$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a9b8f82-d613-457f-8a2e-9ddcd2b04fbd.roa File: 2a9b8f82-d613-457f-8a2e-9ddcd2b04fbd.roa (raw, json) Hash identifier: Ukl6uHN0y3sBW8IocNYRKwbvgdsvInn+8GxWBDlTaK4= Subject key identifier: CC:BC:65:66:86:83:56:F7:82:06:AD:8D:C0:89:CA:D7:1C:D4:D3:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D973079E08113436F8579CA7D2B7F6B61B79238 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a9b8f82-d613-457f-8a2e-9ddcd2b04fbd.roa Signing time: Mon 27 Apr 2026 00:21:02 +0000 ROA not before: Mon 27 Apr 2026 00:21:02 +0000 ROA not after: Sun 26 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 184.36.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:97:30:79:e0:81:13:43:6f:85:79:ca:7d:2b:7f:6b:61:b7:92:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 27 00:21:02 2026 GMT Not After : Jul 26 23:59:59 2026 GMT Subject: serialNumber=71c0f6b130365b8958c5d3a5f800258a70132d2ae1bc6156d390368e25cbf4cc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3a:c2:9b:52:58:d0:19:e3:90:54:fd:8a:a8: 47:7f:de:d2:a1:de:c0:35:ef:1d:60:17:1b:3a:0d: 3d:d1:16:73:ee:84:6b:4c:47:df:52:59:1e:e0:ad: 17:1d:3b:c5:d9:58:b1:32:83:7a:29:2c:1e:a9:27: 4f:3d:11:86:3a:aa:c7:f6:1e:08:26:20:62:b9:f5: 27:82:da:c3:64:47:2c:05:1d:ba:c8:8c:07:9b:b5: cb:42:24:ce:c6:46:06:ad:47:75:bd:f3:75:70:20: 37:6b:c9:70:6c:0b:8f:22:9e:fc:ac:40:73:34:39: 66:10:e0:78:fb:ba:7a:34:03:9f:fe:c1:b2:fe:07: 7c:54:47:42:fb:e5:d1:0a:a4:d5:e3:92:01:6f:a2: 0d:98:9b:f9:2a:fa:6b:3e:56:12:e6:80:81:9c:7b: da:d1:2c:6f:fa:cb:81:42:4d:89:01:95:01:01:4b: 70:dd:4d:74:7d:2f:ea:bd:89:2f:4b:18:0a:90:2c: 64:2e:12:fd:cc:99:c6:96:85:be:ae:c5:58:29:63: d4:f4:0d:9f:6f:cd:aa:81:14:4e:91:92:18:71:6a: 31:2a:0b:d4:37:3a:f7:7d:5b:ce:39:93:a2:ba:1f: 62:3f:65:0d:dc:5e:c8:b0:a2:6e:65:f6:e3:55:24: ea:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BC:65:66:86:83:56:F7:82:06:AD:8D:C0:89:CA:D7:1C:D4:D3:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a9b8f82-d613-457f-8a2e-9ddcd2b04fbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 184.36.0.0/15 Signature Algorithm: sha256WithRSAEncryption b2:ba:d0:87:46:2b:06:50:a1:69:3f:ca:57:1c:f4:3f:0d:48: 8d:9e:dc:5f:f4:16:17:aa:da:68:14:06:a0:8e:9a:c0:45:2b: 06:b0:32:56:60:22:00:26:9e:2a:ff:40:61:cc:a0:c9:02:87: 89:cc:c9:29:2f:96:38:cd:2f:1b:fa:bc:04:cc:b8:fd:1e:d8: 24:c9:79:12:c5:ae:9c:48:51:e4:82:52:4f:b4:ac:13:2b:5b: 8c:04:d8:9b:77:d7:da:c5:bb:b0:8c:b3:ba:2f:bd:cb:72:f7: c8:a6:9d:0d:8b:02:84:6c:a3:8c:fd:9c:5a:16:9a:e8:ac:d2: 50:60:09:e4:5e:c5:cc:1c:6d:33:7f:45:c1:e2:9e:0a:33:63: d0:c9:d9:3d:dd:f2:54:d8:38:a9:06:73:7d:a6:ef:bd:ce:44: 48:a7:0d:04:e0:45:bc:a7:b7:55:30:e9:e6:10:58:69:ed:33: 88:ce:07:61:24:01:3c:94:0b:36:2c:58:32:d5:f0:fe:f0:c9: 35:fd:46:fc:16:26:de:2f:c9:a2:90:30:ec:de:e4:bc:cd:d6: cc:31:5f:70:ab:8f:a6:ed:21:a8:b2:dd:7d:d8:88:72:22:68: 52:95:10:02:8e:76:15:45:77:7c:36:16:e7:24:f0:37:6d:04: a9:7a:bd:61 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPZcweeCBE0NvhXnKfSt/a2G3kjgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI3MDAyMTAyWhcNMjYwNzI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MWMwZjZiMTMwMzY1Yjg5NThjNWQzYTVmODAwMjU4YTcw MTMyZDJhZTFiYzYxNTZkMzkwMzY4ZTI1Y2JmNGNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNOsKbUljQGeOQVP2KqEd/3tKh3sA17x1gFxs6DT3RFnPu hGtMR99SWR7grRcdO8XZWLEyg3opLB6pJ089EYY6qsf2HggmIGK59SeC2sNkRywF HbrIjAebtctCJM7GRgatR3W983VwIDdryXBsC48invysQHM0OWYQ4Hj7uno0A5/+ wbL+B3xUR0L75dEKpNXjkgFvog2Ym/kq+ms+VhLmgIGce9rRLG/6y4FCTYkBlQEB S3DdTXR9L+q9iS9LGAqQLGQuEv3MmcaWhb6uxVgpY9T0DZ9vzaqBFE6RkhhxajEq C9Q3Ovd9W845k6K6H2I/ZQ3cXsiwom5l9uNVJOoZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUzLxlZoaDVveCBq2NwInK1xzU0xcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhOWI4ZjgyLWQ2MTMtNDU3Zi04YTJlLTlkZGNkMmIwNGZiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwG4JDANBgkqhkiG9w0BAQsFAAOCAQEAsrrQh0YrBlChaT/KVxz0Pw1IjZ7c X/QWF6raaBQGoI6awEUrBrAyVmAiACaeKv9AYcygyQKHiczJKS+WOM0vG/q8BMy4 /R7YJMl5EsWunEhR5IJST7SsEytbjATYm3fX2sW7sIyzui+9y3L3yKadDYsChGyj jP2cWhaa6KzSUGAJ5F7FzBxtM39FweKeCjNj0MnZPd3yVNg4qQZzfabvvc5ESKcN BOBFvKe3VTDp5hBYae0ziM4HYSQBPJQLNixYMtXw/vDJNf1G/BYm3i/JopAw7N7k vM3WzDFfcKuPpu0hqLLdfdiIciJoUpUQAo52FUV3fDYW5yTwN20EqXq9YQ== -----END CERTIFICATE-----Generated at Sun May 3 16:11:52 2026 by rpki-client