$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f73b6b2-b7d3-4d55-a753-3f3ad43ba765.roa File: 8f73b6b2-b7d3-4d55-a753-3f3ad43ba765.roa (raw, json) Hash identifier: zhYk5yeHlu3XJD51I3rJTCEd8aosQNyROmT14wU1zi0= Subject key identifier: AF:12:6B:1E:5B:2C:7B:99:8B:C7:EB:17:58:B5:00:E2:A8:83:87:BF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B1A8188670AF53240159A7801D3CC6797E9E2EB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f73b6b2-b7d3-4d55-a753-3f3ad43ba765.roa Signing time: Sun 03 May 2026 16:48:40 +0000 ROA not before: Sun 03 May 2026 16:48:40 +0000 ROA not after: Sat 01 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.238.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:1a:81:88:67:0a:f5:32:40:15:9a:78:01:d3:cc:67:97:e9:e2:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 16:48:40 2026 GMT Not After : Aug 1 23:59:59 2026 GMT Subject: serialNumber=5507db06ea292c7ce2afd770c2f4ec38737c83e67e885ceed431584a6d57bfb2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ef:fa:7f:8b:f7:c6:5e:61:3e:78:88:54:96: c8:9e:6c:97:b2:20:29:30:2f:b4:77:28:4b:6e:3c: f6:19:77:6f:5d:5a:bd:17:00:c4:ce:d8:ca:90:e5: cf:8b:32:48:99:6b:da:05:93:0a:6e:01:61:11:e3: 97:b9:96:67:0a:ba:77:ef:e3:7d:20:df:c5:57:1b: a1:66:dd:69:46:c7:cd:0b:34:73:3b:8e:47:67:4e: 18:e2:43:fd:76:bf:95:47:67:06:87:77:59:16:13: 4b:50:97:bd:cb:db:31:6c:db:90:9e:e2:d4:c4:62: d3:29:89:50:79:9d:ec:56:d3:f0:40:c6:6e:e8:b5: dd:49:41:bc:66:33:1a:26:67:e0:00:ee:18:44:bc: f1:5c:e3:ae:f2:07:30:96:74:31:c9:06:36:28:06: b0:c3:10:45:f3:8e:e0:41:8f:8a:40:0b:39:e5:df: f1:76:54:36:f7:40:75:a8:eb:0f:4d:c0:59:89:df: 0c:c9:52:b9:48:bb:7c:5a:d8:a1:56:69:df:cd:6c: 58:e7:14:f4:88:c3:d2:f0:04:91:88:f5:fc:07:35: 01:52:95:62:72:14:10:16:48:52:27:d0:86:9f:f6: 43:71:3a:f5:76:aa:ba:72:e4:95:8f:ef:c3:b5:bb: dd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:12:6B:1E:5B:2C:7B:99:8B:C7:EB:17:58:B5:00:E2:A8:83:87:BF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f73b6b2-b7d3-4d55-a753-3f3ad43ba765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.238.174.0/24 Signature Algorithm: sha256WithRSAEncryption 39:43:6c:0f:32:25:bf:f0:74:64:f8:75:c8:fd:0a:0f:0f:d5: bb:d6:18:58:4a:4a:ce:0d:63:db:a2:9e:b0:1d:73:f9:96:0a: bd:19:c9:5f:6e:cc:9f:cd:3f:46:5a:0b:50:4b:af:d0:dc:ad: 23:57:b9:4b:8b:0c:86:52:b0:90:97:42:72:22:b3:c8:7c:a3: 9b:31:29:61:52:89:a1:88:30:65:fa:34:3a:70:f1:78:af:2c: cc:eb:a3:f9:82:d0:fa:be:c2:4d:22:99:70:ef:43:33:e6:8d: 79:42:0e:89:3a:4c:7e:0c:cf:ae:9e:65:7e:55:f9:94:7b:07: f6:f8:c0:dd:8f:52:4e:fc:bd:fe:69:00:5a:49:14:7f:c4:02: 35:09:ec:49:eb:da:17:55:57:22:43:5f:d7:49:67:ed:00:e1: 4d:ea:f9:e2:e2:45:e6:c9:bd:51:ef:8d:b0:9c:f0:fc:80:52: a9:28:f5:f5:4a:b2:e3:63:3e:da:db:79:42:4b:d5:bb:c3:52: 8f:f7:70:38:56:af:52:9a:ef:cf:51:e8:f8:3f:97:01:5a:49: 04:1b:c3:ee:7f:c4:93:16:12:f5:69:43:9b:55:77:63:24:bb: 91:0e:48:0b:48:ac:0f:b7:3f:79:b0:c6:7b:56:e7:c9:04:87: 1a:bc:35:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGxqBiGcK9TJAFZp4AdPMZ5fp4uswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAzMTY0ODQwWhcNMjYwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NTA3ZGIwNmVhMjkyYzdjZTJhZmQ3NzBjMmY0ZWMzODcz N2M4M2U2N2U4ODVjZWVkNDMxNTg0YTZkNTdiZmIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDH7/p/i/fGXmE+eIhUlsiebJeyICkwL7R3KEtuPPYZd29d Wr0XAMTO2MqQ5c+LMkiZa9oFkwpuAWER45e5lmcKunfv430g38VXG6Fm3WlGx80L NHM7jkdnThjiQ/12v5VHZwaHd1kWE0tQl73L2zFs25Ce4tTEYtMpiVB5nexW0/BA xm7otd1JQbxmMxomZ+AA7hhEvPFc467yBzCWdDHJBjYoBrDDEEXzjuBBj4pACznl 3/F2VDb3QHWo6w9NwFmJ3wzJUrlIu3xa2KFWad/NbFjnFPSIw9LwBJGI9fwHNQFS lWJyFBAWSFIn0Iaf9kNxOvV2qrpy5JWP78O1u907AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrxJrHlsse5mLx+sXWLUA4qiDh78wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhmNzNiNmIyLWI3ZDMtNGQ1NS1hNzUzLTNmM2FkNDNiYTc2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX7q4wDQYJKoZIhvcNAQELBQADggEBADlDbA8yJb/wdGT4dcj9Cg8P1bvW GFhKSs4NY9uinrAdc/mWCr0ZyV9uzJ/NP0ZaC1BLr9DcrSNXuUuLDIZSsJCXQnIi s8h8o5sxKWFSiaGIMGX6NDpw8XivLMzro/mC0Pq+wk0imXDvQzPmjXlCDok6TH4M z66eZX5V+ZR7B/b4wN2PUk78vf5pAFpJFH/EAjUJ7Enr2hdVVyJDX9dJZ+0A4U3q +eLiRebJvVHvjbCc8PyAUqko9fVKsuNjPtrbeUJL1bvDUo/3cDhWr1Ka789R6Pg/ lwFaSQQbw+5/xJMWEvVpQ5tVd2Mku5EOSAtIrA+3P3mwxntW58kEhxq8NQ4= -----END CERTIFICATE-----Generated at Mon May 4 21:37:02 2026 by rpki-client