$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68d98574-90b7-4b0b-af35-88954b14a5e0.roa File: 68d98574-90b7-4b0b-af35-88954b14a5e0.roa (raw, json) Hash identifier: ii20hDCE94rRPGJtEko49rvIw84yEFplidhUPCdYl2E= Subject key identifier: 0C:C8:10:B2:CE:BB:97:C8:00:77:A5:01:E1:C5:9F:F6:52:3B:A7:D0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 46AE5D1707D658F0E1DE42ED02CBBF819EC5554C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68d98574-90b7-4b0b-af35-88954b14a5e0.roa Signing time: Fri 15 May 2026 00:41:28 +0000 ROA not before: Fri 15 May 2026 00:41:28 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 40.235.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ae:5d:17:07:d6:58:f0:e1:de:42:ed:02:cb:bf:81:9e:c5:55:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 00:41:28 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=d170ebafc6b3d205fd8e546cb6175d6dd87ca42025e3b4dd3a55d951e1396319, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d9:49:44:f9:94:8f:fb:ea:e1:77:7e:78:90: 53:0e:53:c4:f6:06:28:df:83:2e:d9:4e:0e:e5:52: 37:e4:79:49:ed:5d:2d:1a:23:43:4c:57:63:2f:33: ec:a3:7c:e1:a5:e0:9d:b5:7a:07:35:ae:ac:58:33: 99:8f:dd:ab:c2:3d:0d:40:19:a9:71:41:03:de:29: d9:ad:17:c2:95:1d:f5:87:63:4d:9e:70:5b:81:6e: 82:18:ed:44:a3:49:ef:6a:a5:ca:46:5e:b8:d6:33: 0f:f5:b7:5e:b9:81:f8:b2:66:ef:f5:66:d6:9b:d7: 85:92:30:f2:9e:46:7b:8b:94:0d:1b:12:4d:a8:2a: 6f:1c:16:e3:c7:89:06:34:40:a7:33:2f:4a:d8:75: 48:3b:e3:24:22:ae:f4:5e:fd:7c:68:30:47:2b:8e: fd:6b:a4:ec:e1:8f:80:6a:11:cf:19:77:bc:9d:a0: 95:5c:72:1d:eb:e0:80:bd:ad:7c:22:f0:77:22:b5: 26:57:1f:3d:6e:de:38:02:2e:df:26:7d:35:1f:0c: ae:e9:7e:d3:35:4e:be:76:ae:40:65:f5:ae:d5:22: 2f:ad:4f:72:79:55:3b:1b:d7:8e:c9:8a:2b:16:f1: c3:cd:55:87:d5:53:22:f6:44:a4:2c:30:14:60:d3: 4c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C8:10:B2:CE:BB:97:C8:00:77:A5:01:E1:C5:9F:F6:52:3B:A7:D0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68d98574-90b7-4b0b-af35-88954b14a5e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.235.64.0/18 Signature Algorithm: sha256WithRSAEncryption 02:99:b5:dc:ea:7b:19:38:88:74:f1:58:97:42:9e:ee:c9:71: d2:b0:14:ea:af:1f:ed:6d:3a:2a:fa:ab:23:15:a8:2c:c2:67: d7:3e:34:a7:bb:ad:24:70:aa:c3:05:96:e4:7e:2d:11:bc:4b: b9:94:25:77:ca:cd:d1:26:3b:a1:6d:17:0e:b8:1b:65:fe:5f: bd:61:79:a2:90:05:db:c0:aa:3c:12:fc:6a:29:1c:8d:d6:56: 33:28:45:ae:68:33:e6:96:32:b2:27:f4:0b:2a:bd:96:67:ed: 68:e0:64:04:14:59:a2:91:2f:94:e6:35:4c:0b:8e:32:f6:25: 03:cf:6e:41:03:ae:b3:ac:74:82:c4:35:37:9a:88:52:70:41: a1:dd:9c:8d:00:9b:1e:8e:6f:56:6a:2b:a7:d3:14:41:75:5c: fa:97:25:9d:c2:7f:c6:3f:84:76:64:4b:c8:4f:27:15:63:6d: 61:02:87:7d:a6:a7:d4:ae:4a:58:9f:af:22:a5:42:05:27:f1: 08:94:1d:6b:dc:af:05:d8:1b:5e:f6:fc:f3:a8:8d:2d:dd:85: 9c:a9:89:f7:ff:92:f5:7c:f1:63:75:b6:6e:e3:f1:b4:46:56: ec:47:6b:da:5f:64:d9:f4:4d:ab:98:38:18:d4:dd:56:f2:4e: cc:58:73:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURq5dFwfWWPDh3kLtAsu/gZ7FVUwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDA0MTI4WhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTcwZWJhZmM2YjNkMjA1ZmQ4ZTU0NmNiNjE3NWQ2ZGQ4 N2NhNDIwMjVlM2I0ZGQzYTU1ZDk1MWUxMzk2MzE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC12UlE+ZSP++rhd354kFMOU8T2Bijfgy7ZTg7lUjfkeUnt XS0aI0NMV2MvM+yjfOGl4J21egc1rqxYM5mP3avCPQ1AGalxQQPeKdmtF8KVHfWH Y02ecFuBboIY7USjSe9qpcpGXrjWMw/1t165gfiyZu/1Ztab14WSMPKeRnuLlA0b Ek2oKm8cFuPHiQY0QKczL0rYdUg74yQirvRe/XxoMEcrjv1rpOzhj4BqEc8Zd7yd oJVcch3r4IC9rXwi8HcitSZXHz1u3jgCLt8mfTUfDK7pftM1Tr52rkBl9a7VIi+t T3J5VTsb147JiisW8cPNVYfVUyL2RKQsMBRg00wDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDMgQss67l8gAd6UB4cWf9lI7p9AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4ZDk4NTc0LTkwYjctNGIwYi1hZjM1LTg4OTU0YjE0YTVlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYo60AwDQYJKoZIhvcNAQELBQADggEBAAKZtdzqexk4iHTxWJdCnu7JcdKw FOqvH+1tOir6qyMVqCzCZ9c+NKe7rSRwqsMFluR+LRG8S7mUJXfKzdEmO6FtFw64 G2X+X71heaKQBdvAqjwS/GopHI3WVjMoRa5oM+aWMrIn9AsqvZZn7WjgZAQUWaKR L5TmNUwLjjL2JQPPbkEDrrOsdILENTeaiFJwQaHdnI0Amx6Ob1ZqK6fTFEF1XPqX JZ3Cf8Y/hHZkS8hPJxVjbWECh32mp9SuSlifryKlQgUn8QiUHWvcrwXYG172/POo jS3dhZypiff/kvV88WN1tm7j8bRGVuxHa9pfZNn0TauYOBjU3VbyTsxYczI= -----END CERTIFICATE-----Generated at Sat Jun 13 07:10:23 2026 by rpki-client