$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0dcd91db-8f9a-4a15-9b6b-20d6df8da882.roa File: 0dcd91db-8f9a-4a15-9b6b-20d6df8da882.roa (raw, json) Hash identifier: Ifx3zE7kompx5pnXQEb9IQ3qX0QfrdJBjoP9L7TAWmE= Subject key identifier: 55:52:BD:C0:34:58:A5:33:CF:08:9F:51:58:76:A4:4F:8D:89:B6:55 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2A42D2157CEFB8FE8131A419DDBD2656F7B17303 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0dcd91db-8f9a-4a15-9b6b-20d6df8da882.roa Signing time: Wed 29 Apr 2026 00:51:14 +0000 ROA not before: Wed 29 Apr 2026 00:51:14 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 207.240.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:42:d2:15:7c:ef:b8:fe:81:31:a4:19:dd:bd:26:56:f7:b1:73:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:51:14 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=b00bdd2e0d4877e5a74b123b8ade45be10261f334e4e54f5ba703b462b216acf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f6:4d:4f:05:b2:9e:72:33:42:af:2e:29:75: f7:93:65:fa:d5:21:ac:ca:48:31:04:36:5a:7b:b2: 5e:44:12:dd:b1:f9:7d:d0:db:da:ec:b5:97:14:ab: 67:88:ba:96:0e:64:72:f0:45:8c:b4:75:40:86:98: 63:aa:f9:82:9e:dc:9d:97:fe:6f:0f:1a:8a:58:f9: cd:f3:6e:7f:c7:9a:30:6f:64:fc:f0:26:b7:68:95: e3:b1:53:5b:cf:fe:bf:b3:9a:13:cc:76:74:26:7b: 56:fd:8c:b2:0b:a8:52:69:75:ea:4a:1c:60:a6:ec: f9:78:79:7b:62:6b:dd:7e:e1:9c:94:e2:7b:8b:80: 33:81:cc:c9:a2:7a:4c:22:20:82:26:0f:02:b1:7f: 01:7c:2d:b0:aa:df:6f:1b:11:0b:e3:ea:fc:41:90: 1a:4d:cf:b5:b9:97:a5:76:3b:a3:7d:53:ea:d7:e9: 7c:0c:48:63:c0:7d:30:de:af:54:66:3f:f1:75:00: d3:d1:49:73:15:58:46:e8:e6:42:63:9d:cc:cb:37: f9:d4:ec:08:b4:27:0e:b2:e0:d0:6e:98:e6:de:bd: 5a:14:8a:43:79:07:8a:0f:1d:79:89:f4:30:db:a6: 7c:b4:38:96:57:be:9f:46:21:c5:05:2f:a9:4b:bb: a9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:52:BD:C0:34:58:A5:33:CF:08:9F:51:58:76:A4:4F:8D:89:B6:55 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0dcd91db-8f9a-4a15-9b6b-20d6df8da882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.240.0.0/16 Signature Algorithm: sha256WithRSAEncryption ae:cb:c1:2f:9f:89:e8:72:82:9f:22:90:02:d7:ba:f8:0f:f5: 45:d3:3e:7b:6c:51:3a:8f:e8:bb:2f:53:48:36:37:34:69:9b: 17:76:7b:da:94:f5:84:f0:3e:ab:c1:4e:eb:c7:1d:65:91:a2: 46:7a:aa:55:e5:54:9d:b4:43:34:c2:3d:b2:c5:9e:4d:42:a6: 24:88:80:43:e5:8e:c6:b1:31:f9:3d:85:32:25:82:50:f3:76: 35:93:eb:4b:3e:94:47:6c:3a:00:4d:c1:a5:9c:2e:0a:e6:67: bf:6c:cd:ab:6a:39:71:7c:71:8c:99:5f:54:ec:27:f0:ca:ac: 25:64:c0:f8:38:97:3d:0f:71:6a:fe:f4:80:33:1d:dc:1e:96: 17:f1:2e:fc:80:52:be:3c:b7:41:bd:35:d2:49:12:c9:51:86: c0:98:23:c0:68:3c:80:75:c5:c1:c7:d2:ad:46:fe:0e:64:c7: 63:78:31:b2:73:65:0e:b3:ab:d1:7e:52:32:12:23:f1:41:02: 3a:d4:51:05:f5:35:5f:3d:83:2f:de:0c:5d:52:de:e7:5d:1d: 78:d0:f6:60:58:36:66:87:e2:c1:80:9c:bc:19:75:74:72:a9: 5b:59:ef:00:d0:77:f9:49:7a:52:e5:71:9c:51:05:5e:4c:a5: 39:04:ef:2f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKkLSFXzvuP6BMaQZ3b0mVvexcwMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDA1MTE0WhcNMjYwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMDBiZGQyZTBkNDg3N2U1YTc0YjEyM2I4YWRlNDViZTEw MjYxZjMzNGU0ZTU0ZjViYTcwM2I0NjJiMjE2YWNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZ9k1PBbKecjNCry4pdfeTZfrVIazKSDEENlp7sl5EEt2x +X3Q29rstZcUq2eIupYOZHLwRYy0dUCGmGOq+YKe3J2X/m8PGopY+c3zbn/HmjBv ZPzwJrdoleOxU1vP/r+zmhPMdnQme1b9jLILqFJpdepKHGCm7Pl4eXtia91+4ZyU 4nuLgDOBzMmiekwiIIImDwKxfwF8LbCq328bEQvj6vxBkBpNz7W5l6V2O6N9U+rX 6XwMSGPAfTDer1RmP/F1ANPRSXMVWEbo5kJjnczLN/nU7Ai0Jw6y4NBumObevVoU ikN5B4oPHXmJ9DDbpny0OJZXvp9GIcUFL6lLu6njAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVVK9wDRYpTPPCJ9RWHakT42JtlUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBkY2Q5MWRiLThmOWEtNGExNS05YjZiLTIwZDZkZjhkYTg4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDP8DANBgkqhkiG9w0BAQsFAAOCAQEArsvBL5+J6HKCnyKQAte6+A/1RdM+ e2xROo/ouy9TSDY3NGmbF3Z72pT1hPA+q8FO68cdZZGiRnqqVeVUnbRDNMI9ssWe TUKmJIiAQ+WOxrEx+T2FMiWCUPN2NZPrSz6UR2w6AE3BpZwuCuZnv2zNq2o5cXxx jJlfVOwn8MqsJWTA+DiXPQ9xav70gDMd3B6WF/Eu/IBSvjy3Qb010kkSyVGGwJgj wGg8gHXFwcfSrUb+DmTHY3gxsnNlDrOr0X5SMhIj8UECOtRRBfU1Xz2DL94MXVLe 510deND2YFg2ZofiwYCcvBl1dHKpW1nvANB3+Ul6UuVxnFEFXkylOQTvLw== -----END CERTIFICATE-----Generated at Sun May 3 14:45:25 2026 by rpki-client