$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/783c511e-5fb0-4300-843c-c199f004156b.roa File: 783c511e-5fb0-4300-843c-c199f004156b.roa (raw, json) Hash identifier: Unr7AdnPzCTjS+io6jJSgXBBsuQdAWqkx2iuSGlgXQ4= Subject key identifier: DF:3C:D1:07:D5:D0:7E:CE:10:AC:F2:BC:2A:93:6C:5C:A6:B3:CA:0F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3574C71C33BD4D6CC7424F5EA6ADFFCEF216F8AE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/783c511e-5fb0-4300-843c-c199f004156b.roa Signing time: Tue 28 Apr 2026 00:00:06 +0000 ROA not before: Tue 28 Apr 2026 00:00:06 +0000 ROA not after: Mon 27 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 168.203.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:74:c7:1c:33:bd:4d:6c:c7:42:4f:5e:a6:ad:ff:ce:f2:16:f8:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 00:00:06 2026 GMT Not After : Jul 27 23:59:59 2026 GMT Subject: serialNumber=0e92da99a4f4b51879babafdbd91a8ff0cc7c4946a35de4f914d3455c4f9b12d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f2:b1:a2:58:2d:32:fa:60:2d:97:98:a5:b3: 92:9b:f0:ab:11:10:9d:b4:e1:02:e0:c2:5a:1a:10: f9:6f:b4:9c:97:fa:f2:98:06:5a:7c:6a:05:55:04: ee:8d:0b:d5:6d:0d:d8:aa:74:2e:b5:bf:2f:34:25: 03:a8:a2:ca:72:8e:40:8c:e7:2b:b1:aa:05:2b:8a: 48:2c:11:9f:5b:e3:1a:28:d3:35:9b:a0:1c:d5:4b: a0:08:7e:36:a8:af:30:ff:e2:f4:c4:9e:8e:77:30: 0d:dc:40:38:55:52:c6:81:02:41:6f:30:6a:f3:fa: ff:43:89:42:0f:94:7a:8f:49:b5:01:de:11:c6:18: a0:38:24:4d:e8:e4:4c:24:94:16:c7:87:b6:1d:3d: 65:2a:84:7f:ce:1b:f2:64:5f:7d:13:f4:47:91:4d: f0:85:c8:dd:c9:2f:37:83:3e:42:95:c7:ef:79:c8: 55:20:73:3f:ba:4a:14:a1:99:5c:df:74:8a:01:19: b4:4e:3c:ba:68:ca:13:55:36:04:92:d5:32:43:91: 93:fa:65:4d:b0:b9:c0:ff:95:d0:7d:cf:36:33:b3: fc:22:8b:9c:9e:de:ac:7a:75:32:78:ff:e6:3e:fc: 26:77:cd:de:07:fb:da:57:c7:73:e7:4d:9b:56:65: f6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3C:D1:07:D5:D0:7E:CE:10:AC:F2:BC:2A:93:6C:5C:A6:B3:CA:0F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/783c511e-5fb0-4300-843c-c199f004156b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.203.128.0/17 Signature Algorithm: sha256WithRSAEncryption d6:b8:ed:99:91:20:ac:28:82:e8:c5:1f:52:33:ad:ad:d6:65: 30:6b:89:ff:80:c7:36:35:43:c8:30:c4:50:76:cd:af:09:f4: 9e:e6:84:cd:b9:f1:96:66:3f:bb:21:57:67:d2:48:70:20:16: e8:2b:d7:51:85:57:f4:01:54:eb:dd:14:f8:d4:96:3c:12:28: e4:7b:e9:32:60:8f:7d:7f:1a:96:61:01:4b:65:db:54:da:57: 4c:27:5c:86:ff:ac:01:3e:36:49:ea:f8:c7:2d:06:05:9b:e0: 68:44:dc:bf:70:93:3c:87:48:ed:67:af:f5:49:91:7d:f3:db: 47:87:93:89:aa:18:d4:d1:9b:93:12:eb:1b:2b:d3:ac:2b:e6: 7f:f3:da:15:94:06:fa:e6:6d:f1:c5:05:3d:e8:7c:57:9a:c2: db:6f:5e:cd:c7:02:ae:a7:7f:35:73:1f:08:38:51:25:6e:bb: bd:d5:96:ca:2d:8f:83:5b:8a:f6:95:39:96:ad:69:7b:da:7d: b3:30:73:91:7c:b8:c6:0c:a4:26:b7:66:17:fd:7a:5b:3c:78: 31:3d:ae:5c:9c:7b:d2:6d:b1:96:6e:e2:1d:1f:9e:0f:f2:8f: 09:e9:a2:a6:a1:33:b3:16:f4:d6:74:2d:6a:5b:a2:05:38:fb: d7:11:dc:3b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNXTHHDO9TWzHQk9epq3/zvIW+K4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI4MDAwMDA2WhcNMjYwNzI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTkyZGE5OWE0ZjRiNTE4NzliYWJhZmRiZDkxYThmZjBj YzdjNDk0NmEzNWRlNGY5MTRkMzQ1NWM0ZjliMTJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs8rGiWC0y+mAtl5ils5Kb8KsREJ204QLgwloaEPlvtJyX +vKYBlp8agVVBO6NC9VtDdiqdC61vy80JQOoospyjkCM5yuxqgUrikgsEZ9b4xoo 0zWboBzVS6AIfjaorzD/4vTEno53MA3cQDhVUsaBAkFvMGrz+v9DiUIPlHqPSbUB 3hHGGKA4JE3o5EwklBbHh7YdPWUqhH/OG/JkX30T9EeRTfCFyN3JLzeDPkKVx+95 yFUgcz+6ShShmVzfdIoBGbROPLpoyhNVNgSS1TJDkZP6ZU2wucD/ldB9zzYzs/wi i5ye3qx6dTJ4/+Y+/CZ3zd4H+9pXx3PnTZtWZfa1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3zzRB9XQfs4QrPK8KpNsXKazyg8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4M2M1MTFlLTVmYjAtNDMwMC04NDNjLWMxOTlmMDA0MTU2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAeoy4AwDQYJKoZIhvcNAQELBQADggEBANa47ZmRIKwogujFH1Izra3WZTBr if+AxzY1Q8gwxFB2za8J9J7mhM258ZZmP7shV2fSSHAgFugr11GFV/QBVOvdFPjU ljwSKOR76TJgj31/GpZhAUtl21TaV0wnXIb/rAE+Nknq+MctBgWb4GhE3L9wkzyH SO1nr/VJkX3z20eHk4mqGNTRm5MS6xsr06wr5n/z2hWUBvrmbfHFBT3ofFeawttv Xs3HAq6nfzVzHwg4USVuu73Vlsotj4NbivaVOZataXvafbMwc5F8uMYMpCa3Zhf9 els8eDE9rlyce9JtsZZu4h0fng/yjwnpoqahM7MW9NZ0LWpbogU4+9cR3Ds= -----END CERTIFICATE-----Generated at Sun May 3 14:46:47 2026 by rpki-client