$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6b93b84-0320-4249-93e3-a05fa8f8097a.roa File: b6b93b84-0320-4249-93e3-a05fa8f8097a.roa (raw, json) Hash identifier: laFd+16YQiJg8zLapFEdFazHlQf+Yn+pY6GrJ6SZEmk= Subject key identifier: 27:9C:2A:4A:E2:33:9C:CB:EF:E8:C1:25:BB:F2:57:7F:4F:94:81:EF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 080462E2F51E59A4957A73F182403986187F6963 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6b93b84-0320-4249-93e3-a05fa8f8097a.roa Signing time: Thu 26 Mar 2026 16:23:21 +0000 ROA not before: Thu 26 Mar 2026 16:23:21 +0000 ROA not after: Wed 24 Jun 2026 23:59:59 +0000 asID: 14618 IP address blocks: 32.194.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:04:62:e2:f5:1e:59:a4:95:7a:73:f1:82:40:39:86:18:7f:69:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 26 16:23:21 2026 GMT Not After : Jun 24 23:59:59 2026 GMT Subject: serialNumber=6c825d2780b7eed1942da918b774a15a62549a1bf4be198b0bb1a92c4bc97fba, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:8f:75:7d:d6:73:e9:58:20:4c:42:0a:57: fd:57:28:89:b2:90:50:a6:4c:64:7b:cd:28:a5:7b: 5b:b9:9c:a5:9d:9d:49:1c:15:83:0b:83:2e:43:2b: 1f:1e:35:83:3a:79:77:19:4b:17:75:78:83:0d:db: c2:da:cb:fd:3b:0d:31:e7:0f:dd:2b:47:b3:25:6b: 8f:b3:6c:7f:4b:c8:00:e7:54:79:5a:88:3d:cf:cd: 34:08:52:67:3e:46:cf:11:5d:c7:b4:94:c8:aa:3d: 1c:06:39:eb:ec:5d:ff:ea:3a:df:6f:df:8d:e8:2a: 8a:79:58:0f:86:59:88:1d:cc:93:a7:01:2c:7d:93: df:ed:01:be:4c:f8:22:80:4f:6e:bd:d5:4d:72:e1: 29:2b:85:91:78:b3:38:9c:75:14:aa:3c:4b:bc:b1: 61:9e:b0:48:ef:e5:e7:dc:f0:79:75:b3:d5:6d:27: 4b:b1:3d:d5:f0:9d:57:89:6f:f4:53:b1:25:ba:84: ff:9f:02:ce:a2:61:fd:dd:96:98:3f:77:34:7b:39: 49:91:e0:96:cd:00:0e:23:00:f5:db:7a:9d:31:9c: 91:fd:95:42:a2:d3:74:b4:2e:6d:6d:85:3a:91:c2: 36:01:55:71:0d:e4:a3:e4:d9:ec:5e:bd:51:33:22: da:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9C:2A:4A:E2:33:9C:CB:EF:E8:C1:25:BB:F2:57:7F:4F:94:81:EF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6b93b84-0320-4249-93e3-a05fa8f8097a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 32.194.144.0/23 Signature Algorithm: sha256WithRSAEncryption c9:a7:f5:91:26:1c:c7:f0:09:82:a9:a4:c1:3d:8b:96:2f:12: bf:85:4a:2c:3b:1a:bc:87:c6:8d:80:b6:f1:64:2d:25:8a:d4: e2:84:88:f5:5a:ad:92:8d:b1:7d:d5:dd:21:8a:f7:29:83:0e: 40:56:f5:df:0f:03:91:6f:b1:e8:5c:e6:80:44:3d:36:f1:94: 0e:2e:eb:36:54:cc:6b:b8:be:cb:42:84:d0:4e:55:da:fa:d9: 92:e0:f2:58:df:45:46:00:4b:cc:66:06:22:92:27:95:a0:aa: 23:b2:bf:8b:6b:5d:57:33:93:11:48:46:54:27:77:32:d9:07: a7:f1:51:36:53:6b:ec:65:6b:87:35:25:c8:c6:75:89:79:a3: 95:d9:42:ed:80:b2:64:81:99:32:4f:52:d8:99:34:b9:7c:fd: 5d:ea:45:97:20:9d:15:21:4c:18:4e:7a:a9:b5:3f:03:0d:b7: 82:a7:a2:ba:e6:ef:0b:6c:b3:eb:75:af:f4:7d:89:53:12:d6: 34:1c:02:5c:9d:55:ef:6d:3b:3a:b3:f9:47:fd:2f:49:13:b8: c6:85:34:41:91:c5:12:ca:18:46:75:d5:c3:f9:d0:41:dd:82: d2:8b:cc:c5:1c:f8:67:ab:a5:f2:0f:8a:44:6c:47:8b:7e:9a: cf:d1:07:f8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCARi4vUeWaSVenPxgkA5hhh/aWMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzI2MTYyMzIxWhcNMjYwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YzgyNWQyNzgwYjdlZWQxOTQyZGE5MThiNzc0YTE1YTYy NTQ5YTFiZjRiZTE5OGIwYmIxYTkyYzRiYzk3ZmJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5P491fdZz6VggTEIKV/1XKImykFCmTGR7zSile1u5nKWd nUkcFYMLgy5DKx8eNYM6eXcZSxd1eIMN28Lay/07DTHnD90rR7Mla4+zbH9LyADn VHlaiD3PzTQIUmc+Rs8RXce0lMiqPRwGOevsXf/qOt9v343oKop5WA+GWYgdzJOn ASx9k9/tAb5M+CKAT2691U1y4SkrhZF4szicdRSqPEu8sWGesEjv5efc8Hl1s9Vt J0uxPdXwnVeJb/RTsSW6hP+fAs6iYf3dlpg/dzR7OUmR4JbNAA4jAPXbep0xnJH9 lUKi03S0Lm1thTqRwjYBVXEN5KPk2exevVEzItqhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJ5wqSuIznMvv6MElu/JXf0+Uge8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I2YjkzYjg0LTAzMjAtNDI0OS05M2UzLWEwNWZhOGY4MDk3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEgwpAwDQYJKoZIhvcNAQELBQADggEBAMmn9ZEmHMfwCYKppME9i5YvEr+F Siw7GryHxo2AtvFkLSWK1OKEiPVarZKNsX3V3SGK9ymDDkBW9d8PA5Fvsehc5oBE PTbxlA4u6zZUzGu4vstChNBOVdr62ZLg8ljfRUYAS8xmBiKSJ5WgqiOyv4trXVcz kxFIRlQndzLZB6fxUTZTa+xla4c1JcjGdYl5o5XZQu2AsmSBmTJPUtiZNLl8/V3q RZcgnRUhTBhOeqm1PwMNt4Knorrm7wtss+t1r/R9iVMS1jQcAlydVe9tOzqz+Uf9 L0kTuMaFNEGRxRLKGEZ11cP50EHdgtKLzMUc+GerpfIPikRsR4t+ms/RB/g= -----END CERTIFICATE-----Generated at Tue Apr 7 10:31:10 2026 by rpki-client