$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1cbff23-c5b7-403d-a53c-bd23fc1b0a3c.roa File: c1cbff23-c5b7-403d-a53c-bd23fc1b0a3c.roa (raw, json) Hash identifier: 9X5FhaZRtjQarK611nke+EWkU1mmJDQBLTdjmrmw5O4= Subject key identifier: 56:DD:B4:C2:5E:7F:BA:39:0F:EC:FD:FB:E9:B7:FC:24:C9:48:F3:77 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 13A2D9ABA6FEBD72B8349F2989B7E96556696ABE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1cbff23-c5b7-403d-a53c-bd23fc1b0a3c.roa Signing time: Wed 29 Apr 2026 00:01:20 +0000 ROA not before: Wed 29 Apr 2026 00:01:20 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 64.252.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a2:d9:ab:a6:fe:bd:72:b8:34:9f:29:89:b7:e9:65:56:69:6a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:01:20 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=47fbacc608f44aa3533762e38125e173123e59b43439418e03589f92cbffdfde, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:06:0f:14:2f:34:0d:29:8c:92:76:20:47:21: 09:8c:af:9c:45:42:13:32:19:4f:db:62:ae:2b:17: 78:e5:f3:11:50:fc:2f:6d:00:c4:6e:94:06:ae:24: 1e:7d:ea:04:c3:63:70:74:7a:bf:b5:bf:c9:6d:4d: 5b:54:ea:a9:b4:91:b5:41:a4:9d:3c:37:61:c4:3d: 55:80:d2:7d:44:a2:86:29:9b:4c:48:11:bb:4e:f3: ba:cf:0c:58:62:4a:e8:93:42:77:60:ef:73:06:bb: af:16:62:37:75:86:d4:99:76:93:2b:91:aa:f0:02: bc:88:82:c8:97:cc:c0:29:3e:77:36:3a:0a:bb:3e: 1e:13:99:cc:7d:c5:fa:7f:74:f8:63:f5:fd:31:41: 1d:59:5b:ca:ad:02:1c:79:e2:a1:99:21:36:37:25: 00:e8:c9:51:12:8b:f9:94:b2:b8:66:4d:fd:02:03: 6d:56:15:33:4a:9a:48:01:df:6a:d1:9d:25:ce:98: 51:1d:73:e4:44:27:6f:c8:4f:90:aa:07:9e:64:1b: 64:90:a6:e5:c9:56:05:0b:dd:45:d9:7b:f2:de:7f: 2c:85:bb:52:6b:87:57:96:9e:3a:5d:12:61:12:51: cd:0c:97:44:06:7d:8d:e6:cb:50:c4:6f:ac:37:e5: 49:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DD:B4:C2:5E:7F:BA:39:0F:EC:FD:FB:E9:B7:FC:24:C9:48:F3:77 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1cbff23-c5b7-403d-a53c-bd23fc1b0a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.252.64.0/24 Signature Algorithm: sha256WithRSAEncryption 14:64:86:44:a4:25:41:22:c0:c2:7d:99:ba:8b:5f:30:11:7d: ef:94:8b:33:d3:a0:65:41:a0:96:fb:84:f3:1d:16:53:d7:c5: 9b:34:70:73:f3:6d:0d:75:d8:3c:1a:91:6c:60:7a:4c:43:f6: a0:22:d1:33:42:9d:51:ac:70:38:6f:f7:d8:bd:f4:2d:e9:d2: ee:73:40:82:07:56:0e:c8:de:72:00:3c:ef:49:51:47:aa:3d: dc:8e:2b:a3:bf:b5:fc:8e:02:84:ee:16:2d:57:41:28:fb:58: 97:21:8e:b5:d1:e7:be:f4:14:de:5d:29:1e:0d:ad:0d:b1:11: f4:6e:01:5e:29:90:dd:cf:ad:fd:bd:54:6d:e0:03:23:67:c5: db:77:d2:36:3f:a1:44:bf:61:76:c0:23:c0:ea:01:8c:a7:db: 10:d3:ae:fa:78:c4:a2:c6:db:eb:33:ec:6c:76:98:1f:49:0f: 22:9a:0b:58:e3:70:2e:c3:a0:e2:4a:01:f7:b4:b1:b4:3e:a5: b9:f7:a6:23:79:10:2a:ac:eb:8a:7b:71:a6:f9:0d:d7:39:48: e4:f3:47:4d:e3:f3:9e:c5:a0:98:05:70:87:67:ab:6e:c0:32: e7:72:c0:d3:ac:f7:88:93:ca:42:c5:99:39:3d:2c:5b:64:ed: af:57:d4:5f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE6LZq6b+vXK4NJ8pibfpZVZpar4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDAwMTIwWhcNMjYwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0N2ZiYWNjNjA4ZjQ0YWEzNTMzNzYyZTM4MTI1ZTE3MzEy M2U1OWI0MzQzOTQxOGUwMzU4OWY5MmNiZmZkZmRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYBg8ULzQNKYySdiBHIQmMr5xFQhMyGU/bYq4rF3jl8xFQ /C9tAMRulAauJB596gTDY3B0er+1v8ltTVtU6qm0kbVBpJ08N2HEPVWA0n1EooYp m0xIEbtO87rPDFhiSuiTQndg73MGu68WYjd1htSZdpMrkarwAryIgsiXzMApPnc2 Ogq7Ph4Tmcx9xfp/dPhj9f0xQR1ZW8qtAhx54qGZITY3JQDoyVESi/mUsrhmTf0C A21WFTNKmkgB32rRnSXOmFEdc+REJ2/IT5CqB55kG2SQpuXJVgUL3UXZe/LefyyF u1Jrh1eWnjpdEmESUc0Ml0QGfY3my1DEb6w35UntAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVt20wl5/ujkP7P376bf8JMlI83cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MxY2JmZjIzLWM1YjctNDAzZC1hNTNjLWJkMjNmYzFiMGEzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABA/EAwDQYJKoZIhvcNAQELBQADggEBABRkhkSkJUEiwMJ9mbqLXzARfe+U izPToGVBoJb7hPMdFlPXxZs0cHPzbQ112DwakWxgekxD9qAi0TNCnVGscDhv99i9 9C3p0u5zQIIHVg7I3nIAPO9JUUeqPdyOK6O/tfyOAoTuFi1XQSj7WJchjrXR5770 FN5dKR4NrQ2xEfRuAV4pkN3Prf29VG3gAyNnxdt30jY/oUS/YXbAI8DqAYyn2xDT rvp4xKLG2+sz7Gx2mB9JDyKaC1jjcC7DoOJKAfe0sbQ+pbn3piN5ECqs64p7cab5 Ddc5SOTzR03j857FoJgFcIdnq27AMudywNOs94iTykLFmTk9LFtk7a9X1F8= -----END CERTIFICATE-----Generated at Mon May 4 21:38:11 2026 by rpki-client