$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd0a48b3-df0d-40fd-8359-6734b3864352.roa File: cd0a48b3-df0d-40fd-8359-6734b3864352.roa (raw, json) Hash identifier: fFxGj9mZGx7DMf1wMBcY6aZMbBD1xFH21nJMrt1kjF8= Subject key identifier: C0:2A:D6:93:B6:31:0C:8F:1E:9A:71:F7:DC:10:CE:C3:08:AF:E1:36 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 315E541D956573867FFE5673077F77337FD052A5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd0a48b3-df0d-40fd-8359-6734b3864352.roa Signing time: Sun 03 May 2026 16:47:04 +0000 ROA not before: Sun 03 May 2026 16:47:04 +0000 ROA not after: Sat 01 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:5e:54:1d:95:65:73:86:7f:fe:56:73:07:7f:77:33:7f:d0:52:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 16:47:04 2026 GMT Not After : Aug 1 23:59:59 2026 GMT Subject: serialNumber=d3b574a6cd8c5d8680601d5a6bd39bcf6a0c0f1ee435f574bddcc5c90dc61e5e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7a:9a:b8:8c:e9:dd:21:6f:a3:f5:4f:3a:94: 98:55:64:ed:b6:c1:b7:1e:ee:84:76:59:10:96:4a: b6:03:42:b7:2c:a9:7f:ff:3c:f5:c0:4c:a6:63:7f: 87:40:6f:e2:eb:d0:0f:60:9e:60:0c:34:87:c5:4b: 49:cc:d6:46:1e:23:6b:38:5b:ff:e0:93:38:a6:51: f8:0c:ab:75:75:68:e1:d9:18:0c:fa:b1:70:11:14: b3:ad:00:47:1b:7a:7c:a9:9d:91:1f:05:4a:2c:1d: 27:d7:c6:1c:08:3f:a0:63:40:d1:52:a5:1e:d3:d5: 37:86:31:74:e1:6e:f3:12:b4:64:d2:db:5e:26:6c: 98:b6:aa:35:02:d8:c9:a1:63:9c:43:9a:f1:8f:88: d4:d3:7f:97:68:21:50:bd:12:12:a3:a8:a8:9e:7a: 97:ea:2c:dc:9b:23:f4:22:1e:38:64:49:2c:f0:ae: ef:ed:41:57:b0:62:4d:3f:32:86:01:ed:11:2f:47: a9:c6:b5:84:d5:39:57:2f:e1:88:bc:4c:33:bf:d0: af:10:20:5c:97:b9:0a:18:67:93:27:63:6f:0e:e7: b5:d9:8b:1f:0e:10:25:b3:cb:09:1d:06:91:7b:ce: 4a:79:a6:53:12:bd:c9:17:36:3d:6c:57:48:8e:eb: 5a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2A:D6:93:B6:31:0C:8F:1E:9A:71:F7:DC:10:CE:C3:08:AF:E1:36 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd0a48b3-df0d-40fd-8359-6734b3864352.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.164.0/24 Signature Algorithm: sha256WithRSAEncryption 10:c0:b3:fc:66:76:43:f6:5b:84:63:e3:ad:05:21:ad:4b:d3: 34:0b:63:2e:fb:64:96:ca:cb:a3:41:cd:9b:d0:eb:b1:2b:9f: 7f:ea:8b:ff:dd:1a:0d:36:c7:3f:ba:e7:5e:b6:16:1f:8a:da: 3a:47:a6:c2:0e:5e:7e:c1:80:ae:ee:dd:6b:16:09:14:fa:13: 74:f5:8a:94:b4:51:18:87:a1:d5:19:5c:45:38:01:4a:8d:6c: ec:74:5d:51:b2:68:e4:d4:0a:6a:9d:9f:3a:d3:da:e0:71:1e: 87:96:75:b1:34:9a:83:bf:78:74:7e:db:9d:3f:07:04:ae:23: 39:77:fd:41:cd:0c:27:a8:e6:93:a5:30:e4:36:19:87:73:be: 69:90:11:fa:f8:d2:b6:eb:9c:90:34:7f:49:ca:ae:7a:57:1e: e5:9c:fc:ea:d6:8f:63:f7:db:df:a0:5c:d0:44:a2:05:af:cc: 4c:b9:9d:34:52:06:88:7e:14:7e:8f:94:27:2c:03:f7:cb:b0: 22:76:82:7c:0e:cb:71:ae:6b:67:22:b3:37:3a:28:3d:84:cc: fa:bd:2d:6d:c3:ac:3a:b0:60:e6:6e:21:ab:17:ec:59:63:67: 30:9c:12:91:5a:3c:b5:7f:ee:eb:cf:a4:62:da:83:24:e9:0d: 09:fd:87:61 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMV5UHZVlc4Z//lZzB393M3/QUqUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAzMTY0NzA0WhcNMjYwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkM2I1NzRhNmNkOGM1ZDg2ODA2MDFkNWE2YmQzOWJjZjZh MGMwZjFlZTQzNWY1NzRiZGRjYzVjOTBkYzYxZTVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTepq4jOndIW+j9U86lJhVZO22wbce7oR2WRCWSrYDQrcs qX//PPXATKZjf4dAb+Lr0A9gnmAMNIfFS0nM1kYeI2s4W//gkzimUfgMq3V1aOHZ GAz6sXARFLOtAEcbenypnZEfBUosHSfXxhwIP6BjQNFSpR7T1TeGMXThbvMStGTS 214mbJi2qjUC2MmhY5xDmvGPiNTTf5doIVC9EhKjqKieepfqLNybI/QiHjhkSSzw ru/tQVewYk0/MoYB7REvR6nGtYTVOVcv4Yi8TDO/0K8QIFyXuQoYZ5MnY28O57XZ ix8OECWzywkdBpF7zkp5plMSvckXNj1sV0iO61p7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwCrWk7YxDI8emnH33BDOwwiv4TYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkMGE0OGIzLWRmMGQtNDBmZC04MzU5LTY3MzRiMzg2NDM1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7qQwDQYJKoZIhvcNAQELBQADggEBABDAs/xmdkP2W4Rj460FIa1L0zQL Yy77ZJbKy6NBzZvQ67Ern3/qi//dGg02xz+65162Fh+K2jpHpsIOXn7BgK7u3WsW CRT6E3T1ipS0URiHodUZXEU4AUqNbOx0XVGyaOTUCmqdnzrT2uBxHoeWdbE0moO/ eHR+250/BwSuIzl3/UHNDCeo5pOlMOQ2GYdzvmmQEfr40rbrnJA0f0nKrnpXHuWc /OrWj2P329+gXNBEogWvzEy5nTRSBoh+FH6PlCcsA/fLsCJ2gnwOy3Gua2ciszc6 KD2EzPq9LW3DrDqwYOZuIasX7FljZzCcEpFaPLV/7uvPpGLagyTpDQn9h2E= -----END CERTIFICATE-----Generated at Mon May 4 21:37:02 2026 by rpki-client