$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72e4dab6-9b62-441d-b884-4123f0b12e7f.roa File: 72e4dab6-9b62-441d-b884-4123f0b12e7f.roa (raw, json) Hash identifier: bN8lr7abjwy+2c5iuVKf6ADBo/UrjnYT1vatKFUrCzQ= Subject key identifier: DB:C2:B7:2D:58:DB:46:CD:96:65:3B:27:0F:41:29:CE:44:B3:B6:2B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7DB22861A722A22C5A861F5A6354B606D7DB54DA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72e4dab6-9b62-441d-b884-4123f0b12e7f.roa Signing time: Sat 02 May 2026 01:01:29 +0000 ROA not before: Sat 02 May 2026 01:01:29 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 136.18.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b2:28:61:a7:22:a2:2c:5a:86:1f:5a:63:54:b6:06:d7:db:54:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 01:01:29 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=06089620d2a6e9a464760c20061f84226f840b9b11695bd6964704904150c0eb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a6:af:e6:cc:8b:fe:81:89:d9:62:36:6a:b6: ea:52:f6:e7:72:b9:bd:63:cd:56:33:e1:d8:97:9d: 30:5b:a4:5a:42:db:1f:ba:fd:bb:44:7d:b1:30:0c: 04:bb:7f:de:0b:22:6d:30:6c:14:ad:24:31:4e:3b: 67:d2:34:b7:6c:85:b2:f2:12:b3:78:7a:95:b5:75: b8:a3:00:d0:8a:b0:c9:4b:e2:50:b6:5b:af:a9:2e: 62:ca:7b:95:bb:3c:22:8b:46:4f:d7:8d:b3:6a:48: 4f:f8:27:5d:89:4a:ce:ee:c1:83:f0:72:cb:0b:cc: 66:45:82:a4:4b:c6:40:87:67:10:42:be:6a:48:0c: 91:0c:3e:9f:51:ec:77:61:5d:c4:df:63:80:70:7e: 4d:08:98:87:59:e0:dc:12:77:48:b2:81:a2:9b:32: 49:71:a3:6b:db:f7:26:ca:a3:9d:e9:73:0b:ba:12: 83:e3:6c:2b:e8:64:4f:da:fd:52:35:0c:11:81:26: 86:82:99:79:53:12:29:f7:fd:5d:83:51:c5:f4:5d: 51:77:40:54:e2:cd:c3:ba:30:cd:a9:4a:16:cc:3d: 93:2b:b6:12:d8:6f:eb:58:13:09:b5:bd:a5:d2:6b: 4b:ef:3a:4d:20:3c:08:38:22:08:04:3c:60:b8:70: 1e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C2:B7:2D:58:DB:46:CD:96:65:3B:27:0F:41:29:CE:44:B3:B6:2B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72e4dab6-9b62-441d-b884-4123f0b12e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.18.138.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:fb:8c:9a:b9:77:2e:d3:8b:22:4f:06:e1:c6:1f:13:4d:b8: fa:df:33:13:78:93:e1:81:d7:e0:3a:c1:97:93:77:03:f2:9a: 69:c1:44:d9:69:7f:13:ab:3f:9f:33:d6:17:2e:d1:d0:94:36: 80:f4:32:38:bc:b4:d9:0e:41:36:15:a0:62:0f:7f:72:92:05: 38:53:93:f6:43:db:05:23:3c:a1:d3:11:5d:da:87:64:0e:89: 09:09:ea:8a:a5:74:a5:45:a9:bd:c0:36:63:95:24:4a:b8:3c: 63:3b:8e:a6:10:7f:c6:d6:2d:81:de:44:aa:b0:69:13:82:ea: a2:b8:f3:a9:55:71:7f:81:48:7e:ad:48:df:b4:7c:6a:33:df: e9:ac:43:ad:c7:69:87:12:90:f8:53:a7:12:e1:23:49:4f:a0: 6f:61:94:22:61:37:ba:17:f0:cc:12:9b:f3:42:dc:86:7f:19: 87:4a:b5:c0:0f:b3:b2:bc:23:0b:f3:f2:7d:d8:c1:66:4f:36: 2d:4e:97:82:57:09:52:04:7c:a9:b9:46:ff:3d:7d:5a:4c:f0: 7b:25:84:fb:9b:d1:5d:2d:fe:16:ae:0e:46:df:d9:ab:8f:be: b0:f7:29:3b:48:38:83:e1:4a:d1:4a:08:98:c9:61:6d:76:33: ce:bd:a5:9c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfbIoYacioixahh9aY1S2BtfbVNowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAyMDEwMTI5WhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNjA4OTYyMGQyYTZlOWE0NjQ3NjBjMjAwNjFmODQyMjZm ODQwYjliMTE2OTViZDY5NjQ3MDQ5MDQxNTBjMGViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkpq/mzIv+gYnZYjZqtupS9udyub1jzVYz4diXnTBbpFpC 2x+6/btEfbEwDAS7f94LIm0wbBStJDFOO2fSNLdshbLyErN4epW1dbijANCKsMlL 4lC2W6+pLmLKe5W7PCKLRk/XjbNqSE/4J12JSs7uwYPwcssLzGZFgqRLxkCHZxBC vmpIDJEMPp9R7HdhXcTfY4Bwfk0ImIdZ4NwSd0iygaKbMklxo2vb9ybKo53pcwu6 EoPjbCvoZE/a/VI1DBGBJoaCmXlTEin3/V2DUcX0XVF3QFTizcO6MM2pShbMPZMr thLYb+tYEwm1vaXSa0vvOk0gPAg4IggEPGC4cB6BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU28K3LVjbRs2WZTsnD0EpzkSztiswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcyZTRkYWI2LTliNjItNDQxZC1iODg0LTQxMjNmMGIxMmU3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGIEoowDQYJKoZIhvcNAQELBQADggEBAHr7jJq5dy7TiyJPBuHGHxNNuPrf MxN4k+GB1+A6wZeTdwPymmnBRNlpfxOrP58z1hcu0dCUNoD0Mji8tNkOQTYVoGIP f3KSBThTk/ZD2wUjPKHTEV3ah2QOiQkJ6oqldKVFqb3ANmOVJEq4PGM7jqYQf8bW LYHeRKqwaROC6qK486lVcX+BSH6tSN+0fGoz3+msQ63HaYcSkPhTpxLhI0lPoG9h lCJhN7oX8MwSm/NC3IZ/GYdKtcAPs7K8Iwvz8n3YwWZPNi1Ol4JXCVIEfKm5Rv89 fVpM8HslhPub0V0t/hauDkbf2auPvrD3KTtIOIPhStFKCJjJYW12M869pZw= -----END CERTIFICATE-----Generated at Sun May 3 14:46:45 2026 by rpki-client