$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/781b948d-83f7-4660-9e59-5ddf6e52bb0b.roa File: 781b948d-83f7-4660-9e59-5ddf6e52bb0b.roa (raw, json) Hash identifier: Uqu9nASuMs1Aez56AAVXS9rQzajyhCkpOj4aWmbpsxM= Subject key identifier: 28:7B:F1:BB:FD:DF:C3:90:C1:1E:49:6F:EC:DC:10:53:AE:AC:7B:81 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 526AC4ED90B185AE8536C58841DBB8E53DD655F2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/781b948d-83f7-4660-9e59-5ddf6e52bb0b.roa Signing time: Sun 03 May 2026 16:50:17 +0000 ROA not before: Sun 03 May 2026 16:50:17 +0000 ROA not after: Sat 01 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:6a:c4:ed:90:b1:85:ae:85:36:c5:88:41:db:b8:e5:3d:d6:55:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 16:50:17 2026 GMT Not After : Aug 1 23:59:59 2026 GMT Subject: serialNumber=5ed7a4133be54f87e4344c8e75d77b5184bd9bb101bef9bfd553ae796ae1e43c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9e:b9:77:86:41:46:07:87:d8:82:33:fd:02: 51:7a:6f:eb:08:49:10:c5:16:a4:20:f1:30:7c:64: 73:ed:3b:ea:26:7f:79:b6:41:b8:d0:f1:0a:31:e4: f1:3c:b0:b1:53:fb:92:a4:0b:18:94:d9:6f:c8:dd: ae:f4:01:ec:7e:2f:84:51:b7:d4:b3:ca:ac:70:ef: 02:d0:a5:4e:be:d6:ad:03:86:67:b7:99:28:60:cc: ca:e3:d1:29:39:29:64:8e:1a:cc:ae:55:33:67:d9: b7:22:49:9b:c4:c7:4c:4c:1e:f6:94:25:ae:e1:02: 9e:8b:5d:0b:04:04:0c:9e:01:79:2c:24:d0:83:d7: cd:92:ca:36:26:b7:dc:c3:4c:9f:f1:65:ad:e7:9f: 7c:fd:17:5d:a0:e2:82:6a:a8:f3:15:a0:c4:21:53: 5f:68:b8:0b:ff:18:0b:74:aa:05:5f:54:49:97:48: 44:00:56:b0:d9:50:31:88:46:25:a7:02:85:33:ed: ca:74:84:3a:d9:25:0d:e2:a6:46:ec:fc:ff:32:11: d2:1d:b1:a3:66:c0:5e:74:10:a2:de:79:40:a0:af: ef:14:ae:60:0a:2f:af:dc:de:de:1d:5c:8b:33:78: 05:e1:fc:02:0e:4f:db:5e:c2:b6:6c:90:d1:37:eb: eb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7B:F1:BB:FD:DF:C3:90:C1:1E:49:6F:EC:DC:10:53:AE:AC:7B:81 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/781b948d-83f7-4660-9e59-5ddf6e52bb0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.212.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:94:32:9a:e3:c7:04:f5:76:93:7f:f8:d6:0d:b8:6f:7e:76: c6:a7:4b:5e:28:79:e4:21:d6:7a:8f:41:53:ca:76:3b:13:45: 5f:0e:ce:c3:93:9d:57:01:8d:db:2f:03:20:2b:f0:af:0c:94: 86:be:60:57:52:b9:e3:b4:d9:58:c6:7f:8a:38:14:5b:79:f0: b4:0d:19:59:46:9c:43:9d:c0:30:1d:35:47:4c:e3:01:f8:4b: 4f:88:91:10:0f:3b:36:28:96:9f:16:ae:45:14:46:f3:dc:92: f5:52:22:ac:54:e2:69:af:90:48:21:d7:16:89:77:cc:fd:eb: 93:36:b9:82:9d:01:ee:e6:10:f8:54:0c:67:4d:40:7b:48:44: 60:4e:ce:53:34:c3:96:79:82:e4:ca:c2:31:82:9e:43:04:1a: 1e:be:a6:b6:be:0f:41:e0:a0:a6:dd:01:7d:4c:4f:43:e5:e0: a4:c5:1a:b1:95:42:61:e4:22:de:ab:f4:67:21:63:2b:0a:a0: 43:20:a6:b2:ba:e9:54:6c:db:78:6b:4b:b4:2a:87:fb:2a:45: 51:4b:35:dd:a1:9b:e5:87:ff:6e:b9:8f:ec:b0:08:99:ba:9f: 5a:ff:a7:7f:1c:c0:f3:45:79:9d:e1:3c:07:40:56:28:6b:55: 9a:57:3f:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUmrE7ZCxha6FNsWIQdu45T3WVfIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAzMTY1MDE3WhcNMjYwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZWQ3YTQxMzNiZTU0Zjg3ZTQzNDRjOGU3NWQ3N2I1MTg0 YmQ5YmIxMDFiZWY5YmZkNTUzYWU3OTZhZTFlNDNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmnrl3hkFGB4fYgjP9AlF6b+sISRDFFqQg8TB8ZHPtO+om f3m2QbjQ8Qox5PE8sLFT+5KkCxiU2W/I3a70Aex+L4RRt9Szyqxw7wLQpU6+1q0D hme3mShgzMrj0Sk5KWSOGsyuVTNn2bciSZvEx0xMHvaUJa7hAp6LXQsEBAyeAXks JNCD182SyjYmt9zDTJ/xZa3nn3z9F12g4oJqqPMVoMQhU19ouAv/GAt0qgVfVEmX SEQAVrDZUDGIRiWnAoUz7cp0hDrZJQ3ipkbs/P8yEdIdsaNmwF50EKLeeUCgr+8U rmAKL6/c3t4dXIszeAXh/AIOT9tewrZskNE36+tJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKHvxu/3fw5DBHklv7NwQU66se4EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4MWI5NDhkLTgzZjctNDY2MC05ZTU5LTVkZGY2ZTUyYmIwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7tQwDQYJKoZIhvcNAQELBQADggEBAE+UMprjxwT1dpN/+NYNuG9+dsan S14oeeQh1nqPQVPKdjsTRV8OzsOTnVcBjdsvAyAr8K8MlIa+YFdSueO02VjGf4o4 FFt58LQNGVlGnEOdwDAdNUdM4wH4S0+IkRAPOzYolp8WrkUURvPckvVSIqxU4mmv kEgh1xaJd8z965M2uYKdAe7mEPhUDGdNQHtIRGBOzlM0w5Z5guTKwjGCnkMEGh6+ pra+D0HgoKbdAX1MT0Pl4KTFGrGVQmHkIt6r9GchYysKoEMgprK66VRs23hrS7Qq h/sqRVFLNd2hm+WH/265j+ywCJm6n1r/p38cwPNFeZ3hPAdAVihrVZpXPyY= -----END CERTIFICATE-----Generated at Mon May 4 21:37:01 2026 by rpki-client