$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33dead49-834a-4294-8148-07fc63dc2b32.roa File: 33dead49-834a-4294-8148-07fc63dc2b32.roa (raw, json) Hash identifier: PpjfMQsRqywxybTEK2zEG1MEN8FV6MWJ/yWeevL1wvg= Subject key identifier: 9E:9C:0E:BE:FF:87:70:66:79:A9:70:05:D6:2C:99:03:B7:A5:88:EA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 79C077724E3B32AB15EDAEB50E433AECFCDF0B63 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33dead49-834a-4294-8148-07fc63dc2b32.roa Signing time: Mon 13 Apr 2026 21:37:00 +0000 ROA not before: Mon 13 Apr 2026 21:37:00 +0000 ROA not after: Sun 12 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.15.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c0:77:72:4e:3b:32:ab:15:ed:ae:b5:0e:43:3a:ec:fc:df:0b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 13 21:37:00 2026 GMT Not After : Jul 12 23:59:59 2026 GMT Subject: serialNumber=5b6bb78a2a6e22e5ccbda4db92b21b121a081d0602405e134d15efcbb683024d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:90:a1:62:27:07:c1:4b:6e:d2:03:de:d0:43: f6:a7:c3:ff:fa:0d:cf:2d:66:c0:f5:a8:c9:d9:56: a7:ce:64:d3:4b:64:9a:93:67:2c:3a:73:3d:60:20: 51:d2:5a:bc:af:67:41:56:ca:fc:9c:f1:68:c5:8b: b8:a2:31:f2:7c:06:f9:84:24:a4:a0:a6:ff:02:9f: bf:a2:ed:fa:6d:cb:3b:d1:c2:7c:cd:13:09:e3:da: 36:7f:a3:94:53:f7:0f:53:00:44:46:6d:6a:f8:0e: d5:15:81:0c:87:f6:ed:4f:4a:d6:4b:5f:17:3e:36: ce:99:cd:90:9e:5b:4d:a5:80:ad:0a:67:ff:db:01: 25:b8:69:98:01:7c:93:42:48:0e:fa:35:7a:5b:94: 48:4c:73:65:99:e1:c3:72:7e:06:56:5b:91:7b:58: 5c:0c:f0:57:a6:0b:65:62:ab:84:93:6a:a3:eb:3e: a9:97:cd:5d:84:b7:d0:c4:5c:9a:05:4f:f5:66:82: bd:bb:c3:5e:fe:09:c2:e7:0f:a2:68:cb:8c:1c:13: 40:89:cd:e9:1e:58:ac:f1:fb:06:44:cc:ab:5f:ba: 6d:01:36:21:63:8c:8c:88:52:14:24:37:4e:3b:e0: c6:9e:f6:a0:d0:88:ec:24:da:f0:65:4f:73:58:6d: a3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9C:0E:BE:FF:87:70:66:79:A9:70:05:D6:2C:99:03:B7:A5:88:EA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33dead49-834a-4294-8148-07fc63dc2b32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.15.172.0/22 Signature Algorithm: sha256WithRSAEncryption 06:41:70:df:2e:f2:d1:8e:d7:2e:b8:1b:82:e6:5c:bb:b3:6e: cd:3d:b9:2a:a4:9a:39:91:0b:f3:2a:1f:b1:0f:bb:de:c6:df: 46:e2:81:54:56:a8:71:0d:84:9f:e7:7d:5e:80:ee:a1:ef:0d: cd:f8:8a:aa:fd:ca:fb:3d:6b:d1:46:cc:ab:54:ae:6f:cd:dc: a5:1a:b1:8d:5f:05:72:07:62:44:71:0b:68:bc:ae:e9:dc:fb: ab:a2:f4:0c:c8:c8:cb:a2:95:7c:d7:45:db:b7:82:30:42:50: d4:54:4f:58:c3:fa:78:14:74:29:da:35:59:57:7c:2e:09:98: 4a:8e:22:49:19:ee:c4:b5:2c:e5:3d:26:25:57:d0:9c:0e:41: d9:17:f3:90:6b:0c:58:b6:18:97:f8:64:5a:bf:8d:ad:26:5f: 9b:fc:b7:d8:51:ea:28:7a:1b:c5:00:6a:0d:db:68:f5:cb:f5: 29:9c:14:03:e9:3a:a7:bb:2e:a0:63:4e:e0:bc:ef:62:50:de: 9e:ba:25:d8:be:08:fb:ae:a0:9e:cc:58:e0:d1:85:26:68:8c: 20:78:b5:14:cd:70:53:eb:7a:d9:f1:fe:fc:6f:e5:f9:50:f8: da:20:1a:0c:1d:ce:2f:72:17:60:8c:1e:1e:ef:fc:55:b6:a3: e7:b3:48:65 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUecB3ck47MqsV7a61DkM67PzfC2MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDEzMjEzNzAwWhcNMjYwNzEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YjZiYjc4YTJhNmUyMmU1Y2NiZGE0ZGI5MmIyMWIxMjFh MDgxZDA2MDI0MDVlMTM0ZDE1ZWZjYmI2ODMwMjRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9kKFiJwfBS27SA97QQ/anw//6Dc8tZsD1qMnZVqfOZNNL ZJqTZyw6cz1gIFHSWryvZ0FWyvyc8WjFi7iiMfJ8BvmEJKSgpv8Cn7+i7fptyzvR wnzNEwnj2jZ/o5RT9w9TAERGbWr4DtUVgQyH9u1PStZLXxc+Ns6ZzZCeW02lgK0K Z//bASW4aZgBfJNCSA76NXpblEhMc2WZ4cNyfgZWW5F7WFwM8FemC2Viq4STaqPr PqmXzV2Et9DEXJoFT/Vmgr27w17+CcLnD6Joy4wcE0CJzekeWKzx+wZEzKtfum0B NiFjjIyIUhQkN0474Mae9qDQiOwk2vBlT3NYbaMpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnpwOvv+HcGZ5qXAF1iyZA7eliOowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMzZGVhZDQ5LTgzNGEtNDI5NC04MTQ4LTA3ZmM2M2RjMmIzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIQD6wwDQYJKoZIhvcNAQELBQADggEBAAZBcN8u8tGO1y64G4LmXLuzbs09 uSqkmjmRC/MqH7EPu97G30bigVRWqHENhJ/nfV6A7qHvDc34iqr9yvs9a9FGzKtU rm/N3KUasY1fBXIHYkRxC2i8runc+6ui9AzIyMuilXzXRdu3gjBCUNRUT1jD+ngU dCnaNVlXfC4JmEqOIkkZ7sS1LOU9JiVX0JwOQdkX85BrDFi2GJf4ZFq/ja0mX5v8 t9hR6ih6G8UAag3baPXL9SmcFAPpOqe7LqBjTuC872JQ3p66Jdi+CPuuoJ7MWODR hSZojCB4tRTNcFPretnx/vxv5flQ+NogGgwdzi9yF2CMHh7v/FW2o+ezSGU= -----END CERTIFICATE-----Generated at Sun Apr 19 10:12:47 2026 by rpki-client