$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/361d86fa-1e11-495f-8021-5b0f95bb1974.roa File: 361d86fa-1e11-495f-8021-5b0f95bb1974.roa (raw, json) Hash identifier: P9RS5HfkNZKz23I+ne1132AEWnkSKobggGQ5weL7rMI= Subject key identifier: 02:87:1F:26:08:6E:F7:0B:F2:73:C7:2A:2B:8A:43:C6:B6:4B:C4:8C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7553AF3C7BB236F482A6612BE0B1FFAA1A306FE2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/361d86fa-1e11-495f-8021-5b0f95bb1974.roa Signing time: Tue 28 Apr 2026 00:00:05 +0000 ROA not before: Tue 28 Apr 2026 00:00:05 +0000 ROA not after: Mon 27 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 16.150.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:53:af:3c:7b:b2:36:f4:82:a6:61:2b:e0:b1:ff:aa:1a:30:6f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 00:00:05 2026 GMT Not After : Jul 27 23:59:59 2026 GMT Subject: serialNumber=7eabf59abb98b29025b877ee069815a5fb7ff9d80a7d37e5677860acfcb44acc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c5:dd:8a:7c:63:75:bc:c1:5b:a6:a0:62:c5: bf:e3:d4:77:bf:e3:1c:37:c7:37:6e:3e:11:95:47: 2e:c5:82:f0:d3:24:93:01:8e:f1:26:c5:52:d0:11: 7e:96:57:01:39:3b:af:a1:4e:47:81:e6:87:83:fa: 95:83:19:69:49:ec:a6:b8:a3:46:84:4a:c7:22:e4: a6:4e:94:db:0a:f6:11:fa:96:b5:09:3b:7f:66:7b: 9b:7f:13:bf:83:64:76:3a:4a:ed:1f:63:49:5a:48: 42:2c:fe:9f:69:f5:4f:18:77:e3:3b:40:90:48:bd: 72:d5:06:5e:b4:17:04:f9:5d:4e:7f:d3:b1:4b:cc: 0d:19:23:4b:bd:c5:34:0e:7a:3e:16:77:7b:d5:ba: 47:66:81:c5:57:ff:9d:df:7b:25:56:65:46:2c:80: 39:74:29:d0:12:b9:bb:20:18:54:79:ad:15:13:91: 6b:4e:13:0f:89:83:98:77:41:b7:90:db:47:6b:d6: 8e:db:35:06:be:f8:9f:28:65:62:6b:f7:fb:60:bb: 87:37:c8:c1:c4:d1:68:48:32:32:b8:f2:24:8d:6a: a1:c5:9b:98:64:aa:67:da:de:9a:c8:ef:75:18:58: 4d:11:4b:62:89:1c:d8:eb:59:7a:ca:0e:43:e0:1a: 3f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:87:1F:26:08:6E:F7:0B:F2:73:C7:2A:2B:8A:43:C6:B6:4B:C4:8C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/361d86fa-1e11-495f-8021-5b0f95bb1974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.150.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4d:50:4f:6b:f4:97:e4:4d:77:c3:99:da:80:7a:24:87:10:26: e8:f2:c2:dc:d8:df:2f:34:df:fb:c3:e1:b0:2f:bf:ed:5c:44: e0:cc:80:94:25:25:67:54:c9:78:e3:60:78:f7:e5:fb:bb:b7: 8a:90:4b:73:f3:9d:f6:ed:f5:5f:f2:6b:ee:b2:db:13:22:8b: cc:30:b5:cf:da:69:f2:42:ab:4d:e4:11:f8:24:26:d8:3e:22: 6f:d6:97:91:bb:35:99:c5:69:e9:86:55:30:45:13:17:3e:50: 9f:90:99:5a:87:b8:a1:68:10:84:27:bc:cb:79:f3:e0:54:eb: ac:48:5f:68:eb:61:90:52:e2:91:d7:c8:80:8f:70:85:30:27: 98:3d:38:c0:03:21:78:ce:c4:12:66:bf:c6:26:4b:e5:90:e9: fc:e9:5d:2f:72:78:fa:d5:af:34:ba:1a:e5:0d:d2:39:ed:be: 87:ef:a3:4f:4f:a1:1a:2f:62:76:7d:f8:b9:af:ef:9e:30:df: 83:6e:6e:a9:47:81:6c:1c:21:77:67:aa:43:9e:0a:97:36:c5: bd:df:61:f3:09:72:88:60:10:8a:4c:d7:33:d4:5a:8a:38:c5: 24:14:42:7d:0d:b1:89:85:c2:be:c3:f6:9d:cb:27:f7:b7:19: db:79:b0:d3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdVOvPHuyNvSCpmEr4LH/qhowb+IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI4MDAwMDA1WhcNMjYwNzI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZWFiZjU5YWJiOThiMjkwMjViODc3ZWUwNjk4MTVhNWZi N2ZmOWQ4MGE3ZDM3ZTU2Nzc4NjBhY2ZjYjQ0YWNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwxd2KfGN1vMFbpqBixb/j1He/4xw3xzduPhGVRy7FgvDT JJMBjvEmxVLQEX6WVwE5O6+hTkeB5oeD+pWDGWlJ7Ka4o0aESsci5KZOlNsK9hH6 lrUJO39me5t/E7+DZHY6Su0fY0laSEIs/p9p9U8Yd+M7QJBIvXLVBl60FwT5XU5/ 07FLzA0ZI0u9xTQOej4Wd3vVukdmgcVX/53feyVWZUYsgDl0KdASubsgGFR5rRUT kWtOEw+Jg5h3QbeQ20dr1o7bNQa++J8oZWJr9/tgu4c3yMHE0WhIMjK48iSNaqHF m5hkqmfa3prI73UYWE0RS2KJHNjrWXrKDkPgGj/tAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUAocfJghu9wvyc8cqK4pDxrZLxIwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM2MWQ4NmZhLTFlMTEtNDk1Zi04MDIxLTViMGY5NWJiMTk3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQljANBgkqhkiG9w0BAQsFAAOCAQEATVBPa/SX5E13w5nagHokhxAm6PLC 3NjfLzTf+8PhsC+/7VxE4MyAlCUlZ1TJeONgePfl+7u3ipBLc/Od9u31X/Jr7rLb EyKLzDC1z9pp8kKrTeQR+CQm2D4ib9aXkbs1mcVp6YZVMEUTFz5Qn5CZWoe4oWgQ hCe8y3nz4FTrrEhfaOthkFLikdfIgI9whTAnmD04wAMheM7EEma/xiZL5ZDp/Old L3J4+tWvNLoa5Q3SOe2+h++jT0+hGi9idn34ua/vnjDfg25uqUeBbBwhd2eqQ54K lzbFvd9h8wlyiGAQikzXM9RaijjFJBRCfQ2xiYXCvsP2ncsn97cZ23mw0w== -----END CERTIFICATE-----Generated at Mon May 4 21:39:56 2026 by rpki-client