$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36aa37a5-85a5-4267-a40d-909515892745.roa File: 36aa37a5-85a5-4267-a40d-909515892745.roa (raw, json) Hash identifier: Rf94MieHGFla+a1cJ8A8PZSd8XZGiINlSJ+RXBYgrzo= Subject key identifier: 8A:B5:35:C5:DE:D5:26:49:A8:61:88:54:28:0D:BF:EF:62:C0:D9:84 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 079F6241DB492F89962E8A3E50E7A72D5F199ABF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36aa37a5-85a5-4267-a40d-909515892745.roa Signing time: Wed 13 May 2026 00:41:23 +0000 ROA not before: Wed 13 May 2026 00:41:23 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 205.184.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:9f:62:41:db:49:2f:89:96:2e:8a:3e:50:e7:a7:2d:5f:19:9a:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 00:41:23 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=7c8e26e58a5cf958b987bc250a10725518d7c17cafe32e6eee818be5ceb36662, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:23:9e:c5:cd:b6:f5:11:03:fe:58:fa:7d:2b: e8:6e:c6:10:67:1e:27:de:d3:49:6e:e2:ff:53:47: 11:88:c0:24:ee:a6:46:1c:a2:1a:9d:07:b9:bd:11: 0c:07:0e:56:12:ec:f4:2e:8c:ea:3d:c5:42:12:a7: a4:ee:50:dc:86:6b:4c:57:76:5e:8e:f0:d7:97:16: 48:a7:98:5f:a7:c1:b0:a1:af:7b:fc:c5:e7:97:de: 67:ff:a9:37:56:92:28:b9:1d:b5:66:eb:ed:41:1d: 0c:03:0f:4e:0a:97:9e:d2:05:39:3f:b3:0e:10:8a: b3:cd:db:98:61:19:dc:d5:55:fc:29:2e:15:77:7f: 1b:29:72:90:d3:ea:9a:9a:40:2d:47:b7:d3:2f:b8: 9c:2f:43:b0:37:7b:9c:00:b4:12:f1:a3:6d:37:73: 17:6b:0d:de:c5:52:a3:e3:1c:61:66:ad:cf:a3:f7: e2:a4:3f:a6:d3:cb:6e:cb:30:7a:e7:1e:c1:16:90: a3:30:f4:e6:f4:b6:ee:a8:54:0c:d8:1f:20:37:8e: 28:9d:a8:a3:5e:8b:7e:7f:97:0f:44:e2:94:8c:92: 8b:8f:4b:ea:20:c2:6c:71:ba:8f:37:96:9b:20:a8: 71:31:5d:e9:14:60:26:3f:eb:c0:da:78:8a:db:4b: 20:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B5:35:C5:DE:D5:26:49:A8:61:88:54:28:0D:BF:EF:62:C0:D9:84 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36aa37a5-85a5-4267-a40d-909515892745.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 205.184.48.0/20 Signature Algorithm: sha256WithRSAEncryption 2c:0d:03:48:af:6c:23:e6:cf:fb:05:6d:40:53:20:f0:39:f4: 23:5d:f7:03:cb:48:ab:e3:26:db:1d:da:ac:d4:d3:7a:91:da: 2d:5c:a7:2c:1f:58:e5:60:24:1f:88:8b:fd:ba:69:a8:f0:41: 72:94:2d:f0:5d:68:38:e9:4b:e7:7b:08:f8:93:4c:a0:4d:4d: f6:4e:0c:a4:96:2f:92:c9:2a:7b:19:fe:63:24:ef:00:cc:44: da:8a:35:2e:fc:b5:34:18:47:37:09:86:2b:6c:97:33:1c:1e: 64:9c:bb:4c:4e:94:97:15:9b:e3:b3:03:89:e1:90:ea:6d:6e: a8:24:09:db:43:c0:ad:fe:19:4b:b4:cd:d1:f7:3d:b3:24:27: 6b:3d:c6:b7:8b:a1:5b:79:bf:6c:94:f8:16:57:9c:2a:e1:53: 32:37:b7:18:46:37:c2:f7:8b:78:16:7e:b7:f5:18:a1:6f:d0: 7f:cd:74:dd:54:56:52:d1:84:75:c4:dc:39:53:cd:9d:fe:28: 21:7f:ae:8b:24:f8:9d:96:08:ba:7a:ff:35:08:c3:9b:b7:21: a4:d0:ce:df:48:1f:f9:e2:f8:45:91:49:87:2c:13:56:4d:9e: 79:4b:d6:9f:f0:37:ca:df:c0:f8:60:14:b4:bb:a9:77:3f:4e: 1b:fb:79:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB59iQdtJL4mWLoo+UOenLV8Zmr8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEzMDA0MTIzWhcNMjYwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YzhlMjZlNThhNWNmOTU4Yjk4N2JjMjUwYTEwNzI1NTE4 ZDdjMTdjYWZlMzJlNmVlZTgxOGJlNWNlYjM2NjYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjI57Fzbb1EQP+WPp9K+huxhBnHife00lu4v9TRxGIwCTu pkYcohqdB7m9EQwHDlYS7PQujOo9xUISp6TuUNyGa0xXdl6O8NeXFkinmF+nwbCh r3v8xeeX3mf/qTdWkii5HbVm6+1BHQwDD04Kl57SBTk/sw4QirPN25hhGdzVVfwp LhV3fxspcpDT6pqaQC1Ht9MvuJwvQ7A3e5wAtBLxo203cxdrDd7FUqPjHGFmrc+j 9+KkP6bTy27LMHrnHsEWkKMw9Ob0tu6oVAzYHyA3jiidqKNei35/lw9E4pSMkouP S+ogwmxxuo83lpsgqHExXekUYCY/68DaeIrbSyCdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUirU1xd7VJkmoYYhUKA2/72LA2YQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM2YWEzN2E1LTg1YTUtNDI2Ny1hNDBkLTkwOTUxNTg5Mjc0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATNuDAwDQYJKoZIhvcNAQELBQADggEBACwNA0ivbCPmz/sFbUBTIPA59CNd 9wPLSKvjJtsd2qzU03qR2i1cpywfWOVgJB+Ii/26aajwQXKULfBdaDjpS+d7CPiT TKBNTfZODKSWL5LJKnsZ/mMk7wDMRNqKNS78tTQYRzcJhitslzMcHmScu0xOlJcV m+OzA4nhkOptbqgkCdtDwK3+GUu0zdH3PbMkJ2s9xreLoVt5v2yU+BZXnCrhUzI3 txhGN8L3i3gWfrf1GKFv0H/NdN1UVlLRhHXE3DlTzZ3+KCF/rosk+J2WCLp6/zUI w5u3IaTQzt9IH/ni+EWRSYcsE1ZNnnlL1p/wN8rfwPhgFLS7qXc/Thv7eS8= -----END CERTIFICATE-----Generated at Sat Jun 13 14:25:59 2026 by rpki-client