$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2685e722-0e36-4c7d-81cd-710122343f21.roa File: 2685e722-0e36-4c7d-81cd-710122343f21.roa (raw, json) Hash identifier: Tb1yefoHKRai0g1IBnBZMoqb4iTUhwB6argmC7V8Yhc= Subject key identifier: 74:DE:A1:25:34:4C:8A:F0:9A:AD:74:B4:84:67:71:E5:D3:DA:AE:66 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5EC9D898DF83E3F9AA9DEFE337344C82BFAA0F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2685e722-0e36-4c7d-81cd-710122343f21.roa Signing time: Sat 16 May 2026 02:10:11 +0000 ROA not before: Sat 16 May 2026 02:10:11 +0000 ROA not after: Fri 14 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 216.252.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c9:d8:98:df:83:e3:f9:aa:9d:ef:e3:37:34:4c:82:bf:aa:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 02:10:11 2026 GMT Not After : Aug 14 23:59:59 2026 GMT Subject: serialNumber=1d6db1bb631215c3d2e876a96ab8565eea3f069a5daadf300e74421e81584b5e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4e:46:80:10:49:38:67:72:5e:df:c3:04:c3: d7:bd:35:c9:2b:10:0a:be:11:80:80:84:e0:a0:b2: b5:45:fd:07:c7:a4:cf:78:26:83:1d:8c:8d:ed:91: 2c:0c:1e:f1:a4:40:cd:76:87:c5:f3:92:1f:cc:eb: df:70:0f:f4:b8:d9:25:54:fa:ac:fa:d9:fa:d8:51: d3:1d:97:41:16:57:c9:ac:df:e3:99:0f:82:5a:1b: 19:60:a5:0d:fb:5d:0d:68:c3:c5:88:12:48:db:b4: 28:fc:06:d7:ff:3c:fe:2d:ce:c3:e8:2d:68:81:a5: c3:7a:24:70:14:cf:38:91:b3:08:54:89:9a:31:c5: b9:e7:68:91:b9:7e:8a:6d:a4:f7:9a:e2:75:38:6d: 6f:18:7d:21:eb:58:90:f1:78:b5:44:83:67:47:0a: 13:cb:33:ab:46:65:c1:77:4d:bc:79:0b:4d:56:e1: 1f:90:92:e3:af:7c:73:aa:ac:6e:61:77:d6:59:33: c8:eb:a6:07:8f:77:c2:a0:ed:37:f7:4d:da:9d:2d: f8:3f:aa:5d:e9:d6:08:b4:f4:91:d1:fb:9d:e0:f8: 2c:12:24:2d:1d:f8:74:b2:6e:19:07:09:93:38:57: 94:33:88:a3:87:71:14:f7:61:10:a4:6b:ed:5c:80: 92:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DE:A1:25:34:4C:8A:F0:9A:AD:74:B4:84:67:71:E5:D3:DA:AE:66 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2685e722-0e36-4c7d-81cd-710122343f21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.252.216.0/22 Signature Algorithm: sha256WithRSAEncryption c6:fd:50:9a:40:fe:94:9d:54:79:1a:d7:58:36:0f:db:4e:b9: c9:48:34:d4:e8:23:ae:1c:cb:0b:d4:b0:38:6e:ea:b3:88:77: 04:c3:e8:64:00:ff:4f:75:09:42:f0:47:56:38:0c:8d:a2:69: 76:03:6b:9c:72:bc:fb:c3:32:b9:c6:a5:37:c9:d8:c0:da:9b: 3d:09:6d:41:6a:0a:b2:e4:3a:12:9f:35:45:f9:59:0b:77:75: 33:2c:46:f9:36:e4:73:dc:3b:f0:c0:7c:a0:36:16:00:b2:4d: e3:d3:90:7d:da:41:1e:1e:be:6e:e6:3d:01:67:e4:a9:b8:86: b6:c6:ce:fa:c8:6d:a3:94:93:db:c6:01:f3:1b:9c:a8:35:d6: 67:b2:a8:09:f7:e4:93:d0:56:21:bc:78:c3:3d:1a:bf:ef:a3: 7b:f3:ea:0a:68:3a:b0:e3:67:db:9f:ff:e1:fa:31:e8:4e:9d: 76:09:a8:1b:f2:d4:63:b1:a0:90:d1:f6:ba:79:b5:d7:16:c2: 7e:40:c1:6c:2e:cb:4c:5c:92:05:ba:07:26:d5:f2:59:d7:68: 70:9f:c3:2c:84:95:cf:83:ae:a1:02:01:6e:0f:69:df:11:40: 95:20:82:17:a5:4c:77:df:70:f7:0f:9b:ce:6b:4c:7e:e1:ce: 4b:c7:89:47 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITXsnYmN+D4/mqne/jNzRMgr+qDzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjA1MTYwMjEwMTFaFw0yNjA4MTQyMzU5NTla MHoxSTBHBgNVBAUTQDFkNmRiMWJiNjMxMjE1YzNkMmU4NzZhOTZhYjg1NjVlZWEz ZjA2OWE1ZGFhZGYzMDBlNzQ0MjFlODE1ODRiNWUxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANdORoAQSThncl7fwwTD1701ySsQCr4RgICE4KCytUX9B8ek z3gmgx2Mje2RLAwe8aRAzXaHxfOSH8zr33AP9LjZJVT6rPrZ+thR0x2XQRZXyazf 45kPglobGWClDftdDWjDxYgSSNu0KPwG1/88/i3Ow+gtaIGlw3okcBTPOJGzCFSJ mjHFuedokbl+im2k95ridThtbxh9IetYkPF4tUSDZ0cKE8szq0ZlwXdNvHkLTVbh H5CS4698c6qsbmF31lkzyOumB493wqDtN/dN2p0t+D+qXenWCLT0kdH7neD4LBIk LR34dLJuGQcJkzhXlDOIo4dxFPdhEKRr7VyAkk8CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBR03qElNEyK8JqtdLSEZ3Hl09quZjAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvMjY4NWU3MjItMGUzNi00YzdkLTgxY2QtNzEwMTIyMzQzZjIxLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAtj82DANBgkqhkiG9w0BAQsFAAOCAQEAxv1QmkD+lJ1UeRrXWDYP2065yUg0 1OgjrhzLC9SwOG7qs4h3BMPoZAD/T3UJQvBHVjgMjaJpdgNrnHK8+8MyucalN8nY wNqbPQltQWoKsuQ6Ep81RflZC3d1MyxG+Tbkc9w78MB8oDYWALJN49OQfdpBHh6+ buY9AWfkqbiGtsbO+shto5ST28YB8xucqDXWZ7KoCffkk9BWIbx4wz0av++je/Pq Cmg6sONn25//4fox6E6ddgmoG/LUY7GgkNH2unm11xbCfkDBbC7LTFySBboHJtXy WddocJ/DLISVz4OuoQIBbg9p3xFAlSCCF6VMd99w9w+bzmtMfuHOS8eJRw== -----END CERTIFICATE-----Generated at Sat Jun 13 07:14:57 2026 by rpki-client