$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78ea6c31-0dc6-42b2-989e-2ae62658190d.roa File: 78ea6c31-0dc6-42b2-989e-2ae62658190d.roa (raw, json) Hash identifier: jF4wl+OfhfykEghwA/6Ephx28cNWar4z+asgleTXPSg= Subject key identifier: 1A:A7:FA:98:5C:AD:40:0A:41:5C:C4:6A:83:92:F3:82:FD:30:C4:DE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 72634CC916461A7BAE0FA994970AF4AE8DD35155 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78ea6c31-0dc6-42b2-989e-2ae62658190d.roa Signing time: Wed 29 Apr 2026 00:51:12 +0000 ROA not before: Wed 29 Apr 2026 00:51:12 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 208.124.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:63:4c:c9:16:46:1a:7b:ae:0f:a9:94:97:0a:f4:ae:8d:d3:51:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:51:12 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=fa1c7fb3a29e56436da0d423e509ba2e91cf77ce1a0e0223fe30974e136ce6cd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b6:f1:c5:66:3c:f1:bb:8f:1e:2e:7e:15:55: 1c:3b:20:c4:91:23:9f:ca:72:9e:b6:fd:ad:b5:71: 8b:4f:c2:ca:17:5e:62:1c:fc:cc:f0:29:81:cb:80: 65:fd:31:61:5e:53:9b:da:e3:9c:38:57:76:82:e0: a5:eb:61:18:c9:66:21:05:2f:e2:95:2d:7c:28:83: c1:8c:88:37:0f:7a:4d:42:f8:dd:ae:a4:3f:05:76: 60:0d:6d:24:f4:45:6c:28:e4:64:20:c0:d7:47:b0: 5d:b1:e0:91:a1:22:24:d0:ed:dd:cf:f3:9c:de:f7: 57:a9:56:d5:57:a6:e8:12:fb:e4:47:e6:82:87:08: 97:0d:60:14:b6:e1:2b:ba:1b:e9:12:fe:a6:41:67: 45:7e:f4:52:2e:0d:6d:11:14:7a:e8:2e:a9:22:43: 3c:77:40:ee:85:57:3d:a0:2b:cc:de:cd:91:78:58: 03:3a:80:b2:e9:c7:70:a2:25:c2:4b:2e:44:30:06: e4:f7:12:cf:71:e8:df:99:9d:15:8d:fb:4d:f0:9d: c8:57:69:b0:a2:dd:42:a5:d0:88:79:0e:17:09:fc: eb:c6:6b:20:91:bf:28:35:ff:c7:6b:5f:f4:c7:73: 8e:66:a2:af:94:42:ef:1e:0c:6d:58:85:a2:4c:d8: 99:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A7:FA:98:5C:AD:40:0A:41:5C:C4:6A:83:92:F3:82:FD:30:C4:DE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78ea6c31-0dc6-42b2-989e-2ae62658190d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.124.0.0/18 Signature Algorithm: sha256WithRSAEncryption 5c:6c:26:68:73:ba:0b:c4:96:ed:3f:dc:2b:a2:d0:ff:48:bf: e4:2d:d3:e1:bc:d2:f0:6b:a6:e2:2e:47:1f:ec:bf:48:a2:1e: 6a:6d:ac:69:76:c1:c4:7c:a5:6d:eb:3a:6e:77:3b:eb:4d:8a: f6:c2:8d:5d:fb:30:ea:bc:3d:84:99:6c:0a:fc:47:92:62:6f: d8:c5:58:a5:ef:fc:0d:0f:a0:6b:df:72:fe:07:56:9f:ff:a5: 43:ac:2f:f6:67:05:ec:2f:85:fa:99:d5:c0:d6:87:ca:14:f9: 0a:7e:65:a2:8a:2f:ca:a2:f3:32:42:66:75:4d:13:46:39:60: 7d:78:ad:1c:d0:4b:5c:4c:21:8e:0a:35:8f:5a:a4:cc:72:d8: 9b:01:97:ae:bb:0b:c0:2c:f4:aa:df:ff:7d:1f:8d:e4:76:af: a7:8f:f3:e8:7c:04:f5:dc:37:58:bb:50:ec:c3:fb:c5:24:54: 7f:36:91:b3:cc:01:49:02:a5:8d:17:36:d3:df:24:4a:54:45: 7d:25:e1:e1:f2:a6:0d:e5:83:8d:32:60:c4:9e:55:f2:54:89: f0:6c:4c:60:f0:d7:84:56:30:dc:7b:4d:f2:d8:c5:90:00:86: f3:64:e5:03:44:c7:b5:9d:ff:b1:41:49:2d:4b:91:87:a6:34: 76:4d:d3:02 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcmNMyRZGGnuuD6mUlwr0ro3TUVUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDA1MTEyWhcNMjYwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTFjN2ZiM2EyOWU1NjQzNmRhMGQ0MjNlNTA5YmEyZTkx Y2Y3N2NlMWEwZTAyMjNmZTMwOTc0ZTEzNmNlNmNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJtvHFZjzxu48eLn4VVRw7IMSRI5/Kcp62/a21cYtPwsoX XmIc/MzwKYHLgGX9MWFeU5va45w4V3aC4KXrYRjJZiEFL+KVLXwog8GMiDcPek1C +N2upD8FdmANbST0RWwo5GQgwNdHsF2x4JGhIiTQ7d3P85ze91epVtVXpugS++RH 5oKHCJcNYBS24Su6G+kS/qZBZ0V+9FIuDW0RFHroLqkiQzx3QO6FVz2gK8zezZF4 WAM6gLLpx3CiJcJLLkQwBuT3Es9x6N+ZnRWN+03wnchXabCi3UKl0Ih5DhcJ/OvG ayCRvyg1/8drX/THc45moq+UQu8eDG1YhaJM2JljAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGqf6mFytQApBXMRqg5Lzgv0wxN4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4ZWE2YzMxLTBkYzYtNDJiMi05ODllLTJhZTYyNjU4MTkwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbQfAAwDQYJKoZIhvcNAQELBQADggEBAFxsJmhzugvElu0/3Cui0P9Iv+Qt 0+G80vBrpuIuRx/sv0iiHmptrGl2wcR8pW3rOm53O+tNivbCjV37MOq8PYSZbAr8 R5Jib9jFWKXv/A0PoGvfcv4HVp//pUOsL/ZnBewvhfqZ1cDWh8oU+Qp+ZaKKL8qi 8zJCZnVNE0Y5YH14rRzQS1xMIY4KNY9apMxy2JsBl667C8As9Krf/30fjeR2r6eP 8+h8BPXcN1i7UOzD+8UkVH82kbPMAUkCpY0XNtPfJEpURX0l4eHypg3lg40yYMSe VfJUifBsTGDw14RWMNx7TfLYxZAAhvNk5QNEx7Wd/7FBSS1LkYemNHZN0wI= -----END CERTIFICATE-----Generated at Mon May 4 21:39:02 2026 by rpki-client