$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddff71a9-1f84-4ed4-8b6e-54acc8a38015.roa File: ddff71a9-1f84-4ed4-8b6e-54acc8a38015.roa (raw, json) Hash identifier: nZbs/Q/RNFulmq3eEh4b6bvFwsUMKgj3/+essCHdgS4= Subject key identifier: CB:4E:87:70:C6:1B:9B:0A:60:7A:C1:6B:29:C8:8B:C9:73:03:F2:E5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6A7BBB5D4B7B6D22A46122463DF44379C2A04D95 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddff71a9-1f84-4ed4-8b6e-54acc8a38015.roa Signing time: Sat 16 May 2026 01:10:49 +0000 ROA not before: Sat 16 May 2026 01:10:49 +0000 ROA not after: Fri 14 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 65.9.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:7b:bb:5d:4b:7b:6d:22:a4:61:22:46:3d:f4:43:79:c2:a0:4d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 01:10:49 2026 GMT Not After : Aug 14 23:59:59 2026 GMT Subject: serialNumber=fde42a77a5dddfc33a5aa9721f60f7748c78897a1ec981d8e76268699abc71e8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:33:1d:16:c1:1b:b9:7a:af:94:8d:2d:c1:85: dc:98:5f:5c:e6:fa:6d:6f:d7:63:bf:bc:5e:0f:27: 62:fd:4f:89:4b:97:b4:87:ba:1d:4e:07:57:cd:ba: 59:20:00:ab:d7:a5:56:75:68:97:e1:58:1e:e3:58: 02:53:05:db:6b:29:6e:ad:c8:3e:33:7a:b5:1b:50: da:3d:92:11:48:ff:0d:97:44:25:0b:6e:95:df:df: e7:c6:57:90:4a:cf:23:ca:06:ba:37:44:a1:f9:d7: fc:08:fb:3e:4a:c0:fa:85:a4:00:62:b7:3f:d5:da: 33:ba:34:dd:3e:0e:c9:1a:14:ab:59:3a:1c:70:a1: 03:07:e5:9d:c7:0b:99:4a:50:bc:c0:6c:d6:4b:92: 16:4f:a6:db:fa:03:85:ca:6f:b4:94:f7:10:49:aa: a7:17:c6:5f:95:17:dd:6c:8f:01:cd:ef:45:ec:0f: 57:94:b2:f2:35:4a:d4:16:38:f2:af:33:f7:3d:9b: ea:c4:f5:a2:07:c9:af:c5:f7:a2:fc:b9:a4:11:c0: e3:70:52:49:6a:7e:d5:b2:98:71:1d:b0:5b:65:e7: 7c:28:00:82:ef:b6:79:eb:48:be:49:73:ec:3b:0f: f7:b9:95:62:44:e1:2c:b2:9a:f8:70:05:1e:30:a8: f5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4E:87:70:C6:1B:9B:0A:60:7A:C1:6B:29:C8:8B:C9:73:03:F2:E5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddff71a9-1f84-4ed4-8b6e-54acc8a38015.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.9.143.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:01:6b:4d:fb:df:9b:db:d6:e0:36:6f:72:e9:c2:d2:33:96: 85:59:6e:1a:5b:05:df:2a:08:42:76:c0:ab:7b:69:36:da:a1: 6c:b7:31:99:d9:34:46:b7:ed:58:35:4d:c8:1b:b2:43:24:ae: 78:22:ca:84:99:6a:98:f8:62:3e:e4:d3:9e:0c:f6:35:eb:0d: 58:28:8b:9e:40:c6:69:bf:7a:34:62:c0:86:e0:67:6a:f2:40: f4:14:ea:23:3a:38:e1:40:18:d0:5f:51:f2:39:f2:4c:52:ab: 50:b4:f1:e9:b9:bf:5f:a2:88:b5:4c:f1:dc:c7:c5:39:c1:46: 20:a4:70:e4:c7:4b:e5:58:e3:53:be:7b:3f:9c:dd:8e:a2:53: 80:e6:77:6e:e4:b9:c6:94:5b:56:09:c1:83:5b:35:8b:60:ad: b6:c6:03:35:3d:76:a0:70:fe:62:3e:1f:8c:99:61:6a:14:a1: 6b:ec:20:5d:05:d7:62:81:a1:0a:49:39:37:b4:94:11:90:5f: 6f:72:c1:a5:02:f4:88:d4:8a:c1:ab:dc:9f:4c:c1:db:0c:14: 05:57:e4:77:f0:f0:59:a2:59:58:c1:6a:9f:0d:e1:60:84:91: b6:85:72:3f:b3:9f:24:fc:4d:a7:12:ce:4b:2b:e0:16:e6:38: 72:2e:a4:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUanu7XUt7bSKkYSJGPfRDecKgTZUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDExMDQ5WhcNMjYwODE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZGU0MmE3N2E1ZGRkZmMzM2E1YWE5NzIxZjYwZjc3NDhj Nzg4OTdhMWVjOTgxZDhlNzYyNjg2OTlhYmM3MWU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpMx0WwRu5eq+UjS3BhdyYX1zm+m1v12O/vF4PJ2L9T4lL l7SHuh1OB1fNulkgAKvXpVZ1aJfhWB7jWAJTBdtrKW6tyD4zerUbUNo9khFI/w2X RCULbpXf3+fGV5BKzyPKBro3RKH51/wI+z5KwPqFpABitz/V2jO6NN0+DskaFKtZ OhxwoQMH5Z3HC5lKULzAbNZLkhZPptv6A4XKb7SU9xBJqqcXxl+VF91sjwHN70Xs D1eUsvI1StQWOPKvM/c9m+rE9aIHya/F96L8uaQRwONwUklqftWymHEdsFtl53wo AILvtnnrSL5Jc+w7D/e5lWJE4SyymvhwBR4wqPWNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUy06HcMYbmwpgesFrKciLyXMD8uUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RkZmY3MWE5LTFmODQtNGVkNC04YjZlLTU0YWNjOGEzODAxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABBCY8wDQYJKoZIhvcNAQELBQADggEBAJ4Ba03735vb1uA2b3LpwtIzloVZ bhpbBd8qCEJ2wKt7aTbaoWy3MZnZNEa37Vg1TcgbskMkrngiyoSZapj4Yj7k054M 9jXrDVgoi55Axmm/ejRiwIbgZ2ryQPQU6iM6OOFAGNBfUfI58kxSq1C08em5v1+i iLVM8dzHxTnBRiCkcOTHS+VY41O+ez+c3Y6iU4Dmd27kucaUW1YJwYNbNYtgrbbG AzU9dqBw/mI+H4yZYWoUoWvsIF0F12KBoQpJOTe0lBGQX29ywaUC9IjUisGr3J9M wdsMFAVX5Hfw8FmiWVjBap8N4WCEkbaFcj+znyT8TacSzksr4BbmOHIupCM= -----END CERTIFICATE-----Generated at Sat Jun 13 05:51:02 2026 by rpki-client