$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b89cfb2-c923-4fd3-a7f8-2842bc919dd4.roa File: 6b89cfb2-c923-4fd3-a7f8-2842bc919dd4.roa (raw, json) Hash identifier: Q+UcPnr5IoV1tULzbtn2GtMkV5Trv0uckIRdcHY/MCc= Subject key identifier: 95:25:5B:DA:7B:5C:76:F6:A2:30:A3:25:8D:E7:50:39:CE:CC:B7:74 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5677239F20EA101AF26D8F0D62CF664023F46A7B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b89cfb2-c923-4fd3-a7f8-2842bc919dd4.roa Signing time: Sun 03 May 2026 16:50:11 +0000 ROA not before: Sun 03 May 2026 16:50:11 +0000 ROA not after: Sat 01 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:77:23:9f:20:ea:10:1a:f2:6d:8f:0d:62:cf:66:40:23:f4:6a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 16:50:11 2026 GMT Not After : Aug 1 23:59:59 2026 GMT Subject: serialNumber=0efe6d14eb9050bb55e54be4a09db21dd5fe4c1150c714603e475a251dbebbf1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:56:78:da:24:07:7d:50:95:97:8c:d9:47: b6:be:d3:5a:fa:77:a4:70:55:2e:65:11:c6:ad:94: 59:07:bc:2b:a5:fa:fc:61:d7:d4:ea:63:f6:b0:1d: d2:e0:03:3e:fa:43:dd:82:e6:cd:d9:7b:14:10:a5: a9:7c:fa:f9:d9:25:2e:b8:a9:bd:8f:8f:96:f8:54: 61:f9:42:6b:d8:9b:1a:2e:61:7c:a6:fb:2f:95:59: da:36:7c:f9:27:07:c1:7b:85:4c:d8:a2:e7:25:d4: 92:af:d1:3e:09:31:27:66:05:03:95:d5:95:97:2c: 5b:86:77:fd:3e:2d:9b:57:bd:cb:fe:7d:ca:a4:e9: 10:ad:f9:bd:ea:e1:b0:38:e0:c5:3a:02:fd:e2:30: 6a:8b:da:c8:6a:6e:6b:49:a5:49:c0:97:4e:88:10: a8:f7:52:f7:f4:40:a6:aa:56:5c:71:10:25:8b:41: 02:84:74:e0:09:0b:c0:39:e9:41:05:dd:f1:ee:b0: 85:b3:7d:d4:39:74:6c:4a:48:56:97:43:44:5e:68: b5:df:b5:1c:49:7e:fe:1b:d1:01:51:9f:6c:2b:88: 99:24:4f:25:7f:71:34:7e:e7:8b:0c:bc:f5:cc:3e: d6:da:57:9c:89:ac:31:63:30:89:a5:45:d5:67:5a: f5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:25:5B:DA:7B:5C:76:F6:A2:30:A3:25:8D:E7:50:39:CE:CC:B7:74 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b89cfb2-c923-4fd3-a7f8-2842bc919dd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.197.0/24 Signature Algorithm: sha256WithRSAEncryption 80:b2:c7:1f:f4:f8:15:35:2e:e2:c3:99:03:a8:e5:a6:f0:cc: 25:40:32:cb:17:49:89:2b:a1:00:f2:0e:9f:fb:cd:e0:fa:f7: 3a:ca:3f:ef:cc:82:25:e1:e1:7a:ad:03:38:69:7a:a9:fb:7a: 3d:eb:8c:92:f2:85:e2:44:c2:b0:58:90:b6:44:40:52:b2:14: bc:bd:01:a2:01:81:92:1b:a7:47:55:6c:0b:07:b8:6f:c1:bf: 97:70:a3:56:d8:79:81:11:80:fa:13:5b:ca:15:54:4e:c6:2d: 2a:4f:fe:8a:09:60:18:a8:91:ed:56:e8:60:e5:47:cd:57:e0: ab:0a:7c:0f:23:57:a4:ef:55:29:a9:87:7d:0f:0b:8d:d5:67: 95:64:c8:0f:a8:07:1a:64:3b:5d:a2:44:71:35:9c:78:c7:36: a0:e5:74:65:35:90:11:a0:4b:80:be:3d:3f:15:2c:a8:0c:23: d3:26:bc:c2:0a:e0:b2:2f:b6:9d:f3:71:c6:c4:22:04:9d:a8: 7b:a1:d8:bc:eb:a6:fa:43:f2:29:6a:87:5a:54:2f:53:db:b6: eb:38:f8:82:6a:41:a6:6a:65:eb:68:e8:f0:7a:db:5f:8b:22: bf:13:ce:67:14:82:32:3d:05:ae:58:93:ea:77:b5:46:8c:34: 15:60:65:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVncjnyDqEBrybY8NYs9mQCP0answDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAzMTY1MDExWhcNMjYwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZWZlNmQxNGViOTA1MGJiNTVlNTRiZTRhMDlkYjIxZGQ1 ZmU0YzExNTBjNzE0NjAzZTQ3NWEyNTFkYmViYmYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1+VZ42iQHfVCVl4zZR7a+01r6d6RwVS5lEcatlFkHvCul +vxh19TqY/awHdLgAz76Q92C5s3ZexQQpal8+vnZJS64qb2Pj5b4VGH5QmvYmxou YXym+y+VWdo2fPknB8F7hUzYoucl1JKv0T4JMSdmBQOV1ZWXLFuGd/0+LZtXvcv+ fcqk6RCt+b3q4bA44MU6Av3iMGqL2shqbmtJpUnAl06IEKj3Uvf0QKaqVlxxECWL QQKEdOAJC8A56UEF3fHusIWzfdQ5dGxKSFaXQ0ReaLXftRxJfv4b0QFRn2wriJkk TyV/cTR+54sMvPXMPtbaV5yJrDFjMImlRdVnWvVxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlSVb2ntcdvaiMKMljedQOc7Mt3QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZiODljZmIyLWM5MjMtNGZkMy1hN2Y4LTI4NDJiYzkxOWRkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7sUwDQYJKoZIhvcNAQELBQADggEBAICyxx/0+BU1LuLDmQOo5abwzCVA MssXSYkroQDyDp/7zeD69zrKP+/MgiXh4XqtAzhpeqn7ej3rjJLyheJEwrBYkLZE QFKyFLy9AaIBgZIbp0dVbAsHuG/Bv5dwo1bYeYERgPoTW8oVVE7GLSpP/ooJYBio ke1W6GDlR81X4KsKfA8jV6TvVSmph30PC43VZ5VkyA+oBxpkO12iRHE1nHjHNqDl dGU1kBGgS4C+PT8VLKgMI9MmvMIK4LIvtp3zccbEIgSdqHuh2LzrpvpD8ilqh1pU L1Pbtus4+IJqQaZqZeto6PB621+LIr8TzmcUgjI9Ba5Yk+p3tUaMNBVgZbM= -----END CERTIFICATE-----Generated at Mon May 4 21:37:03 2026 by rpki-client