$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8957ff92-ab4c-4c52-a611-460e94b329c3.roa File: 8957ff92-ab4c-4c52-a611-460e94b329c3.roa (raw, json) Hash identifier: LcWMAYagyXi7wFFN7cH99wCk9HONmSJVFG+fGUWYjw0= Subject key identifier: C9:78:E5:B0:85:78:D9:EB:08:EF:92:69:03:1C:68:89:DD:D9:23:D5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2EA5734259302DC3EE5A16CF1CA9364AEF278E84 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8957ff92-ab4c-4c52-a611-460e94b329c3.roa Signing time: Thu 30 Apr 2026 00:00:07 +0000 ROA not before: Thu 30 Apr 2026 00:00:07 +0000 ROA not after: Wed 29 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 89.58.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a5:73:42:59:30:2d:c3:ee:5a:16:cf:1c:a9:36:4a:ef:27:8e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 30 00:00:07 2026 GMT Not After : Jul 29 23:59:59 2026 GMT Subject: serialNumber=65213c63cd93b7dca1de9e0a92bad117ec78903093e510c7b2e047b1a9fdbd87, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:53:44:6e:00:72:ea:a8:12:4b:7e:08:0d: e9:da:27:af:f8:73:06:dc:07:48:46:d0:d4:ef:18: 41:72:24:89:e7:0d:76:69:bd:4f:cd:1f:52:33:7c: 4b:8f:96:4f:0c:b0:1a:11:43:3a:c8:a6:18:e4:ea: 37:2d:a8:89:7f:cc:df:90:ee:d7:81:ed:fc:12:4b: 3f:3c:e1:e9:d1:95:af:c9:d7:68:8a:54:52:f8:4e: c6:4d:0b:24:90:bb:37:78:85:81:ab:d6:17:77:89: 72:10:bc:12:49:25:09:34:94:9c:74:80:bf:72:9e: 21:1b:81:68:a1:33:86:cf:86:d3:b0:97:64:29:a5: bb:8b:40:09:6a:5c:4c:50:56:aa:b3:c2:9b:a4:61: d3:b3:be:ae:e9:28:96:97:54:af:52:33:b0:0f:19: a7:52:e8:ca:40:e5:15:8a:18:2f:94:7b:fb:88:cc: 6e:46:ff:f1:d9:0c:4c:6c:5c:86:21:92:94:41:71: da:f8:18:ff:0f:21:d0:b7:52:e2:9d:fe:94:b1:fb: 86:ce:91:65:3d:c8:88:a2:aa:0a:2d:40:b3:08:89: da:78:ca:be:19:18:03:df:5b:3f:67:e1:55:85:fc: cb:53:54:26:a5:92:27:f4:ae:44:9d:81:5c:a5:1b: db:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:78:E5:B0:85:78:D9:EB:08:EF:92:69:03:1C:68:89:DD:D9:23:D5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8957ff92-ab4c-4c52-a611-460e94b329c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.58.160.0/19 Signature Algorithm: sha256WithRSAEncryption 14:9b:13:ab:2c:61:b6:0c:06:ca:24:bf:f3:26:49:55:77:70: 6d:c7:2f:85:76:6d:ad:42:2d:80:2b:46:c3:5f:cf:6a:c7:a6: a4:8d:9c:3c:45:e1:1a:ff:c0:08:49:37:37:5e:5c:77:d5:65: ae:f3:02:5d:cb:04:66:e9:55:55:5c:b5:cf:c8:25:5e:dc:80: 5b:94:02:17:6d:b0:2b:dc:c9:62:76:86:01:7f:62:08:53:ec: 1a:60:58:28:01:99:aa:2e:a9:e0:19:64:f9:fc:32:1b:b6:e3: 6e:ba:4d:5e:39:72:a8:12:1c:0c:ad:89:47:29:81:1a:45:25: 5d:16:d9:38:6b:1d:9a:dc:28:b0:ab:30:cf:07:a3:87:d7:bc: 6a:29:8c:23:02:76:68:a0:1b:28:48:42:4f:c1:c1:46:a8:f2: f3:2a:83:1f:3f:e1:91:86:10:d4:26:e9:3f:af:08:9c:65:1b: 34:10:e5:94:1f:b7:fb:05:5f:ac:dd:b0:e6:39:35:d6:8d:c8: be:0b:a0:1d:6d:04:26:cc:d1:33:9e:03:fc:f8:2f:51:29:54: ec:0d:f8:96:72:cc:35:d6:49:f5:0d:3b:90:30:f1:aa:7f:b4: 31:a7:0d:99:88:07:c3:33:fa:64:cc:3e:b8:d6:8a:d2:d1:db: 35:e7:55:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULqVzQlkwLcPuWhbPHKk2Su8njoQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDMwMDAwMDA3WhcNMjYwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTIxM2M2M2NkOTNiN2RjYTFkZTllMGE5MmJhZDExN2Vj Nzg5MDMwOTNlNTEwYzdiMmUwNDdiMWE5ZmRiZDg3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDW1NEbgBy6qgSS34IDenaJ6/4cwbcB0hG0NTvGEFyJInn DXZpvU/NH1IzfEuPlk8MsBoRQzrIphjk6jctqIl/zN+Q7teB7fwSSz884enRla/J 12iKVFL4TsZNCySQuzd4hYGr1hd3iXIQvBJJJQk0lJx0gL9yniEbgWihM4bPhtOw l2QppbuLQAlqXExQVqqzwpukYdOzvq7pKJaXVK9SM7APGadS6MpA5RWKGC+Ue/uI zG5G//HZDExsXIYhkpRBcdr4GP8PIdC3UuKd/pSx+4bOkWU9yIiiqgotQLMIidp4 yr4ZGAPfWz9n4VWF/MtTVCalkif0rkSdgVylG9sdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyXjlsIV42esI75JpAxxoid3ZI9UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5NTdmZjkyLWFiNGMtNGM1Mi1hNjExLTQ2MGU5NGIzMjljMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVZOqAwDQYJKoZIhvcNAQELBQADggEBABSbE6ssYbYMBsokv/MmSVV3cG3H L4V2ba1CLYArRsNfz2rHpqSNnDxF4Rr/wAhJNzdeXHfVZa7zAl3LBGbpVVVctc/I JV7cgFuUAhdtsCvcyWJ2hgF/YghT7BpgWCgBmaouqeAZZPn8Mhu24266TV45cqgS HAytiUcpgRpFJV0W2ThrHZrcKLCrMM8Ho4fXvGopjCMCdmigGyhIQk/BwUao8vMq gx8/4ZGGENQm6T+vCJxlGzQQ5ZQft/sFX6zdsOY5NdaNyL4LoB1tBCbM0TOeA/z4 L1EpVOwN+JZyzDXWSfUNO5Aw8ap/tDGnDZmIB8Mz+mTMPrjWitLR2zXnVbI= -----END CERTIFICATE-----Generated at Mon May 4 21:39:36 2026 by rpki-client