$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa File: b448195b-84f3-4e2c-beb9-33cee532dce4.roa (raw, json) Hash identifier: z7l9xo0/v2TPwddCV6BUd86ehI2rnku3PfLEHTne/3Q= Subject key identifier: 48:26:45:3D:70:3A:B3:19:F7:B5:B1:00:67:A1:9C:D0:10:D9:4D:A0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3281390C540F922ADF4796DDD4B996C1FAB06BC9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa Signing time: Fri 15 May 2026 02:00:49 +0000 ROA not before: Fri 15 May 2026 02:00:49 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 107.22.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:81:39:0c:54:0f:92:2a:df:47:96:dd:d4:b9:96:c1:fa:b0:6b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 02:00:49 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=de25106ac9c855f7778497494ee0a65ffe36b968f39f2f8f111a8b69176bba7e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:60:ae:90:80:b6:5f:f6:b4:09:3c:35:12:01: a0:3a:e0:5b:4d:15:77:b2:91:c8:18:dd:68:f3:2c: 36:27:27:4e:4e:22:37:b7:44:a1:ed:3b:6e:f1:00: c8:1d:be:a6:7f:f1:dc:ec:2b:bf:2d:c6:12:af:58: 51:da:3c:db:40:5e:8c:eb:25:08:c4:41:2e:d2:75: 76:d3:51:48:44:38:9b:cb:f5:80:ed:91:ae:30:02: 17:cd:b6:1f:2d:db:19:94:be:7c:50:3e:d5:86:d3: 20:5f:a7:0a:9e:88:3e:70:32:13:8e:2f:c0:97:0d: 0c:7c:08:73:e7:45:b6:99:a3:cf:9e:d3:dc:ca:42: 9d:71:9c:e2:75:52:41:53:28:26:8b:22:29:84:38: b8:b8:f1:4e:45:90:18:70:e5:e4:b8:56:d0:ca:68: e3:b4:99:80:c3:e7:f9:3b:9e:36:65:64:9a:29:92: 17:02:a9:51:0f:bf:82:36:6c:36:e1:1b:b4:8d:21: 1c:7e:ad:b6:1a:e9:3b:80:21:71:39:de:59:3d:13: e4:d0:25:ec:4a:37:dd:08:50:4c:65:3e:ee:fc:92: e1:8b:64:bd:dc:db:2e:08:61:c9:80:3a:ce:ee:ac: 1d:79:89:09:47:7b:62:f1:ef:5a:dd:24:a2:1c:0c: 5f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:26:45:3D:70:3A:B3:19:F7:B5:B1:00:67:A1:9C:D0:10:D9:4D:A0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.22.158.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:40:69:e0:76:96:5a:0c:b3:9a:40:c9:85:89:e5:98:34:65: 57:5f:d0:1e:32:d2:27:0d:43:f9:67:f5:dc:35:63:2b:bd:ca: 01:ea:63:60:ea:fe:39:c0:51:56:24:5d:08:b9:95:ac:69:06: 44:1c:4e:34:54:91:21:a9:dd:01:53:94:ad:e9:61:59:14:fd: 88:b2:cc:1d:b5:a9:dd:03:a4:be:dd:e5:19:1b:03:46:45:74: ea:38:18:60:f3:86:0e:b9:fe:48:ce:ba:03:57:8a:3e:de:14: 88:39:8f:90:bd:a0:65:4b:26:fe:5c:76:7a:fd:82:54:91:2e: 74:c0:92:b6:4d:bc:fa:65:02:5a:72:4b:67:b4:ac:1d:99:cf: 2d:c6:f3:b7:a4:0e:33:7e:2a:5e:68:ed:ac:8c:02:af:95:0c: 9f:d4:18:ef:cd:f8:a7:7b:db:0e:d0:6a:6f:8b:04:ab:51:bd: 12:80:36:75:e4:96:5b:8a:00:99:35:35:e5:31:8d:c1:d7:3d: 3d:ca:e4:3a:ad:34:fa:e9:8a:f5:5d:80:db:7d:b3:ef:73:2d: be:e4:f4:0a:19:4f:83:e9:61:76:8a:ca:d0:b8:48:99:0b:96: 4b:1f:c1:67:ae:d0:02:7b:b8:77:e0:b9:95:06:da:38:84:a4: e8:1b:bf:c5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMoE5DFQPkirfR5bd1LmWwfqwa8kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDIwMDQ5WhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTI1MTA2YWM5Yzg1NWY3Nzc4NDk3NDk0ZWUwYTY1ZmZl MzZiOTY4ZjM5ZjJmOGYxMTFhOGI2OTE3NmJiYTdlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoYK6QgLZf9rQJPDUSAaA64FtNFXeykcgY3WjzLDYnJ05O Ije3RKHtO27xAMgdvqZ/8dzsK78txhKvWFHaPNtAXozrJQjEQS7SdXbTUUhEOJvL 9YDtka4wAhfNth8t2xmUvnxQPtWG0yBfpwqeiD5wMhOOL8CXDQx8CHPnRbaZo8+e 09zKQp1xnOJ1UkFTKCaLIimEOLi48U5FkBhw5eS4VtDKaOO0mYDD5/k7njZlZJop khcCqVEPv4I2bDbhG7SNIRx+rbYa6TuAIXE53lk9E+TQJexKN90IUExlPu78kuGL ZL3c2y4IYcmAOs7urB15iQlHe2Lx71rdJKIcDF+xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSCZFPXA6sxn3tbEAZ6Gc0BDZTaAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I0NDgxOTViLTg0ZjMtNGUyYy1iZWI5LTMzY2VlNTMyZGNlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABrFp4wDQYJKoZIhvcNAQELBQADggEBAHpAaeB2lloMs5pAyYWJ5Zg0ZVdf 0B4y0icNQ/ln9dw1Yyu9ygHqY2Dq/jnAUVYkXQi5laxpBkQcTjRUkSGp3QFTlK3p YVkU/YiyzB21qd0DpL7d5RkbA0ZFdOo4GGDzhg65/kjOugNXij7eFIg5j5C9oGVL Jv5cdnr9glSRLnTAkrZNvPplAlpyS2e0rB2Zzy3G87ekDjN+Kl5o7ayMAq+VDJ/U GO/N+Kd72w7Qam+LBKtRvRKANnXklluKAJk1NeUxjcHXPT3K5DqtNPrpivVdgNt9 s+9zLb7k9AoZT4PpYXaKytC4SJkLlksfwWeu0AJ7uHfguZUG2jiEpOgbv8U= -----END CERTIFICATE-----Generated at Sat Jun 13 09:29:12 2026 by rpki-client