$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0327027b-1093-4d52-982e-7633219ee2ec.roa File: 0327027b-1093-4d52-982e-7633219ee2ec.roa (raw, json) Hash identifier: 00fPtcjAOdJWXjZdTusEDjkS7ev9u/jTJAuCZmWXhdY= Subject key identifier: 33:79:97:77:90:77:63:2E:36:9E:2D:A7:A6:5C:85:CC:6D:B5:5A:59 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 01A821231F096818E80FA6F81028D4C7E33CFA3A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0327027b-1093-4d52-982e-7633219ee2ec.roa Signing time: Wed 29 Apr 2026 00:20:11 +0000 ROA not before: Wed 29 Apr 2026 00:20:11 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 76.162.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a8:21:23:1f:09:68:18:e8:0f:a6:f8:10:28:d4:c7:e3:3c:fa:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:20:11 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=dda9cf08c69958f135283aa427f512054510de9dffafd9619d5f871783fef6d0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:39:68:1f:a7:0f:05:30:12:07:f8:fa:8e:1d: 61:50:6f:33:66:cd:4b:54:40:24:54:87:16:05:fa: 43:2e:87:85:0a:ee:2d:93:31:e8:d1:96:11:69:0c: e8:6b:9d:b7:2d:b5:74:07:4f:87:bf:0a:4a:2d:1e: 0f:3a:5f:a9:22:d7:f4:67:72:df:c4:2f:c1:24:b1: fd:0b:87:72:cc:40:df:54:af:c3:06:bb:7a:da:0a: b8:a1:d8:eb:2a:b3:76:c2:53:20:7d:6d:e9:c3:70: 74:c4:f6:1b:fc:ed:bf:87:22:0c:01:1a:62:87:fa: a8:bd:85:7e:2e:61:09:c0:5f:ed:bc:bc:c7:fc:fe: f7:46:17:37:c0:35:82:4b:50:d7:b4:2a:3b:b0:94: 23:fc:37:40:41:26:0a:c9:a5:c9:aa:19:90:33:de: f9:5a:da:88:44:04:49:f8:36:82:ee:ad:32:39:72: 29:73:ff:d0:33:a4:85:2e:fc:38:93:1a:81:08:6e: 7d:9a:ea:dc:ba:e2:fd:18:57:23:1f:de:d4:8a:d6: 40:7d:dd:3e:01:58:5c:3d:ca:52:e5:42:87:b2:52: c9:3f:0a:fc:d6:4b:17:39:41:2a:65:d9:93:8e:30: 13:88:50:38:b3:ca:eb:0a:6a:79:8d:fd:04:27:c1: 6f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:79:97:77:90:77:63:2E:36:9E:2D:A7:A6:5C:85:CC:6D:B5:5A:59 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0327027b-1093-4d52-982e-7633219ee2ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.162.0.0/15 Signature Algorithm: sha256WithRSAEncryption 09:44:17:3b:ee:fe:18:f5:0f:94:30:67:e2:39:a2:fd:71:41: bc:c7:ea:04:ae:e6:75:b1:58:b5:6b:de:5b:07:41:91:97:08: cf:3b:03:3d:c2:b7:c6:21:f9:3a:67:11:c6:3e:9c:ce:0b:aa: 7a:9d:9c:bb:0b:bc:7b:d5:75:60:56:e7:84:0b:04:a8:25:dd: 73:9f:bd:3c:8c:e3:c0:33:22:fb:64:b5:15:27:8c:b5:7b:00: 6a:98:8c:3c:3f:67:bf:88:0f:e8:c2:c4:78:a6:5a:da:71:70: eb:0e:c6:cd:5a:82:7c:19:9e:a9:6e:7c:49:41:7b:2f:c1:3a: e5:a7:97:b3:4a:4d:d3:e9:fc:9d:dd:91:a7:b4:51:50:79:bf: d4:a6:e8:d4:3d:b9:72:09:00:9f:0c:ad:46:db:70:7e:6b:4d: dc:8e:42:a7:ff:9d:a1:2f:4e:a8:4b:2c:8b:3b:1f:dd:1b:b4: a4:83:b8:99:d6:85:c3:78:45:de:92:a0:c0:81:99:8e:40:98: 9e:04:68:9a:5c:c1:d2:b1:94:61:0e:94:63:c8:00:b6:de:d6: fa:18:02:62:6e:77:a6:0b:d4:71:c3:e0:3d:bf:b5:bb:11:0f: 9d:af:2e:fe:c2:e1:ca:89:90:b3:a9:69:9e:fc:d8:ca:46:03: d2:23:8b:2a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAaghIx8JaBjoD6b4ECjUx+M8+jowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDAyMDExWhcNMjYwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGE5Y2YwOGM2OTk1OGYxMzUyODNhYTQyN2Y1MTIwNTQ1 MTBkZTlkZmZhZmQ5NjE5ZDVmODcxNzgzZmVmNmQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvOWgfpw8FMBIH+PqOHWFQbzNmzUtUQCRUhxYF+kMuh4UK 7i2TMejRlhFpDOhrnbcttXQHT4e/CkotHg86X6ki1/Rnct/EL8Eksf0Lh3LMQN9U r8MGu3raCrih2Osqs3bCUyB9benDcHTE9hv87b+HIgwBGmKH+qi9hX4uYQnAX+28 vMf8/vdGFzfANYJLUNe0KjuwlCP8N0BBJgrJpcmqGZAz3vla2ohEBEn4NoLurTI5 cilz/9AzpIUu/DiTGoEIbn2a6ty64v0YVyMf3tSK1kB93T4BWFw9ylLlQoeyUsk/ CvzWSxc5QSpl2ZOOMBOIUDizyusKanmN/QQnwW8/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUM3mXd5B3Yy42ni2nplyFzG21WlkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzMjcwMjdiLTEwOTMtNGQ1Mi05ODJlLTc2MzMyMTllZTJlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFMojANBgkqhkiG9w0BAQsFAAOCAQEACUQXO+7+GPUPlDBn4jmi/XFBvMfq BK7mdbFYtWveWwdBkZcIzzsDPcK3xiH5OmcRxj6czguqep2cuwu8e9V1YFbnhAsE qCXdc5+9PIzjwDMi+2S1FSeMtXsAapiMPD9nv4gP6MLEeKZa2nFw6w7GzVqCfBme qW58SUF7L8E65aeXs0pN0+n8nd2Rp7RRUHm/1Kbo1D25cgkAnwytRttwfmtN3I5C p/+doS9OqEssizsf3Ru0pIO4mdaFw3hF3pKgwIGZjkCYngRomlzB0rGUYQ6UY8gA tt7W+hgCYm53pgvUccPgPb+1uxEPna8u/sLhyomQs6lpnvzYykYD0iOLKg== -----END CERTIFICATE-----Generated at Sun May 3 14:47:00 2026 by rpki-client