$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d86c343-3dde-49a4-bf11-6b99e467a0bc.roa File: 3d86c343-3dde-49a4-bf11-6b99e467a0bc.roa (raw, json) Hash identifier: Ms//nTTLrJ80H08vTsLkOHddrZczova2oExbLhlftrI= Subject key identifier: 72:83:73:37:DE:17:C0:B3:76:AB:C9:8F:7C:78:43:84:80:31:52:D9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4199F62455A7C7D8F23F1F491E79367CD5AE906A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d86c343-3dde-49a4-bf11-6b99e467a0bc.roa Signing time: Sat 02 May 2026 01:01:24 +0000 ROA not before: Sat 02 May 2026 01:01:24 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 16.56.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:99:f6:24:55:a7:c7:d8:f2:3f:1f:49:1e:79:36:7c:d5:ae:90:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 01:01:24 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=286a18914b5e07763b73564f672922068a43b26bb0cd8d536315b0882dcfe804, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:7b:02:67:ce:5d:25:59:da:78:a0:8f:f6: 5b:7c:db:a4:6b:90:43:23:f1:14:15:ab:d4:c9:6d: 72:24:8c:85:03:f3:a3:e9:04:5b:26:76:69:37:6e: 63:96:e7:36:5b:e7:a7:8d:ee:00:eb:01:b1:3d:0e: 31:ed:fa:6a:d7:b2:51:3d:da:c2:26:3e:a1:fb:f1: e2:79:8b:56:28:d6:77:d0:4c:ce:6c:26:14:86:56: 7b:c0:7e:6e:19:a8:d4:63:dd:52:4b:85:77:98:18: 35:43:dd:a0:47:a7:88:6f:22:a5:a6:ce:cd:38:05: 51:fa:0e:5f:92:80:d1:8d:28:56:c8:fe:5e:a3:cc: 90:57:ef:b1:51:6a:89:cf:83:f2:ac:72:96:b5:06: 26:19:3f:5b:d7:e5:d7:e4:97:c2:33:15:4d:88:08: 92:34:f9:87:34:d0:5f:f0:a8:8e:ac:dd:e8:a1:9f: b8:92:fa:f3:b3:92:87:1c:bc:54:d2:4f:33:1a:21: fb:c9:37:5b:33:d6:f1:b0:ca:22:15:a9:42:32:8f: 5a:c3:02:16:a5:91:d4:28:ff:26:05:99:2c:0d:d1: 04:18:ca:ef:97:47:57:17:fc:4f:d3:90:bc:be:80: 7c:09:83:03:50:d5:76:bb:05:63:6c:1d:45:9a:14: 27:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:83:73:37:DE:17:C0:B3:76:AB:C9:8F:7C:78:43:84:80:31:52:D9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d86c343-3dde-49a4-bf11-6b99e467a0bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.56.64.0/18 Signature Algorithm: sha256WithRSAEncryption 67:ef:17:b6:fa:89:36:b1:28:9f:c8:9d:0f:d5:79:cf:a4:8f: ee:c6:e4:37:31:b7:af:40:74:33:14:76:06:9d:5c:37:1a:37: 1b:67:7e:04:bd:22:7c:1f:61:fd:1e:5a:7d:77:2c:bb:14:93: 33:ed:19:d5:e3:c4:bf:e2:e9:6e:8e:64:44:0b:6d:1c:6f:45: 45:4d:78:a9:3a:8c:97:49:17:fa:0a:46:71:83:83:89:26:e0: bb:eb:90:9d:37:c8:02:a5:29:12:0a:eb:25:0a:53:86:58:fb: 58:e2:bc:62:28:b9:68:85:4f:b6:3b:b7:c4:0e:82:07:ca:3b: 4f:24:9e:6a:55:e4:9c:c9:13:2a:3a:b0:44:c2:de:c9:71:60: bc:5f:a7:b6:f4:e7:e9:d1:76:31:be:d0:72:7f:e9:6c:92:96: f5:e5:89:58:bd:7c:e2:80:bd:8a:19:cc:41:6b:c2:e4:31:bc: 8f:79:bc:3c:e8:82:59:82:60:12:56:36:40:10:54:7d:8e:45: 14:0d:0a:8f:4f:51:c0:85:f1:cd:bc:c8:8c:96:e5:6f:2c:da: 8b:52:3b:ae:8a:a3:f8:e4:33:bf:ea:45:3d:2c:a0:0f:55:26: ce:d4:4e:64:f8:bf:96:e1:7c:e1:62:48:5a:26:51:44:0e:8e: 50:31:b0:d1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQZn2JFWnx9jyPx9JHnk2fNWukGowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAyMDEwMTI0WhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyODZhMTg5MTRiNWUwNzc2M2I3MzU2NGY2NzI5MjIwNjhh NDNiMjZiYjBjZDhkNTM2MzE1YjA4ODJkY2ZlODA0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqaHsCZ85dJVnaeKCP9lt826RrkEMj8RQVq9TJbXIkjIUD 86PpBFsmdmk3bmOW5zZb56eN7gDrAbE9DjHt+mrXslE92sImPqH78eJ5i1Yo1nfQ TM5sJhSGVnvAfm4ZqNRj3VJLhXeYGDVD3aBHp4hvIqWmzs04BVH6Dl+SgNGNKFbI /l6jzJBX77FRaonPg/Kscpa1BiYZP1vX5dfkl8IzFU2ICJI0+Yc00F/wqI6s3eih n7iS+vOzkoccvFTSTzMaIfvJN1sz1vGwyiIVqUIyj1rDAhalkdQo/yYFmSwN0QQY yu+XR1cX/E/TkLy+gHwJgwNQ1Xa7BWNsHUWaFCcRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcoNzN94XwLN2q8mPfHhDhIAxUtkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNkODZjMzQzLTNkZGUtNDlhNC1iZjExLTZiOTllNDY3YTBiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYQOEAwDQYJKoZIhvcNAQELBQADggEBAGfvF7b6iTaxKJ/InQ/Vec+kj+7G 5Dcxt69AdDMUdgadXDcaNxtnfgS9InwfYf0eWn13LLsUkzPtGdXjxL/i6W6OZEQL bRxvRUVNeKk6jJdJF/oKRnGDg4km4LvrkJ03yAKlKRIK6yUKU4ZY+1jivGIouWiF T7Y7t8QOggfKO08knmpV5JzJEyo6sETC3slxYLxfp7b05+nRdjG+0HJ/6WySlvXl iVi9fOKAvYoZzEFrwuQxvI95vDzoglmCYBJWNkAQVH2ORRQNCo9PUcCF8c28yIyW 5W8s2otSO66Ko/jkM7/qRT0soA9VJs7UTmT4v5bhfOFiSFomUUQOjlAxsNE= -----END CERTIFICATE-----Generated at Mon May 4 21:38:10 2026 by rpki-client