$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c0520ff-eed4-48ce-be7c-ec1c56f2cf31.roa File: 4c0520ff-eed4-48ce-be7c-ec1c56f2cf31.roa (raw, json) Hash identifier: FMB1G130UW/bX7YcQ6uUTuZY4dxjDDM3y8kxeWXbNb8= Subject key identifier: 22:08:4C:18:3A:A1:F6:5E:69:A9:32:F8:C3:27:B8:16:27:AD:78:01 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: F8BFA9EC71E7A0F9C02A8E6E5098061417BBB7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c0520ff-eed4-48ce-be7c-ec1c56f2cf31.roa Signing time: Tue 19 May 2026 00:41:31 +0000 ROA not before: Tue 19 May 2026 00:41:31 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 202.5.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f8:bf:a9:ec:71:e7:a0:f9:c0:2a:8e:6e:50:98:06:14:17:bb:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 00:41:31 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=46e1e191c661d86388f2f6fd596bc80a6e8c45ada32d1ea14336a79eaa00f5d7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9f:da:17:93:c5:cd:1e:5f:e0:c2:2b:4e:94: 6d:22:c5:4b:33:29:e1:37:b1:ae:40:8f:9f:1d:c9: 97:ff:cd:55:82:b7:69:28:fe:6b:47:fd:55:4b:0e: 66:4d:54:b4:24:09:f3:df:af:aa:13:64:97:68:80: ea:ff:de:69:29:f5:c8:42:04:e8:ea:ce:76:63:7d: 56:2f:d6:1f:99:9e:6a:22:51:2b:2c:3f:d7:98:90: 86:fc:e7:f5:97:49:56:46:fe:8b:b9:be:b1:1e:46: 09:b1:69:ec:42:ea:3e:73:42:4f:1e:13:79:6a:b9: c7:f8:19:42:2e:8c:52:5a:b8:d4:44:6a:8e:ae:38: ec:b2:4b:4a:46:ee:26:0f:b6:3a:a1:28:de:f7:02: cf:b8:70:38:b8:b5:0c:39:cd:ec:32:ed:40:d9:c0: 88:9d:a4:52:6a:5b:1f:6b:a7:68:7b:4f:78:26:f2: 0b:52:fa:ab:47:9a:07:ed:ea:5c:f3:b1:74:98:11: 21:19:0c:7c:36:50:2b:af:ef:7e:d9:75:19:2f:b8: 0a:b7:31:4f:a7:87:46:09:42:0d:b4:06:50:ac:23: 11:bf:9b:79:c2:21:d6:04:d5:ca:d3:94:2a:9f:ab: 2a:03:ae:68:a4:1e:61:aa:b3:88:25:a6:58:94:c4: ba:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:08:4C:18:3A:A1:F6:5E:69:A9:32:F8:C3:27:B8:16:27:AD:78:01 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c0520ff-eed4-48ce-be7c-ec1c56f2cf31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.5.172.0/22 Signature Algorithm: sha256WithRSAEncryption 78:0d:7f:59:71:e1:24:c7:99:07:95:61:44:9d:17:78:4f:f8: 0d:f0:fb:fe:bd:73:4c:30:c4:46:b1:b4:88:50:d1:30:13:35: 24:08:1c:68:be:33:f2:13:a5:45:b9:3a:e2:5f:9a:1f:cb:a4: c8:18:1f:bb:9c:e0:12:69:91:1d:7d:85:f8:9f:30:3a:dd:ab: c2:a5:b1:e6:3b:d1:6a:b3:45:dd:99:47:bb:22:5b:2a:69:cb: c9:7a:82:e5:fd:6c:bd:8a:4a:ef:2a:d2:b4:67:6d:89:6b:f1: 48:ce:13:8d:43:00:57:ac:52:4b:9c:a4:55:88:be:34:af:4d: f1:dd:ff:13:eb:99:02:c9:aa:62:32:13:c0:76:03:d4:13:87: a2:54:10:0b:2a:ee:41:ad:f2:40:27:1d:48:18:25:b6:d5:c3: 42:89:7a:87:87:4b:f2:6b:fa:14:9e:e2:d4:13:79:15:86:7f: cb:56:88:ae:47:eb:c6:8c:8d:f4:00:0b:4a:d4:2d:69:2d:f6: 29:53:47:2f:97:bc:ba:c7:5f:37:f8:f5:eb:04:26:fe:50:e4: fc:74:4f:ca:92:48:69:16:26:70:f8:7a:ba:e1:97:57:5a:5b: bd:e7:9b:0e:65:a2:f1:c0:28:f8:78:b5:3d:ce:ee:c4:65:9a: 97:3d:e1:df -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAPi/qexx56D5wCqOblCYBhQXu7cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE5MDA0MTMxWhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NmUxZTE5MWM2NjFkODYzODhmMmY2ZmQ1OTZiYzgwYTZl OGM0NWFkYTMyZDFlYTE0MzM2YTc5ZWFhMDBmNWQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsn9oXk8XNHl/gwitOlG0ixUszKeE3sa5Aj58dyZf/zVWC t2ko/mtH/VVLDmZNVLQkCfPfr6oTZJdogOr/3mkp9chCBOjqznZjfVYv1h+Znmoi USssP9eYkIb85/WXSVZG/ou5vrEeRgmxaexC6j5zQk8eE3lqucf4GUIujFJauNRE ao6uOOyyS0pG7iYPtjqhKN73As+4cDi4tQw5zewy7UDZwIidpFJqWx9rp2h7T3gm 8gtS+qtHmgft6lzzsXSYESEZDHw2UCuv737ZdRkvuAq3MU+nh0YJQg20BlCsIxG/ m3nCIdYE1crTlCqfqyoDrmikHmGqs4glpliUxLotAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIghMGDqh9l5pqTL4wye4FieteAEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjMDUyMGZmLWVlZDQtNDhjZS1iZTdjLWVjMWM1NmYyY2YzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALKBawwDQYJKoZIhvcNAQELBQADggEBAHgNf1lx4STHmQeVYUSdF3hP+A3w +/69c0wwxEaxtIhQ0TATNSQIHGi+M/ITpUW5OuJfmh/LpMgYH7uc4BJpkR19hfif MDrdq8KlseY70WqzRd2ZR7siWyppy8l6guX9bL2KSu8q0rRnbYlr8UjOE41DAFes UkucpFWIvjSvTfHd/xPrmQLJqmIyE8B2A9QTh6JUEAsq7kGt8kAnHUgYJbbVw0KJ eoeHS/Jr+hSe4tQTeRWGf8tWiK5H68aMjfQAC0rULWkt9ilTRy+XvLrHXzf49esE Jv5Q5Px0T8qSSGkWJnD4errhl1daW73nmw5lovHAKPh4tT3O7sRlmpc94d8= -----END CERTIFICATE-----Generated at Sat Jun 13 11:01:05 2026 by rpki-client