$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a022cf7-0f11-4c1a-b021-24883a373bdb.roa File: 1a022cf7-0f11-4c1a-b021-24883a373bdb.roa (raw, json) Hash identifier: sFK70ztZPerciS1s49L+7A8o/ukBMe7xi9+FARh3LWI= Subject key identifier: 90:90:75:C9:4D:D8:A2:63:39:F5:35:04:EB:09:7A:F8:56:16:6C:2F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 608039A5558B8E8DA748F9928B6A86F96C0F4C5C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a022cf7-0f11-4c1a-b021-24883a373bdb.roa Signing time: Wed 29 Apr 2026 00:50:39 +0000 ROA not before: Wed 29 Apr 2026 00:50:39 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.54.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:80:39:a5:55:8b:8e:8d:a7:48:f9:92:8b:6a:86:f9:6c:0f:4c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:50:39 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=5b5e57ab530060774077b3f9a8c1355ff9e2ef81594bed81012325db399a1e73, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e8:15:6c:46:8a:ad:cc:fd:79:2c:3e:b3:06: 02:5d:e2:24:71:f7:7d:fa:27:a6:67:29:02:ad:24: 64:77:bf:3a:5a:54:97:4f:45:fc:47:f0:18:e0:23: cb:57:1c:b0:26:5f:2c:93:52:27:35:36:8d:07:86: f9:2f:ea:ec:d4:3b:56:bb:57:c3:86:74:a0:2d:bd: 81:93:f1:01:86:8b:1f:e9:82:d3:c1:ce:62:92:ee: 9a:5c:d0:b3:c2:be:b0:13:73:30:48:a9:01:75:22: 9e:ce:bf:a2:0c:fc:07:92:4c:4c:92:ea:59:4a:3d: 8d:16:80:fe:5a:a4:83:b2:7b:18:e2:a9:0a:fb:08: 29:2d:8f:f4:d8:b3:8e:08:32:b4:82:58:6d:25:ab: 80:c1:14:72:db:88:e9:9a:81:c1:e0:33:76:7f:bb: 6b:40:8c:09:cc:4b:40:2d:6f:b4:cc:81:2a:14:5b: 7f:29:5f:05:e4:d5:4b:22:bf:36:0f:ad:bf:2b:e7: 68:f6:96:09:f8:4d:b7:e2:71:51:89:6a:52:46:7d: 03:63:15:1b:07:72:e0:8b:7e:32:07:c3:c9:11:4d: 6a:0d:5c:cd:b2:03:b7:26:6f:ca:ca:95:0f:2f:bd: 4f:5c:d9:75:b9:c3:2c:1e:fa:0e:54:ea:eb:6d:39: fb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:90:75:C9:4D:D8:A2:63:39:F5:35:04:EB:09:7A:F8:56:16:6C:2F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a022cf7-0f11-4c1a-b021-24883a373bdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.54.0.0/15 Signature Algorithm: sha256WithRSAEncryption 71:b2:a5:d5:87:d3:03:41:df:39:d9:1e:37:97:d5:55:0e:75: 29:1e:28:e2:8f:44:cf:87:db:49:15:b5:18:45:f6:4c:99:63: bf:1e:d4:8c:c4:ac:a1:a9:29:1e:c5:53:e2:76:82:5e:7c:37: 17:47:c7:2d:9b:9b:e1:fa:e5:a4:09:81:d1:ae:15:f9:d3:84: 7e:56:9a:c1:a4:81:b5:00:5f:5f:ca:a0:d9:a5:c7:38:f6:d2: 62:9c:40:ba:2e:92:68:9d:78:e3:1a:74:6d:fc:18:dd:04:5e: b9:2e:66:99:eb:8d:d8:0f:b2:52:1f:5d:65:1d:96:e8:8c:9d: 37:c8:78:93:cf:d3:0f:bf:af:0b:27:e8:f1:bf:7d:9c:98:7d: 66:2d:44:75:e2:89:81:e9:49:cf:e0:db:25:84:7a:ae:68:95: f1:c3:6d:cc:34:5f:83:79:3f:84:3c:02:2d:2a:c6:8c:7d:1b: 5c:0b:b6:cb:fc:a7:83:98:0b:a8:92:42:50:9b:5e:ba:91:59: c7:29:83:ca:84:3f:ff:28:61:20:7a:f7:c0:22:e7:bc:64:11: bd:1e:b2:b0:6c:ea:98:e6:c7:d7:cc:8a:7c:60:dc:46:91:fb: fa:c7:8f:ce:91:2e:c2:55:91:a9:21:e9:33:ff:c0:a7:40:3a: b6:95:b8:85 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYIA5pVWLjo2nSPmSi2qG+WwPTFwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDA1MDM5WhcNMjYwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YjVlNTdhYjUzMDA2MDc3NDA3N2IzZjlhOGMxMzU1ZmY5 ZTJlZjgxNTk0YmVkODEwMTIzMjVkYjM5OWExZTczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDG6BVsRoqtzP15LD6zBgJd4iRx9336J6ZnKQKtJGR3vzpa VJdPRfxH8BjgI8tXHLAmXyyTUic1No0Hhvkv6uzUO1a7V8OGdKAtvYGT8QGGix/p gtPBzmKS7ppc0LPCvrATczBIqQF1Ip7Ov6IM/AeSTEyS6llKPY0WgP5apIOyexji qQr7CCktj/TYs44IMrSCWG0lq4DBFHLbiOmagcHgM3Z/u2tAjAnMS0Atb7TMgSoU W38pXwXk1UsivzYPrb8r52j2lgn4TbficVGJalJGfQNjFRsHcuCLfjIHw8kRTWoN XM2yA7cmb8rKlQ8vvU9c2XW5wywe+g5U6uttOfv9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUkJB1yU3YomM59TUE6wl6+FYWbC8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFhMDIyY2Y3LTBmMTEtNGMxYS1iMDIxLTI0ODgzYTM3M2JkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEQNjANBgkqhkiG9w0BAQsFAAOCAQEAcbKl1YfTA0HfOdkeN5fVVQ51KR4o 4o9Ez4fbSRW1GEX2TJljvx7UjMSsoakpHsVT4naCXnw3F0fHLZub4frlpAmB0a4V +dOEflaawaSBtQBfX8qg2aXHOPbSYpxAui6SaJ144xp0bfwY3QReuS5mmeuN2A+y Uh9dZR2W6IydN8h4k8/TD7+vCyfo8b99nJh9Zi1EdeKJgelJz+DbJYR6rmiV8cNt zDRfg3k/hDwCLSrGjH0bXAu2y/yng5gLqJJCUJteupFZxymDyoQ//yhhIHr3wCLn vGQRvR6ysGzqmObH18yKfGDcRpH7+sePzpEuwlWRqSHpM//Ap0A6tpW4hQ== -----END CERTIFICATE-----Generated at Sun May 3 14:47:01 2026 by rpki-client