$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47680c49-2907-49aa-a857-85b4ccd512bf.roa File: 47680c49-2907-49aa-a857-85b4ccd512bf.roa (raw, json) Hash identifier: DOWnDU7H7Uiz1cC/EdGhkzAOwEoy5g9UEx+Z5iJH+HY= Subject key identifier: B1:68:07:58:DF:92:30:9E:B0:52:9F:AD:48:3C:BF:F8:8D:4F:CF:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3AEBB8452FCE52AB9AA7173BCE3C5B88B36701DE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47680c49-2907-49aa-a857-85b4ccd512bf.roa Signing time: Mon 27 Apr 2026 00:20:29 +0000 ROA not before: Mon 27 Apr 2026 00:20:29 +0000 ROA not after: Sun 26 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 65.9.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:eb:b8:45:2f:ce:52:ab:9a:a7:17:3b:ce:3c:5b:88:b3:67:01:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 27 00:20:29 2026 GMT Not After : Jul 26 23:59:59 2026 GMT Subject: serialNumber=5577e3ece969565569b1e2696197561f1924156486bf7ad8b66c816fc2d2001e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4e:dd:b7:28:ed:64:e8:a4:4c:2a:5c:74:85: 8e:e9:7e:17:20:14:ef:4e:f5:2b:73:79:d8:04:9e: 63:2e:e5:cb:ed:35:2a:02:26:3b:6c:56:0a:13:31: 3a:00:80:3f:94:80:19:34:98:91:43:2d:ef:a7:de: 09:c7:4b:3f:cb:c0:7c:8b:b0:b1:98:8c:88:e9:47: f6:36:fb:58:c3:cb:1b:cb:d7:ce:e8:f3:63:f2:b4: b2:e9:24:89:df:d0:7d:8d:37:96:ce:c5:45:e5:10: df:bf:f9:a9:e9:ec:28:ec:28:20:65:bc:f2:bd:ee: 28:55:03:90:74:f6:59:99:d5:ff:2b:77:70:9a:dc: 49:6d:14:47:bf:e0:28:84:08:13:64:74:5d:c8:20: 0d:e9:78:b9:eb:de:82:64:f1:7c:a8:58:b6:12:d4: 65:f6:7e:1b:80:d8:55:09:e5:04:2a:b4:23:e6:d2: 29:db:64:da:2a:dd:8b:a4:da:ad:ab:b9:82:51:d3: 6d:c3:fa:96:bb:36:4d:0b:85:b3:39:2a:f5:4c:c1: 53:5b:aa:3d:05:06:b4:81:e4:9a:39:0f:be:eb:3c: b4:44:b7:7f:da:bb:7c:9e:55:fe:9b:a8:04:8f:5d: c2:a6:b4:51:e5:8a:6f:88:79:a5:56:52:1e:e7:47: be:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:68:07:58:DF:92:30:9E:B0:52:9F:AD:48:3C:BF:F8:8D:4F:CF:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47680c49-2907-49aa-a857-85b4ccd512bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 65.9.144.0/20 Signature Algorithm: sha256WithRSAEncryption ad:93:4c:84:bf:0d:45:90:c6:ee:3d:ce:eb:71:21:08:72:ec: 61:dd:85:31:1e:90:e6:a3:48:f6:18:b5:ff:f6:8f:30:b7:eb: 8c:e6:aa:49:b2:79:22:dd:f7:3f:a2:6e:7d:b5:2c:c3:03:1f: 62:88:15:6a:f2:58:4b:86:b6:e0:a6:16:26:b7:73:c3:71:09: fc:85:44:ca:e7:e9:5c:39:76:af:86:85:18:47:c2:5a:d4:ab: 03:5e:f6:10:b8:83:c8:05:83:5d:7b:0b:ee:b6:c9:f8:cf:a9: be:04:cf:67:d1:32:e3:0e:a2:28:46:7e:e9:4d:56:af:75:45: 33:f9:11:f3:75:c6:61:e2:1d:3c:a8:c2:c0:92:23:77:7e:13: f7:dd:c4:5f:91:e3:7e:0b:77:f0:1a:81:19:38:a8:71:63:92: 37:a8:9d:9e:25:d4:b4:7c:21:40:0e:df:4f:90:8a:29:48:4d: 5e:9e:5d:7b:77:95:55:27:cc:f4:fa:cb:24:9b:5a:8b:be:b8: d4:5a:23:9d:ed:63:80:49:ec:c0:4f:1d:d9:22:68:f3:91:fb: 68:13:dd:8f:96:29:6a:c0:de:f5:65:f8:11:77:54:58:07:e4: 96:22:c9:f2:b7:33:95:5a:8b:60:f9:b5:df:90:65:6d:b1:ef: 24:25:69:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOuu4RS/OUquapxc7zjxbiLNnAd4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI3MDAyMDI5WhcNMjYwNzI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NTc3ZTNlY2U5Njk1NjU1NjliMWUyNjk2MTk3NTYxZjE5 MjQxNTY0ODZiZjdhZDhiNjZjODE2ZmMyZDIwMDFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUTt23KO1k6KRMKlx0hY7pfhcgFO9O9StzedgEnmMu5cvt NSoCJjtsVgoTMToAgD+UgBk0mJFDLe+n3gnHSz/LwHyLsLGYjIjpR/Y2+1jDyxvL 187o82PytLLpJInf0H2NN5bOxUXlEN+/+anp7CjsKCBlvPK97ihVA5B09lmZ1f8r d3Ca3EltFEe/4CiECBNkdF3IIA3peLnr3oJk8XyoWLYS1GX2fhuA2FUJ5QQqtCPm 0inbZNoq3Yuk2q2ruYJR023D+pa7Nk0LhbM5KvVMwVNbqj0FBrSB5Jo5D77rPLRE t3/au3yeVf6bqASPXcKmtFHlim+IeaVWUh7nR75xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsWgHWN+SMJ6wUp+tSDy/+I1Pz4AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ3NjgwYzQ5LTI5MDctNDlhYS1hODU3LTg1YjRjY2Q1MTJiZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARBCZAwDQYJKoZIhvcNAQELBQADggEBAK2TTIS/DUWQxu49zutxIQhy7GHd hTEekOajSPYYtf/2jzC364zmqkmyeSLd9z+ibn21LMMDH2KIFWryWEuGtuCmFia3 c8NxCfyFRMrn6Vw5dq+GhRhHwlrUqwNe9hC4g8gFg117C+62yfjPqb4Ez2fRMuMO oihGfulNVq91RTP5EfN1xmHiHTyowsCSI3d+E/fdxF+R434Ld/AagRk4qHFjkjeo nZ4l1LR8IUAO30+QiilITV6eXXt3lVUnzPT6yySbWou+uNRaI53tY4BJ7MBPHdki aPOR+2gT3Y+WKWrA3vVl+BF3VFgH5JYiyfK3M5Vai2D5td+QZW2x7yQlaZQ= -----END CERTIFICATE-----Generated at Sun May 3 14:46:22 2026 by rpki-client