$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68262a77-03e2-4c18-92d9-7a34ebeac869.roa File: 68262a77-03e2-4c18-92d9-7a34ebeac869.roa (raw, json) Hash identifier: 6v7lIyAzArv6k/yIPhRKsS1TkW8y2HbTg1WXyKHx0I8= Subject key identifier: CF:5D:D9:98:33:F7:58:F2:ED:6E:C9:6A:0D:88:95:C6:E9:2E:23:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1556C2EDBF9A8A920452106529D69384226099E5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68262a77-03e2-4c18-92d9-7a34ebeac869.roa Signing time: Fri 01 May 2026 00:40:52 +0000 ROA not before: Fri 01 May 2026 00:40:52 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 66.157.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:56:c2:ed:bf:9a:8a:92:04:52:10:65:29:d6:93:84:22:60:99:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 1 00:40:52 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=b4cb568ca18ede17f345a22d8502a39fccedb78873bb38520a341942c9e27989, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:aa:fb:87:be:ee:c6:26:79:6e:12:7b:13:0d: f6:69:6c:d9:bd:12:98:07:b8:2d:12:78:ed:5f:7d: a9:e8:c6:78:b3:ce:37:d3:06:68:b9:17:39:4c:17: a0:c4:91:1b:f5:cc:09:f2:4e:c3:c2:9d:e7:c9:22: 88:6f:18:e9:1b:c5:bb:a1:d2:aa:9b:76:9a:04:48: b5:7a:d9:66:b3:88:d3:b6:5f:ba:a1:a2:1f:5f:fe: 18:bb:4a:e4:91:e2:7e:a1:c7:e7:73:dd:ad:35:bc: 77:70:9a:f5:63:48:17:39:f4:47:c6:b1:5c:46:d8: d2:60:09:0c:c9:57:74:26:31:bd:e8:14:10:25:ac: 29:50:f0:62:01:f7:0c:90:41:c1:59:47:71:39:70: 0f:3b:79:83:f4:7d:ee:85:f0:ae:b7:87:f2:68:43: 0d:d9:df:be:fc:4a:de:28:4b:7a:9f:93:1c:ad:bb: a1:d7:67:49:74:cc:fa:d7:ee:44:06:67:86:00:09: 38:5f:ce:8a:55:55:1e:f8:1b:fb:48:fb:ae:ad:8c: f0:d8:07:b3:cf:28:9c:83:d2:14:50:f2:d8:b7:ea: d4:84:7c:20:36:26:fd:0e:8e:86:c4:9b:7e:a9:e2: c2:fe:4a:14:55:d7:86:55:8c:de:6a:7f:d6:49:0f: ea:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5D:D9:98:33:F7:58:F2:ED:6E:C9:6A:0D:88:95:C6:E9:2E:23:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68262a77-03e2-4c18-92d9-7a34ebeac869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.157.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2e:98:b1:e4:67:9e:83:2d:c0:27:fe:ac:41:31:eb:4f:c3:30: 78:a5:57:22:98:c0:7b:88:ec:9d:19:7d:b1:5f:a0:17:1c:15: b8:04:69:a5:d5:21:51:ab:e2:07:41:3a:50:43:8a:2e:f4:fe: 71:b2:7e:5a:83:c5:6a:96:aa:41:42:b4:82:04:01:84:4b:b8: 53:17:9e:e1:81:e7:58:ae:5b:f5:7a:d0:a0:46:ba:ad:3b:e4: 4f:6e:fc:a0:bb:f9:0c:ce:e7:73:11:78:39:f6:36:f0:68:c2: 4a:49:f0:4f:8a:ff:10:dc:81:9d:83:88:02:66:7f:d0:2c:2f: d3:69:c5:dd:6a:ef:e3:b5:e1:cf:fc:ac:70:92:6b:f6:80:3a: 65:58:72:03:02:52:c8:f1:09:62:32:c3:b5:65:db:3f:73:95: 05:a3:20:58:1c:cd:9f:00:76:1e:6b:ed:dc:fa:de:2b:00:d9: 9b:3f:b9:f3:eb:f6:9b:2a:f2:67:ab:a6:77:3e:63:3f:8a:69: 2f:d9:01:e2:f6:d2:36:fb:86:b2:d4:d2:13:37:05:f4:16:b5: ff:ca:d8:58:59:ed:da:f0:f6:bc:14:63:c8:58:ff:1f:23:9a: 83:50:a8:4d:22:b0:8a:44:83:2b:fc:19:ea:91:35:88:46:a6: 85:20:77:5a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFVbC7b+aipIEUhBlKdaThCJgmeUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDA0MDUyWhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNGNiNTY4Y2ExOGVkZTE3ZjM0NWEyMmQ4NTAyYTM5ZmNj ZWRiNzg4NzNiYjM4NTIwYTM0MTk0MmM5ZTI3OTg5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzqvuHvu7GJnluEnsTDfZpbNm9EpgHuC0SeO1ffanoxniz zjfTBmi5FzlMF6DEkRv1zAnyTsPCnefJIohvGOkbxbuh0qqbdpoESLV62WaziNO2 X7qhoh9f/hi7SuSR4n6hx+dz3a01vHdwmvVjSBc59EfGsVxG2NJgCQzJV3QmMb3o FBAlrClQ8GIB9wyQQcFZR3E5cA87eYP0fe6F8K63h/JoQw3Z3778St4oS3qfkxyt u6HXZ0l0zPrX7kQGZ4YACThfzopVVR74G/tI+66tjPDYB7PPKJyD0hRQ8ti36tSE fCA2Jv0OjobEm36p4sL+ShRV14ZVjN5qf9ZJD+ofAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUz13ZmDP3WPLtbslqDYiVxukuI4gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4MjYyYTc3LTAzZTItNGMxOC05MmQ5LTdhMzRlYmVhYzg2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBCnTANBgkqhkiG9w0BAQsFAAOCAQEALpix5Geegy3AJ/6sQTHrT8MweKVX IpjAe4jsnRl9sV+gFxwVuARppdUhUaviB0E6UEOKLvT+cbJ+WoPFapaqQUK0ggQB hEu4Uxee4YHnWK5b9XrQoEa6rTvkT278oLv5DM7ncxF4OfY28GjCSknwT4r/ENyB nYOIAmZ/0Cwv02nF3Wrv47Xhz/yscJJr9oA6ZVhyAwJSyPEJYjLDtWXbP3OVBaMg WBzNnwB2Hmvt3PreKwDZmz+58+v2myryZ6umdz5jP4ppL9kB4vbSNvuGstTSEzcF 9Ba1/8rYWFnt2vD2vBRjyFj/HyOag1CoTSKwikSDK/wZ6pE1iEamhSB3Wg== -----END CERTIFICATE-----Generated at Sun May 3 14:46:08 2026 by rpki-client