$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3368b561-9ac5-4b4c-85c6-f7afadb31b64.roa File: 3368b561-9ac5-4b4c-85c6-f7afadb31b64.roa (raw, json) Hash identifier: vm28abyPDk+WdiANzxSeWBJlPv8eiJ5DP6duznd53k0= Subject key identifier: 9C:98:06:4C:BF:5E:73:86:DB:75:2A:05:E0:0E:AD:30:B9:4D:6C:AE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 79AFB814CD94CB0DC1E991DFBC8A2D16C20ECB27 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3368b561-9ac5-4b4c-85c6-f7afadb31b64.roa Signing time: Fri 01 May 2026 01:01:19 +0000 ROA not before: Fri 01 May 2026 01:01:19 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 92.193.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:af:b8:14:cd:94:cb:0d:c1:e9:91:df:bc:8a:2d:16:c2:0e:cb:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 1 01:01:19 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=4703b93f4cdd057d6dc04bb4d67a71837da21bb1ea78bb69b56e92e05d0eedfb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7b:3e:98:34:74:8b:4a:62:83:21:29:c4:82: 65:5d:7d:1d:1d:c0:5c:79:3d:01:28:6a:f4:41:84: 93:0c:1e:82:33:5d:b2:75:e1:23:da:d1:7e:51:d9: 1a:ac:f6:02:a5:ac:2e:f1:6f:88:fc:9e:cc:34:d4: 3f:a4:2f:0e:43:ab:72:3e:89:7b:7c:fc:9e:cf:f6: 11:05:85:33:ff:75:67:44:70:23:93:92:98:92:0c: 0c:76:20:78:f9:c7:06:5c:45:78:eb:71:34:bb:eb: e1:23:90:10:31:da:70:75:13:bb:e3:aa:07:26:d8: 45:9a:54:46:72:6b:11:77:2f:54:a1:b0:e6:79:83: d0:87:07:66:18:54:36:f9:cd:f3:40:8b:af:41:b9: bd:21:04:11:9c:d8:ee:3f:0d:c2:87:99:5a:48:8e: bd:06:6a:d0:6e:db:89:8f:8b:0b:25:09:be:30:f4: 7a:9b:d5:85:ed:50:26:0b:d4:43:7e:a7:dd:01:d7: 83:61:fe:de:d1:65:9a:34:bc:21:e8:4e:ba:2a:ec: 73:85:f1:1d:96:20:63:47:25:7c:7a:e6:15:70:80: ea:3b:01:92:ec:94:03:a0:e0:ff:08:99:e1:9d:06: fc:1f:27:39:00:51:71:5a:6e:e1:f7:78:1c:37:1a: 5c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:98:06:4C:BF:5E:73:86:DB:75:2A:05:E0:0E:AD:30:B9:4D:6C:AE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3368b561-9ac5-4b4c-85c6-f7afadb31b64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.193.0.0/16 Signature Algorithm: sha256WithRSAEncryption 39:91:79:9b:50:2c:d7:9d:e8:5d:00:7e:41:ca:c5:c0:9d:c8: 76:b4:be:04:9b:60:c9:58:78:b1:10:ba:d6:f9:1b:7d:fb:11: 1b:b9:db:1e:4c:fd:3a:f7:91:3c:b3:17:c4:12:f4:58:be:16: e4:79:fa:38:31:fe:0a:bf:0f:f4:29:d3:ac:10:91:b4:f7:15: 0f:59:79:34:51:d5:36:0b:b8:58:93:9f:8a:2c:40:d5:f6:11: 28:4a:b3:a6:03:64:60:15:91:7d:c9:5a:5f:3d:17:c3:cc:6a: 00:23:ba:52:0b:94:27:2a:a7:81:4c:2e:22:ed:ec:d8:d5:63: 8b:cf:88:ec:d4:b0:bf:db:0d:77:52:91:49:b1:d7:bc:38:00: 75:f5:81:8d:0b:e7:41:1c:d4:ad:d4:d8:75:b3:9a:52:b8:f6: d4:27:66:3e:00:af:79:8e:40:95:12:3a:7c:b3:e1:ba:86:44: cf:fc:5b:1b:eb:32:eb:aa:4f:eb:2e:6a:0f:bb:6c:1a:ec:10: ea:8d:50:3d:2e:58:eb:3d:ff:f0:b6:8e:63:03:ae:0d:46:cc: fb:f7:c0:0c:cc:13:bf:3e:60:da:f6:6d:ed:94:ae:ab:d1:34: db:39:1c:0d:60:7c:98:e6:ed:98:2a:aa:61:1e:d5:85:48:82: fd:cb:6e:a5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUea+4FM2Uyw3B6ZHfvIotFsIOyycwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDEwMTE5WhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NzAzYjkzZjRjZGQwNTdkNmRjMDRiYjRkNjdhNzE4Mzdk YTIxYmIxZWE3OGJiNjliNTZlOTJlMDVkMGVlZGZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/ez6YNHSLSmKDISnEgmVdfR0dwFx5PQEoavRBhJMMHoIz XbJ14SPa0X5R2Rqs9gKlrC7xb4j8nsw01D+kLw5Dq3I+iXt8/J7P9hEFhTP/dWdE cCOTkpiSDAx2IHj5xwZcRXjrcTS76+EjkBAx2nB1E7vjqgcm2EWaVEZyaxF3L1Sh sOZ5g9CHB2YYVDb5zfNAi69Bub0hBBGc2O4/DcKHmVpIjr0GatBu24mPiwslCb4w 9Hqb1YXtUCYL1EN+p90B14Nh/t7RZZo0vCHoTroq7HOF8R2WIGNHJXx65hVwgOo7 AZLslAOg4P8ImeGdBvwfJzkAUXFabuH3eBw3GlzvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUnJgGTL9ec4bbdSoF4A6tMLlNbK4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMzNjhiNTYxLTlhYzUtNGI0Yy04NWM2LWY3YWZhZGIzMWI2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBcwTANBgkqhkiG9w0BAQsFAAOCAQEAOZF5m1As153oXQB+QcrFwJ3IdrS+ BJtgyVh4sRC61vkbffsRG7nbHkz9OveRPLMXxBL0WL4W5Hn6ODH+Cr8P9CnTrBCR tPcVD1l5NFHVNgu4WJOfiixA1fYRKEqzpgNkYBWRfclaXz0Xw8xqACO6UguUJyqn gUwuIu3s2NVji8+I7NSwv9sNd1KRSbHXvDgAdfWBjQvnQRzUrdTYdbOaUrj21Cdm PgCveY5AlRI6fLPhuoZEz/xbG+sy66pP6y5qD7tsGuwQ6o1QPS5Y6z3/8LaOYwOu DUbM+/fADMwTvz5g2vZt7ZSuq9E02zkcDWB8mObtmCqqYR7VhUiC/ctupQ== -----END CERTIFICATE-----Generated at Sun May 3 14:47:44 2026 by rpki-client