$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703d892d-ff7a-4463-88f7-014e2ca759c0.roa File: 703d892d-ff7a-4463-88f7-014e2ca759c0.roa (raw, json) Hash identifier: sSMkeHbnlq3gNQ2kvyawE4ww7mzBo5Fkaslm9/emkXw= Subject key identifier: DD:B4:7A:C9:C0:FA:18:2F:30:66:C4:CB:44:C9:C2:5A:E0:2C:7A:96 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1BD39C29672782A6987E5C5131F6E5322271107D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703d892d-ff7a-4463-88f7-014e2ca759c0.roa Signing time: Wed 29 Apr 2026 01:00:08 +0000 ROA not before: Wed 29 Apr 2026 01:00:08 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 64.91.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d3:9c:29:67:27:82:a6:98:7e:5c:51:31:f6:e5:32:22:71:10:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 01:00:08 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=f6bdc4f1c73c39a1ac68f207d22d24e29f46acda7a6f0d2a5868f153e5da522d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:10:84:da:6c:44:f0:8b:ab:f4:4e:c0:03:ec: 04:bd:37:67:53:a7:a2:0d:b0:5e:f3:4d:7d:33:44: 66:43:f2:9f:27:11:50:ef:25:41:ea:ad:34:ed:4f: 38:cd:d7:2f:43:6f:5b:1f:3f:c2:83:10:90:59:41: 28:17:07:84:82:9e:af:fd:a4:51:8d:13:72:66:a1: 18:c8:b8:24:d6:2c:d6:a8:8d:3e:3f:da:59:f1:c7: 0d:47:16:f8:56:cf:e7:7e:a0:21:17:98:d9:f0:ef: 30:ca:6e:59:40:65:a2:f6:be:33:93:64:af:bb:ca: e7:3c:96:33:df:5f:3a:f6:8e:6a:b2:1a:a4:6a:f6: 15:d3:63:df:be:48:c2:c3:a8:23:d6:b8:f4:7e:d8: 92:38:4c:7c:3a:78:5c:bb:17:56:9e:aa:70:4e:b8: da:5b:ba:b2:45:ed:b3:92:99:1f:df:c7:ac:cf:df: 40:d9:14:51:4e:10:42:af:be:4f:f3:2f:92:fd:8d: 09:4f:3c:ed:50:68:c4:d6:4f:e7:43:b8:79:45:5e: 54:78:dd:ea:3f:8c:ed:57:7f:4f:6c:89:d3:ac:56: 37:7d:6e:fe:3c:29:6b:97:c8:7e:e6:76:79:45:9b: 2a:4e:df:9d:21:65:18:8a:f1:2b:3c:9f:5f:b3:fa: 1d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B4:7A:C9:C0:FA:18:2F:30:66:C4:CB:44:C9:C2:5A:E0:2C:7A:96 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/703d892d-ff7a-4463-88f7-014e2ca759c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.91.128.0/18 Signature Algorithm: sha256WithRSAEncryption 86:85:2b:a5:8a:30:37:31:1e:32:02:0d:7c:8e:77:88:a7:09: e4:a8:bb:2e:80:73:4f:e2:8b:38:7c:c6:d7:73:bb:c5:d5:ae: 6a:e2:bb:da:32:af:cd:a5:04:ed:09:96:0a:0e:9f:a6:31:bd: 1e:5f:e6:01:d7:5c:7a:2a:99:52:0a:2d:f7:3c:d1:1a:e8:2a: 62:19:ef:32:15:57:cf:0a:4c:d0:7c:46:57:2d:23:d9:1a:bc: 4a:9d:48:96:8e:0e:81:f0:53:a7:3d:47:09:ac:cd:11:a0:d5: 9b:f2:37:06:5e:42:37:e9:aa:52:83:db:aa:87:2d:5c:46:b9: 12:03:ed:77:69:47:44:32:9a:18:d9:a9:18:47:ac:81:10:e4: 73:cc:22:6c:06:a1:bc:38:63:db:b8:48:9a:2b:4d:cf:bc:e7: e4:43:ef:09:4a:38:ae:3c:c3:c6:5c:eb:de:81:b7:29:11:42: b7:71:e1:ec:7b:ef:96:df:fd:80:e6:2e:54:e3:66:52:c1:57: da:8d:c1:2a:60:be:41:ed:fb:89:0e:3a:b7:6e:50:ad:65:02: 0c:17:ea:2c:f1:23:14:f3:f4:98:1d:8c:94:de:b1:80:b2:0e: 4d:1e:b2:38:57:ad:d7:ac:65:0e:13:58:5a:c7:ac:7a:6c:33: 0e:b1:7d:7b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG9OcKWcngqaYflxRMfblMiJxEH0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDEwMDA4WhcNMjYwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNmJkYzRmMWM3M2MzOWExYWM2OGYyMDdkMjJkMjRlMjlm NDZhY2RhN2E2ZjBkMmE1ODY4ZjE1M2U1ZGE1MjJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhEITabETwi6v0TsAD7AS9N2dTp6INsF7zTX0zRGZD8p8n EVDvJUHqrTTtTzjN1y9Db1sfP8KDEJBZQSgXB4SCnq/9pFGNE3JmoRjIuCTWLNao jT4/2lnxxw1HFvhWz+d+oCEXmNnw7zDKbllAZaL2vjOTZK+7yuc8ljPfXzr2jmqy GqRq9hXTY9++SMLDqCPWuPR+2JI4THw6eFy7F1aeqnBOuNpburJF7bOSmR/fx6zP 30DZFFFOEEKvvk/zL5L9jQlPPO1QaMTWT+dDuHlFXlR43eo/jO1Xf09sidOsVjd9 bv48KWuXyH7mdnlFmypO350hZRiK8Ss8n1+z+h2xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3bR6ycD6GC8wZsTLRMnCWuAsepYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcwM2Q4OTJkLWZmN2EtNDQ2My04OGY3LTAxNGUyY2E3NTljMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZAW4AwDQYJKoZIhvcNAQELBQADggEBAIaFK6WKMDcxHjICDXyOd4inCeSo uy6Ac0/iizh8xtdzu8XVrmriu9oyr82lBO0JlgoOn6YxvR5f5gHXXHoqmVIKLfc8 0RroKmIZ7zIVV88KTNB8RlctI9kavEqdSJaODoHwU6c9RwmszRGg1ZvyNwZeQjfp qlKD26qHLVxGuRID7XdpR0QymhjZqRhHrIEQ5HPMImwGobw4Y9u4SJorTc+85+RD 7wlKOK48w8Zc696BtykRQrdx4ex775bf/YDmLlTjZlLBV9qNwSpgvkHt+4kOOrdu UK1lAgwX6izxIxTz9JgdjJTesYCyDk0esjhXrdesZQ4TWFrHrHpsMw6xfXs= -----END CERTIFICATE-----Generated at Sun May 3 14:45:26 2026 by rpki-client