$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcd11cce-f1d8-4dbf-9a1a-edb0b2784d8d.roa File: dcd11cce-f1d8-4dbf-9a1a-edb0b2784d8d.roa (raw, json) Hash identifier: 8yIN12k09L/wLaKdbzbpnZtG8KLB+JkrNawdE8e3wck= Subject key identifier: 90:F8:98:E5:D3:2D:AF:A8:07:26:1C:6A:CF:B3:D9:1B:82:E6:C5:2F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6DE0CC99970E2353BBBB17F625099928893C9EA6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcd11cce-f1d8-4dbf-9a1a-edb0b2784d8d.roa Signing time: Tue 12 May 2026 00:30:51 +0000 ROA not before: Tue 12 May 2026 00:30:51 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e0:cc:99:97:0e:23:53:bb:bb:17:f6:25:09:99:28:89:3c:9e:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 00:30:51 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=4cede88493f9ea0b8e28cc76671152c81a7bfef60d9ca3291e70e54fbd794f6e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:22:83:b3:3e:27:09:12:37:23:cd:db:fa:91: eb:1f:3e:cb:54:bc:04:b6:72:02:55:2a:65:6f:f2: 05:55:e6:a2:c0:dd:f2:e7:80:0c:3c:73:d1:35:71: b7:84:1e:24:53:59:a6:45:92:f8:a0:aa:88:94:53: a9:d0:e9:72:5a:52:e6:4d:14:4a:a2:34:7e:c0:4c: fe:df:90:ab:97:23:24:76:a1:b7:ab:eb:50:02:ab: 6f:76:1b:80:91:31:a3:c8:17:80:7d:0a:e8:c6:26: 20:e0:fa:6f:77:82:7e:6e:b4:67:1f:63:17:5a:07: bb:40:ff:09:f1:4c:2f:9b:2d:ad:08:d9:b1:30:9f: 05:2a:c0:03:9c:9a:a7:1e:9f:ba:24:2b:e0:d4:67: 54:5f:2e:67:5b:44:2f:26:bf:65:44:b4:28:73:f1: 2a:13:df:35:a4:8b:ae:1c:12:d8:e1:6c:62:75:26: ec:e0:5d:07:fb:aa:2f:a4:4e:ac:dc:b1:ef:01:1f: 86:2a:c1:4f:79:9f:49:48:03:ec:7f:24:ad:d5:d6: 0f:11:9d:98:a7:39:4e:05:da:7d:22:82:2d:45:1c: 52:40:11:ba:9d:6e:ad:93:14:3f:db:91:dd:cc:8a: 82:10:17:e0:45:42:c7:26:b2:9a:e4:ee:9b:4f:f9: 2b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F8:98:E5:D3:2D:AF:A8:07:26:1C:6A:CF:B3:D9:1B:82:E6:C5:2F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcd11cce-f1d8-4dbf-9a1a-edb0b2784d8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.113.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:2f:56:56:ef:48:b4:f5:8b:f9:c7:63:16:f0:b1:ef:e0:c4: 5e:1f:a4:d5:c8:33:c2:04:ba:14:cc:c3:91:e5:08:c6:69:93: ae:57:13:81:bf:46:fa:78:a1:2b:e3:dc:6b:ea:c9:81:1e:8e: 37:34:0e:51:9d:f5:c7:a8:56:a5:3b:01:f5:6c:c3:0b:d6:8f: 66:90:08:df:ae:53:17:ea:2a:a6:30:b5:6a:75:76:a3:01:73: 5d:88:4e:fe:8c:e2:5a:66:b4:3a:2a:76:f3:ca:a3:98:44:c5: 8a:b0:99:aa:75:0c:38:31:0b:e1:a0:35:84:9a:26:46:7c:75: fc:15:63:f2:3d:b7:4d:16:8d:8d:e6:57:97:35:5b:8e:f3:c8: 29:ed:6e:95:e8:de:aa:66:4e:4a:c5:ff:b2:db:26:b7:28:f6: 2e:26:0f:88:b4:eb:c3:38:b6:25:f7:ac:5a:40:8d:14:54:16: df:88:50:c3:c8:94:98:91:2a:96:be:ea:06:c2:b0:02:f7:7a: e2:95:50:ff:8d:0e:5b:64:2b:49:56:7b:b1:23:56:83:1f:d8: c3:fe:77:c9:4d:cf:94:f6:a1:72:cd:1c:76:5d:42:8b:3f:53: 57:b1:31:7a:5d:e4:78:5a:19:e7:f2:6c:57:0a:a0:be:ff:0e: 7c:ff:6f:51 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbeDMmZcOI1O7uxf2JQmZKIk8nqYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDAzMDUxWhcNMjYwODEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0Y2VkZTg4NDkzZjllYTBiOGUyOGNjNzY2NzExNTJjODFh N2JmZWY2MGQ5Y2EzMjkxZTcwZTU0ZmJkNzk0ZjZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClIoOzPicJEjcjzdv6kesfPstUvAS2cgJVKmVv8gVV5qLA 3fLngAw8c9E1cbeEHiRTWaZFkvigqoiUU6nQ6XJaUuZNFEqiNH7ATP7fkKuXIyR2 ober61ACq292G4CRMaPIF4B9CujGJiDg+m93gn5utGcfYxdaB7tA/wnxTC+bLa0I 2bEwnwUqwAOcmqcen7okK+DUZ1RfLmdbRC8mv2VEtChz8SoT3zWki64cEtjhbGJ1 JuzgXQf7qi+kTqzcse8BH4YqwU95n0lIA+x/JK3V1g8RnZinOU4F2n0igi1FHFJA Ebqdbq2TFD/bkd3MioIQF+BFQscmsprk7ptP+SsJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkPiY5dMtr6gHJhxqz7PZG4LmxS8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RjZDExY2NlLWYxZDgtNGRiZi05YTFhLWVkYjBiMjc4NGQ4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsHEwDQYJKoZIhvcNAQELBQADggEBAA8vVlbvSLT1i/nHYxbwse/gxF4f pNXIM8IEuhTMw5HlCMZpk65XE4G/Rvp4oSvj3GvqyYEejjc0DlGd9ceoVqU7AfVs wwvWj2aQCN+uUxfqKqYwtWp1dqMBc12ITv6M4lpmtDoqdvPKo5hExYqwmap1DDgx C+GgNYSaJkZ8dfwVY/I9t00WjY3mV5c1W47zyCntbpXo3qpmTkrF/7LbJrco9i4m D4i068M4tiX3rFpAjRRUFt+IUMPIlJiRKpa+6gbCsAL3euKVUP+NDltkK0lWe7Ej VoMf2MP+d8lNz5T2oXLNHHZdQos/U1exMXpd5HhaGefybFcKoL7/Dnz/b1E= -----END CERTIFICATE-----Generated at Sat Jun 13 08:17:43 2026 by rpki-client