$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af900127-3eb4-4d06-8238-aace9fc915bf.roa File: af900127-3eb4-4d06-8238-aace9fc915bf.roa (raw, json) Hash identifier: O+tTsGqXxx6GPpkAxon5BaWrI2l4ACW1GTZFqO2VYig= Subject key identifier: 73:E9:57:E0:C3:7F:8D:29:50:60:37:6B:2F:60:2D:E7:A7:17:EE:B9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0D2F897A103F6A89E3BFE9178B80527662FC2A86 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af900127-3eb4-4d06-8238-aace9fc915bf.roa Signing time: Wed 29 Apr 2026 00:21:37 +0000 ROA not before: Wed 29 Apr 2026 00:21:37 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 70.237.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:2f:89:7a:10:3f:6a:89:e3:bf:e9:17:8b:80:52:76:62:fc:2a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:21:37 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=c78cf95508a7054c8d5eec9aefab3972004809048ab9fd54a9aa04081d899283, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a2:77:a0:2f:5d:8b:00:70:e5:be:fc:fa:b6: 21:e3:0a:c7:3b:7e:1e:d9:29:20:19:68:57:d3:2e: 32:2d:d6:31:40:ce:81:ae:bd:64:1b:3b:de:c2:17: 21:bb:f1:78:d6:2a:a3:2e:77:3d:11:a3:81:80:77: 62:b5:65:c9:cf:b5:19:28:73:e9:8c:3b:ed:4a:51: 20:cb:19:9a:70:37:e5:db:04:c3:41:e2:4a:fc:61: b0:9b:f9:06:9e:63:fa:a2:90:11:0d:31:87:c6:16: 38:18:49:18:47:c6:64:cc:2a:4e:d3:ac:99:e0:18: 33:ba:ff:40:45:55:87:6b:71:86:99:fa:0c:3e:d7: ca:72:ca:e9:64:e2:4a:b3:c4:ce:56:a0:0a:97:74: 0d:c4:f7:96:6a:04:16:ed:c1:e2:ba:61:1b:58:4f: ac:74:64:32:af:0c:ca:af:eb:2e:8b:82:78:7f:54: 16:98:02:e8:79:98:89:04:06:f2:a2:2a:f3:69:6a: 4f:b9:ad:2c:64:d2:58:30:90:90:bd:e6:99:a2:a1: 1c:f5:82:b1:bd:92:fb:05:0f:ed:98:9c:ab:85:2a: 9d:e1:18:be:f4:5f:c5:b2:ff:ce:ce:1e:40:e9:1a: 91:3f:e3:d8:f2:45:9c:07:a8:fc:3e:cc:8d:0c:b9: 0f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E9:57:E0:C3:7F:8D:29:50:60:37:6B:2F:60:2D:E7:A7:17:EE:B9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af900127-3eb4-4d06-8238-aace9fc915bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 70.237.192.0/18 Signature Algorithm: sha256WithRSAEncryption 64:74:7a:66:db:b8:49:62:6c:67:34:ac:5a:98:09:6e:e7:66: bb:a6:3f:54:c5:32:63:26:09:11:7d:e6:e1:b8:c2:a4:a7:a4: 2b:9c:29:e3:3d:9e:0d:ac:49:bc:2e:b3:ca:5c:fc:5d:ab:1d: 1a:a1:a6:02:a6:9a:35:ac:17:66:5a:99:13:53:e4:e3:d7:5d: 37:63:ce:d8:74:8d:a8:3e:26:42:67:fa:69:e4:34:20:3e:25: ed:b3:37:18:d0:9c:9c:0f:da:2d:60:db:35:6f:fa:3d:95:b8: 9e:df:e0:72:5f:8a:01:6c:a9:9b:5b:5a:0f:1c:0b:07:5e:1d: 2c:96:c7:fd:43:76:06:d4:96:86:cf:d1:5c:13:88:55:4f:83: cb:41:92:60:80:2c:ab:ef:45:13:cc:7e:05:e2:c2:bb:d3:24: 8e:92:38:89:ca:98:c6:8a:e4:01:00:33:47:71:a4:f3:c5:8c: 4b:47:f9:69:97:6f:47:ba:ac:12:fc:ab:bf:e1:d0:7e:5b:ab: c2:55:65:66:70:2a:74:53:be:ad:25:f8:ca:f5:02:b7:1f:3c: 43:9b:9c:90:4d:d0:0c:aa:78:16:50:7c:76:55:1b:b8:b4:47: 65:6e:e1:89:11:c1:ca:3e:bf:7d:11:6e:21:ff:ed:09:b7:26: f1:e6:59:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDS+JehA/aonjv+kXi4BSdmL8KoYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDAyMTM3WhcNMjYwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzhjZjk1NTA4YTcwNTRjOGQ1ZWVjOWFlZmFiMzk3MjAw NDgwOTA0OGFiOWZkNTRhOWFhMDQwODFkODk5MjgzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWonegL12LAHDlvvz6tiHjCsc7fh7ZKSAZaFfTLjIt1jFA zoGuvWQbO97CFyG78XjWKqMudz0Ro4GAd2K1ZcnPtRkoc+mMO+1KUSDLGZpwN+Xb BMNB4kr8YbCb+QaeY/qikBENMYfGFjgYSRhHxmTMKk7TrJngGDO6/0BFVYdrcYaZ +gw+18pyyulk4kqzxM5WoAqXdA3E95ZqBBbtweK6YRtYT6x0ZDKvDMqv6y6Lgnh/ VBaYAuh5mIkEBvKiKvNpak+5rSxk0lgwkJC95pmioRz1grG9kvsFD+2YnKuFKp3h GL70X8Wy/87OHkDpGpE/49jyRZwHqPw+zI0MuQ/RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUc+lX4MN/jSlQYDdrL2At56cX7rkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmOTAwMTI3LTNlYjQtNGQwNi04MjM4LWFhY2U5ZmM5MTViZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZG7cAwDQYJKoZIhvcNAQELBQADggEBAGR0embbuElibGc0rFqYCW7nZrum P1TFMmMmCRF95uG4wqSnpCucKeM9ng2sSbwus8pc/F2rHRqhpgKmmjWsF2ZamRNT 5OPXXTdjzth0jag+JkJn+mnkNCA+Je2zNxjQnJwP2i1g2zVv+j2VuJ7f4HJfigFs qZtbWg8cCwdeHSyWx/1DdgbUlobP0VwTiFVPg8tBkmCALKvvRRPMfgXiwrvTJI6S OInKmMaK5AEAM0dxpPPFjEtH+WmXb0e6rBL8q7/h0H5bq8JVZWZwKnRTvq0l+Mr1 ArcfPEObnJBN0AyqeBZQfHZVG7i0R2Vu4YkRwco+v30RbiH/7Qm3JvHmWa8= -----END CERTIFICATE-----Generated at Sun May 3 15:34:23 2026 by rpki-client