$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/432d8168-208f-476e-a34a-097b0312bfef.roa File: 432d8168-208f-476e-a34a-097b0312bfef.roa (raw, json) Hash identifier: AtGtZt1azaZ6WT4b17SKMwWN/wpwQR8DP01HAM9bv8M= Subject key identifier: BF:24:5B:DA:82:28:D4:9E:D1:A0:4C:79:30:77:61:FA:AC:5A:8B:90 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2CD7BD7E124C027BDEA51E8B34A83782A2C45B6C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/432d8168-208f-476e-a34a-097b0312bfef.roa Signing time: Sun 03 May 2026 16:48:39 +0000 ROA not before: Sun 03 May 2026 16:48:39 +0000 ROA not after: Sat 01 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d7:bd:7e:12:4c:02:7b:de:a5:1e:8b:34:a8:37:82:a2:c4:5b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 16:48:39 2026 GMT Not After : Aug 1 23:59:59 2026 GMT Subject: serialNumber=f0ea757e18d2f56aa72f7f8ef67438909e25923c3977bdb0569a311ec9973c3d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:f1:4c:91:5f:11:8c:83:45:b8:11:8d:4c: e0:da:29:90:29:74:74:d9:bf:53:72:22:7d:06:4d: 80:39:55:42:45:0f:a7:dd:54:5a:51:44:c7:59:10: 45:34:f6:36:a5:68:2c:35:f9:b5:a6:b5:ec:46:be: d5:f8:b3:b2:06:ef:d0:79:be:5c:25:c0:d3:50:f3: 52:43:bb:b6:4e:52:e3:10:d8:2c:30:ca:91:02:72: ec:fd:7d:b6:c6:6f:a4:3a:b3:10:98:b1:84:9e:20: 2c:11:7c:a0:a1:26:62:ad:24:5c:09:9b:9e:37:6a: e8:38:90:d0:21:f1:5e:91:ed:69:1a:c9:5c:c4:bf: 4c:3a:8a:57:2d:c9:86:ad:02:de:1c:ff:c9:1b:0a: 2d:b5:97:f8:bd:62:80:a9:0b:2c:a1:36:01:d6:4e: ad:22:7f:3c:78:d5:a6:07:eb:30:9a:31:64:96:c0: 93:35:49:cf:ac:16:0c:e4:a6:8a:92:e6:4c:00:64: 5a:7d:3e:08:e3:f6:a4:ee:18:d4:39:a9:a2:77:a3: e6:82:28:7a:76:01:54:5d:5f:29:86:65:ef:a4:82: 3f:f1:f8:d8:ad:3b:f3:57:94:66:78:a7:60:53:6b: d6:d6:e1:ff:3c:d3:1f:0f:63:d7:95:09:d6:ee:8d: 32:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:24:5B:DA:82:28:D4:9E:D1:A0:4C:79:30:77:61:FA:AC:5A:8B:90 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/432d8168-208f-476e-a34a-097b0312bfef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.173.0/24 Signature Algorithm: sha256WithRSAEncryption cd:9a:f7:a0:28:17:98:23:15:ee:49:76:11:e6:0c:b8:1e:32: 0f:54:29:59:e9:4e:81:73:b4:3b:c7:64:2d:8a:2e:d8:22:d2: 17:23:c6:bf:c0:7f:b9:77:12:05:1a:10:77:45:a8:a8:7b:b1: 83:74:80:cf:ec:87:42:5a:5f:15:e5:11:f1:af:d7:1d:3b:4a: eb:45:65:3a:55:6b:d6:22:fa:97:8f:89:d6:b8:d9:d2:1a:7a: 7b:6b:05:98:40:b4:9e:fb:54:00:c0:da:67:11:95:36:4d:7d: 45:dc:cc:6f:99:7b:fa:0b:4b:1d:6c:80:9a:43:95:24:4b:ca: f5:69:ba:97:5b:e8:70:bd:d4:ff:81:56:91:56:dd:09:6d:56: d0:92:30:44:1a:74:5e:62:62:7e:01:7d:f6:4c:6f:cf:a7:80: 63:04:5b:12:df:89:3d:9b:5c:92:29:7f:ec:dc:9d:df:c9:d3: c9:a2:19:6f:45:1d:74:0d:75:d4:94:47:ab:ca:6c:0d:ee:2a: 10:ea:fe:48:7e:40:ed:f1:05:39:25:eb:20:b0:06:58:b1:42: fd:29:89:74:c8:81:95:84:08:ec:e5:ad:0b:80:ec:03:69:9c: 25:9c:97:8d:c4:e9:44:7a:31:8b:cf:71:c1:04:d1:95:32:04: bd:b2:d8:1f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULNe9fhJMAnvepR6LNKg3gqLEW2wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAzMTY0ODM5WhcNMjYwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMGVhNzU3ZTE4ZDJmNTZhYTcyZjdmOGVmNjc0Mzg5MDll MjU5MjNjMzk3N2JkYjA1NjlhMzExZWM5OTczYzNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/E/FMkV8RjINFuBGNTODaKZApdHTZv1NyIn0GTYA5VUJF D6fdVFpRRMdZEEU09jalaCw1+bWmtexGvtX4s7IG79B5vlwlwNNQ81JDu7ZOUuMQ 2CwwypECcuz9fbbGb6Q6sxCYsYSeICwRfKChJmKtJFwJm543aug4kNAh8V6R7Wka yVzEv0w6ilctyYatAt4c/8kbCi21l/i9YoCpCyyhNgHWTq0ifzx41aYH6zCaMWSW wJM1Sc+sFgzkpoqS5kwAZFp9Pgjj9qTuGNQ5qaJ3o+aCKHp2AVRdXymGZe+kgj/x +NitO/NXlGZ4p2BTa9bW4f880x8PY9eVCdbujTJvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvyRb2oIo1J7RoEx5MHdh+qxai5AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQzMmQ4MTY4LTIwOGYtNDc2ZS1hMzRhLTA5N2IwMzEyYmZlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7q0wDQYJKoZIhvcNAQELBQADggEBAM2a96AoF5gjFe5JdhHmDLgeMg9U KVnpToFztDvHZC2KLtgi0hcjxr/Af7l3EgUaEHdFqKh7sYN0gM/sh0JaXxXlEfGv 1x07SutFZTpVa9Yi+pePida42dIaentrBZhAtJ77VADA2mcRlTZNfUXczG+Ze/oL Sx1sgJpDlSRLyvVpupdb6HC91P+BVpFW3QltVtCSMEQadF5iYn4BffZMb8+ngGME WxLfiT2bXJIpf+zcnd/J08miGW9FHXQNddSUR6vKbA3uKhDq/kh+QO3xBTkl6yCw BlixQv0piXTIgZWECOzlrQuA7ANpnCWcl43E6UR6MYvPccEE0ZUyBL2y2B8= -----END CERTIFICATE-----Generated at Mon May 4 21:36:55 2026 by rpki-client