$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13a7aaf3-b41d-469c-8464-1f7399d7ccf8.roa File: 13a7aaf3-b41d-469c-8464-1f7399d7ccf8.roa (raw, json) Hash identifier: jWpTyZUxSF9rKColVAF/LlqWaGMgdN6SD5E5CvbfDLE= Subject key identifier: 25:B7:6E:1B:D4:F7:EE:68:8C:01:49:CA:88:39:D0:5F:87:2F:85:49 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6A5C06546E057A7F760CD73CDA019E601FEF40FE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13a7aaf3-b41d-469c-8464-1f7399d7ccf8.roa Signing time: Fri 01 May 2026 00:51:02 +0000 ROA not before: Fri 01 May 2026 00:51:02 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:5c:06:54:6e:05:7a:7f:76:0c:d7:3c:da:01:9e:60:1f:ef:40:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 1 00:51:02 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=cc755440aa4df6801c61150623830a9a3f2a74c18c02ff5f4e64402c663550ac, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8f:9c:87:d5:36:26:fc:4a:97:d9:4e:23:df: 39:d7:bc:dc:18:3e:da:71:8e:e0:5e:60:d7:a4:c2: 4c:f1:bf:c7:98:54:be:4e:8d:88:e5:22:d0:20:d5: d5:46:fa:a6:5f:63:ee:34:59:72:83:80:89:c2:7b: 40:fb:65:2a:1e:f9:b9:4f:6e:74:6d:ce:99:69:09: 45:33:24:2e:fa:51:c8:21:f5:f5:e0:07:5a:7d:bf: 0a:9f:b3:5b:6f:33:57:26:70:ab:9a:bf:dd:b8:04: ac:c2:79:7d:ff:ad:cf:71:a3:d6:b7:c0:9c:65:f5: 2c:9e:69:8e:3d:32:22:35:5e:cf:f8:32:db:a6:1c: 96:4b:b0:f7:ea:77:6d:11:ce:df:14:4a:de:f1:7a: 49:45:89:b3:fd:26:5c:d6:10:3b:9d:a4:1d:75:05: 6d:58:f0:79:06:53:89:04:6c:a5:b4:9a:7d:42:85: af:60:71:cd:23:1d:84:a6:d6:e2:d6:6b:ce:f2:ec: dc:3a:92:fe:6d:b0:ef:be:64:17:26:19:27:12:6e: 70:18:8a:cb:14:de:d7:62:66:51:c9:4b:92:77:e7: 03:29:92:0c:91:af:f0:3b:18:c6:4f:fa:e6:73:a4: ed:86:16:1d:27:c2:57:d3:88:64:39:bb:b6:f5:9c: ed:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B7:6E:1B:D4:F7:EE:68:8C:01:49:CA:88:39:D0:5F:87:2F:85:49 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13a7aaf3-b41d-469c-8464-1f7399d7ccf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.67.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:c1:76:47:9f:8f:96:3f:a8:73:89:5e:a2:5c:2c:b0:f3:78: 3f:ba:2c:72:8b:24:49:d3:93:d1:6e:58:eb:a0:07:2f:ea:94: 96:2c:82:7f:92:7a:18:85:93:79:e4:19:b2:46:0a:f3:62:f6: 0d:db:4f:f2:f2:bd:76:6e:8d:3c:43:c3:6e:39:cf:9a:8b:df: b5:62:e2:b6:2c:e9:60:45:2f:73:be:7d:8e:1a:e9:3c:98:28: cc:1b:27:ed:41:6a:9d:d9:ae:96:3d:33:73:c7:a5:f0:89:ee: 17:d4:4b:8b:24:19:6e:e3:2a:b1:93:75:ce:56:20:e9:7e:13: c3:b8:65:85:f1:82:71:ae:b0:2f:05:62:37:5f:20:f0:d5:18: 0d:49:29:74:15:78:2d:57:d6:2c:5b:f7:1a:ea:c5:8c:95:ba: 90:31:e4:c5:b3:70:4c:d1:d6:1e:19:63:af:55:13:4c:25:e9: 77:25:ee:55:7b:2b:65:1f:3b:b5:1c:7f:c6:3e:b8:85:08:b9: b1:4e:5a:a2:47:93:45:33:38:ff:c7:cd:42:6e:61:2b:45:df: b2:2b:04:78:e1:aa:12:0b:59:3d:99:73:e5:6b:74:3a:18:1a: b9:bb:69:cb:2d:75:55:f3:d6:98:b2:22:47:97:e8:99:9f:0f: f9:35:60:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUalwGVG4Fen92DNc82gGeYB/vQP4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDA1MTAyWhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzc1NTQ0MGFhNGRmNjgwMWM2MTE1MDYyMzgzMGE5YTNm MmE3NGMxOGMwMmZmNWY0ZTY0NDAyYzY2MzU1MGFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYj5yH1TYm/EqX2U4j3znXvNwYPtpxjuBeYNekwkzxv8eY VL5OjYjlItAg1dVG+qZfY+40WXKDgInCe0D7ZSoe+blPbnRtzplpCUUzJC76Ucgh 9fXgB1p9vwqfs1tvM1cmcKuav924BKzCeX3/rc9xo9a3wJxl9SyeaY49MiI1Xs/4 MtumHJZLsPfqd20Rzt8USt7xeklFibP9JlzWEDudpB11BW1Y8HkGU4kEbKW0mn1C ha9gcc0jHYSm1uLWa87y7Nw6kv5tsO++ZBcmGScSbnAYissU3tdiZlHJS5J35wMp kgyRr/A7GMZP+uZzpO2GFh0nwlfTiGQ5u7b1nO2vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJbduG9T37miMAUnKiDnQX4cvhUkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEzYTdhYWYzLWI0MWQtNDY5Yy04NDY0LTFmNzM5OWQ3Y2NmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/EMwDQYJKoZIhvcNAQELBQADggEBAJ/Bdkefj5Y/qHOJXqJcLLDzeD+6 LHKLJEnTk9FuWOugBy/qlJYsgn+SehiFk3nkGbJGCvNi9g3bT/LyvXZujTxDw245 z5qL37Vi4rYs6WBFL3O+fY4a6TyYKMwbJ+1Bap3ZrpY9M3PHpfCJ7hfUS4skGW7j KrGTdc5WIOl+E8O4ZYXxgnGusC8FYjdfIPDVGA1JKXQVeC1X1ixb9xrqxYyVupAx 5MWzcEzR1h4ZY69VE0wl6Xcl7lV7K2UfO7Ucf8Y+uIUIubFOWqJHk0UzOP/HzUJu YStF37IrBHjhqhILWT2Zc+VrdDoYGrm7acstdVXz1piyIkeX6JmfD/k1YLs= -----END CERTIFICATE-----Generated at Sun May 3 14:46:14 2026 by rpki-client