$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/468d1e03-d779-457a-a51e-3e92b6f2cbe2.roa File: 468d1e03-d779-457a-a51e-3e92b6f2cbe2.roa (raw, json) Hash identifier: bqcvI4qkeDfhVkimjnXB7QXZ9hYX0wf8gBi8bww1nmk= Subject key identifier: 11:A3:38:B7:DA:38:22:D4:C7:D9:9A:B7:92:4C:3D:83:93:B1:17:92 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 50EE04349EB2CA1408141CB5B93F7EEF986FA64C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/468d1e03-d779-457a-a51e-3e92b6f2cbe2.roa Signing time: Sun 17 May 2026 00:20:06 +0000 ROA not before: Sun 17 May 2026 00:20:06 +0000 ROA not after: Sat 15 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 70.232.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ee:04:34:9e:b2:ca:14:08:14:1c:b5:b9:3f:7e:ef:98:6f:a6:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:20:06 2026 GMT Not After : Aug 15 23:59:59 2026 GMT Subject: serialNumber=3b375b547a5afcc6bbafa1d8c8f2a6971a3e223a4f6eadd24a422fe7cd587833, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ec:52:ec:54:6a:8e:b5:1f:12:e1:19:72:9a: 1a:b4:be:fc:6b:ce:79:77:a2:1e:10:c8:0b:c1:d4: 7c:14:fa:fd:01:de:12:de:e4:e6:c6:fa:92:80:8a: 61:8a:73:38:63:2f:b8:90:91:08:00:22:73:7e:c2: 2c:de:02:60:f0:36:14:d8:09:e3:b8:b0:07:57:2e: fa:3d:7e:42:0a:0b:8c:e3:cd:77:b6:b5:dd:4f:f6: 09:2d:02:4d:22:1a:30:ac:ce:07:f7:c7:fe:5d:ea: 98:6c:45:50:2d:90:50:4e:c5:fc:f0:9c:b2:b5:f6: dd:70:11:a0:19:b3:11:fb:b1:19:f9:f9:62:b0:34: 8c:4c:bc:14:7c:d7:8c:7f:93:b3:6e:3e:35:b7:2e: 25:bc:ee:5a:83:a5:b0:42:b5:a1:7e:10:54:19:45: 08:66:3a:43:5f:42:4f:4a:65:73:a3:e8:30:e9:d7: 4f:a0:97:85:18:d7:d6:64:17:5f:a8:73:81:0e:58: ae:62:41:e8:6e:46:7d:dd:72:93:6b:e1:17:3c:22: c8:c9:5d:7c:04:0d:e3:c9:14:6e:57:ed:91:f0:23: a6:59:ea:14:0d:48:b9:e1:47:69:0c:fb:f0:14:47: a4:00:8f:15:f9:e8:6f:83:80:c6:fa:44:87:cc:2f: 39:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A3:38:B7:DA:38:22:D4:C7:D9:9A:B7:92:4C:3D:83:93:B1:17:92 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/468d1e03-d779-457a-a51e-3e92b6f2cbe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.232.92.0/22 Signature Algorithm: sha256WithRSAEncryption bf:53:7a:72:65:df:d2:9f:ce:86:df:3d:c2:d0:8f:f1:b4:60: 09:cd:a7:a8:93:23:fe:de:1d:08:06:cd:db:18:35:1f:59:f9: a6:40:6f:5c:69:93:38:ee:1e:ed:73:ad:23:dd:77:96:b3:4e: 74:97:b2:64:21:4d:18:89:10:42:a1:a7:47:56:46:43:69:77: e7:67:a1:0a:ba:6e:38:0a:7e:da:9e:c0:f9:b9:5f:da:d3:63: ec:84:d0:6b:0e:44:8a:a2:9b:52:03:2b:cf:43:95:6f:ec:6b: f0:0b:40:76:9a:1d:e3:df:9b:5a:10:2a:6f:09:70:23:fe:e1: 21:9e:42:6f:83:9c:eb:57:cf:d9:51:f0:d8:05:c2:70:e0:38: 40:62:56:cc:42:6d:ad:2b:21:fd:ba:1f:4c:6a:24:07:59:32: a8:25:28:75:e6:70:96:a3:84:64:01:23:b5:74:65:96:24:b3: e4:20:84:61:d6:ee:90:6a:6e:38:79:4c:ca:f1:9d:4f:11:f6: cb:ba:68:db:a8:61:d2:27:7e:b8:ad:88:fa:0b:27:a1:72:32: 63:cb:a9:28:d6:75:e4:13:0d:c3:4e:3d:19:40:b4:b2:f3:2b: 9c:3e:7a:87:b5:9e:f2:f1:97:87:f5:da:ab:43:33:c9:e9:80: d1:9e:cc:89 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUO4ENJ6yyhQIFBy1uT9+75hvpkwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE3MDAyMDA2WhcNMjYwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjM3NWI1NDdhNWFmY2M2YmJhZmExZDhjOGYyYTY5NzFh M2UyMjNhNGY2ZWFkZDI0YTQyMmZlN2NkNTg3ODMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA7FLsVGqOtR8S4Rlymhq0vvxrznl3oh4QyAvB1HwU+v0B 3hLe5ObG+pKAimGKczhjL7iQkQgAInN+wizeAmDwNhTYCeO4sAdXLvo9fkIKC4zj zXe2td1P9gktAk0iGjCszgf3x/5d6phsRVAtkFBOxfzwnLK19t1wEaAZsxH7sRn5 +WKwNIxMvBR814x/k7NuPjW3LiW87lqDpbBCtaF+EFQZRQhmOkNfQk9KZXOj6DDp 10+gl4UY19ZkF1+oc4EOWK5iQehuRn3dcpNr4Rc8IsjJXXwEDePJFG5X7ZHwI6ZZ 6hQNSLnhR2kM+/AUR6QAjxX56G+DgMb6RIfMLzl9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEaM4t9o4ItTH2Zq3kkw9g5OxF5IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2OGQxZTAzLWQ3NzktNDU3YS1hNTFlLTNlOTJiNmYyY2JlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJG6FwwDQYJKoZIhvcNAQELBQADggEBAL9TenJl39KfzobfPcLQj/G0YAnN p6iTI/7eHQgGzdsYNR9Z+aZAb1xpkzjuHu1zrSPdd5azTnSXsmQhTRiJEEKhp0dW RkNpd+dnoQq6bjgKftqewPm5X9rTY+yE0GsORIqim1IDK89DlW/sa/ALQHaaHePf m1oQKm8JcCP+4SGeQm+DnOtXz9lR8NgFwnDgOEBiVsxCba0rIf26H0xqJAdZMqgl KHXmcJajhGQBI7V0ZZYks+QghGHW7pBqbjh5TMrxnU8R9su6aNuoYdInfritiPoL J6FyMmPLqSjWdeQTDcNOPRlAtLLzK5w+eoe1nvLxl4f12qtDM8npgNGezIk= -----END CERTIFICATE-----Generated at Sat Jun 13 08:18:42 2026 by rpki-client