$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ef1f413-5802-4c11-a5d6-e203e95ba862.roa File: 2ef1f413-5802-4c11-a5d6-e203e95ba862.roa (raw, json) Hash identifier: sVr8hRsyYN5LOteHYHM1vL1Yc3k+vNjXva7JRpYx0fo= Subject key identifier: 91:20:52:1B:18:52:37:2B:10:A8:E3:8B:E0:A3:68:6B:FA:F3:20:4B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 222FE4A46F7CC6E993F0B4AD3F4A071D3C768D68 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ef1f413-5802-4c11-a5d6-e203e95ba862.roa Signing time: Fri 15 May 2026 01:32:21 +0000 ROA not before: Fri 15 May 2026 01:32:21 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:2f:e4:a4:6f:7c:c6:e9:93:f0:b4:ad:3f:4a:07:1d:3c:76:8d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 01:32:21 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=b3fcbe1ba136a91d5575dd784877c5ed893ce76946736c36d09aa98b743b8e6f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6a:e4:37:28:0b:3a:6c:c0:8f:dc:11:ef:d2: 7f:5f:64:de:0e:20:6c:9c:0c:6e:0e:cb:5a:f2:60: c6:fc:99:a6:a1:de:67:29:e8:e0:cc:06:b0:39:fc: db:12:9e:38:f6:bb:4a:20:71:1d:63:22:c1:6b:64: fd:9f:78:80:42:0d:6f:a2:28:2b:1a:a2:ee:f1:ad: 20:da:92:ad:40:cc:27:2f:59:c0:74:b7:6e:c2:59: 7a:ab:d1:b5:f8:0c:1f:d1:b8:9e:d0:91:db:34:0f: 6d:cf:0f:b6:5b:66:dc:4a:fd:72:78:28:75:4b:9e: bb:69:04:9d:7f:ae:d6:51:74:b5:ca:35:67:47:11: 99:c1:5a:c8:7a:0a:36:06:2b:ef:d9:e1:80:ea:35: cd:57:3a:54:55:f4:fc:5a:0b:fe:4f:6e:2d:9d:d1: eb:a3:03:b6:24:fd:ea:b6:86:b0:a5:a2:bd:a7:22: a3:24:22:ea:95:b1:a5:03:44:09:7f:cf:96:aa:73: 33:84:65:ca:be:eb:6f:89:08:24:7b:1f:63:b4:c1: 6b:a6:ab:96:b7:3b:ac:38:43:a5:d1:6b:9a:53:3d: 00:39:c9:e4:75:8f:48:64:90:7e:bb:21:fb:67:83: df:f6:ec:a7:8f:51:b0:d4:6f:68:a9:01:c3:20:60: 1b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:20:52:1B:18:52:37:2B:10:A8:E3:8B:E0:A3:68:6B:FA:F3:20:4B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ef1f413-5802-4c11-a5d6-e203e95ba862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.128.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:be:af:36:c6:fe:83:2b:b7:5b:d9:4a:47:7d:ee:c1:64:78: 2a:a2:40:bc:e1:70:73:26:f5:6e:ea:ba:e7:4d:e3:da:d2:18: 8d:43:ed:99:b7:9e:b6:3c:2e:e9:20:5e:44:bc:75:80:d5:ed: c3:f2:07:be:d2:e2:01:eb:eb:b4:86:74:e9:49:58:17:a8:95: 8a:c6:44:55:21:70:c3:72:e6:cf:a1:16:1c:00:85:5d:aa:3d: b6:56:87:e0:1c:28:f3:0d:c3:86:d4:0d:dc:33:d7:bd:40:0a: 8b:7c:cf:64:c8:76:10:50:b7:48:d2:86:c6:8d:6d:7c:3c:54: e5:0b:e2:2e:98:7a:a2:ae:af:d1:f4:06:b7:5d:79:c1:6f:24: 82:4a:75:d5:2d:42:fd:22:a9:47:ad:8f:30:b5:1a:31:94:af: 1a:5a:8c:f1:98:48:2f:73:3e:f9:bb:11:2c:0e:87:e3:90:bc: 4f:15:08:3d:5f:17:23:15:96:d6:f0:1b:af:47:c2:99:d2:d6: f2:01:00:0a:78:a9:69:01:1d:d9:96:b9:35:bf:07:5f:08:c2: 00:1d:90:c8:d1:4f:ea:50:d4:46:7b:f0:38:45:4c:0a:83:e0: 87:ce:76:18:bd:11:de:4f:ce:37:a7:27:29:33:f0:62:25:b5: 68:28:96:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIi/kpG98xumT8LStP0oHHTx2jWgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDEzMjIxWhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiM2ZjYmUxYmExMzZhOTFkNTU3NWRkNzg0ODc3YzVlZDg5 M2NlNzY5NDY3MzZjMzZkMDlhYTk4Yjc0M2I4ZTZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnauQ3KAs6bMCP3BHv0n9fZN4OIGycDG4Oy1ryYMb8maah 3mcp6ODMBrA5/NsSnjj2u0ogcR1jIsFrZP2feIBCDW+iKCsaou7xrSDakq1AzCcv WcB0t27CWXqr0bX4DB/RuJ7Qkds0D23PD7ZbZtxK/XJ4KHVLnrtpBJ1/rtZRdLXK NWdHEZnBWsh6CjYGK+/Z4YDqNc1XOlRV9PxaC/5Pbi2d0eujA7Yk/eq2hrClor2n IqMkIuqVsaUDRAl/z5aqczOEZcq+62+JCCR7H2O0wWumq5a3O6w4Q6XRa5pTPQA5 yeR1j0hkkH67Iftng9/27KePUbDUb2ipAcMgYBvLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkSBSGxhSNysQqOOL4KNoa/rzIEswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJlZjFmNDEzLTU4MDItNGMxMS1hNWQ2LWUyMDNlOTViYTg2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEoAwDQYJKoZIhvcNAQELBQADggEBAJ2+rzbG/oMrt1vZSkd97sFkeCqi QLzhcHMm9W7quudN49rSGI1D7Zm3nrY8LukgXkS8dYDV7cPyB77S4gHr67SGdOlJ WBeolYrGRFUhcMNy5s+hFhwAhV2qPbZWh+AcKPMNw4bUDdwz171ACot8z2TIdhBQ t0jShsaNbXw8VOUL4i6YeqKur9H0BrddecFvJIJKddUtQv0iqUetjzC1GjGUrxpa jPGYSC9zPvm7ESwOh+OQvE8VCD1fFyMVltbwG69HwpnS1vIBAAp4qWkBHdmWuTW/ B18IwgAdkMjRT+pQ1EZ78DhFTAqD4IfOdhi9Ed5PzjenJykz8GIltWgolj0= -----END CERTIFICATE-----Generated at Sat Jun 13 09:29:35 2026 by rpki-client