:20:a2:ae:7e: 37:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B4:82:20:2F:BC:B6:81:DC:3A:1C:4F:AB:E5:E9:9D:92:BA:B2:9C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19dbb176-711e-430f-a492-7e57ed06c8f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.64.0/18 Signature Algorithm: sha256WithRSAEncryption 3e:f5:ec:b8:7a:a8:e7:c6:62:32:e6:10:ee:8a:ea:ea:db:86: ca:4f:b7:73:87:a2:c0:a0:2d:58:cf:35:3f:1d:61:e5:71:03: 2e:07:f6:7c:26:9a:7f:68:bc:9e:11:e1:c1:fb:eb:95:5e:e1: 2a:d3:d1:24:35:6c:db:01:2f:50:65:33:50:49:26:ae:7c:c3: b7:6d:b3:bb:cd:cf:6a:0a:48:bb:f4:1e:15:6b:aa:00:d6:31: 32:73:61:db:a5:4a:77:7e:89:d6:21:b3:19:88:5a:de:5c:16: 29:ae:fe:b6:93:82:2c:3e:9c:be:f5:e3:70:7b:ce:44:3d:b2: 46:3e:fa:56:1b:d3:3c:c6:68:47:40:34:85:68:48:91:29:67: 08:a2:fc:82:ba:a9:65:fb:c0:21:c3:ea:e9:a6:7b:fb:bd:07: e3:21:ba:31:fe:6b:6a:27:fe:ae:cb:ba:d1:41:56:f8:cd:0e: fd:12:ba:68:14:04:43:8d:75:b2:27:2a:b9:68:20:52:68:03: 96:96:7f:6e:8e:86:6f:d3:f0:9d:e5:ad:69:5d:d1:53:16:22: 88:58:8c:b5:10:ed:e4:73:2b:18:00:96:57:99:4b:ba:08:a1: 1c:c1:ab:21:06:71:19:5b:a2:d2:52:1d:5f:45:df:4d:7f:5c: 9b:3e:2a:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBl2efIIfHnmmB7jvHsjvdTiObEowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDEwMTIwWhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMjVhNmNjMTlhMTNmOTA1ODA2N2ZiMWYwMjk0ZDI2ZThl YjNlNjRkMjNkODRjYmViMjFhZmNhY2ExMzA3YWYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtYG2IDYGHQafnUFKNxN3pz+OZDHYzxROWRkKwTl/qWZnO DDB51XJijdyrzJZWZ3jSJjeCt08WN5XDK0RsyDgJmfkBk51FOjqQzrTcJ45BhRtA l7o5BQLesG9nbxHGYEmrwOgxY2ht0jy/NM8vhsAKwmuMUzdeGPMruusrea8NEvSY ZSfoYLBCRW2n769C8OXday+8g6BGyiWHj8bUV6CvGriT08JrcnJuGaAZ0wRybeEE GDddpLyKujjeMslP+G9RJpwttC+Pnh9AaIimmwJeF0n65XdJ//KP5Fis1D/S9dxR FpTuK9aPpWaApK4UbPkA7owGzGjnpjXiIKKufjcBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVrSCIC+8toHcOhxPq+XpnZK6spwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE5ZGJiMTc2LTcxMWUtNDMwZi1hNDkyLTdlNTdlZDA2YzhmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZrFUAwDQYJKoZIhvcNAQELBQADggEBAD717Lh6qOfGYjLmEO6K6urbhspP t3OHosCgLVjPNT8dYeVxAy4H9nwmmn9ovJ4R4cH765Ve4SrT0SQ1bNsBL1BlM1BJ Jq58w7dts7vNz2oKSLv0HhVrqgDWMTJzYdulSnd+idYhsxmIWt5cFimu/raTgiw+ nL7143B7zkQ9skY++lYb0zzGaEdANIVoSJEpZwii/IK6qWX7wCHD6umme/u9B+Mh ujH+a2on/q7LutFBVvjNDv0SumgUBEONdbInKrloIFJoA5aWf26Ohm/T8J3lrWld 0VMWIohYjLUQ7eRzKxgAlleZS7oIoRzBqyEGcRlbotJSHV9F301/XJs+KpQ= -----END CERTIFICATE-----Generated at Sat Jun 13 08:18:12 2026 by rpki-client