$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a57c9e4-bc34-479a-bf87-518d8db2a99c.roa File: 0a57c9e4-bc34-479a-bf87-518d8db2a99c.roa (raw, json) Hash identifier: b/XytrFYbxM/UKPl+BCDkvqsHySetX0X8CLmluzATCY= Subject key identifier: 1E:6C:AB:37:B7:C0:8B:79:2B:AB:92:B1:65:72:9F:70:32:6F:F0:5C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 03174F7FD22E98984BED2205ACF7FEC39AD779EE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a57c9e4-bc34-479a-bf87-518d8db2a99c.roa Signing time: Sun 03 May 2026 16:50:20 +0000 ROA not before: Sun 03 May 2026 16:50:20 +0000 ROA not after: Sat 01 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:17:4f:7f:d2:2e:98:98:4b:ed:22:05:ac:f7:fe:c3:9a:d7:79:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 16:50:20 2026 GMT Not After : Aug 1 23:59:59 2026 GMT Subject: serialNumber=9c3f3aa50419774ca99cebfec81f626078e2762676ae9ce5b94ad564a0d061fb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c2:62:82:d5:70:62:0d:b4:20:1d:af:19:06: b2:8a:b5:d9:be:8c:32:c6:b5:c6:fb:75:87:e3:7b: 05:74:c1:14:c6:67:45:07:a6:c0:35:a6:fb:0b:4c: a0:bd:8c:6b:e4:05:15:93:6c:82:90:c1:7f:03:7a: df:34:5a:27:f3:20:40:8d:c3:f5:c6:a1:ab:0e:2e: 68:2f:50:b6:a6:b7:41:9e:e5:39:d3:ae:14:21:49: 08:0d:54:bf:25:60:3d:db:37:c7:ab:be:17:89:9d: e8:13:41:16:6c:c0:dc:48:ee:ee:14:ff:f2:17:70: 70:1e:85:03:40:c3:49:6a:f2:a5:2c:da:52:00:a6: 9b:17:c4:7c:a8:3c:38:2a:23:54:3c:9a:79:1c:f2: 80:8f:f0:93:6a:14:85:26:89:1b:b3:b0:37:02:7c: a8:79:d1:f2:01:9e:51:68:17:04:fe:4d:90:c8:47: ac:5b:a6:be:80:d6:82:00:50:06:33:86:c5:82:fd: d0:51:4e:ba:80:e0:be:43:4b:de:08:45:91:45:b2: a7:36:e8:35:7a:00:ea:f6:c4:af:74:92:ab:97:60: 5d:12:71:1d:0a:21:06:89:42:e3:00:60:b8:20:bc: cf:85:d4:40:5e:36:19:83:3e:00:c6:f6:62:3a:f8: 1a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6C:AB:37:B7:C0:8B:79:2B:AB:92:B1:65:72:9F:70:32:6F:F0:5C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a57c9e4-bc34-479a-bf87-518d8db2a99c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.217.0/24 Signature Algorithm: sha256WithRSAEncryption 91:a6:38:67:ab:de:2d:5e:d5:c3:1d:83:ca:2c:2a:f5:4c:2f: b5:dc:f9:d8:a2:05:64:38:9e:76:12:5b:44:b7:1d:61:40:02: 6d:45:ae:08:be:bd:1d:99:43:c5:46:95:ec:95:70:05:7b:73: ef:a4:ad:22:86:0e:65:cb:00:41:22:12:25:c3:77:2f:68:2d: 34:e3:ae:d4:47:60:ed:cd:67:ec:27:93:e5:46:39:82:5b:98: c9:c9:2c:fc:4e:ef:e0:7d:ab:98:39:1d:34:c1:9c:35:5e:a6: eb:51:b6:91:3a:d7:f6:cb:bf:65:30:85:db:7e:b9:11:a5:2c: c5:71:fa:43:45:ef:fd:a6:10:b7:71:83:09:51:55:fa:8e:3d: b2:49:96:38:08:c2:4d:2c:c2:98:62:dc:b7:21:b0:84:1b:8d: c7:b8:5f:16:54:32:7a:a7:85:c9:f1:b2:78:76:3b:f9:98:d1: d7:94:94:e6:71:93:81:a3:f6:2c:8a:ee:4e:10:76:62:a9:c0: 4a:f9:71:ae:f6:e4:28:1d:fa:53:ea:f5:d4:28:db:75:63:e3: 33:78:f4:8e:e0:41:74:6e:3e:09:4a:52:5b:cc:47:d0:15:9d: 17:76:e9:75:c9:e3:1c:41:7c:85:b1:ef:01:53:a0:90:5b:43: 32:55:45:d3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAxdPf9IumJhL7SIFrPf+w5rXee4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAzMTY1MDIwWhcNMjYwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YzNmM2FhNTA0MTk3NzRjYTk5Y2ViZmVjODFmNjI2MDc4 ZTI3NjI2NzZhZTljZTViOTRhZDU2NGEwZDA2MWZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlwmKC1XBiDbQgHa8ZBrKKtdm+jDLGtcb7dYfjewV0wRTG Z0UHpsA1pvsLTKC9jGvkBRWTbIKQwX8Det80WifzIECNw/XGoasOLmgvULamt0Ge 5TnTrhQhSQgNVL8lYD3bN8ervheJnegTQRZswNxI7u4U//IXcHAehQNAw0lq8qUs 2lIAppsXxHyoPDgqI1Q8mnkc8oCP8JNqFIUmiRuzsDcCfKh50fIBnlFoFwT+TZDI R6xbpr6A1oIAUAYzhsWC/dBRTrqA4L5DS94IRZFFsqc26DV6AOr2xK90kquXYF0S cR0KIQaJQuMAYLggvM+F1EBeNhmDPgDG9mI6+BrdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHmyrN7fAi3krq5KxZXKfcDJv8FwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBhNTdjOWU0LWJjMzQtNDc5YS1iZjg3LTUxOGQ4ZGIyYTk5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7tkwDQYJKoZIhvcNAQELBQADggEBAJGmOGer3i1e1cMdg8osKvVML7Xc +diiBWQ4nnYSW0S3HWFAAm1Frgi+vR2ZQ8VGleyVcAV7c++krSKGDmXLAEEiEiXD dy9oLTTjrtRHYO3NZ+wnk+VGOYJbmMnJLPxO7+B9q5g5HTTBnDVeputRtpE61/bL v2Uwhdt+uRGlLMVx+kNF7/2mELdxgwlRVfqOPbJJljgIwk0swphi3LchsIQbjce4 XxZUMnqnhcnxsnh2O/mY0deUlOZxk4Gj9iyK7k4QdmKpwEr5ca725Cgd+lPq9dQo 23Vj4zN49I7gQXRuPglKUlvMR9AVnRd26XXJ4xxBfIWx7wFToJBbQzJVRdM= -----END CERTIFICATE-----Generated at Mon May 4 21:37:01 2026 by rpki-client