$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/652a51f8-00d4-4bd7-ba30-d8aff1bb9a8f.roa File: 652a51f8-00d4-4bd7-ba30-d8aff1bb9a8f.roa (raw, json) Hash identifier: yKmtwBOh6lubTuq+1Itc+ujvmD8kInXDDqwcIF85AJc= Subject key identifier: 45:2B:E6:2E:69:B6:B1:B3:A6:B2:62:5D:6D:6C:0E:C4:C1:2B:ED:7B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5CE8F33F483F21195339A77B6609249296BABE42 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/652a51f8-00d4-4bd7-ba30-d8aff1bb9a8f.roa Signing time: Wed 29 Apr 2026 00:31:51 +0000 ROA not before: Wed 29 Apr 2026 00:31:51 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 216.73.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e8:f3:3f:48:3f:21:19:53:39:a7:7b:66:09:24:92:96:ba:be:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:31:51 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=5b792f286172c6eb3559c1eeaf571a8e6e37fda02229874d7ec05f2bd4f053e9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e7:cd:4a:6f:b8:b0:ba:cf:57:d9:e4:25:52: c0:a7:f2:b1:af:5c:46:57:bf:4e:9c:2e:39:1f:37: 27:f5:a0:bd:0c:7f:c9:aa:22:fa:23:cc:51:90:05: 56:e7:11:76:81:82:82:cf:04:ab:f0:78:df:58:68: 7d:4c:80:c4:32:d9:2e:e7:70:cd:51:6c:55:08:9c: 88:02:9b:4e:d5:bb:d3:a3:52:34:35:1b:e2:d2:3f: ad:20:99:3b:b6:1a:99:25:b5:36:b8:f1:a3:95:75: 6b:2d:99:98:2c:d8:2f:85:c9:02:4c:04:00:9a:38: 4f:f3:13:45:b5:ef:f2:8c:26:49:34:a6:a4:b5:21: 89:0c:2e:a3:91:7c:46:3c:cc:36:f9:08:1f:60:f8: 10:1b:9b:88:e3:78:ae:cf:d6:0d:71:57:63:8f:0c: 19:32:d8:73:b3:2f:bc:37:6b:16:dd:27:e5:a1:b8: f2:05:e8:7f:56:22:47:74:e5:7f:da:9c:1f:1d:f1: f9:46:ce:11:cc:7b:c7:1a:3a:24:c6:a8:83:37:64: c6:fb:00:b4:0c:7a:6a:8c:8a:b9:70:65:65:f0:94: 46:ed:ea:01:f1:0e:1f:09:82:48:9c:c4:98:82:15: b3:ed:37:8f:44:11:b5:20:ab:bb:db:6f:f5:a5:81: 9b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2B:E6:2E:69:B6:B1:B3:A6:B2:62:5D:6D:6C:0E:C4:C1:2B:ED:7B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/652a51f8-00d4-4bd7-ba30-d8aff1bb9a8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.73.216.0/22 Signature Algorithm: sha256WithRSAEncryption 81:48:95:bc:68:b0:73:35:cc:96:03:4c:51:8e:5a:a9:8b:94: 03:04:c7:ae:a5:01:2d:70:44:d9:3a:d4:37:e4:46:6f:41:e8: 28:d7:1e:8e:02:42:f5:79:a6:69:66:f2:98:79:0c:19:7b:5a: c1:43:dd:9d:77:69:5e:d8:8b:e2:e9:02:72:b9:69:0f:80:f4: e1:b9:36:4e:b5:60:66:ba:de:19:12:21:c9:22:8b:ff:f9:ad: a3:69:49:f2:a5:01:82:71:0e:03:78:e5:3c:1d:72:9f:6a:d3: b1:48:87:b0:cd:a4:24:ab:98:ac:0b:a6:54:69:0f:e3:e8:46: f2:33:64:a7:58:12:54:61:3a:cb:bd:84:55:a5:f1:23:36:7a: 4f:e7:c9:63:bc:89:c0:8f:46:1d:ac:54:32:63:bb:18:67:79: 19:95:7f:f8:ee:72:4e:44:39:de:1c:84:8f:67:e7:87:6c:6f: 3a:b1:e8:5c:c3:6f:0f:73:5f:c6:ee:fc:48:25:1d:7e:6e:2d: 21:d0:51:9b:56:95:2d:42:80:fa:95:b6:bb:f5:d7:1e:5b:8a: fa:dc:de:16:73:92:25:1f:a9:d4:ad:5b:dd:9f:c8:57:30:ac: ee:5f:9e:81:ad:0f:b9:04:b3:50:a5:8e:4c:ee:08:31:24:5f: a3:b4:ec:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXOjzP0g/IRlTOad7Zgkkkpa6vkIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDAzMTUxWhcNMjYwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1Yjc5MmYyODYxNzJjNmViMzU1OWMxZWVhZjU3MWE4ZTZl MzdmZGEwMjIyOTg3NGQ3ZWMwNWYyYmQ0ZjA1M2U5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDU581Kb7iwus9X2eQlUsCn8rGvXEZXv06cLjkfNyf1oL0M f8mqIvojzFGQBVbnEXaBgoLPBKvweN9YaH1MgMQy2S7ncM1RbFUInIgCm07Vu9Oj UjQ1G+LSP60gmTu2GpkltTa48aOVdWstmZgs2C+FyQJMBACaOE/zE0W17/KMJkk0 pqS1IYkMLqORfEY8zDb5CB9g+BAbm4jjeK7P1g1xV2OPDBky2HOzL7w3axbdJ+Wh uPIF6H9WIkd05X/anB8d8flGzhHMe8caOiTGqIM3ZMb7ALQMemqMirlwZWXwlEbt 6gHxDh8JgkicxJiCFbPtN49EEbUgq7vbb/WlgZuXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURSvmLmm2sbOmsmJdbWwOxMEr7XswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY1MmE1MWY4LTAwZDQtNGJkNy1iYTMwLWQ4YWZmMWJiOWE4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALYSdgwDQYJKoZIhvcNAQELBQADggEBAIFIlbxosHM1zJYDTFGOWqmLlAME x66lAS1wRNk61DfkRm9B6CjXHo4CQvV5pmlm8ph5DBl7WsFD3Z13aV7Yi+LpAnK5 aQ+A9OG5Nk61YGa63hkSIckii//5raNpSfKlAYJxDgN45Twdcp9q07FIh7DNpCSr mKwLplRpD+PoRvIzZKdYElRhOsu9hFWl8SM2ek/nyWO8icCPRh2sVDJjuxhneRmV f/juck5EOd4chI9n54dsbzqx6FzDbw9zX8bu/EglHX5uLSHQUZtWlS1CgPqVtrv1 1x5bivrc3hZzkiUfqdStW92fyFcwrO5fnoGtD7kEs1CljkzuCDEkX6O07L8= -----END CERTIFICATE-----Generated at Mon May 4 21:38:12 2026 by rpki-client