$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab3f2ad1-9214-4a98-8573-eb7c27739641.roa File: ab3f2ad1-9214-4a98-8573-eb7c27739641.roa (raw, json) Hash identifier: xiIt7yugMfUExBB5+SFJz3oJO9RdikOwSwwRsVyoQ24= Subject key identifier: 46:85:48:1B:8A:21:1A:F2:D2:51:FB:79:B2:14:E7:81:45:A8:C8:5C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54214570D8A750095C92C182E23EFAFE8FA018F7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab3f2ad1-9214-4a98-8573-eb7c27739641.roa Signing time: Sun 03 May 2026 16:50:15 +0000 ROA not before: Sun 03 May 2026 16:50:15 +0000 ROA not after: Sat 01 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:21:45:70:d8:a7:50:09:5c:92:c1:82:e2:3e:fa:fe:8f:a0:18:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 16:50:15 2026 GMT Not After : Aug 1 23:59:59 2026 GMT Subject: serialNumber=d73f46cdc8fd50ee9029c1434be885e1b22ca58c94e81f879350ca033895fb5f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:39:9e:2f:b8:3b:e0:d5:80:c1:1f:0b:ea:92: ec:ca:15:df:c2:51:ae:c3:77:d4:b4:d0:aa:09:c9: dc:f2:c0:9c:ab:4c:32:9b:c6:9d:b5:94:f2:7f:c1: 24:88:28:54:00:68:33:8c:f4:d6:c6:0b:13:40:d5: 4b:3c:77:10:58:5a:ba:eb:7f:cf:36:c9:15:c3:84: 52:af:5f:f4:ee:64:4f:16:da:1e:24:85:ad:80:43: 88:55:86:f2:47:88:ec:3a:fe:d1:3e:55:11:99:2c: 4b:60:9f:d6:50:07:3a:8c:bd:ac:7c:81:d9:d7:ee: 2a:ad:2e:e6:3e:53:77:78:cd:b9:d7:d3:d9:dd:09: 98:4a:d5:65:9d:3f:ce:c1:fb:f5:51:66:8d:29:e9: 1e:ab:4e:24:17:50:b7:bc:3f:68:01:81:a4:c0:da: 97:50:5a:3f:1d:61:df:67:8b:1c:aa:7a:3c:30:e9: 37:b4:30:4b:44:9b:cc:dd:15:37:0c:48:9c:46:34: 50:1c:90:32:dd:64:a1:2f:be:d3:05:18:93:0c:c6: 6b:f1:80:09:42:5f:14:a7:cf:b9:84:bf:58:77:6f: 3b:89:45:09:d7:a9:74:da:58:92:74:7c:67:39:08: bd:d6:4b:eb:92:00:4e:61:8d:f3:3e:42:c5:c2:25: 43:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:85:48:1B:8A:21:1A:F2:D2:51:FB:79:B2:14:E7:81:45:A8:C8:5C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab3f2ad1-9214-4a98-8573-eb7c27739641.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.206.0/24 Signature Algorithm: sha256WithRSAEncryption d8:81:28:55:db:6b:3e:7b:36:53:51:b2:76:11:d8:0d:df:bd: 54:f2:56:90:0c:36:93:97:22:fe:04:00:0b:36:0c:ab:b1:94: af:50:a3:1c:4f:20:51:0a:df:7d:5f:5d:cd:96:6c:7e:b1:13: a1:67:e3:21:e7:81:dc:58:70:bc:8e:c8:fc:a4:cc:29:08:be: f0:c0:fe:45:2b:34:be:36:69:d7:95:6e:96:63:97:cd:47:93: 79:36:53:53:c1:8e:3b:04:7d:af:e4:c6:ef:fe:ed:8e:9e:0f: a2:a1:e8:04:91:58:f5:52:e2:11:57:02:36:27:46:a3:dc:ee: 6f:58:21:a6:c1:fc:89:c5:46:b1:78:40:c5:a1:02:68:c8:65: f5:f3:e9:69:02:54:85:c4:b1:cf:1f:e0:18:76:82:79:46:c0: 34:fd:e5:e8:e9:cf:0c:28:a2:5b:cc:0d:bc:9e:dd:08:15:28: d5:f3:ea:eb:6d:5c:cd:35:ce:e7:35:9a:f6:03:ee:b5:55:56: 6d:a2:76:21:14:ae:80:43:cc:d3:2a:21:11:72:54:be:db:f5: 11:df:44:f9:d2:41:8a:57:7d:72:b9:0d:48:a3:7c:ee:ca:79: ed:a5:11:96:19:b4:fc:32:1b:20:07:3e:25:38:ea:2c:6e:b5: a3:84:0d:89 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVCFFcNinUAlcksGC4j76/o+gGPcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAzMTY1MDE1WhcNMjYwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzNmNDZjZGM4ZmQ1MGVlOTAyOWMxNDM0YmU4ODVlMWIy MmNhNThjOTRlODFmODc5MzUwY2EwMzM4OTVmYjVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZOZ4vuDvg1YDBHwvqkuzKFd/CUa7Dd9S00KoJydzywJyr TDKbxp21lPJ/wSSIKFQAaDOM9NbGCxNA1Us8dxBYWrrrf882yRXDhFKvX/TuZE8W 2h4kha2AQ4hVhvJHiOw6/tE+VRGZLEtgn9ZQBzqMvax8gdnX7iqtLuY+U3d4zbnX 09ndCZhK1WWdP87B+/VRZo0p6R6rTiQXULe8P2gBgaTA2pdQWj8dYd9nixyqejww 6Te0MEtEm8zdFTcMSJxGNFAckDLdZKEvvtMFGJMMxmvxgAlCXxSnz7mEv1h3bzuJ RQnXqXTaWJJ0fGc5CL3WS+uSAE5hjfM+QsXCJUMvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURoVIG4ohGvLSUft5shTngUWoyFwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FiM2YyYWQxLTkyMTQtNGE5OC04NTczLWViN2MyNzczOTY0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7s4wDQYJKoZIhvcNAQELBQADggEBANiBKFXbaz57NlNRsnYR2A3fvVTy VpAMNpOXIv4EAAs2DKuxlK9QoxxPIFEK331fXc2WbH6xE6Fn4yHngdxYcLyOyPyk zCkIvvDA/kUrNL42adeVbpZjl81Hk3k2U1PBjjsEfa/kxu/+7Y6eD6Kh6ASRWPVS 4hFXAjYnRqPc7m9YIabB/InFRrF4QMWhAmjIZfXz6WkCVIXEsc8f4Bh2gnlGwDT9 5ejpzwwoolvMDbye3QgVKNXz6uttXM01zuc1mvYD7rVVVm2idiEUroBDzNMqIRFy VL7b9RHfRPnSQYpXfXK5DUijfO7Kee2lEZYZtPwyGyAHPiU46ixutaOEDYk= -----END CERTIFICATE-----Generated at Mon May 4 21:36:56 2026 by rpki-client