$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b07acc46-54c4-479e-b01b-57d338ac8653.roa File: b07acc46-54c4-479e-b01b-57d338ac8653.roa (raw, json) Hash identifier: 0yIJQqKX8xGNPHmwIOK2bW2HPQP7VdYNBoI2g9UsMpA= Subject key identifier: D8:68:7B:AA:F5:83:70:F4:3D:06:68:31:D4:65:3B:18:45:1B:6B:F6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 43C4EB59D555C5BD3A34BDDE9ABCD9E82051CA22 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b07acc46-54c4-479e-b01b-57d338ac8653.roa Signing time: Wed 29 Apr 2026 00:40:06 +0000 ROA not before: Wed 29 Apr 2026 00:40:06 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 108.175.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:c4:eb:59:d5:55:c5:bd:3a:34:bd:de:9a:bc:d9:e8:20:51:ca:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:40:06 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=a9effabc4bddd936d1c25dea092dba4ab95cb0a8b67192d11f0ce93f74b112d2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ed:a6:ef:47:17:a2:aa:b2:d9:95:2a:34:8e: 9f:1f:b4:b9:cc:0c:84:f6:00:21:3e:91:ca:c2:60: 8b:fe:10:fa:9a:30:cf:cd:82:9e:81:6a:e6:61:f9: dc:19:e7:89:0d:fe:72:bd:12:8c:ef:b7:10:04:64: 20:13:98:f2:19:80:c8:11:51:dd:cd:e1:29:be:47: e2:c5:1b:e0:f9:05:80:e3:6b:b2:10:d0:1a:ef:4a: dd:a7:2f:59:9d:ce:e6:99:f7:74:7a:a7:66:63:09: 6b:c8:50:21:4b:73:b5:3e:96:a0:61:44:7b:42:15: aa:73:c5:0b:0e:4b:bf:c4:37:27:34:42:de:d6:83: 1b:66:d2:9f:4f:10:50:47:37:da:89:94:1b:57:51: cc:9b:b5:d9:0c:60:89:24:cf:77:05:f1:7b:3a:b9: 1d:28:82:3a:f1:19:19:12:be:ad:09:45:a6:bd:3d: a4:76:f7:10:dc:00:e6:0a:65:9f:f4:fc:13:00:87: 8a:0e:af:0c:72:f1:05:57:6f:72:92:e4:3e:f5:22: c3:04:e0:ec:b4:06:09:fc:c4:eb:e2:15:c1:c3:27: 54:1a:4c:6e:37:bc:d5:32:5f:80:9f:e4:27:8c:c5: 9d:23:fd:80:30:7e:75:47:df:e5:87:73:7b:82:0b: b1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:68:7B:AA:F5:83:70:F4:3D:06:68:31:D4:65:3B:18:45:1B:6B:F6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b07acc46-54c4-479e-b01b-57d338ac8653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 108.175.52.0/22 Signature Algorithm: sha256WithRSAEncryption bf:42:76:c6:4e:d3:cf:67:c3:27:9f:b4:12:03:3c:25:a2:d7: e6:d8:32:44:d4:cf:3b:2b:9a:d3:31:40:02:fd:53:eb:8b:25: 76:e5:9c:cc:fe:ef:3c:72:85:6a:94:39:0e:b2:69:23:0c:cb: 8a:49:6f:f0:00:f2:a9:a2:d1:47:13:60:64:f1:72:07:86:8f: 04:84:66:a3:87:b8:28:a4:ff:46:4e:f0:7b:73:ae:74:a2:03: e9:be:b5:f1:1a:41:3a:d2:01:a6:28:2c:f2:4c:98:63:34:95: 5f:a6:6d:a5:a7:00:f0:08:ca:a8:b5:45:b7:ac:7a:72:40:0e: 6b:3b:01:3b:f4:a1:cd:37:bf:78:3d:33:36:66:0d:af:81:1a: f1:51:91:75:14:20:9a:76:f7:79:7a:8c:fd:5d:03:9e:8a:89: ba:2e:bd:3d:25:c2:a6:1e:6b:20:bb:0a:da:b9:59:ea:c1:01: f6:16:28:49:01:61:33:f8:df:3a:27:de:9b:b9:cc:78:91:87: 20:84:9c:9e:3f:a2:40:ca:0d:db:7e:7b:c4:5b:44:61:f7:df: eb:0a:f0:fd:ad:d3:8a:69:cc:2d:2d:44:4f:c4:ce:f2:81:30: c7:f8:61:70:4e:1b:64:d0:7c:9e:8f:8f:9d:0f:ea:af:56:b9: 32:53:39:e5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ8TrWdVVxb06NL3emrzZ6CBRyiIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDA0MDA2WhcNMjYwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOWVmZmFiYzRiZGRkOTM2ZDFjMjVkZWEwOTJkYmE0YWI5 NWNiMGE4YjY3MTkyZDExZjBjZTkzZjc0YjExMmQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCM7abvRxeiqrLZlSo0jp8ftLnMDIT2ACE+kcrCYIv+EPqa MM/Ngp6BauZh+dwZ54kN/nK9EozvtxAEZCATmPIZgMgRUd3N4Sm+R+LFG+D5BYDj a7IQ0BrvSt2nL1mdzuaZ93R6p2ZjCWvIUCFLc7U+lqBhRHtCFapzxQsOS7/ENyc0 Qt7Wgxtm0p9PEFBHN9qJlBtXUcybtdkMYIkkz3cF8Xs6uR0ogjrxGRkSvq0JRaa9 PaR29xDcAOYKZZ/0/BMAh4oOrwxy8QVXb3KS5D71IsME4Oy0Bgn8xOviFcHDJ1Qa TG43vNUyX4Cf5CeMxZ0j/YAwfnVH3+WHc3uCC7H3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2Gh7qvWDcPQ9Bmgx1GU7GEUba/YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IwN2FjYzQ2LTU0YzQtNDc5ZS1iMDFiLTU3ZDMzOGFjODY1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJsrzQwDQYJKoZIhvcNAQELBQADggEBAL9CdsZO089nwyeftBIDPCWi1+bY MkTUzzsrmtMxQAL9U+uLJXblnMz+7zxyhWqUOQ6yaSMMy4pJb/AA8qmi0UcTYGTx cgeGjwSEZqOHuCik/0ZO8HtzrnSiA+m+tfEaQTrSAaYoLPJMmGM0lV+mbaWnAPAI yqi1RbesenJADms7ATv0oc03v3g9MzZmDa+BGvFRkXUUIJp293l6jP1dA56Kibou vT0lwqYeayC7Ctq5WerBAfYWKEkBYTP43zon3pu5zHiRhyCEnJ4/okDKDdt+e8Rb RGH33+sK8P2t04ppzC0tRE/EzvKBMMf4YXBOG2TQfJ6Pj50P6q9WuTJTOeU= -----END CERTIFICATE-----Generated at Sun May 3 15:33:31 2026 by rpki-client