$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9189aa2-0898-4890-878a-79f926f3a8e9.roa File: d9189aa2-0898-4890-878a-79f926f3a8e9.roa (raw, json) Hash identifier: QQt1KuJUXXL7Cv9Jt+rijTSDoC5JXWg/ndT+NMtX6Lo= Subject key identifier: A7:0D:3B:35:E8:B3:F7:B8:3E:C7:52:6E:C8:45:C3:0B:8A:AF:3E:2E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B4E59FBD5BE4F3B9365E6EB0C25DC1F6D6F69ED Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9189aa2-0898-4890-878a-79f926f3a8e9.roa Signing time: Wed 13 May 2026 14:31:46 +0000 ROA not before: Wed 13 May 2026 14:31:46 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 32.184.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 18 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4e:59:fb:d5:be:4f:3b:93:65:e6:eb:0c:25:dc:1f:6d:6f:69:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 13 14:31:46 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=60e19e4a196795224bb9d682b8e5fc63f5de0d1d24866dd34bd1024d2c7619a2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a9:b5:9e:98:c9:1f:00:d9:00:e3:c5:84:05: c5:fb:92:bd:1d:ce:83:b9:51:0f:38:d7:21:74:58: 1d:13:04:5c:01:0c:0e:64:14:15:0f:db:50:dd:27: 4f:c3:a4:dd:33:bb:aa:4f:87:86:28:00:37:bc:85: be:36:67:b0:bd:bc:4b:be:d7:3b:b8:99:78:9f:f2: 26:dc:66:42:e0:c2:af:f3:11:52:80:8e:87:ec:28: 10:44:86:dc:ca:d6:2e:2c:8a:7a:b4:57:90:10:13: 45:4f:e3:71:8e:ee:c2:13:30:94:ba:a0:3c:d8:3d: b3:0e:45:14:41:85:0b:72:4d:01:1a:05:68:bf:ef: bd:4b:82:72:41:e2:a7:05:48:71:c0:c6:04:43:f3: 58:2e:b2:b0:4b:d6:2a:56:88:c8:41:2f:c1:06:20: 38:85:76:72:ed:ff:c6:8a:38:1b:dc:e4:f6:d2:75: 63:17:a5:a4:af:18:76:8d:87:2f:1f:1a:cf:14:63: af:47:5d:cc:50:d2:5b:4b:bc:71:9b:57:72:0b:96: ab:39:2a:7b:73:cc:5d:e7:0f:d4:21:b5:16:2c:cd: 78:1b:51:76:14:83:96:5c:23:dc:51:c2:b4:4a:04: f6:49:3a:72:33:2a:57:cd:63:8e:d7:94:07:b6:7e: 60:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0D:3B:35:E8:B3:F7:B8:3E:C7:52:6E:C8:45:C3:0B:8A:AF:3E:2E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9189aa2-0898-4890-878a-79f926f3a8e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 32.184.190.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:3f:42:e0:08:c3:58:d1:d3:f9:71:94:0d:63:53:ca:c2:74: dc:6b:69:c9:21:b0:28:37:c2:11:67:ca:99:ea:e7:1f:9b:25: 44:2f:e3:f7:2a:b5:1e:26:13:f0:b2:fa:d5:a9:ba:e6:e2:cb: 2b:e4:13:4e:8c:c0:af:e1:23:cf:20:9a:97:d3:79:ba:10:85: 3c:3d:0a:80:e9:e1:db:c6:c5:a7:2f:93:08:05:95:26:44:69: 87:f0:86:7c:d4:eb:76:de:f0:fb:77:6a:44:1b:27:79:d6:f2: b0:69:9e:a7:67:1b:b8:58:a9:46:7e:35:4b:d8:0a:97:be:fc: de:40:b7:9e:95:75:a7:25:24:6b:a2:ea:8b:91:c3:13:82:0e: 6a:16:61:e0:ac:4d:ec:db:6f:26:7d:f8:79:48:2b:f6:87:fe: 85:12:99:e1:f4:61:4d:ee:44:7a:74:31:f0:d3:c3:d6:00:e8: 9f:7c:ff:c1:25:5e:e4:23:c5:46:ee:b2:27:33:43:39:83:26: fe:4c:f0:0b:d6:a4:c9:05:8f:87:95:20:1c:71:55:11:02:3d: 32:86:45:00:ee:b7:17:42:d1:9c:bf:ca:fa:7d:c2:4a:02:f2: 00:d8:e5:6e:68:4a:6d:12:58:ff:b4:6b:22:de:26:5c:8c:d2: dd:aa:c9:32 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO05Z+9W+TzuTZebrDCXcH21vae0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEzMTQzMTQ2WhcNMjYwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MGUxOWU0YTE5Njc5NTIyNGJiOWQ2ODJiOGU1ZmM2M2Y1 ZGUwZDFkMjQ4NjZkZDM0YmQxMDI0ZDJjNzYxOWEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmqbWemMkfANkA48WEBcX7kr0dzoO5UQ841yF0WB0TBFwB DA5kFBUP21DdJ0/DpN0zu6pPh4YoADe8hb42Z7C9vEu+1zu4mXif8ibcZkLgwq/z EVKAjofsKBBEhtzK1i4sinq0V5AQE0VP43GO7sITMJS6oDzYPbMORRRBhQtyTQEa BWi/771LgnJB4qcFSHHAxgRD81gusrBL1ipWiMhBL8EGIDiFdnLt/8aKOBvc5PbS dWMXpaSvGHaNhy8fGs8UY69HXcxQ0ltLvHGbV3ILlqs5KntzzF3nD9QhtRYszXgb UXYUg5ZcI9xRwrRKBPZJOnIzKlfNY47XlAe2fmDvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpw07Neiz97g+x1JuyEXDC4qvPi4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q5MTg5YWEyLTA4OTgtNDg5MC04NzhhLTc5ZjkyNmYzYThlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEguL4wDQYJKoZIhvcNAQELBQADggEBAHo/QuAIw1jR0/lxlA1jU8rCdNxr ackhsCg3whFnypnq5x+bJUQv4/cqtR4mE/Cy+tWpuubiyyvkE06MwK/hI88gmpfT eboQhTw9CoDp4dvGxacvkwgFlSZEaYfwhnzU63be8Pt3akQbJ3nW8rBpnqdnG7hY qUZ+NUvYCpe+/N5At56VdaclJGui6ouRwxOCDmoWYeCsTezbbyZ9+HlIK/aH/oUS meH0YU3uRHp0MfDTw9YA6J98/8ElXuQjxUbusiczQzmDJv5M8AvWpMkFj4eVIBxx VRECPTKGRQDutxdC0Zy/yvp9wkoC8gDY5W5oSm0SWP+0ayLeJlyM0t2qyTI= -----END CERTIFICATE-----Generated at Sun May 17 05:02:33 2026 by rpki-client