$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/964203da-7c50-4d09-baca-392bf66c6a79.roa File: 964203da-7c50-4d09-baca-392bf66c6a79.roa (raw, json) Hash identifier: t7et0fkUTvKyOUdq7xeaYwRZmqrJjWhVBiKr51s0OeA= Subject key identifier: E7:9C:8B:15:C1:FD:5A:3E:32:62:34:B7:B4:0B:29:28:9C:95:64:6D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B1DC352B99BD4A4F0725601FB412EBA33E7484C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/964203da-7c50-4d09-baca-392bf66c6a79.roa Signing time: Sat 16 May 2026 01:01:42 +0000 ROA not before: Sat 16 May 2026 01:01:42 +0000 ROA not after: Fri 14 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 23.22.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1d:c3:52:b9:9b:d4:a4:f0:72:56:01:fb:41:2e:ba:33:e7:48:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 01:01:42 2026 GMT Not After : Aug 14 23:59:59 2026 GMT Subject: serialNumber=e05b93661e0048f1a1f374faa5df1601be3dedfbe90266773349777895b144c4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9f:1b:66:3e:35:03:78:17:62:6b:04:06:56: 5b:c3:30:d4:be:aa:4a:89:f3:57:2b:ec:f2:bd:8a: 6a:92:7b:a1:ce:4d:42:65:84:36:9d:42:b3:15:c5: 43:2f:44:b1:af:da:db:f2:9f:ee:89:63:b5:7e:2a: cc:db:51:90:7a:04:11:06:07:3b:cb:d8:62:a5:d8: 9e:eb:6a:45:e2:36:9a:25:3f:e6:a9:c9:02:f5:fc: 27:cb:a1:a5:fc:bb:08:2f:02:82:d5:01:1f:bf:66: 0c:98:e5:f7:7a:63:43:87:6d:01:7f:71:3d:97:ef: 6c:be:0d:5a:f4:d7:da:d2:39:35:a1:b0:c0:7f:92: 0a:c1:b7:11:97:32:b7:78:65:cb:19:a8:64:34:d1: e9:a7:dc:16:9e:f6:40:d1:e5:1f:87:fd:17:44:74: 88:39:e5:73:49:88:50:4a:e7:c8:ce:1f:7b:2f:23: d9:bd:20:53:4a:21:93:3a:6c:4a:08:77:8a:9b:64: 20:e0:16:39:df:d6:44:f4:83:ce:6f:6f:27:5d:00: 43:6f:d3:19:58:c1:a3:22:51:9c:f1:73:9d:23:58: b8:86:fa:59:11:40:74:64:eb:19:d0:b5:47:1a:42: f8:14:a0:56:d3:b8:ff:bc:dd:51:1d:ee:0f:b0:f5: e9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9C:8B:15:C1:FD:5A:3E:32:62:34:B7:B4:0B:29:28:9C:95:64:6D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/964203da-7c50-4d09-baca-392bf66c6a79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.22.76.0/22 Signature Algorithm: sha256WithRSAEncryption 46:b4:62:d3:5c:0b:5d:75:52:49:99:57:18:81:c9:7a:a2:e6: 94:1e:a2:5d:06:da:04:8c:b7:c2:6e:9f:07:eb:15:f3:49:6f: eb:54:61:93:29:c3:f3:9b:2a:e5:0e:0e:a6:be:2b:8f:de:f7: 82:3f:64:cb:41:8e:f9:89:98:3a:af:1c:cb:b2:fc:98:9a:53: 7e:fd:1a:0f:a5:82:21:b6:fd:bb:18:65:46:7f:e3:bd:4b:20: f0:a6:c3:63:37:53:d8:e6:e9:23:29:d4:d5:14:6e:54:a7:3f: 77:5a:7c:d4:94:02:24:6f:67:0d:8b:b0:70:7e:f5:36:32:6f: d5:1f:c6:10:08:78:ba:6d:6f:3b:b6:30:32:ed:12:07:85:16: 33:3f:54:37:35:a5:df:d7:25:4a:c7:a7:84:e7:50:1d:01:f4: 4b:bc:6a:01:46:0a:01:9c:d4:7a:3e:99:af:1a:23:5d:a7:c0: a4:dd:ed:de:23:22:a1:2e:b0:5d:f0:db:33:4d:87:3e:2d:40: 7f:8a:88:52:3a:94:0c:ba:80:15:d8:04:ed:c3:3e:38:fd:4c: 0d:d8:51:60:b3:23:5f:b8:d5:9c:86:e6:04:86:15:26:49:26: 3e:ab:40:67:03:b4:a2:a9:69:75:64:df:b7:19:8e:c3:d9:19: 11:6f:1d:c8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOx3DUrmb1KTwclYB+0EuujPnSEwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDEwMTQyWhcNMjYwODE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMDViOTM2NjFlMDA0OGYxYTFmMzc0ZmFhNWRmMTYwMWJl M2RlZGZiZTkwMjY2NzczMzQ5Nzc3ODk1YjE0NGM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQConxtmPjUDeBdiawQGVlvDMNS+qkqJ81cr7PK9imqSe6HO TUJlhDadQrMVxUMvRLGv2tvyn+6JY7V+KszbUZB6BBEGBzvL2GKl2J7rakXiNpol P+apyQL1/CfLoaX8uwgvAoLVAR+/ZgyY5fd6Y0OHbQF/cT2X72y+DVr019rSOTWh sMB/kgrBtxGXMrd4ZcsZqGQ00emn3Bae9kDR5R+H/RdEdIg55XNJiFBK58jOH3sv I9m9IFNKIZM6bEoId4qbZCDgFjnf1kT0g85vbyddAENv0xlYwaMiUZzxc50jWLiG +lkRQHRk6xnQtUcaQvgUoFbTuP+83VEd7g+w9eldAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU55yLFcH9Wj4yYjS3tAspKJyVZG0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk2NDIwM2RhLTdjNTAtNGQwOS1iYWNhLTM5MmJmNjZjNmE3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIXFkwwDQYJKoZIhvcNAQELBQADggEBAEa0YtNcC111UkmZVxiByXqi5pQe ol0G2gSMt8JunwfrFfNJb+tUYZMpw/ObKuUODqa+K4/e94I/ZMtBjvmJmDqvHMuy /JiaU379Gg+lgiG2/bsYZUZ/471LIPCmw2M3U9jm6SMp1NUUblSnP3dafNSUAiRv Zw2LsHB+9TYyb9UfxhAIeLptbzu2MDLtEgeFFjM/VDc1pd/XJUrHp4TnUB0B9Eu8 agFGCgGc1Ho+ma8aI12nwKTd7d4jIqEusF3w2zNNhz4tQH+KiFI6lAy6gBXYBO3D Pjj9TA3YUWCzI1+41ZyG5gSGFSZJJj6rQGcDtKKpaXVk37cZjsPZGRFvHcg= -----END CERTIFICATE-----Generated at Sat Jun 13 11:05:11 2026 by rpki-client