$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20a8d1d7-3bfc-4928-91be-6fe72d40652c.roa File: 20a8d1d7-3bfc-4928-91be-6fe72d40652c.roa (raw, json) Hash identifier: 00GofvTXOV5wamrn7U4EMvd8c7G2tK47cj0PX6zAco8= Subject key identifier: BF:B8:3E:67:44:8A:AB:EB:8C:7F:BE:83:56:CB:F6:21:EF:FC:9D:96 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 264FE37A8C65B841E5E6EAF48146B9CBF3BE8CE1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20a8d1d7-3bfc-4928-91be-6fe72d40652c.roa Signing time: Mon 04 May 2026 00:51:17 +0000 ROA not before: Mon 04 May 2026 00:51:17 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 44.210.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:4f:e3:7a:8c:65:b8:41:e5:e6:ea:f4:81:46:b9:cb:f3:be:8c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 00:51:17 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=4aeff3650aeb98d9c38b9c2d4c36b8fb96d44d35dce01f7b910ec78c81376eb5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:85:2a:67:40:f2:64:6f:a1:ec:c3:a3:75:d2: c6:a4:d0:db:19:cf:6f:78:24:75:27:33:70:d9:20: 0f:06:34:39:c3:06:16:3c:ef:de:df:aa:da:f8:54: 62:19:5e:1e:87:e2:a4:77:7d:e2:25:ca:66:8c:17: 7e:0b:a8:76:47:16:2d:7a:b1:e7:54:23:dc:7c:86: 32:7a:e4:08:4f:52:3c:31:2b:df:9b:af:88:0c:e7: 5c:56:27:9e:79:0f:c3:59:0f:5e:76:87:63:b8:74: 66:ca:69:02:e8:ec:18:b0:1b:ae:f2:a1:a8:d2:52: 43:6e:28:4b:3c:89:60:0d:b4:7c:5f:94:31:05:a7: 39:bd:99:46:1b:03:e4:03:63:4e:3c:89:af:dc:36: 44:14:14:41:d2:37:30:ff:7e:d7:df:0a:93:64:4f: be:d8:26:93:29:13:e1:b8:03:8a:60:22:be:53:5d: 04:d6:54:37:f5:4d:9f:f8:fa:0a:fa:8d:f4:f6:6e: be:7b:84:01:12:b8:38:4f:78:ec:fb:0b:11:8d:54: b1:6a:8a:25:6e:e0:07:2c:ae:8a:61:37:88:39:10: 8c:a6:5d:26:e0:af:d9:72:3e:f6:c3:40:f8:6f:51: 13:b5:0c:ce:92:de:a0:05:f7:c1:95:39:3a:7c:a5: 2c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B8:3E:67:44:8A:AB:EB:8C:7F:BE:83:56:CB:F6:21:EF:FC:9D:96 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20a8d1d7-3bfc-4928-91be-6fe72d40652c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 44.210.202.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:d3:a4:0c:51:5d:5e:df:27:d1:f4:0e:eb:0a:af:28:6b:72: ef:f7:1d:72:c8:9f:18:1f:cd:f1:86:99:35:af:6d:1c:2a:17: 6f:51:b8:e0:5c:32:2b:0c:c2:d1:4d:c2:72:97:b4:6a:56:d6: ad:9e:35:51:4b:2a:98:11:30:b3:8f:3c:c7:12:52:f2:46:5e: 83:a5:a0:3a:61:46:9c:d7:9f:be:66:e8:4b:5d:48:0a:47:8d: b0:7e:72:b0:e0:46:97:a1:91:32:b6:49:0c:11:26:3b:67:50: c9:ef:ee:76:e3:2d:c8:74:d9:8a:a5:ab:af:46:2b:ac:eb:7f: 53:09:fd:04:7e:b2:e2:dc:21:26:3f:e2:7f:bf:ba:83:ec:e4: 36:0e:86:1f:f2:b1:0c:5f:c2:ee:91:5e:07:9b:9e:5b:70:97: 3a:99:83:9d:f0:5c:32:a0:f8:76:ac:8d:b8:64:94:36:87:c6: 91:99:61:53:9b:28:2d:70:6d:92:0b:85:a4:bd:2d:33:98:e1: 8b:0e:62:a8:9e:74:d9:dd:c0:de:15:73:27:ad:15:96:1e:69: 40:95:ba:ae:87:e4:c7:b3:fb:b3:00:a0:7e:4e:4d:9c:6e:17: d3:40:ab:47:45:49:5b:b9:8d:11:4f:b6:42:4c:b7:b0:77:eb: e8:64:5a:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJk/jeoxluEHl5ur0gUa5y/O+jOEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDA1MTE3WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWVmZjM2NTBhZWI5OGQ5YzM4YjljMmQ0YzM2YjhmYjk2 ZDQ0ZDM1ZGNlMDFmN2I5MTBlYzc4YzgxMzc2ZWI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqhSpnQPJkb6Hsw6N10sak0NsZz294JHUnM3DZIA8GNDnD BhY8797fqtr4VGIZXh6H4qR3feIlymaMF34LqHZHFi16sedUI9x8hjJ65AhPUjwx K9+br4gM51xWJ555D8NZD152h2O4dGbKaQLo7BiwG67yoajSUkNuKEs8iWANtHxf lDEFpzm9mUYbA+QDY048ia/cNkQUFEHSNzD/ftffCpNkT77YJpMpE+G4A4pgIr5T XQTWVDf1TZ/4+gr6jfT2br57hAESuDhPeOz7CxGNVLFqiiVu4AcsrophN4g5EIym XSbgr9lyPvbDQPhvURO1DM6S3qAF98GVOTp8pSwNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUv7g+Z0SKq+uMf76DVsv2Ie/8nZYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIwYThkMWQ3LTNiZmMtNDkyOC05MWJlLTZmZTcyZDQwNjUyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAs0sowDQYJKoZIhvcNAQELBQADggEBAFrTpAxRXV7fJ9H0DusKryhrcu/3 HXLInxgfzfGGmTWvbRwqF29RuOBcMisMwtFNwnKXtGpW1q2eNVFLKpgRMLOPPMcS UvJGXoOloDphRpzXn75m6EtdSApHjbB+crDgRpehkTK2SQwRJjtnUMnv7nbjLch0 2Yqlq69GK6zrf1MJ/QR+suLcISY/4n+/uoPs5DYOhh/ysQxfwu6RXgebnltwlzqZ g53wXDKg+HasjbhklDaHxpGZYVObKC1wbZILhaS9LTOY4YsOYqiedNndwN4Vcyet FZYeaUCVuq6H5Mez+7MAoH5OTZxuF9NAq0dFSVu5jRFPtkJMt7B36+hkWgk= -----END CERTIFICATE-----Generated at Mon May 4 21:38:04 2026 by rpki-client