$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8dd3bb1-ba43-44ca-9cd5-560d785c94a5.roa File: d8dd3bb1-ba43-44ca-9cd5-560d785c94a5.roa (raw, json) Hash identifier: BJwx/HOrx40xCRIFoyJK8cbAX3no7/WxGBc/XIgGEz8= Subject key identifier: E6:06:E6:6D:71:0D:E7:99:9B:AE:E4:CA:A0:B8:27:E7:CB:98:A0:FD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 29069EDE253773AFD8CDC71CA63A5A9401B5867A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8dd3bb1-ba43-44ca-9cd5-560d785c94a5.roa Signing time: Tue 28 Apr 2026 00:31:14 +0000 ROA not before: Tue 28 Apr 2026 00:31:14 +0000 ROA not after: Mon 27 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 23.254.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:06:9e:de:25:37:73:af:d8:cd:c7:1c:a6:3a:5a:94:01:b5:86:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 00:31:14 2026 GMT Not After : Jul 27 23:59:59 2026 GMT Subject: serialNumber=efc0c26365437a393a2b9b7d4fb88b0b0a979b51ef7bb7ce73193d60ec169f9a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:33:ea:83:03:2a:f1:25:f5:e4:cd:71:68:cc: ea:e3:6d:5b:26:d4:8f:e3:41:35:39:d4:45:e6:f6: 2a:b9:68:45:73:16:96:40:0d:90:de:31:a5:6c:7d: 69:22:da:98:87:2c:a3:ea:72:f0:4c:fd:67:c1:9e: 7a:66:c6:a3:34:20:88:57:b1:02:71:60:c3:59:07: 2b:b0:2c:97:f8:de:4f:b6:9b:59:ac:b4:9b:6a:39: ce:6a:5d:6c:e0:68:55:27:a7:d1:6e:eb:9c:a4:d9: c8:4e:0b:01:36:ce:32:36:e0:c0:0a:a6:b6:12:30: 89:96:6d:12:5b:15:16:e8:0b:91:d7:7f:7d:e4:36: 5d:e7:1b:33:0f:f3:50:d9:8b:41:2b:fc:db:da:47: 84:f3:95:71:10:c4:e5:b1:20:bd:40:e0:f5:01:e5: db:50:32:d6:25:b3:4a:4d:f7:6b:4e:f6:4e:48:96: eb:1a:1c:c3:61:e3:3c:71:75:47:2a:a7:a7:93:de: ef:98:46:51:b0:cf:c1:b3:f6:52:97:9d:c5:a1:b6: 13:ac:1d:36:47:ad:88:c3:ca:0d:e8:b6:1d:dd:b1: 8f:9f:31:36:05:08:9d:5d:2e:87:e6:73:d6:ce:57: af:04:b5:f7:97:9c:2e:20:68:ae:39:a1:70:e9:e5: 27:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:06:E6:6D:71:0D:E7:99:9B:AE:E4:CA:A0:B8:27:E7:CB:98:A0:FD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8dd3bb1-ba43-44ca-9cd5-560d785c94a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.254.16.0/22 Signature Algorithm: sha256WithRSAEncryption 13:18:d2:f3:86:40:a6:2e:7b:65:f5:30:83:a8:4b:b3:da:e5: bb:b3:f5:e0:19:18:4d:57:ba:e7:37:26:3a:1b:ce:3e:51:0f: 27:48:8c:59:ae:51:90:b1:3d:47:1d:c4:84:5d:a3:74:bf:50: 58:96:ae:59:8e:69:be:40:88:38:9a:09:fc:f2:79:08:aa:c4: 5b:f3:c8:51:31:46:99:60:c2:f8:81:61:61:b1:4c:c0:f5:c2: 26:ed:5c:aa:83:fc:31:f7:71:ba:b7:4e:7d:ea:e5:41:9b:d8: 4a:ee:31:69:e9:0f:9c:fe:ae:68:2c:07:4b:2f:7e:bb:7c:f7: 1f:bc:b3:b6:dc:ff:a3:47:01:51:4b:4c:ba:b9:54:b4:68:23: b3:bf:a5:2a:20:94:76:29:af:5e:82:9e:10:15:72:e9:06:d7: 43:5b:5d:78:25:7c:7a:78:a1:a0:95:16:82:4d:f1:5e:63:37: f4:40:b9:c6:44:6f:8e:c1:49:05:7c:69:17:1d:a4:aa:4f:4c: 68:1e:c6:57:3e:ad:d0:7c:3a:2a:4f:4a:91:57:29:90:ca:8d: e9:bc:6b:dc:fb:36:65:70:6c:7d:65:d1:1d:41:f5:33:1b:37: 8b:76:f7:bd:3f:8a:15:2c:9e:c0:b6:c8:26:c7:3c:8c:5f:14: d7:80:42:cc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKQae3iU3c6/YzcccpjpalAG1hnowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI4MDAzMTE0WhcNMjYwNzI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZmMwYzI2MzY1NDM3YTM5M2EyYjliN2Q0ZmI4OGIwYjBh OTc5YjUxZWY3YmI3Y2U3MzE5M2Q2MGVjMTY5ZjlhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoM+qDAyrxJfXkzXFozOrjbVsm1I/jQTU51EXm9iq5aEVz FpZADZDeMaVsfWki2piHLKPqcvBM/WfBnnpmxqM0IIhXsQJxYMNZByuwLJf43k+2 m1mstJtqOc5qXWzgaFUnp9Fu65yk2chOCwE2zjI24MAKprYSMImWbRJbFRboC5HX f33kNl3nGzMP81DZi0Er/NvaR4TzlXEQxOWxIL1A4PUB5dtQMtYls0pN92tO9k5I lusaHMNh4zxxdUcqp6eT3u+YRlGwz8Gz9lKXncWhthOsHTZHrYjDyg3oth3dsY+f MTYFCJ1dLofmc9bOV68EtfeXnC4gaK45oXDp5ScTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5gbmbXEN55mbruTKoLgn58uYoP0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q4ZGQzYmIxLWJhNDMtNDRjYS05Y2Q1LTU2MGQ3ODVjOTRhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIX/hAwDQYJKoZIhvcNAQELBQADggEBABMY0vOGQKYue2X1MIOoS7Pa5buz 9eAZGE1Xuuc3Jjobzj5RDydIjFmuUZCxPUcdxIRdo3S/UFiWrlmOab5AiDiaCfzy eQiqxFvzyFExRplgwviBYWGxTMD1wibtXKqD/DH3cbq3Tn3q5UGb2EruMWnpD5z+ rmgsB0svfrt89x+8s7bc/6NHAVFLTLq5VLRoI7O/pSoglHYpr16CnhAVcukG10Nb XXglfHp4oaCVFoJN8V5jN/RAucZEb47BSQV8aRcdpKpPTGgexlc+rdB8OipPSpFX KZDKjem8a9z7NmVwbH1l0R1B9TMbN4t2970/ihUsnsC2yCbHPIxfFNeAQsw= -----END CERTIFICATE-----Generated at Sun May 3 15:30:46 2026 by rpki-client