$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56be3fd1-9453-4923-ab19-86f844b784e1.roa File: 56be3fd1-9453-4923-ab19-86f844b784e1.roa (raw, json) Hash identifier: NeQY4YzlsRb1TgaI+fmn2J/mvLvhEUtqlWAlLA7Ao+c= Subject key identifier: 8E:93:75:3A:9E:76:01:DC:37:7E:A9:D2:02:CB:E3:3B:F7:8A:83:97 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 38760FCA6C5E9F61EFEB85FCC593ED5BB32E3A1D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56be3fd1-9453-4923-ab19-86f844b784e1.roa Signing time: Tue 28 Apr 2026 00:10:07 +0000 ROA not before: Tue 28 Apr 2026 00:10:07 +0000 ROA not after: Mon 27 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.224.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:76:0f:ca:6c:5e:9f:61:ef:eb:85:fc:c5:93:ed:5b:b3:2e:3a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 00:10:07 2026 GMT Not After : Jul 27 23:59:59 2026 GMT Subject: serialNumber=3a3a5796e4eda24e853c05267ffeb9df480a607a02eea605dc2cbe3084be2fe9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:a2:20:6a:24:66:25:dc:9c:2b:c7:80:9a: ec:20:c8:13:7e:d6:a4:2f:b3:5d:26:83:73:33:2c: 05:e8:03:04:e4:6a:9a:e0:ec:7f:96:b9:89:53:83: 10:da:72:7d:bd:72:64:b7:ee:cb:6a:fb:65:16:48: 2f:85:ad:50:ba:be:60:87:0f:70:73:44:61:aa:8c: 38:00:6f:1a:46:db:a2:3d:79:b7:44:e1:53:18:f8: db:9a:3f:23:17:a7:65:12:57:03:68:2e:44:83:2a: e5:ff:ad:e7:53:dc:f6:e0:d7:b7:4e:3b:14:fa:0d: 38:f3:7f:a4:d2:79:c2:1c:92:8f:ac:da:14:b3:3d: 3f:e6:4d:c0:d9:74:95:e3:2e:aa:8d:6e:f9:de:0f: eb:5f:19:0c:bf:4d:e7:bc:35:a3:15:f2:5c:88:5e: 49:0a:2c:52:94:cc:db:a2:c1:41:f1:72:d2:68:98: 1c:d9:80:b7:4d:f6:ff:c7:38:b5:ab:0b:ac:c9:f2: 75:57:96:ab:40:00:46:d9:fd:2a:a1:77:50:b2:6f: c7:82:9f:51:41:3b:6b:b4:73:38:f7:b9:06:d5:35: ac:74:e7:92:54:b2:58:71:9e:be:4f:dd:68:a2:ad: 57:a3:f2:b3:c2:64:16:6d:6b:5c:03:c0:7e:16:6c: a3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:93:75:3A:9E:76:01:DC:37:7E:A9:D2:02:CB:E3:3B:F7:8A:83:97 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56be3fd1-9453-4923-ab19-86f844b784e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.224.0.0/17 Signature Algorithm: sha256WithRSAEncryption 1d:e9:e7:65:83:d2:9f:4d:c6:ac:a3:e8:5b:ca:36:93:78:18: 5f:9b:2a:e9:bb:13:2d:16:b6:e5:06:da:dc:10:76:56:cc:5b: 8d:72:cc:d9:fa:10:1b:92:f7:45:8e:b7:2e:28:e5:b0:5b:e6: 97:ae:4c:81:e6:a7:46:ce:e9:c5:e1:65:25:d9:12:d7:d3:f1: 03:da:56:da:41:e3:c5:c3:e1:02:aa:68:8b:56:0e:b5:5b:41: 3b:8a:f3:ab:4a:97:32:6b:0b:55:3b:50:26:5f:eb:31:b9:68: fe:eb:39:21:2e:0b:eb:80:d5:a5:0c:f5:cd:d5:18:31:b9:6d: 84:e8:54:11:a2:6d:c7:8b:ba:59:0b:1a:ab:f9:51:f8:e3:99: aa:59:23:a5:04:99:4e:a2:d3:83:cc:37:b9:ee:56:38:a3:56: f2:bd:a3:85:70:98:67:e3:10:d0:be:03:76:cc:44:4d:a0:63: 80:93:10:66:55:60:9f:f9:20:3d:4d:8b:a4:4b:8e:d2:4a:40: 2b:0c:d6:bd:75:86:1c:13:95:f4:3c:f2:7f:79:46:6b:8d:6c: 81:71:94:61:33:1e:09:cc:29:2c:73:1e:dd:58:e9:f9:86:6b: 12:fe:60:ee:7c:7e:c6:cf:52:53:7a:80:f5:b6:4b:88:a8:45: 36:8b:f0:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOHYPymxen2Hv64X8xZPtW7MuOh0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI4MDAxMDA3WhcNMjYwNzI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTNhNTc5NmU0ZWRhMjRlODUzYzA1MjY3ZmZlYjlkZjQ4 MGE2MDdhMDJlZWE2MDVkYzJjYmUzMDg0YmUyZmU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5CKIgaiRmJdycK8eAmuwgyBN+1qQvs10mg3MzLAXoAwTk aprg7H+WuYlTgxDacn29cmS37stq+2UWSC+FrVC6vmCHD3BzRGGqjDgAbxpG26I9 ebdE4VMY+NuaPyMXp2USVwNoLkSDKuX/redT3Pbg17dOOxT6DTjzf6TSecIcko+s 2hSzPT/mTcDZdJXjLqqNbvneD+tfGQy/Tee8NaMV8lyIXkkKLFKUzNuiwUHxctJo mBzZgLdN9v/HOLWrC6zJ8nVXlqtAAEbZ/Sqhd1Cyb8eCn1FBO2u0czj3uQbVNax0 55JUslhxnr5P3WiirVej8rPCZBZta1wDwH4WbKMzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjpN1Op52Adw3fqnSAsvjO/eKg5cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU2YmUzZmQxLTk0NTMtNDkyMy1hYjE5LTg2Zjg0NGI3ODRlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcP4AAwDQYJKoZIhvcNAQELBQADggEBAB3p52WD0p9Nxqyj6FvKNpN4GF+b Kum7Ey0WtuUG2twQdlbMW41yzNn6EBuS90WOty4o5bBb5peuTIHmp0bO6cXhZSXZ EtfT8QPaVtpB48XD4QKqaItWDrVbQTuK86tKlzJrC1U7UCZf6zG5aP7rOSEuC+uA 1aUM9c3VGDG5bYToVBGibceLulkLGqv5UfjjmapZI6UEmU6i04PMN7nuVjijVvK9 o4VwmGfjENC+A3bMRE2gY4CTEGZVYJ/5ID1Ni6RLjtJKQCsM1r11hhwTlfQ88n95 RmuNbIFxlGEzHgnMKSxzHt1Y6fmGaxL+YO58fsbPUlN6gPW2S4ioRTaL8O4= -----END CERTIFICATE-----Generated at Sun May 3 14:47:31 2026 by rpki-client