$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbd13b89-cc77-4191-ab8d-32ccce05a4ff.roa File: cbd13b89-cc77-4191-ab8d-32ccce05a4ff.roa (raw, json) Hash identifier: Rd/SxWEOqALqQa0j+zaekOub3z+AMvGvzrh2C6MIE/M= Subject key identifier: 10:45:5B:70:9B:17:2E:45:A5:C9:5B:4E:04:06:F7:CD:1A:BF:55:FD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1BDE552EC48D1D0EF895F16CCC444F39A25BD409 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbd13b89-cc77-4191-ab8d-32ccce05a4ff.roa Signing time: Thu 30 Apr 2026 03:02:01 +0000 ROA not before: Thu 30 Apr 2026 03:02:01 +0000 ROA not after: Wed 29 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 130.176.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:de:55:2e:c4:8d:1d:0e:f8:95:f1:6c:cc:44:4f:39:a2:5b:d4:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 30 03:02:01 2026 GMT Not After : Jul 29 23:59:59 2026 GMT Subject: serialNumber=b0c012ac5a1a1204949992cbe52d7feb5e45d536d30fdd47acfe31a13bcad34b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b0:a2:28:ba:38:c2:d2:ea:05:71:da:76:b9: d7:5b:ba:b5:6d:7a:3c:7f:38:31:ff:62:33:fd:f9: 63:0c:17:52:d9:bc:12:7b:64:bc:7f:44:5f:58:76: cc:31:fa:c4:fa:48:16:9c:76:bd:28:c6:fa:58:30: 4d:f0:28:62:6c:77:4b:95:ea:8d:81:99:57:e9:79: 34:64:e1:e1:fa:c4:09:86:a7:45:b6:b1:99:e6:b1: cc:42:3b:e5:ea:f2:e7:cc:fa:e9:26:e9:59:b2:e0: 58:fa:42:3f:5a:8b:c7:19:24:2e:8b:0c:72:8c:91: d8:43:9a:95:d5:34:f1:3d:dc:ab:8a:4d:13:3f:53: 2d:d1:36:4e:6b:76:d6:17:89:64:39:19:d2:ce:2e: 8b:5f:f4:de:d7:70:cd:3c:1d:75:0a:fe:70:1c:29: 57:56:e6:d7:8e:41:13:7e:b7:8a:e0:80:d7:84:8b: b8:a6:14:e8:22:5b:2e:11:c3:6b:2f:05:66:69:56: 4d:05:fc:11:79:16:68:29:86:04:a2:99:f3:b7:52: aa:e1:f8:fc:82:67:7a:c5:90:fd:a8:71:66:72:ba: 67:52:93:51:ec:83:64:2a:85:e0:e6:57:99:3e:0b: b3:72:ef:69:64:f4:3e:d0:2b:f9:97:20:8e:76:8c: 69:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:45:5B:70:9B:17:2E:45:A5:C9:5B:4E:04:06:F7:CD:1A:BF:55:FD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbd13b89-cc77-4191-ab8d-32ccce05a4ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.11.0/24 Signature Algorithm: sha256WithRSAEncryption c4:1b:8a:42:48:5d:98:8a:11:81:11:6d:0d:10:d8:a5:46:06: b4:5c:c2:64:7e:da:6e:14:58:34:be:c5:03:b3:00:a8:b7:3c: 0a:32:83:a6:e4:c4:aa:09:95:4d:d0:4b:aa:94:33:6a:83:65: e9:58:5f:6c:b2:20:3d:59:10:00:69:09:c6:39:a0:ab:09:18: 07:c9:9c:ba:18:fb:b9:27:1b:2f:4f:b0:6e:6f:8a:62:9e:92: 95:eb:45:56:7f:c3:9c:35:91:6f:72:ca:ae:83:95:9f:2b:f6: 0d:c2:1b:86:89:2c:f1:a2:c5:9a:65:5d:db:57:46:c8:ac:ca: d6:78:b3:7f:8b:32:ea:26:e1:f9:11:c4:24:82:ce:8c:b8:88: 5e:45:a0:c5:28:84:57:e3:e3:bf:b4:d0:5e:53:09:2c:f8:31: 22:f0:95:5a:14:26:5d:20:29:1b:07:ac:38:72:60:4d:ec:c6: 24:48:e6:3d:74:9a:b9:7d:91:cb:c4:99:ca:80:0e:2a:10:11: fb:a0:30:6f:be:23:51:c6:8d:88:c5:17:15:1f:ce:61:31:74: ed:76:95:17:56:a7:a4:b9:55:ed:13:8c:65:47:41:0e:88:4e: 0d:da:9d:a2:46:df:79:16:8d:4e:77:ab:44:60:25:83:df:01: f2:3e:3d:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG95VLsSNHQ74lfFszERPOaJb1AkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDMwMDMwMjAxWhcNMjYwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMGMwMTJhYzVhMWExMjA0OTQ5OTkyY2JlNTJkN2ZlYjVl NDVkNTM2ZDMwZmRkNDdhY2ZlMzFhMTNiY2FkMzRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTsKIoujjC0uoFcdp2uddburVtejx/ODH/YjP9+WMMF1LZ vBJ7ZLx/RF9Ydswx+sT6SBacdr0oxvpYME3wKGJsd0uV6o2BmVfpeTRk4eH6xAmG p0W2sZnmscxCO+Xq8ufM+ukm6Vmy4Fj6Qj9ai8cZJC6LDHKMkdhDmpXVNPE93KuK TRM/Uy3RNk5rdtYXiWQ5GdLOLotf9N7XcM08HXUK/nAcKVdW5teOQRN+t4rggNeE i7imFOgiWy4Rw2svBWZpVk0F/BF5FmgphgSimfO3Uqrh+PyCZ3rFkP2ocWZyumdS k1Hsg2QqheDmV5k+C7Ny72lk9D7QK/mXII52jGlrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEEVbcJsXLkWlyVtOBAb3zRq/Vf0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiZDEzYjg5LWNjNzctNDE5MS1hYjhkLTMyY2NjZTA1YTRmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsAswDQYJKoZIhvcNAQELBQADggEBAMQbikJIXZiKEYERbQ0Q2KVGBrRc wmR+2m4UWDS+xQOzAKi3PAoyg6bkxKoJlU3QS6qUM2qDZelYX2yyID1ZEABpCcY5 oKsJGAfJnLoY+7knGy9PsG5vimKekpXrRVZ/w5w1kW9yyq6DlZ8r9g3CG4aJLPGi xZplXdtXRsisytZ4s3+LMuom4fkRxCSCzoy4iF5FoMUohFfj47+00F5TCSz4MSLw lVoUJl0gKRsHrDhyYE3sxiRI5j10mrl9kcvEmcqADioQEfugMG++I1HGjYjFFxUf zmExdO12lRdWp6S5Ve0TjGVHQQ6ITg3anaJG33kWjU53q0RgJYPfAfI+Pb8= -----END CERTIFICATE-----Generated at Sun May 3 14:44:50 2026 by rpki-client