$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7f33625-7927-4957-945b-d3e811e14c39.roa File: d7f33625-7927-4957-945b-d3e811e14c39.roa (raw, json) Hash identifier: SPcAA6RgLM1tzgUSPUKtVzQmNa0hKUTiSgBLvZsC+40= Subject key identifier: 41:EC:DC:EC:A1:50:9D:2A:62:68:C3:E0:67:E5:25:E8:6B:C5:3F:A7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 449E9D6EDAEAA40DC7B7CD7056153BC2F1D37FEC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7f33625-7927-4957-945b-d3e811e14c39.roa Signing time: Fri 01 May 2026 00:30:35 +0000 ROA not before: Fri 01 May 2026 00:30:35 +0000 ROA not after: Thu 30 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 63.176.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:9e:9d:6e:da:ea:a4:0d:c7:b7:cd:70:56:15:3b:c2:f1:d3:7f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 1 00:30:35 2026 GMT Not After : Jul 30 23:59:59 2026 GMT Subject: serialNumber=b314351c15252d8843b7c6f2d108e46910c466a5fe945607f835069ecbf7b074, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:49:df:5f:e0:1e:f5:59:ad:ff:c8:c9:00:3d: 6a:5d:db:80:d7:38:a4:60:b6:c6:fd:0d:cd:c0:49: 75:15:1a:fb:78:98:c7:62:5a:c9:c0:5c:ea:56:1f: 16:c6:c6:16:3e:68:51:59:e5:51:9f:e2:05:98:34: d0:ed:0c:28:5d:7d:5e:54:28:35:c2:66:da:aa:f7: 9f:90:54:e1:6c:22:86:8a:64:89:d6:15:fe:08:85: 88:2a:b6:6f:13:44:ef:8f:47:fd:c4:b7:b9:1b:ae: 3d:e7:9c:cd:a5:b0:61:16:f3:45:77:70:df:bc:aa: 44:17:2e:89:71:c6:d7:34:f5:bb:3a:4e:b2:41:81: 3b:9c:00:52:ee:5e:16:e2:db:9d:c6:14:d9:c1:77: 0f:2e:3b:4c:8f:04:0a:7a:83:5b:da:32:e7:25:76: 25:f8:ef:96:0b:5a:3e:27:6e:d7:69:7b:e1:c8:6c: c5:06:ec:2d:0b:78:a2:44:7d:4d:8a:aa:b3:fa:1e: 5e:a1:a4:02:2c:92:6b:f2:16:30:da:84:2e:40:d0: 24:f3:3b:54:d3:8a:47:5a:55:f0:58:e7:dd:de:81: ab:9d:22:6c:24:46:70:97:0d:65:16:10:9b:cd:c2: 61:61:12:5e:92:33:37:5e:69:63:5f:4d:47:1f:aa: 83:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EC:DC:EC:A1:50:9D:2A:62:68:C3:E0:67:E5:25:E8:6B:C5:3F:A7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7f33625-7927-4957-945b-d3e811e14c39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 63.176.0.0/12 Signature Algorithm: sha256WithRSAEncryption 94:88:fd:37:f2:99:a1:83:02:f2:13:e9:8a:09:0d:45:6e:2e: 79:6d:aa:e2:b1:01:50:50:ea:4e:bf:68:c2:00:69:68:8e:e1: 7f:55:e9:e2:a0:c9:f7:88:08:85:f8:0e:da:9e:d9:82:e5:c1: 82:f9:25:d9:0c:13:4a:c9:1f:ff:dd:b7:bd:87:34:5f:5e:4d: a5:dd:e1:a9:f7:c6:63:ed:32:7b:cc:4c:16:df:0c:1e:16:dc: c5:67:b4:df:3c:74:e6:0a:2e:eb:2a:c2:24:21:c7:d5:ca:40: 7d:f8:6e:50:1e:cf:de:f1:30:15:82:3a:c6:61:24:fa:35:26: 92:73:ee:70:d1:a6:4c:ab:89:34:17:4a:ff:bd:f9:92:5f:b6: a0:a9:5e:3d:5a:7f:b2:6e:9a:6d:a8:40:eb:75:32:cd:5d:ec: da:24:ea:1c:ec:52:44:c3:9d:ed:11:43:fb:60:f5:74:ab:c5: 97:cc:79:e8:78:8a:d6:68:c7:41:94:8f:f5:71:72:7c:5e:ec: 00:5b:22:59:ec:52:fd:d1:da:71:f7:28:9e:ce:44:b1:bb:74: 04:9a:f8:0c:d0:a5:4d:2f:28:c1:86:9a:1c:80:da:da:4e:aa: 41:f3:7b:20:15:b9:28:ef:d4:ee:44:8c:10:31:65:2f:a3:34: 3f:28:16:18 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURJ6dbtrqpA3Ht81wVhU7wvHTf+wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDAzMDM1WhcNMjYwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzE0MzUxYzE1MjUyZDg4NDNiN2M2ZjJkMTA4ZTQ2OTEw YzQ2NmE1ZmU5NDU2MDdmODM1MDY5ZWNiZjdiMDc0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcSd9f4B71Wa3/yMkAPWpd24DXOKRgtsb9Dc3ASXUVGvt4 mMdiWsnAXOpWHxbGxhY+aFFZ5VGf4gWYNNDtDChdfV5UKDXCZtqq95+QVOFsIoaK ZInWFf4IhYgqtm8TRO+PR/3Et7kbrj3nnM2lsGEW80V3cN+8qkQXLolxxtc09bs6 TrJBgTucAFLuXhbi253GFNnBdw8uO0yPBAp6g1vaMucldiX475YLWj4nbtdpe+HI bMUG7C0LeKJEfU2KqrP6Hl6hpAIskmvyFjDahC5A0CTzO1TTikdaVfBY593egaud ImwkRnCXDWUWEJvNwmFhEl6SMzdeaWNfTUcfqoPtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQezc7KFQnSpiaMPgZ+Ul6GvFP6cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q3ZjMzNjI1LTc5MjctNDk1Ny05NDViLWQzZTgxMWUxNGMzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwQ/sDANBgkqhkiG9w0BAQsFAAOCAQEAlIj9N/KZoYMC8hPpigkNRW4ueW2q 4rEBUFDqTr9owgBpaI7hf1Xp4qDJ94gIhfgO2p7ZguXBgvkl2QwTSskf/923vYc0 X15Npd3hqffGY+0ye8xMFt8MHhbcxWe03zx05gou6yrCJCHH1cpAffhuUB7P3vEw FYI6xmEk+jUmknPucNGmTKuJNBdK/735kl+2oKlePVp/sm6abahA63UyzV3s2iTq HOxSRMOd7RFD+2D1dKvFl8x56HiK1mjHQZSP9XFyfF7sAFsiWexS/dHacfcons5E sbt0BJr4DNClTS8owYaaHIDa2k6qQfN7IBW5KO/U7kSMEDFlL6M0PygWGA== -----END CERTIFICATE-----Generated at Sun May 3 15:33:33 2026 by rpki-client