$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8666a86-372e-4e9d-9e14-b9f6be2c0e3c.roa File: a8666a86-372e-4e9d-9e14-b9f6be2c0e3c.roa (raw, json) Hash identifier: 8i7Y64af986FOPrRKGLIZrp3YuNau1giw4ACZ+ucthw= Subject key identifier: 10:A2:6D:1B:1B:88:2D:BF:D8:68:46:C9:62:0B:A9:49:2A:8C:86:14 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3A4091F56D5AA88BFB067D155D765B8321F450BD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8666a86-372e-4e9d-9e14-b9f6be2c0e3c.roa Signing time: Fri 15 May 2026 01:31:29 +0000 ROA not before: Fri 15 May 2026 01:31:29 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 136.170.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:40:91:f5:6d:5a:a8:8b:fb:06:7d:15:5d:76:5b:83:21:f4:50:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 01:31:29 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=6aabc991580f804d7d3d8d2b9889aea7197c8e6025eb968cce18c6f9602f9940, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:18:c6:3d:58:86:aa:59:38:13:b8:7a:95:59: 10:3c:9f:44:bb:d1:6e:c8:df:a4:19:de:a9:20:c3: 48:a2:47:75:95:0c:c2:64:03:11:32:5c:50:b6:d5: 4a:46:67:e3:34:30:dd:32:c2:b7:33:41:ea:d0:82: 23:e8:dd:18:6e:ba:b5:04:92:25:39:a4:ed:cc:50: 00:b7:f3:59:d7:a8:9d:e8:8d:fe:13:1c:bf:84:78: 12:ee:ae:ff:1d:f6:4b:48:a1:85:f2:5b:c4:b0:36: 97:d0:0f:42:59:06:be:68:7a:70:6a:09:09:aa:c5: 41:53:7f:77:42:45:d4:61:27:88:70:f1:fb:8a:1c: 63:71:0c:9c:d5:7a:c2:b6:e2:67:cb:1e:60:6f:69: ec:51:73:f6:59:7c:ea:5f:6e:b2:d6:ca:3d:13:0f: 0e:75:f6:c2:26:fd:aa:4e:d3:c6:41:f4:39:18:22: b3:fe:73:cf:a6:34:8c:61:4c:0a:1b:9c:be:56:e1: 10:29:d7:ec:1c:fc:02:08:71:9f:d0:a9:fb:48:36: 7c:49:c9:0c:1c:c3:19:66:42:a0:c2:e5:d4:bc:b9: cc:f9:45:68:eb:2c:c9:95:78:59:24:3d:8e:cb:2e: 41:f9:25:d0:06:3c:80:b3:22:e3:8c:84:cf:b3:f6: a8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A2:6D:1B:1B:88:2D:BF:D8:68:46:C9:62:0B:A9:49:2A:8C:86:14 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8666a86-372e-4e9d-9e14-b9f6be2c0e3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.170.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6e:2c:96:a2:f6:ef:18:e9:44:7d:de:d2:c7:c5:a2:8b:f2:b9: 99:69:83:7d:3b:92:2d:f8:60:3e:d0:b5:fa:99:40:98:05:92: a1:66:20:8b:aa:a6:48:0f:9f:3c:73:ae:f9:e5:94:ad:5b:2a: b0:08:56:91:e0:1d:8b:50:c3:99:d5:86:f3:18:bb:c4:4c:21: ae:a3:1f:86:13:02:36:eb:14:02:93:b6:c9:99:63:f2:bc:3f: be:38:3a:d5:a4:2f:91:bb:b6:64:03:6d:60:96:45:f8:d1:e3: 70:ae:f5:ae:3d:7e:e8:f9:ac:25:d5:74:fa:9b:45:01:7a:a6: f4:8a:f2:55:b8:91:88:1d:d2:47:c9:c8:55:5e:f9:67:88:b3: 3e:c9:f4:a6:8e:bd:1e:fc:a4:e9:8d:50:32:9f:a4:9b:2b:f9: 96:d0:e1:fe:db:2c:d6:a2:96:6e:ea:f6:20:89:38:d1:83:3f: e4:5b:7b:f6:3a:f7:0f:d3:cd:07:4f:c8:3f:b7:08:77:32:e5: 15:df:cf:00:1c:16:f8:9d:42:93:6f:6a:10:a4:8e:cf:af:31: 18:f3:86:bb:d2:e7:2f:83:5b:dd:a4:c2:fa:82:33:ba:67:9b: d9:04:dc:92:e0:ec:bd:c4:36:d6:87:6c:ba:24:cc:1f:32:98: e4:f9:9a:16 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOkCR9W1aqIv7Bn0VXXZbgyH0UL0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDEzMTI5WhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YWFiYzk5MTU4MGY4MDRkN2QzZDhkMmI5ODg5YWVhNzE5 N2M4ZTYwMjVlYjk2OGNjZTE4YzZmOTYwMmY5OTQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChGMY9WIaqWTgTuHqVWRA8n0S70W7I36QZ3qkgw0iiR3WV DMJkAxEyXFC21UpGZ+M0MN0ywrczQerQgiPo3RhuurUEkiU5pO3MUAC381nXqJ3o jf4THL+EeBLurv8d9ktIoYXyW8SwNpfQD0JZBr5oenBqCQmqxUFTf3dCRdRhJ4hw 8fuKHGNxDJzVesK24mfLHmBvaexRc/ZZfOpfbrLWyj0TDw519sIm/apO08ZB9DkY IrP+c8+mNIxhTAobnL5W4RAp1+wc/AIIcZ/QqftINnxJyQwcwxlmQqDC5dS8ucz5 RWjrLMmVeFkkPY7LLkH5JdAGPICzIuOMhM+z9qi3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUEKJtGxuILb/YaEbJYgupSSqMhhQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E4NjY2YTg2LTM3MmUtNGU5ZC05ZTE0LWI5ZjZiZTJjMGUzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCIqjANBgkqhkiG9w0BAQsFAAOCAQEAbiyWovbvGOlEfd7Sx8Wii/K5mWmD fTuSLfhgPtC1+plAmAWSoWYgi6qmSA+fPHOu+eWUrVsqsAhWkeAdi1DDmdWG8xi7 xEwhrqMfhhMCNusUApO2yZlj8rw/vjg61aQvkbu2ZANtYJZF+NHjcK71rj1+6Pms JdV0+ptFAXqm9IryVbiRiB3SR8nIVV75Z4izPsn0po69Hvyk6Y1QMp+kmyv5ltDh /tss1qKWbur2IIk40YM/5Ft79jr3D9PNB0/IP7cIdzLlFd/PABwW+J1Ck29qEKSO z68xGPOGu9LnL4Nb3aTC+oIzumeb2QTckuDsvcQ21odsuiTMHzKY5PmaFg== -----END CERTIFICATE-----Generated at Sat Jun 13 05:46:46 2026 by rpki-client