$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fcc3504-7dfc-4177-b278-065ecfaab640.roa File: 5fcc3504-7dfc-4177-b278-065ecfaab640.roa (raw, json) Hash identifier: YwXkXzfSWC0brd7UN1CPZIWvI2aFhE2JMzz9sXtxkMw= Subject key identifier: E8:67:E3:56:66:56:98:02:4C:51:E5:73:49:5D:3C:66:5A:5D:0F:12 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0ABCF07AFA4D73E57743DFC38CCCCECAFF3E153F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fcc3504-7dfc-4177-b278-065ecfaab640.roa Signing time: Wed 29 Apr 2026 00:31:54 +0000 ROA not before: Wed 29 Apr 2026 00:31:54 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 56.127.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:bc:f0:7a:fa:4d:73:e5:77:43:df:c3:8c:cc:ce:ca:ff:3e:15:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:31:54 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=2f42b3c4d00338f5e7ffd8fa32e6f1e5a8a8a3ee34106b42f91a15fc87417e4b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:47:bc:b4:4d:19:34:7f:75:a2:03:b1:8d:6a: a5:4c:06:81:dc:00:44:71:c6:0c:e6:d8:2f:44:0f: a1:6f:1b:34:ba:27:e5:04:12:17:78:b7:63:4a:51: ae:23:c9:44:00:b2:0e:3f:a7:c7:1e:b6:1e:14:13: f7:a4:6a:ae:57:fb:60:4b:2b:a5:02:f3:56:e3:97: 0d:42:43:ce:0b:a9:44:9a:e2:7d:3b:df:5b:42:99: 66:c5:e9:f9:4e:51:f9:37:64:68:01:26:60:6c:f7: 82:fb:74:86:d2:64:45:3f:b8:3f:82:87:37:a0:be: 03:9d:4b:01:1c:8a:8f:c6:d9:11:22:c2:ff:e2:57: af:6a:07:ba:9d:8c:a0:a6:25:be:83:bf:a5:95:b6: 79:8f:05:f8:4c:81:2b:a3:71:35:d2:f8:e1:1a:25: 21:8e:72:56:5b:60:96:a7:c5:ef:a8:79:95:16:5f: a6:82:a9:a5:d8:6d:89:df:e4:da:d0:c5:e4:d1:50: 24:34:27:cf:30:2d:72:54:93:45:b5:b7:84:2c:a2: b5:06:5c:ba:66:c4:2c:b6:f2:83:28:43:f5:79:48: 40:3a:6f:ee:86:64:6b:65:82:ad:dd:4a:52:33:aa: dd:20:ea:13:09:bb:9f:09:5e:2a:81:fa:84:22:2d: 53:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:67:E3:56:66:56:98:02:4C:51:E5:73:49:5D:3C:66:5A:5D:0F:12 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fcc3504-7dfc-4177-b278-065ecfaab640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.127.0.0/16 Signature Algorithm: sha256WithRSAEncryption 01:34:25:1e:bf:30:06:97:53:2b:ed:69:2c:b1:fb:bd:28:24: 6a:4c:84:25:c1:26:87:61:14:68:63:41:c5:0c:42:df:c4:c7: 55:5a:18:42:eb:e3:13:e9:c9:f0:e3:c0:c3:50:bf:6b:e3:53: cd:99:75:eb:9a:43:88:7d:cd:e7:26:4d:94:58:8f:9e:da:85: e5:11:a2:d5:75:53:74:a6:80:87:ce:2b:90:d4:b9:9a:c4:31: 0a:ef:48:ef:38:ca:b3:1e:cf:cc:fa:74:73:6f:ef:de:79:24: 16:25:bd:f9:96:8e:2b:26:cd:c0:77:36:14:4b:ad:b2:61:98: 43:13:1b:26:7e:d4:8d:a0:18:e0:dc:09:35:7d:a7:eb:63:7c: 06:08:d4:08:fa:c6:cc:70:c1:07:24:01:67:a3:41:25:f3:26: 00:b9:a0:1e:91:a3:03:19:38:48:a4:9f:5c:41:33:b0:57:d6: 33:09:9b:37:31:83:ef:43:6d:dd:15:f9:40:e9:61:dd:df:b4: c6:8b:33:06:0f:87:d2:78:d2:2b:39:26:65:f5:52:cd:1d:df: 42:d0:91:da:bf:a7:e9:b2:d6:58:70:3c:6c:8d:47:13:55:4c: 3e:2a:5b:1e:ff:6f:82:c7:4e:5e:5f:a5:5f:62:3f:76:09:50: 09:b0:54:bb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCrzwevpNc+V3Q9/DjMzOyv8+FT8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDAzMTU0WhcNMjYwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZjQyYjNjNGQwMDMzOGY1ZTdmZmQ4ZmEzMmU2ZjFlNWE4 YThhM2VlMzQxMDZiNDJmOTFhMTVmYzg3NDE3ZTRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOR7y0TRk0f3WiA7GNaqVMBoHcAERxxgzm2C9ED6FvGzS6 J+UEEhd4t2NKUa4jyUQAsg4/p8ceth4UE/ekaq5X+2BLK6UC81bjlw1CQ84LqUSa 4n0731tCmWbF6flOUfk3ZGgBJmBs94L7dIbSZEU/uD+ChzegvgOdSwEcio/G2REi wv/iV69qB7qdjKCmJb6Dv6WVtnmPBfhMgSujcTXS+OEaJSGOclZbYJanxe+oeZUW X6aCqaXYbYnf5NrQxeTRUCQ0J88wLXJUk0W1t4QsorUGXLpmxCy28oMoQ/V5SEA6 b+6GZGtlgq3dSlIzqt0g6hMJu58JXiqB+oQiLVPZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU6GfjVmZWmAJMUeVzSV08ZlpdDxIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVmY2MzNTA0LTdkZmMtNDE3Ny1iMjc4LTA2NWVjZmFhYjY0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4fzANBgkqhkiG9w0BAQsFAAOCAQEAATQlHr8wBpdTK+1pLLH7vSgkakyE JcEmh2EUaGNBxQxC38THVVoYQuvjE+nJ8OPAw1C/a+NTzZl165pDiH3N5yZNlFiP ntqF5RGi1XVTdKaAh84rkNS5msQxCu9I7zjKsx7PzPp0c2/v3nkkFiW9+ZaOKybN wHc2FEutsmGYQxMbJn7UjaAY4NwJNX2n62N8BgjUCPrGzHDBByQBZ6NBJfMmALmg HpGjAxk4SKSfXEEzsFfWMwmbNzGD70Nt3RX5QOlh3d+0xoszBg+H0njSKzkmZfVS zR3fQtCR2r+n6bLWWHA8bI1HE1VMPipbHv9vgsdOXl+lX2I/dglQCbBUuw== -----END CERTIFICATE-----Generated at Sun May 3 14:46:43 2026 by rpki-client