$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b802b55b-ad50-4a90-858f-89ddec9187bf.roa File: b802b55b-ad50-4a90-858f-89ddec9187bf.roa (raw, json) Hash identifier: Sucl2BDwe9OhB2mM5M6PsZr+ImBNxogIoHCT2eM7EAA= Subject key identifier: FD:6F:F7:6D:51:19:8F:B2:BD:EE:7E:E5:80:B0:54:B5:95:54:15:D5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 19517A1C60E0AFC669F5B84F20EF39930780A2BA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b802b55b-ad50-4a90-858f-89ddec9187bf.roa Signing time: Mon 27 Apr 2026 00:20:05 +0000 ROA not before: Mon 27 Apr 2026 00:20:05 +0000 ROA not after: Sun 26 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 65.9.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:51:7a:1c:60:e0:af:c6:69:f5:b8:4f:20:ef:39:93:07:80:a2:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 27 00:20:05 2026 GMT Not After : Jul 26 23:59:59 2026 GMT Subject: serialNumber=f776dd2103188e347a5ea2a1b965ecd0fd9c5254109988bef192adc0bd0d943a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ff:8e:0f:57:b2:3c:ac:10:85:08:2f:24:0e: 02:21:ac:0e:45:bd:ad:c8:31:f3:7f:83:e1:44:8a: eb:dc:dc:d6:2d:1f:83:7d:18:b9:b5:aa:5a:fc:d3: 24:b6:9e:d8:3e:69:6a:d2:36:de:a0:4b:18:b3:a9: fe:77:db:e1:13:77:c8:22:57:b2:6e:93:3c:fb:09: 2b:6e:70:3c:1d:69:fd:3f:9c:f2:25:2c:af:6c:de: 35:2e:d3:3f:e9:fc:6c:a3:2f:53:3e:3a:33:72:4d: 8b:8a:d3:30:7f:0c:87:85:83:72:b7:d0:7b:46:39: d2:7d:24:c2:ca:0a:7a:44:5b:7b:3a:67:8e:4b:f3: 45:1c:2b:cf:0e:68:3a:a4:4e:9e:f0:ae:31:01:7d: 9d:1c:f1:58:b3:0f:fa:0a:5e:9e:68:64:a8:c8:7c: fc:46:a0:e7:d4:65:91:4f:65:a9:45:aa:c1:38:a5: 62:c1:0d:02:4c:00:fe:0a:41:33:23:1f:4c:99:27: 04:2f:47:31:f1:63:b5:9e:6b:36:7d:3d:67:19:15: a5:73:00:03:2c:97:6d:df:17:4b:21:5d:c7:5f:76: 0d:8b:f8:67:c5:8b:75:91:65:89:d0:79:89:37:4b: 73:74:a7:eb:f2:ca:e8:f0:e7:80:99:64:2e:7d:f7: a6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6F:F7:6D:51:19:8F:B2:BD:EE:7E:E5:80:B0:54:B5:95:54:15:D5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b802b55b-ad50-4a90-858f-89ddec9187bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.9.138.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:c5:ec:cb:cd:9f:6d:2a:9b:45:1e:68:bb:32:41:8e:d5:33: a9:10:fc:5f:cf:62:c7:5c:fa:b3:4b:5d:2c:7b:96:4d:05:6e: 9b:ac:02:7c:d2:01:da:93:60:72:3e:3b:1e:a5:f9:c8:13:8c: 96:32:71:61:4c:db:22:03:9b:ca:34:53:9b:d6:34:21:c5:17: 9d:03:b7:2e:ea:23:28:9a:86:ae:aa:3c:36:31:d7:53:7e:6c: 96:d7:8a:da:8c:13:73:55:6b:90:0d:82:a6:6d:ca:49:51:cc: 37:c8:d6:8d:a4:c4:96:5b:f5:23:29:e5:cb:06:9a:f0:cc:68: df:b2:f3:f9:fe:33:53:e4:5b:3f:0a:37:1c:1e:19:9e:be:b0: a8:22:99:ba:9a:89:e6:c0:6e:a7:15:8e:44:2d:ac:f5:c3:e2: 23:e6:3c:6a:0a:18:22:3f:67:42:ef:a1:d1:7f:98:ad:c3:32: 39:be:69:12:66:0b:7d:37:71:41:5f:de:22:46:47:47:50:ee: b3:4f:61:fa:7f:cc:2f:b2:3e:4d:b2:b3:d0:5f:e2:72:02:12: 83:04:4b:d6:d8:96:2f:f6:8a:64:86:28:49:e2:c4:ef:4c:ca: bf:aa:97:ac:bb:ed:e3:ff:ea:7c:50:db:1c:22:b2:d9:4c:70: 6d:af:49:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGVF6HGDgr8Zp9bhPIO85kweAorowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI3MDAyMDA1WhcNMjYwNzI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNzc2ZGQyMTAzMTg4ZTM0N2E1ZWEyYTFiOTY1ZWNkMGZk OWM1MjU0MTA5OTg4YmVmMTkyYWRjMGJkMGQ5NDNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDr/44PV7I8rBCFCC8kDgIhrA5Fva3IMfN/g+FEiuvc3NYt H4N9GLm1qlr80yS2ntg+aWrSNt6gSxizqf532+ETd8giV7Jukzz7CStucDwdaf0/ nPIlLK9s3jUu0z/p/GyjL1M+OjNyTYuK0zB/DIeFg3K30HtGOdJ9JMLKCnpEW3s6 Z45L80UcK88OaDqkTp7wrjEBfZ0c8VizD/oKXp5oZKjIfPxGoOfUZZFPZalFqsE4 pWLBDQJMAP4KQTMjH0yZJwQvRzHxY7WeazZ9PWcZFaVzAAMsl23fF0shXcdfdg2L +GfFi3WRZYnQeYk3S3N0p+vyyujw54CZZC5996ZpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/W/3bVEZj7K97n7lgLBUtZVUFdUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4MDJiNTViLWFkNTAtNGE5MC04NThmLTg5ZGRlYzkxODdiZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFBCYowDQYJKoZIhvcNAQELBQADggEBABzF7MvNn20qm0UeaLsyQY7VM6kQ /F/PYsdc+rNLXSx7lk0FbpusAnzSAdqTYHI+Ox6l+cgTjJYycWFM2yIDm8o0U5vW NCHFF50Dty7qIyiahq6qPDYx11N+bJbXitqME3NVa5ANgqZtyklRzDfI1o2kxJZb 9SMp5csGmvDMaN+y8/n+M1PkWz8KNxweGZ6+sKgimbqaiebAbqcVjkQtrPXD4iPm PGoKGCI/Z0LvodF/mK3DMjm+aRJmC303cUFf3iJGR0dQ7rNPYfp/zC+yPk2ys9Bf 4nICEoMES9bYli/2imSGKEnixO9Myr+ql6y77eP/6nxQ2xwistlMcG2vSb8= -----END CERTIFICATE-----Generated at Sun May 3 16:14:12 2026 by rpki-client