$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b314caa2-6236-4777-a5e0-a8c7a2ca32d8.roa File: b314caa2-6236-4777-a5e0-a8c7a2ca32d8.roa (raw, json) Hash identifier: AghbboA9Smi/jmEN13+zmiigu+DSFHY9YC8kpHj5c/Q= Subject key identifier: C7:F6:B1:7B:73:1C:ED:13:AD:08:5F:D3:E0:C2:16:70:FE:3F:3D:54 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 02DEDC21D731209079B263EB1A807C7C57A5F69C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b314caa2-6236-4777-a5e0-a8c7a2ca32d8.roa Signing time: Thu 02 Apr 2026 00:00:08 +0000 ROA not before: Thu 02 Apr 2026 00:00:08 +0000 ROA not after: Wed 01 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 16.15.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:de:dc:21:d7:31:20:90:79:b2:63:eb:1a:80:7c:7c:57:a5:f6:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 2 00:00:08 2026 GMT Not After : Jul 1 23:59:59 2026 GMT Subject: serialNumber=23891cd8b96f4a67d1d38392598b665f7ee9a33ccf70e0ebf56d54045a4cbba8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:34:62:5b:9f:72:b9:f6:34:d3:9a:72:1a:c8: fd:3e:30:7f:75:28:91:af:c6:a9:56:90:f2:1e:05: 82:f9:1f:cb:0c:db:f7:c6:30:7a:c9:31:5b:a4:f8: 51:9e:ae:36:ec:a7:27:36:2d:f7:b6:8c:2c:24:3a: de:21:7d:f2:cf:22:f3:ff:03:3d:46:80:ca:c4:c9: 53:51:b1:a5:06:31:48:75:bd:67:13:21:f5:fd:fb: e9:4f:84:cf:ac:67:89:7f:da:e9:61:cd:44:4e:b7: 82:7e:39:c4:55:9e:10:f9:de:f2:4a:ae:56:da:cf: 10:b0:b3:15:62:e1:67:4b:de:c0:67:96:65:3b:2e: 91:56:23:89:96:47:df:bf:3f:59:8f:0d:69:eb:1c: 06:7f:50:b8:a6:d5:7c:81:a8:e9:a0:66:dc:ab:c7: 5c:ad:81:e8:a8:71:7f:f9:34:00:e6:e3:e0:12:ba: 33:0e:d0:63:71:57:31:32:ed:39:85:a3:5c:12:90: 5c:54:01:c7:9e:00:10:44:57:ee:b5:30:62:2a:73: 66:01:55:49:20:b7:be:2d:b3:72:a2:84:54:ec:77: de:20:3f:61:e3:2c:00:fa:eb:78:e7:b7:0b:30:63: b5:fb:63:c8:dd:47:69:d9:02:07:37:ec:38:a2:bc: ac:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F6:B1:7B:73:1C:ED:13:AD:08:5F:D3:E0:C2:16:70:FE:3F:3D:54 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b314caa2-6236-4777-a5e0-a8c7a2ca32d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.15.40.0/22 Signature Algorithm: sha256WithRSAEncryption 89:bb:a6:5e:9c:97:24:a2:f4:74:2e:7c:a3:57:33:ce:35:0b: 18:21:12:55:85:e8:8c:8c:66:25:fe:bd:42:92:30:3a:07:50: ca:45:2a:72:97:72:ca:a5:ec:97:96:a3:8c:d0:bf:40:f0:2f: 2e:dc:08:bf:5b:97:74:fa:0f:10:c1:42:f1:9f:3d:f9:7c:25: 72:68:dd:e5:3f:f5:94:17:9a:a4:b8:92:3e:82:4b:4f:f1:10: 4e:40:7e:6c:bc:55:92:67:6d:8d:33:60:f1:2f:6e:d2:09:13: bc:a7:f4:a5:10:73:36:a6:70:4d:85:2c:0c:90:6d:78:3f:75: 03:11:f0:73:6f:ea:e4:be:5b:fa:48:4d:3c:17:90:a8:c2:0c: de:b0:a5:7e:dc:6d:d1:8e:d8:1f:cf:d1:98:36:e3:78:51:a7: 2a:98:1c:f4:3d:92:f2:94:4f:77:36:ef:70:d6:bb:98:e6:5a: 25:83:db:35:71:4a:31:61:c3:40:bf:4d:f9:d0:f2:a3:61:82: 7e:a3:27:11:62:0e:5a:6a:fc:6f:d4:f2:c7:61:fe:aa:af:79: 79:f5:8d:91:4f:de:86:d2:fa:a0:52:b0:e5:d7:61:db:2b:9a: 77:7e:1c:3e:1a:78:f9:ab:fc:81:a1:f6:b3:76:1a:10:09:56: 70:7d:94:63 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAt7cIdcxIJB5smPrGoB8fFel9pwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDAyMDAwMDA4WhcNMjYwNzAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzg5MWNkOGI5NmY0YTY3ZDFkMzgzOTI1OThiNjY1Zjdl ZTlhMzNjY2Y3MGUwZWJmNTZkNTQwNDVhNGNiYmE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDONGJbn3K59jTTmnIayP0+MH91KJGvxqlWkPIeBYL5H8sM 2/fGMHrJMVuk+FGerjbspyc2Lfe2jCwkOt4hffLPIvP/Az1GgMrEyVNRsaUGMUh1 vWcTIfX9++lPhM+sZ4l/2ulhzUROt4J+OcRVnhD53vJKrlbazxCwsxVi4WdL3sBn lmU7LpFWI4mWR9+/P1mPDWnrHAZ/ULim1XyBqOmgZtyrx1ytgeiocX/5NADm4+AS ujMO0GNxVzEy7TmFo1wSkFxUAceeABBEV+61MGIqc2YBVUkgt74ts3KihFTsd94g P2HjLAD663jntwswY7X7Y8jdR2nZAgc37DiivKwJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUx/axe3Mc7ROtCF/T4MIWcP4/PVQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzMTRjYWEyLTYyMzYtNDc3Ny1hNWUwLWE4YzdhMmNhMzJkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIQDygwDQYJKoZIhvcNAQELBQADggEBAIm7pl6clySi9HQufKNXM841Cxgh ElWF6IyMZiX+vUKSMDoHUMpFKnKXcsql7JeWo4zQv0DwLy7cCL9bl3T6DxDBQvGf Pfl8JXJo3eU/9ZQXmqS4kj6CS0/xEE5Afmy8VZJnbY0zYPEvbtIJE7yn9KUQczam cE2FLAyQbXg/dQMR8HNv6uS+W/pITTwXkKjCDN6wpX7cbdGO2B/P0Zg243hRpyqY HPQ9kvKUT3c273DWu5jmWiWD2zVxSjFhw0C/TfnQ8qNhgn6jJxFiDlpq/G/U8sdh /qqveXn1jZFP3obS+qBSsOXXYdsrmnd+HD4aePmr/IGh9rN2GhAJVnB9lGM= -----END CERTIFICATE-----Generated at Fri Apr 17 06:18:34 2026 by rpki-client