$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8921bbf-47e4-4d8a-8954-9d95e5a78862.roa File: c8921bbf-47e4-4d8a-8954-9d95e5a78862.roa (raw, json) Hash identifier: BfV7w0fvz5PsMxWJHu6Zek4fbYhlZ2Y/1CpocN82JYU= Subject key identifier: 40:4E:EB:EA:F3:DF:B1:CC:0C:95:44:69:1D:B6:EA:51:7D:B6:79:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4422851C7B7EA6BE49587CE5D9FF4268799111EC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8921bbf-47e4-4d8a-8954-9d95e5a78862.roa Signing time: Tue 28 Apr 2026 00:10:37 +0000 ROA not before: Tue 28 Apr 2026 00:10:37 +0000 ROA not after: Mon 27 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 16.165.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:22:85:1c:7b:7e:a6:be:49:58:7c:e5:d9:ff:42:68:79:91:11:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 00:10:37 2026 GMT Not After : Jul 27 23:59:59 2026 GMT Subject: serialNumber=2379f837d443bc70da837fde84453f01d2a71533e6e2b25936af7cc19e75afe2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:01:f9:aa:8d:dc:96:15:58:d1:6d:dc:03: eb:24:24:d6:8a:c8:92:a6:6c:6d:89:d3:d1:8c:28: 6a:51:9d:ea:47:4d:30:67:8b:d3:8b:7d:93:03:2f: 73:7e:dd:97:39:33:b5:93:80:fa:d3:36:55:d9:84: 38:6f:85:41:9e:10:5b:48:4c:32:db:2b:b3:20:5c: 78:07:db:c8:d7:cb:89:52:40:90:62:22:b9:26:b3: ea:f8:1d:ff:15:41:d4:a3:dd:17:98:d5:8f:9b:13: f7:49:ea:64:ff:60:2a:e9:45:6b:98:e9:3c:61:25: ad:5c:ed:79:82:45:98:ed:e6:64:52:2f:44:cb:90: b5:94:3b:ed:5c:de:55:b4:99:07:19:aa:f0:ef:b6: ca:d3:bf:00:f1:c3:80:d2:1f:96:87:be:bf:99:61: 52:b7:60:75:3d:5f:f8:c1:1f:4f:c8:a7:03:bd:b5: e4:bd:89:86:34:1a:af:3d:94:4a:c6:19:a7:be:ac: 66:a2:43:45:e2:d0:ab:2f:91:43:f3:96:8a:19:5c: a0:65:29:e6:d9:0e:90:0a:a4:a1:cf:2a:2f:62:dd: 25:e8:7b:88:71:e5:88:21:5a:aa:fb:55:60:8d:eb: c0:7f:b7:4c:34:75:04:0c:86:45:9f:c7:a1:e7:b4: 72:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4E:EB:EA:F3:DF:B1:CC:0C:95:44:69:1D:B6:EA:51:7D:B6:79:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8921bbf-47e4-4d8a-8954-9d95e5a78862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.165.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8b:64:fa:d7:98:ee:0a:99:bd:9b:e0:18:ac:99:a4:5e:85:49: a0:56:de:6f:dc:34:d1:fc:a6:48:66:81:cf:47:db:1c:db:39: 8d:9d:02:e0:da:16:a3:3a:51:d6:82:ca:d8:95:96:ff:0c:1a: bf:b1:1f:01:86:76:8c:27:0b:1b:ec:7b:3b:76:fb:09:a5:32: ce:73:a9:f3:d7:2e:07:f5:c3:17:dd:07:19:75:89:09:7c:0d: 1c:22:93:08:e0:bc:8c:98:26:c5:d0:2b:9c:f2:02:91:db:ff: d9:2a:f1:01:a4:62:d8:dc:aa:62:68:de:95:90:92:62:20:6e: 68:1d:c7:e0:00:b6:5f:fa:68:69:dc:dd:93:65:aa:b7:55:35: ce:74:b5:ce:f3:76:6b:62:15:69:ce:9a:2b:3c:5c:ab:1d:99: 33:08:19:a9:db:77:5c:b7:e2:86:58:11:9a:6a:a5:b9:96:bf: bd:3b:ae:b3:79:10:57:5c:b8:75:62:c5:2f:41:21:18:63:32: 64:ad:03:b1:98:63:5c:54:3b:1e:3d:57:b8:ed:0d:99:00:f1: 92:e5:f8:d8:e0:4f:d9:99:bc:de:39:cd:9b:cb:2d:51:8e:68: 0e:41:aa:c7:7d:0f:64:6d:69:81:25:9f:70:2d:56:b6:68:b8: 56:78:f9:a9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURCKFHHt+pr5JWHzl2f9CaHmREewwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI4MDAxMDM3WhcNMjYwNzI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzc5ZjgzN2Q0NDNiYzcwZGE4MzdmZGU4NDQ1M2YwMWQy YTcxNTMzZTZlMmIyNTkzNmFmN2NjMTllNzVhZmUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCitwH5qo3clhVY0W3cA+skJNaKyJKmbG2J09GMKGpRnepH TTBni9OLfZMDL3N+3Zc5M7WTgPrTNlXZhDhvhUGeEFtITDLbK7MgXHgH28jXy4lS QJBiIrkms+r4Hf8VQdSj3ReY1Y+bE/dJ6mT/YCrpRWuY6TxhJa1c7XmCRZjt5mRS L0TLkLWUO+1c3lW0mQcZqvDvtsrTvwDxw4DSH5aHvr+ZYVK3YHU9X/jBH0/IpwO9 teS9iYY0Gq89lErGGae+rGaiQ0Xi0KsvkUPzlooZXKBlKebZDpAKpKHPKi9i3SXo e4hx5YghWqr7VWCN68B/t0w0dQQMhkWfx6HntHKBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQE7r6vPfscwMlURpHbbqUX22eeEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4OTIxYmJmLTQ3ZTQtNGQ4YS04OTU0LTlkOTVlNWE3ODg2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQpTANBgkqhkiG9w0BAQsFAAOCAQEAi2T615juCpm9m+AYrJmkXoVJoFbe b9w00fymSGaBz0fbHNs5jZ0C4NoWozpR1oLK2JWW/wwav7EfAYZ2jCcLG+x7O3b7 CaUyznOp89cuB/XDF90HGXWJCXwNHCKTCOC8jJgmxdArnPICkdv/2SrxAaRi2Nyq YmjelZCSYiBuaB3H4AC2X/poadzdk2Wqt1U1znS1zvN2a2IVac6aKzxcqx2ZMwgZ qdt3XLfihlgRmmqluZa/vTuus3kQV1y4dWLFL0EhGGMyZK0DsZhjXFQ7Hj1XuO0N mQDxkuX42OBP2Zm83jnNm8stUY5oDkGqx30PZG1pgSWfcC1Wtmi4Vnj5qQ== -----END CERTIFICATE-----Generated at Mon May 4 21:38:44 2026 by rpki-client