$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d01afe-1542-4ab7-aab9-9c28e078ea0b.roa File: 75d01afe-1542-4ab7-aab9-9c28e078ea0b.roa (raw, json) Hash identifier: AhszDPhrsWF4pbp56283fPajxt9DlmxkrDxQII/r9z0= Subject key identifier: CA:77:5D:C2:04:60:5E:ED:76:9C:00:63:32:1E:6D:93:E3:8C:28:50 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 30ED2ECBD4F059994EA8447F0E2B270ADF1E903F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d01afe-1542-4ab7-aab9-9c28e078ea0b.roa Signing time: Sat 02 May 2026 00:50:04 +0000 ROA not before: Sat 02 May 2026 00:50:04 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 40.238.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ed:2e:cb:d4:f0:59:99:4e:a8:44:7f:0e:2b:27:0a:df:1e:90:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 00:50:04 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=1377423fe4331e32f75eebb6e4ccdfb1fa1fa5fb81f75caa5e71a6fbe62d6ddc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:70:39:25:07:e1:b5:9c:9b:0c:ac:0e:21:f4: 58:c1:23:dd:17:78:df:3b:de:c2:d5:18:0b:82:91: 38:e5:42:41:98:bd:5a:62:7f:38:15:62:88:8d:33: f2:83:35:48:9f:41:71:01:16:0a:c5:f7:55:63:fd: b2:e8:5d:94:65:d6:1e:4a:ac:0c:1b:e3:87:61:42: c1:c8:86:b6:80:54:fb:34:6f:2a:2f:b2:13:b7:bd: 87:53:b7:59:ee:d2:5a:df:52:02:1c:3c:91:9c:16: c6:43:d5:ca:4b:18:56:39:8a:c8:a3:f1:c7:a5:4a: 28:d4:fd:f5:02:19:f7:fe:03:8f:c6:c6:8e:63:53: fd:16:55:32:93:d7:41:56:82:04:9f:cf:cd:c5:ca: d5:2b:c8:2d:03:47:fa:6e:87:44:3e:d5:03:aa:ee: ec:54:57:1e:08:47:93:9d:2d:91:58:57:52:55:1d: bd:31:6b:08:e7:91:71:f0:d8:c5:9b:61:77:e5:bb: dc:51:75:ca:87:f4:be:7c:2d:8e:34:f4:1f:e0:75: 6b:7f:88:8c:e5:5e:3e:5f:0c:db:4f:9f:3f:e4:00: 5d:7c:f4:e2:ed:11:4e:62:61:c4:1f:eb:99:a8:a0: d1:c5:b5:6e:da:be:11:76:ce:db:96:6d:d0:81:71: 7d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:77:5D:C2:04:60:5E:ED:76:9C:00:63:32:1E:6D:93:E3:8C:28:50 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75d01afe-1542-4ab7-aab9-9c28e078ea0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.238.0.0/16 Signature Algorithm: sha256WithRSAEncryption ce:9e:44:7b:bd:f1:ca:6d:85:71:ed:ec:af:b0:dc:d8:cc:d4: 5f:94:f2:9b:9a:31:c6:b8:14:d4:d2:5c:66:3e:73:61:0a:b2: 35:12:d8:11:92:78:81:21:eb:c4:3d:e5:68:3a:53:ca:31:c1: a2:0d:1a:aa:be:78:0d:73:19:af:11:c1:43:67:bf:70:42:80: ca:50:ad:28:82:6b:ad:5f:fd:50:00:29:d2:00:86:46:e1:7a: 33:4f:88:0d:45:cb:f5:aa:1c:5e:3f:ba:e2:77:ef:f7:ff:ad: c5:6d:8e:36:42:1d:0f:4e:f9:9b:5a:73:52:c2:d4:41:ba:82: 27:ad:02:ae:39:df:33:bb:4c:ff:a0:67:27:c3:6a:f0:e3:09: 20:b7:73:06:e0:9e:d5:74:6a:de:7c:aa:08:a1:9b:dd:78:48: cd:98:fb:5b:cb:a2:40:53:38:cd:e0:a0:73:85:5d:db:67:20: c9:05:b6:9f:f7:a3:c5:f0:d4:38:30:0e:24:1f:86:c4:4f:86: 52:2e:f8:eb:89:38:54:be:cb:03:85:2c:02:cf:1c:ea:51:e3: c9:13:15:aa:8f:69:de:04:33:09:2b:b1:95:aa:43:36:4d:0e: 82:59:e6:a0:e3:64:cb:6d:5b:2a:33:1a:b6:b9:82:e7:87:11: 02:c7:25:37 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMO0uy9TwWZlOqER/DisnCt8ekD8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAyMDA1MDA0WhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzc3NDIzZmU0MzMxZTMyZjc1ZWViYjZlNGNjZGZiMWZh MWZhNWZiODFmNzVjYWE1ZTcxYTZmYmU2MmQ2ZGRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbcDklB+G1nJsMrA4h9FjBI90XeN873sLVGAuCkTjlQkGY vVpifzgVYoiNM/KDNUifQXEBFgrF91Vj/bLoXZRl1h5KrAwb44dhQsHIhraAVPs0 byovshO3vYdTt1nu0lrfUgIcPJGcFsZD1cpLGFY5isij8celSijU/fUCGff+A4/G xo5jU/0WVTKT10FWggSfz83FytUryC0DR/puh0Q+1QOq7uxUVx4IR5OdLZFYV1JV Hb0xawjnkXHw2MWbYXflu9xRdcqH9L58LY409B/gdWt/iIzlXj5fDNtPnz/kAF18 9OLtEU5iYcQf65mooNHFtW7avhF2ztuWbdCBcX3jAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUynddwgRgXu12nABjMh5tk+OMKFAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc1ZDAxYWZlLTE1NDItNGFiNy1hYWI5LTljMjhlMDc4ZWEwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAo7jANBgkqhkiG9w0BAQsFAAOCAQEAzp5Ee73xym2Fce3sr7Dc2MzUX5Ty m5oxxrgU1NJcZj5zYQqyNRLYEZJ4gSHrxD3laDpTyjHBog0aqr54DXMZrxHBQ2e/ cEKAylCtKIJrrV/9UAAp0gCGRuF6M0+IDUXL9aocXj+64nfv9/+txW2ONkIdD075 m1pzUsLUQbqCJ60CrjnfM7tM/6BnJ8Nq8OMJILdzBuCe1XRq3nyqCKGb3XhIzZj7 W8uiQFM4zeCgc4Vd22cgyQW2n/ejxfDUODAOJB+GxE+GUi7464k4VL7LA4UsAs8c 6lHjyRMVqo9p3gQzCSuxlapDNk0OglnmoONky21bKjMatrmC54cRAsclNw== -----END CERTIFICATE-----Generated at Sun May 3 14:46:18 2026 by rpki-client