$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6c2d021-3b36-48cc-9791-effb5d1fce22.roa File: a6c2d021-3b36-48cc-9791-effb5d1fce22.roa (raw, json) Hash identifier: Q1B8OmmMecR8lTF/WpJLVsZX2D8KBTjemaR/oAUgZBc= Subject key identifier: 67:1E:7B:FE:18:EA:1B:7E:D8:F4:72:B9:6A:FC:FE:9B:14:68:52:FB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 544457777F95E54287B8A857264EDFB1AB35D048 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6c2d021-3b36-48cc-9791-effb5d1fce22.roa Signing time: Tue 28 Apr 2026 00:20:12 +0000 ROA not before: Tue 28 Apr 2026 00:20:12 +0000 ROA not after: Mon 27 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.148.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:44:57:77:7f:95:e5:42:87:b8:a8:57:26:4e:df:b1:ab:35:d0:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 00:20:12 2026 GMT Not After : Jul 27 23:59:59 2026 GMT Subject: serialNumber=2465eac4fcdcf00930c2149b20f3b47d7cea50ec13c66ce92911be84f4a0e98b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:77:23:4b:f8:8a:72:b3:b3:eb:e0:a1:44: 97:fa:9d:86:28:85:80:1c:38:5a:dd:56:64:4b:75: 06:ba:3b:e8:0c:3f:29:8d:10:09:b9:35:aa:be:7c: 16:b1:a5:d1:c4:cd:61:1e:b9:c9:74:37:cb:6f:e1: c1:90:d7:06:3d:19:5a:fc:04:66:97:82:1c:da:f7: d4:2d:77:fe:aa:0b:b5:80:f3:4e:fe:b2:43:b2:5f: 36:c2:01:4b:a7:5b:d3:39:03:14:60:38:bf:d2:78: 2f:18:38:a4:d9:36:47:64:76:60:48:fe:8d:43:65: ae:32:ff:f0:7b:7b:9a:c1:0a:23:32:d4:d7:53:7d: 0c:df:8f:87:53:c9:93:34:fa:94:49:fc:9e:5e:ac: b1:0d:bc:3b:10:c7:2a:14:67:f6:d7:89:3a:63:5d: 53:2c:9c:17:a0:df:15:70:af:28:bb:f5:46:f7:41: 65:db:0c:57:34:1f:16:9d:c8:81:f2:e0:d0:06:49: cb:75:5b:24:0d:62:26:be:79:83:f8:28:f2:c7:fa: 3c:c3:55:63:84:42:0a:25:45:3d:29:9d:43:14:6a: c0:45:28:ed:58:42:1f:29:dd:54:82:d0:96:7b:c4: f1:c1:ca:25:98:60:ab:ac:ad:1e:85:d0:f2:55:db: de:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1E:7B:FE:18:EA:1B:7E:D8:F4:72:B9:6A:FC:FE:9B:14:68:52:FB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6c2d021-3b36-48cc-9791-effb5d1fce22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.148.0.0/16 Signature Algorithm: sha256WithRSAEncryption 85:01:de:05:0e:2e:93:18:ef:23:85:ee:92:69:42:23:74:16: 23:9b:df:15:6d:b9:27:ad:2d:8a:59:e3:c3:64:0b:d0:be:26: 51:37:c5:89:c7:cb:f0:d2:59:5e:f1:08:3a:36:b1:13:48:7f: 0f:40:8b:5a:cc:0b:9d:da:5f:d3:41:62:f8:e1:6d:8d:ee:df: 13:4f:56:73:71:86:64:3d:67:eb:de:b0:d4:c5:08:35:73:12: a6:07:8b:96:8c:9c:ac:6e:6a:41:c0:f3:28:42:83:0e:11:d5: cf:eb:2f:d7:57:63:a9:c9:c3:61:ed:f9:7b:89:1f:3d:2d:4a: 61:84:97:f5:a4:df:bd:e0:cd:84:f4:11:4a:c5:fc:1a:6e:65: 46:d4:fe:2a:f8:4d:93:1b:92:c5:a3:80:43:29:29:94:b4:d4: 31:b9:b5:a1:b2:20:60:11:16:21:f6:e1:b4:2c:e2:85:e1:bc: ab:27:1a:8b:4b:46:52:87:cf:5d:29:a3:45:f6:49:65:a9:1b: d3:e6:15:2d:07:93:6d:38:9a:b8:2d:00:eb:ec:da:2e:0b:7b: 55:32:cf:85:27:8c:af:24:7d:44:af:2a:1b:5e:bd:d1:15:e6: f1:5c:bc:3a:1e:99:93:9e:e4:a7:18:54:f0:e7:c8:0b:30:37: 17:90:a6:f6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVERXd3+V5UKHuKhXJk7fsas10EgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI4MDAyMDEyWhcNMjYwNzI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNDY1ZWFjNGZjZGNmMDA5MzBjMjE0OWIyMGYzYjQ3ZDdj ZWE1MGVjMTNjNjZjZTkyOTExYmU4NGY0YTBlOThiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC46XcjS/iKcrOz6+ChRJf6nYYohYAcOFrdVmRLdQa6O+gM PymNEAm5Naq+fBaxpdHEzWEeucl0N8tv4cGQ1wY9GVr8BGaXghza99Qtd/6qC7WA 807+skOyXzbCAUunW9M5AxRgOL/SeC8YOKTZNkdkdmBI/o1DZa4y//B7e5rBCiMy 1NdTfQzfj4dTyZM0+pRJ/J5erLENvDsQxyoUZ/bXiTpjXVMsnBeg3xVwryi79Ub3 QWXbDFc0HxadyIHy4NAGSct1WyQNYia+eYP4KPLH+jzDVWOEQgolRT0pnUMUasBF KO1YQh8p3VSC0JZ7xPHByiWYYKusrR6F0PJV296HAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUZx57/hjqG37Y9HK5avz+mxRoUvswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E2YzJkMDIxLTNiMzYtNDhjYy05NzkxLWVmZmI1ZDFmY2UyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQlDANBgkqhkiG9w0BAQsFAAOCAQEAhQHeBQ4ukxjvI4XukmlCI3QWI5vf FW25J60tilnjw2QL0L4mUTfFicfL8NJZXvEIOjaxE0h/D0CLWswLndpf00Fi+OFt je7fE09Wc3GGZD1n696w1MUINXMSpgeLloycrG5qQcDzKEKDDhHVz+sv11djqcnD Ye35e4kfPS1KYYSX9aTfveDNhPQRSsX8Gm5lRtT+KvhNkxuSxaOAQykplLTUMbm1 obIgYBEWIfbhtCziheG8qycai0tGUofPXSmjRfZJZakb0+YVLQeTbTiauC0A6+za Lgt7VTLPhSeMryR9RK8qG1690RXm8Vy8Oh6Zk57kpxhU8OfICzA3F5Cm9g== -----END CERTIFICATE-----Generated at Sun May 3 15:30:55 2026 by rpki-client