$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d65c724-ab41-4381-9d80-aaf7df7558c0.roa File: 1d65c724-ab41-4381-9d80-aaf7df7558c0.roa (raw, json) Hash identifier: 7J0vBhvfLxPdmBjXUOwIQXajhQNXAgjcq87qCpzJis4= Subject key identifier: DD:FF:EC:79:4F:28:92:0C:2F:EA:98:0E:9D:6E:41:02:D5:59:90:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1A855A3CA69990036783D1BD3861F9A282126018 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d65c724-ab41-4381-9d80-aaf7df7558c0.roa Signing time: Tue 28 Apr 2026 00:30:12 +0000 ROA not before: Tue 28 Apr 2026 00:30:12 +0000 ROA not after: Mon 27 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.254.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:85:5a:3c:a6:99:90:03:67:83:d1:bd:38:61:f9:a2:82:12:60:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 00:30:12 2026 GMT Not After : Jul 27 23:59:59 2026 GMT Subject: serialNumber=b4e365eba5ed24f1bacf3c61ca89855cbb49d0b5f45114f6a1be2f47abb008dd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a5:ad:34:fb:a3:e8:a9:8b:05:e9:84:e8:0f: 11:53:4f:4d:e0:8c:e0:bb:b4:30:f0:3f:52:bf:4d: a3:50:79:20:25:76:14:41:28:7f:f6:b0:b1:ce:9f: 76:b1:0b:eb:fe:ba:fd:2c:97:2b:79:05:47:42:99: de:3d:9b:78:1d:1d:b3:5b:f1:25:2a:ea:1b:59:a9: 90:2d:51:05:45:42:41:e0:eb:c6:89:89:bd:3d:74: 6a:e6:6f:14:e4:f4:cb:43:f3:ff:53:15:0c:25:fe: 2c:46:0a:a1:66:e2:aa:60:5e:48:25:10:a2:b1:4f: 77:db:67:03:81:3b:b4:46:e9:f3:5d:25:b3:13:3e: 97:55:a9:4f:77:c4:09:cc:c0:4f:31:bc:28:f4:3f: a4:d0:29:53:f2:5f:e3:c9:59:f3:64:39:6a:af:b8: f1:c3:d2:96:ed:60:af:a9:37:fe:82:26:42:72:c8: 47:ce:51:0a:0c:48:1e:08:87:30:f1:31:dd:2e:d4: e1:ea:0f:95:d1:79:b6:17:3c:9c:42:a0:ec:6f:c6: 92:9c:8e:24:6f:81:37:51:21:3d:da:2b:f9:12:e7: 8d:82:d5:96:d2:e2:b1:ab:fe:b8:70:fb:e1:44:51: ac:21:c6:53:8d:85:48:e8:b3:e0:04:80:31:24:ea: f4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FF:EC:79:4F:28:92:0C:2F:EA:98:0E:9D:6E:41:02:D5:59:90:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d65c724-ab41-4381-9d80-aaf7df7558c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.254.120.0/21 Signature Algorithm: sha256WithRSAEncryption a0:e9:de:56:de:5a:a0:02:6c:5d:f1:70:d1:00:9a:73:56:45: a4:ef:20:fe:7c:ae:43:b1:8e:9f:69:a7:ef:91:72:39:f3:30: 85:c2:bb:6b:b6:24:80:04:24:73:6a:e3:71:8b:fc:ef:1a:05: 78:f3:d8:4a:0b:3f:3a:bb:58:5a:57:d7:9b:53:f9:70:4b:51: fb:c5:0d:c3:03:8f:31:36:94:1d:57:48:79:b5:ae:1c:1a:a9: 67:ea:2d:c7:34:bf:d9:29:10:1a:15:b0:13:49:d0:16:ad:6c: 4a:7c:a3:39:9a:59:bb:8b:0e:fe:40:ec:87:9a:59:64:f7:dc: 64:76:9e:c8:6c:92:5e:f5:bf:0d:a9:89:16:6a:e7:58:ea:57: 7c:dc:f3:df:68:87:9f:90:20:98:9f:f0:c1:b6:10:df:66:76: ff:8b:64:fc:d7:8a:a8:24:1f:58:e4:86:0f:ae:64:2d:42:e2: 27:6a:e2:ee:77:58:aa:eb:28:5c:24:d9:bf:e9:88:f6:5d:87: 0e:db:8e:6f:fc:30:f2:69:3d:00:03:64:2e:61:3f:ef:1d:dd: e3:e5:2a:35:f6:53:66:77:be:e7:34:fe:bf:d1:4c:30:66:97: 7b:ea:55:b7:b0:34:d5:6a:d7:08:82:79:1c:22:4e:79:30:4f: be:f1:57:f8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGoVaPKaZkANng9G9OGH5ooISYBgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI4MDAzMDEyWhcNMjYwNzI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNGUzNjVlYmE1ZWQyNGYxYmFjZjNjNjFjYTg5ODU1Y2Ji NDlkMGI1ZjQ1MTE0ZjZhMWJlMmY0N2FiYjAwOGRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWpa00+6PoqYsF6YToDxFTT03gjOC7tDDwP1K/TaNQeSAl dhRBKH/2sLHOn3axC+v+uv0slyt5BUdCmd49m3gdHbNb8SUq6htZqZAtUQVFQkHg 68aJib09dGrmbxTk9MtD8/9TFQwl/ixGCqFm4qpgXkglEKKxT3fbZwOBO7RG6fNd JbMTPpdVqU93xAnMwE8xvCj0P6TQKVPyX+PJWfNkOWqvuPHD0pbtYK+pN/6CJkJy yEfOUQoMSB4IhzDxMd0u1OHqD5XRebYXPJxCoOxvxpKcjiRvgTdRIT3aK/kS542C 1ZbS4rGr/rhw++FEUawhxlONhUjos+AEgDEk6vQ5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3f/seU8okgwv6pgOnW5BAtVZkIgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFkNjVjNzI0LWFiNDEtNDM4MS05ZDgwLWFhZjdkZjc1NThjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMX/ngwDQYJKoZIhvcNAQELBQADggEBAKDp3lbeWqACbF3xcNEAmnNWRaTv IP58rkOxjp9pp++RcjnzMIXCu2u2JIAEJHNq43GL/O8aBXjz2EoLPzq7WFpX15tT +XBLUfvFDcMDjzE2lB1XSHm1rhwaqWfqLcc0v9kpEBoVsBNJ0BatbEp8ozmaWbuL Dv5A7IeaWWT33GR2nshskl71vw2piRZq51jqV3zc899oh5+QIJif8MG2EN9mdv+L ZPzXiqgkH1jkhg+uZC1C4idq4u53WKrrKFwk2b/piPZdhw7bjm/8MPJpPQADZC5h P+8d3ePlKjX2U2Z3vuc0/r/RTDBml3vqVbewNNVq1wiCeRwiTnkwT77xV/g= -----END CERTIFICATE-----Generated at Sun May 3 14:46:43 2026 by rpki-client