$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f47c629-dd2e-4cd5-8214-20dc4b58dbfd.roa File: 4f47c629-dd2e-4cd5-8214-20dc4b58dbfd.roa (raw, json) Hash identifier: T8h1k9CCQLch3D3KyfuN3SKEEcbRD74vDVSAKwSbPXE= Subject key identifier: 04:29:2B:99:C0:42:2D:4B:06:8B:B9:28:DA:16:78:2E:37:64:BB:A2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 686A58CC29485360EC724B85C3798738AA571BA6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f47c629-dd2e-4cd5-8214-20dc4b58dbfd.roa Signing time: Fri 01 May 2026 00:40:57 +0000 ROA not before: Fri 01 May 2026 00:40:57 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.252.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:6a:58:cc:29:48:53:60:ec:72:4b:85:c3:79:87:38:aa:57:1b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 1 00:40:57 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=36b3ad4b959ef117b349da4003c1487aab237ceee2517164966845f3dbd4f06f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:9c:38:ba:29:76:4a:8c:17:f0:49:09:fa: 1e:38:0f:83:6d:9e:28:fd:d0:32:d6:5c:5b:df:46: ec:ad:b4:69:ff:4a:1e:1f:94:21:7c:06:7d:81:73: 85:57:57:7a:a2:a5:88:c5:35:c4:67:2b:e4:91:23: c5:55:4e:4d:59:80:1b:dd:9b:24:19:05:4f:98:e5: 17:fc:d9:03:db:fa:6b:73:98:aa:c5:dd:bb:67:ab: 54:52:84:c6:f6:26:3c:b2:ff:a3:a7:85:86:1d:db: ab:d8:b1:48:e4:ba:b4:dd:ec:57:21:27:f1:68:aa: 23:11:a1:f2:2e:35:b9:6b:1d:b4:89:7d:94:6b:83: f8:38:e1:45:24:ef:88:04:45:81:f0:3c:82:86:6d: 1f:2b:76:2c:90:40:68:1d:aa:3f:d4:64:40:36:9f: b6:aa:20:99:09:ea:a6:fc:4b:4e:85:d0:60:04:c9: d5:ec:39:c5:68:4c:f9:3e:df:84:3c:2a:0a:a6:89: ce:a5:6d:42:28:11:69:07:46:db:1e:fe:0d:a3:6c: e6:13:ef:16:a4:9c:ed:11:f4:ff:dd:86:18:0d:73: b4:fb:99:f5:3d:b1:54:b2:ff:42:a4:47:09:20:7c: 22:c2:7d:a6:e7:d5:5c:bc:64:78:61:7d:cb:77:d8: ea:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:29:2B:99:C0:42:2D:4B:06:8B:B9:28:DA:16:78:2E:37:64:BB:A2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f47c629-dd2e-4cd5-8214-20dc4b58dbfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.100.0/24 Signature Algorithm: sha256WithRSAEncryption bc:9a:c8:78:67:12:be:0e:c5:73:35:36:1c:55:e4:aa:ad:98: 0d:3f:37:ca:b3:3f:c5:87:f7:0e:8c:12:7e:cd:fc:c0:d0:1e: e3:33:bc:20:dc:44:61:06:27:7c:85:c3:c2:17:e3:c7:2f:95: 14:38:d6:39:62:41:0e:f4:47:21:82:af:7b:3a:e5:f6:fe:89: e3:57:d1:92:ba:4f:69:32:98:08:1e:a0:c8:69:c3:f2:e1:d7: a5:82:63:90:2c:74:a0:57:3f:84:6d:e8:c1:da:09:53:0f:68: fe:29:c7:34:41:7d:88:a5:7b:51:e2:1c:39:e3:21:53:1a:4e: 23:f7:76:51:53:85:4f:78:5d:80:db:d6:30:d1:dd:67:c9:e2: 91:b8:b3:00:2a:35:b3:1f:78:dc:f5:05:40:10:20:44:82:86: d1:19:30:2d:bc:66:72:3c:ae:d9:8a:52:6a:6c:08:f9:37:a1: 0e:f9:ca:5e:ed:f5:bf:80:93:9f:cc:5d:f0:91:5d:c4:4c:42: 92:8d:d6:dc:fb:69:e8:13:13:6a:77:2f:85:60:47:7e:17:71: 23:35:b3:a8:02:8b:d7:30:78:44:75:36:82:ea:0d:04:cc:41: ab:b8:51:9c:a5:7e:e1:a0:b8:25:7a:08:e7:fa:84:cf:d3:33: 26:25:cb:3b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaGpYzClIU2DsckuFw3mHOKpXG6YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDA0MDU3WhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNmIzYWQ0Yjk1OWVmMTE3YjM0OWRhNDAwM2MxNDg3YWFi MjM3Y2VlZTI1MTcxNjQ5NjY4NDVmM2RiZDRmMDZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8Y5w4uil2SowX8EkJ+h44D4Ntnij90DLWXFvfRuyttGn/ Sh4flCF8Bn2Bc4VXV3qipYjFNcRnK+SRI8VVTk1ZgBvdmyQZBU+Y5Rf82QPb+mtz mKrF3btnq1RShMb2Jjyy/6OnhYYd26vYsUjkurTd7FchJ/FoqiMRofIuNblrHbSJ fZRrg/g44UUk74gERYHwPIKGbR8rdiyQQGgdqj/UZEA2n7aqIJkJ6qb8S06F0GAE ydXsOcVoTPk+34Q8Kgqmic6lbUIoEWkHRtse/g2jbOYT7xaknO0R9P/dhhgNc7T7 mfU9sVSy/0KkRwkgfCLCfabn1Vy8ZHhhfct32Op5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBCkrmcBCLUsGi7ko2hZ4Ljdku6IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRmNDdjNjI5LWRkMmUtNGNkNS04MjE0LTIwZGM0YjU4ZGJmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/GQwDQYJKoZIhvcNAQELBQADggEBALyayHhnEr4OxXM1NhxV5KqtmA0/ N8qzP8WH9w6MEn7N/MDQHuMzvCDcRGEGJ3yFw8IX48cvlRQ41jliQQ70RyGCr3s6 5fb+ieNX0ZK6T2kymAgeoMhpw/Lh16WCY5AsdKBXP4Rt6MHaCVMPaP4pxzRBfYil e1HiHDnjIVMaTiP3dlFThU94XYDb1jDR3WfJ4pG4swAqNbMfeNz1BUAQIESChtEZ MC28ZnI8rtmKUmpsCPk3oQ75yl7t9b+Ak5/MXfCRXcRMQpKN1tz7aegTE2p3L4Vg R34XcSM1s6gCi9cweER1NoLqDQTMQau4UZylfuGguCV6COf6hM/TMyYlyzs= -----END CERTIFICATE-----Generated at Sun May 3 14:45:17 2026 by rpki-client