$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d69d305c-a658-4c39-8075-c28e2b201286.roa File: d69d305c-a658-4c39-8075-c28e2b201286.roa (raw, json) Hash identifier: JLGaBcde9mzAe71Qm9JdE0P3fZ6K0UHD0U2IQ057i6I= Subject key identifier: 87:18:BE:24:C1:48:A4:2F:18:9E:E5:E9:09:5C:80:97:4B:44:F2:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70C5087DA91E0CA9011354B5C9B83ECD7AF6D8BE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d69d305c-a658-4c39-8075-c28e2b201286.roa Signing time: Wed 29 Apr 2026 00:10:11 +0000 ROA not before: Wed 29 Apr 2026 00:10:11 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 208.115.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c5:08:7d:a9:1e:0c:a9:01:13:54:b5:c9:b8:3e:cd:7a:f6:d8:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:10:11 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=729c80977b284fca212a7015d7dc54c3715121054dd06d03ea6f7edf25078396, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:62:c8:33:17:f9:7d:2a:f3:87:bd:eb:53:1f: 29:60:10:53:f2:47:2d:ab:d2:a4:97:ad:27:6c:7d: a7:69:bc:dc:28:6b:25:3e:97:d8:2f:31:f3:5e:fd: e4:4a:94:41:af:c2:43:14:dc:88:f9:57:8f:70:80: 65:8c:0b:d0:29:d5:8c:40:60:80:81:60:fa:2c:08: 14:49:bc:4f:a5:7d:71:7c:ec:a5:30:a4:f2:16:eb: 78:4f:a6:34:20:3f:1d:93:97:8d:fb:f0:9f:56:9a: eb:cd:55:9b:f3:06:39:fc:19:39:1e:7c:fb:dd:e3: 1b:a4:fd:1f:1b:dc:77:2b:d0:87:aa:28:9e:c6:44: 22:4d:c5:10:40:fe:18:30:51:c8:36:9a:65:5e:27: 09:d6:c0:73:18:88:92:2b:0a:70:e0:19:a0:0d:d5: be:46:9b:01:3e:8c:19:fd:6b:bc:d7:7f:25:2b:31: 42:80:aa:12:f2:c8:80:e9:86:90:f2:df:d9:07:df: 3f:7d:be:08:b8:e6:93:84:00:25:32:ed:78:b8:52: f7:9c:f8:a4:fc:51:43:7e:66:59:22:f1:34:37:6a: 9e:a0:01:b8:4d:1a:40:76:fb:d0:d7:e3:11:1b:43: 92:7e:ef:8b:ff:61:af:28:fd:53:c0:d4:4e:7b:4c: 4a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:18:BE:24:C1:48:A4:2F:18:9E:E5:E9:09:5C:80:97:4B:44:F2:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d69d305c-a658-4c39-8075-c28e2b201286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.115.0.0/19 Signature Algorithm: sha256WithRSAEncryption bc:4b:b2:87:84:69:2f:97:8e:24:07:5a:a9:fc:b7:8c:e0:5a: b1:fe:5c:66:bb:a5:c9:23:a0:4f:d1:25:13:e4:b1:76:57:22: e7:8c:ec:8b:cc:15:51:d1:e6:07:26:43:ab:da:e9:83:e7:f4: 2b:ea:0d:67:63:66:49:b3:29:4e:fd:32:e8:df:e1:35:b7:d7: ae:5e:6f:3a:2c:a8:a8:a0:90:d0:24:b5:c0:ef:7c:70:62:71: 04:b0:ab:70:4f:75:d6:3b:64:f3:91:00:f8:cd:e3:2d:a5:22: 3d:7b:7e:15:c9:dd:24:66:ae:27:26:6f:54:08:b5:6c:89:fd: 82:4d:14:98:0c:8b:23:ac:3c:7e:c0:5e:bd:ac:b5:7b:24:44: f6:f7:61:33:3e:b5:ea:49:fa:3c:94:d8:4e:25:6a:15:21:28: d3:21:d1:ed:68:0b:74:5f:e4:2a:5f:f5:83:2f:cc:21:8a:9a: c3:07:41:62:45:02:69:06:a1:ae:2a:67:1a:d9:bb:99:0c:6e: 7d:df:65:84:1c:9a:40:9c:66:b8:10:f7:fa:4e:65:fb:9f:c9: 1e:f9:a5:3d:01:bb:57:f6:ba:eb:58:6a:43:7f:b4:4a:3b:7f: 61:1a:55:0e:37:44:2b:22:89:8c:bd:f1:58:fc:f4:f0:c1:40: 37:35:ff:e1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcMUIfakeDKkBE1S1ybg+zXr22L4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDAxMDExWhcNMjYwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MjljODA5NzdiMjg0ZmNhMjEyYTcwMTVkN2RjNTRjMzcx NTEyMTA1NGRkMDZkMDNlYTZmN2VkZjI1MDc4Mzk2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrYsgzF/l9KvOHvetTHylgEFPyRy2r0qSXrSdsfadpvNwo ayU+l9gvMfNe/eRKlEGvwkMU3Ij5V49wgGWMC9Ap1YxAYICBYPosCBRJvE+lfXF8 7KUwpPIW63hPpjQgPx2Tl4378J9WmuvNVZvzBjn8GTkefPvd4xuk/R8b3Hcr0Ieq KJ7GRCJNxRBA/hgwUcg2mmVeJwnWwHMYiJIrCnDgGaAN1b5GmwE+jBn9a7zXfyUr MUKAqhLyyIDphpDy39kH3z99vgi45pOEACUy7Xi4Uvec+KT8UUN+Zlki8TQ3ap6g AbhNGkB2+9DX4xEbQ5J+74v/Ya8o/VPA1E57TEojAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhxi+JMFIpC8YnuXpCVyAl0tE8hMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q2OWQzMDVjLWE2NTgtNGMzOS04MDc1LWMyOGUyYjIwMTI4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXQcwAwDQYJKoZIhvcNAQELBQADggEBALxLsoeEaS+XjiQHWqn8t4zgWrH+ XGa7pckjoE/RJRPksXZXIueM7IvMFVHR5gcmQ6va6YPn9CvqDWdjZkmzKU79Mujf 4TW3165ebzosqKigkNAktcDvfHBicQSwq3BPddY7ZPORAPjN4y2lIj17fhXJ3SRm ricmb1QItWyJ/YJNFJgMiyOsPH7AXr2stXskRPb3YTM+tepJ+jyU2E4lahUhKNMh 0e1oC3Rf5Cpf9YMvzCGKmsMHQWJFAmkGoa4qZxrZu5kMbn3fZYQcmkCcZrgQ9/pO ZfufyR75pT0Bu1f2uutYakN/tEo7f2EaVQ43RCsiiYy98Vj89PDBQDc1/+E= -----END CERTIFICATE-----Generated at Sun May 3 14:50:23 2026 by rpki-client