$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d91181aa-a710-47af-96f6-c6d4bd7176fe.roa File: d91181aa-a710-47af-96f6-c6d4bd7176fe.roa (raw, json) Hash identifier: B1G2D9c4eaRJTxJSxssLb1o1jn09K1vmPDgZXNBa9GA= Subject key identifier: 99:1C:50:33:AE:B7:07:3A:10:D7:F0:DD:6B:E7:20:7F:51:D0:13:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 080879B557768817CDC482EFB3CC3D3A07BA6D84 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d91181aa-a710-47af-96f6-c6d4bd7176fe.roa Signing time: Mon 27 Apr 2026 00:00:34 +0000 ROA not before: Mon 27 Apr 2026 00:00:34 +0000 ROA not after: Sun 26 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 66.156.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:08:79:b5:57:76:88:17:cd:c4:82:ef:b3:cc:3d:3a:07:ba:6d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 27 00:00:34 2026 GMT Not After : Jul 26 23:59:59 2026 GMT Subject: serialNumber=f3e2705c964a6ff45e8eafaef7766cf52c7eb905ef331423a5db8b20ef179547, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ff:be:eb:cf:db:34:55:c5:27:f4:03:9f:10: ab:ac:97:0d:dd:ea:f5:55:82:5a:6a:6e:e4:e5:8a: a4:1d:c2:3b:c0:6b:f6:98:e2:77:c6:0d:e6:c0:c9: b0:1b:6d:3c:33:0d:38:58:9d:ea:d7:73:02:6c:85: 90:0c:ed:7d:44:d9:87:ef:06:f6:99:4d:da:0b:65: 90:ed:60:e4:1f:e7:b8:cd:a0:15:36:07:37:e0:3b: 88:65:62:10:23:9f:d0:2a:6b:a3:4c:43:ef:ea:cf: 4d:e1:42:27:0c:04:a4:72:80:11:0a:9f:0f:23:78: 02:e3:68:2c:1c:00:41:be:ec:5d:9e:6b:d8:fe:13: 3d:77:09:bd:00:70:99:83:b8:d6:62:7d:98:e0:9a: 6a:94:76:70:72:aa:e4:67:24:29:90:aa:3e:fd:b6: 62:6c:00:c3:44:4b:e8:83:5c:cc:b4:6c:3c:a4:dc: 7d:a4:5f:35:fe:e2:23:8a:0b:1b:30:ac:43:77:60: 3a:da:0f:a7:fb:32:88:52:d2:41:c3:fa:87:8d:9e: c8:3b:30:c3:dd:ad:31:2e:69:29:80:df:6d:60:7c: af:1b:0d:02:0b:cc:34:37:fe:a7:2e:de:a4:43:06: e2:8d:56:a5:9c:bf:78:a8:a4:1e:f0:15:22:c6:78: 50:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1C:50:33:AE:B7:07:3A:10:D7:F0:DD:6B:E7:20:7F:51:D0:13:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d91181aa-a710-47af-96f6-c6d4bd7176fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.156.0.0/16 Signature Algorithm: sha256WithRSAEncryption 18:17:41:de:f5:00:b7:f5:bf:dc:fd:e7:2d:14:d0:8d:08:83: 63:f3:cf:17:fd:0c:a1:3a:f3:de:bb:cf:2e:c7:e5:c4:54:6d: ef:1c:b1:49:51:42:bb:ee:57:61:a5:8f:60:ee:4e:7b:f2:e8: 85:f5:ef:ec:c4:bd:11:be:ee:57:c0:ae:e5:d4:ab:81:c4:46: d0:d0:b6:fc:96:85:db:42:b1:f4:55:83:b2:8d:62:50:27:62: 06:03:08:01:ea:19:ff:e6:de:6c:52:9c:bc:5b:e2:ab:c4:46: 94:8e:87:f9:68:d9:96:9f:6a:62:a3:06:99:80:36:c5:02:5e: 9d:40:68:db:df:7a:79:f3:7a:5a:aa:68:d0:d7:b8:a5:61:e9: 31:32:11:da:fb:20:ab:78:9b:89:d0:bf:24:89:31:82:35:91: 10:05:23:f4:cf:11:cc:15:25:e8:35:c3:d0:f9:ce:99:02:0d: d9:53:95:ee:d8:f0:12:66:e1:84:91:2c:75:09:36:a7:00:40: 14:23:55:12:f5:08:a2:05:c8:17:f8:40:4a:0b:2c:18:aa:38: 17:9c:d7:44:de:3f:bd:80:0b:67:58:07:26:23:80:9c:85:ce: c4:7b:04:e5:95:56:88:7c:68:90:08:2b:c2:63:cb:1b:4e:ec: 3b:b3:fe:9b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCAh5tVd2iBfNxILvs8w9Oge6bYQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI3MDAwMDM0WhcNMjYwNzI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmM2UyNzA1Yzk2NGE2ZmY0NWU4ZWFmYWVmNzc2NmNmNTJj N2ViOTA1ZWYzMzE0MjNhNWRiOGIyMGVmMTc5NTQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6/77rz9s0VcUn9AOfEKuslw3d6vVVglpqbuTliqQdwjvA a/aY4nfGDebAybAbbTwzDThYnerXcwJshZAM7X1E2YfvBvaZTdoLZZDtYOQf57jN oBU2BzfgO4hlYhAjn9Aqa6NMQ+/qz03hQicMBKRygBEKnw8jeALjaCwcAEG+7F2e a9j+Ez13Cb0AcJmDuNZifZjgmmqUdnByquRnJCmQqj79tmJsAMNES+iDXMy0bDyk 3H2kXzX+4iOKCxswrEN3YDraD6f7MohS0kHD+oeNnsg7MMPdrTEuaSmA321gfK8b DQILzDQ3/qcu3qRDBuKNVqWcv3iopB7wFSLGeFClAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUmRxQM663BzoQ1/Dda+cgf1HQE7gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q5MTE4MWFhLWE3MTAtNDdhZi05NmY2LWM2ZDRiZDcxNzZmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBCnDANBgkqhkiG9w0BAQsFAAOCAQEAGBdB3vUAt/W/3P3nLRTQjQiDY/PP F/0MoTrz3rvPLsflxFRt7xyxSVFCu+5XYaWPYO5Oe/LohfXv7MS9Eb7uV8Cu5dSr gcRG0NC2/JaF20Kx9FWDso1iUCdiBgMIAeoZ/+bebFKcvFviq8RGlI6H+WjZlp9q YqMGmYA2xQJenUBo2996efN6Wqpo0Ne4pWHpMTIR2vsgq3ibidC/JIkxgjWREAUj 9M8RzBUl6DXD0PnOmQIN2VOV7tjwEmbhhJEsdQk2pwBAFCNVEvUIogXIF/hASgss GKo4F5zXRN4/vYALZ1gHJiOAnIXOxHsE5ZVWiHxokAgrwmPLG07sO7P+mw== -----END CERTIFICATE-----Generated at Sun May 3 15:31:43 2026 by rpki-client