$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba564eb9-4a70-4caf-8aa2-324910604d6b.roa File: ba564eb9-4a70-4caf-8aa2-324910604d6b.roa (raw, json) Hash identifier: eGlmE7bhoRsPg4o1GJtjVpNuYPvU5OQBkb4j63Oy8Fo= Subject key identifier: B1:37:5F:D3:42:81:B7:4D:83:8B:3B:84:B7:77:76:5F:CC:11:85:59 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 322E1F78EB51ED83AF936771D571E699B32D65DB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba564eb9-4a70-4caf-8aa2-324910604d6b.roa Signing time: Wed 29 Apr 2026 00:11:40 +0000 ROA not before: Wed 29 Apr 2026 00:11:40 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 56.48.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:2e:1f:78:eb:51:ed:83:af:93:67:71:d5:71:e6:99:b3:2d:65:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:11:40 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=5c133b11b792ae7bae8f1863d353a9052808b458ae6d305505baaf97a54ec4d0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:00:3a:00:12:14:f1:ab:06:c5:1d:25:49:45: a9:d3:ac:41:44:f1:14:1e:4c:02:f3:c7:0b:88:4a: b7:be:8d:5e:b1:49:f0:4f:02:d8:49:3e:0f:2b:01: 83:91:f2:38:fe:2e:cf:bf:a1:4b:8c:c5:12:cb:76: 09:40:06:02:81:e0:6c:c3:0b:2e:c9:aa:81:41:1f: ca:a3:88:b3:8e:c4:35:e1:1d:e3:ae:6a:74:d6:7d: 1a:08:e1:ff:a8:86:df:b2:cb:59:b1:ab:86:fb:ce: a7:b9:05:63:2b:4b:55:62:14:b3:d6:5d:4f:08:3c: 22:69:58:22:15:39:0d:59:ba:b9:bf:37:65:f6:b6: 8e:61:6a:8e:d4:9c:2c:17:cd:4e:eb:2a:8f:68:4d: 24:35:11:a2:b6:e0:c8:a8:17:6d:39:f0:32:b0:7b: 41:3a:97:e0:85:ef:e4:b9:5f:eb:e2:34:bc:ad:5d: 54:7c:3e:f2:7f:5d:05:88:03:a7:87:6e:75:d7:74: 1b:e8:4d:b8:e0:e5:13:22:59:e9:e9:b9:6b:71:47: a5:b0:48:0a:c6:7e:19:7a:ad:84:49:a4:aa:60:ce: 8a:fe:75:63:f1:fc:27:9a:26:3e:7d:fc:72:fb:3e: 34:2b:ef:6d:9b:1f:76:92:38:01:43:de:35:30:07: 72:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:37:5F:D3:42:81:B7:4D:83:8B:3B:84:B7:77:76:5F:CC:11:85:59 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba564eb9-4a70-4caf-8aa2-324910604d6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.48.0.0/16 Signature Algorithm: sha256WithRSAEncryption 78:f0:69:ef:97:12:49:1d:10:50:5a:5c:b9:26:a4:ff:72:d5: f2:66:e0:54:02:23:e4:01:a6:43:68:a3:ee:c3:6c:a1:ca:ad: 2f:dc:7f:5e:f2:d6:29:7c:5d:d3:c5:5c:9a:27:92:4a:cf:ce: 68:3c:1a:a8:be:37:bb:3f:0c:0e:ef:da:82:40:5d:d1:6d:96: 32:d8:60:13:8e:37:71:50:68:e9:74:bb:e8:d2:49:f9:eb:a2: b6:0d:87:13:0e:17:70:49:c3:43:10:08:5c:30:52:66:47:f9: ef:c7:d7:77:c7:2e:3b:3d:92:fb:ec:8d:a7:73:c3:dc:39:35: e8:58:eb:78:23:0b:f1:1f:f1:7d:eb:09:60:be:50:a5:61:95: 94:11:e6:dc:0d:ab:14:b7:c1:6f:10:75:64:42:0f:ac:fd:a1: 52:db:be:08:c8:b7:9e:af:f0:ba:9b:39:2f:18:63:80:e6:29: cd:e4:a7:89:33:98:68:c9:0f:43:7e:20:78:72:d1:aa:6b:b5: 43:66:15:b9:a3:2f:fd:e8:ea:60:e6:b7:15:f9:b3:6d:2a:ad: ae:69:83:6c:05:12:a9:e9:e9:ed:45:11:54:7b:0c:a3:08:a5: 6e:5a:7f:05:7a:f6:bd:5b:74:d6:5a:ad:15:94:fd:d7:65:8c: 0c:eb:95:67 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMi4feOtR7YOvk2dx1XHmmbMtZdswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDAxMTQwWhcNMjYwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzEzM2IxMWI3OTJhZTdiYWU4ZjE4NjNkMzUzYTkwNTI4 MDhiNDU4YWU2ZDMwNTUwNWJhYWY5N2E1NGVjNGQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6ADoAEhTxqwbFHSVJRanTrEFE8RQeTALzxwuISre+jV6x SfBPAthJPg8rAYOR8jj+Ls+/oUuMxRLLdglABgKB4GzDCy7JqoFBH8qjiLOOxDXh HeOuanTWfRoI4f+oht+yy1mxq4b7zqe5BWMrS1ViFLPWXU8IPCJpWCIVOQ1Zurm/ N2X2to5hao7UnCwXzU7rKo9oTSQ1EaK24MioF2058DKwe0E6l+CF7+S5X+viNLyt XVR8PvJ/XQWIA6eHbnXXdBvoTbjg5RMiWenpuWtxR6WwSArGfhl6rYRJpKpgzor+ dWPx/CeaJj59/HL7PjQr722bH3aSOAFD3jUwB3JFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUsTdf00KBt02DizuEt3d2X8wRhVkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhNTY0ZWI5LTRhNzAtNGNhZi04YWEyLTMyNDkxMDYwNGQ2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4MDANBgkqhkiG9w0BAQsFAAOCAQEAePBp75cSSR0QUFpcuSak/3LV8mbg VAIj5AGmQ2ij7sNsocqtL9x/XvLWKXxd08VcmieSSs/OaDwaqL43uz8MDu/agkBd 0W2WMthgE443cVBo6XS76NJJ+euitg2HEw4XcEnDQxAIXDBSZkf578fXd8cuOz2S ++yNp3PD3Dk16FjreCML8R/xfesJYL5QpWGVlBHm3A2rFLfBbxB1ZEIPrP2hUtu+ CMi3nq/wups5LxhjgOYpzeSniTOYaMkPQ34geHLRqmu1Q2YVuaMv/ejqYOa3Ffmz bSqtrmmDbAUSqenp7UURVHsMowilblp/BXr2vVt01lqtFZT912WMDOuVZw== -----END CERTIFICATE-----Generated at Mon May 4 21:38:30 2026 by rpki-client