$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfac5a50-865f-4540-9411-044ce401b6f8.roa File: dfac5a50-865f-4540-9411-044ce401b6f8.roa (raw, json) Hash identifier: hyCENZU44Z9RNQ3wDzyVbHnnX7Ks1s3O728+ABZZdiY= Subject key identifier: EA:A0:52:AD:75:3E:9B:69:56:BC:8D:16:5F:D9:B1:98:D4:42:B4:3C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6274403AA41756B69DB555A488FDDD0F0DA61344 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfac5a50-865f-4540-9411-044ce401b6f8.roa Signing time: Wed 29 Apr 2026 00:31:29 +0000 ROA not before: Wed 29 Apr 2026 00:31:29 +0000 ROA not after: Tue 28 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 216.198.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:74:40:3a:a4:17:56:b6:9d:b5:55:a4:88:fd:dd:0f:0d:a6:13:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:31:29 2026 GMT Not After : Jul 28 23:59:59 2026 GMT Subject: serialNumber=6161d038f1f15c1f34105969adc2da483c70526535be2b31b6718f55271b54c9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:e7:cd:89:46:04:84:08:94:f9:eb:fe:b0: 55:8d:cf:b9:87:94:26:1c:37:e0:f0:90:a4:d1:7f: c8:80:c8:bf:dc:e0:fa:42:56:82:9e:42:ea:12:ea: ab:d5:3e:9a:70:d7:17:44:b9:1d:55:22:86:12:f2: f2:ff:96:a9:f5:6a:59:87:d3:f6:6f:7e:6f:9c:f5: ad:1a:f1:74:bf:9c:cc:cf:3f:f6:24:29:84:0e:82: ff:11:73:91:1a:41:a9:7e:02:ce:ab:42:a3:59:9f: 54:10:69:44:2f:d3:2c:2f:dd:63:59:34:96:4a:aa: aa:f4:c1:11:39:91:60:7d:90:36:36:59:e7:51:5e: 8e:11:ad:98:19:55:d0:82:4e:74:a3:2d:65:98:e5: 92:68:65:5e:a2:c6:2c:a1:94:f5:36:73:96:aa:22: 87:a5:59:cf:86:3f:fb:8b:d8:f5:9e:43:97:88:a3: 16:80:d8:e1:aa:6b:ed:4b:86:f3:ce:ff:89:bb:2d: 97:a3:21:ed:96:24:ca:1f:5d:47:4d:51:1e:f9:aa: e8:da:5a:2b:7b:2b:85:47:88:ec:ff:8e:89:d9:93: 63:59:d8:18:73:9d:8c:10:97:05:c2:1d:cb:d3:d4: 61:85:d8:59:98:69:28:40:5e:cf:5b:73:4a:22:6c: ba:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A0:52:AD:75:3E:9B:69:56:BC:8D:16:5F:D9:B1:98:D4:42:B4:3C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfac5a50-865f-4540-9411-044ce401b6f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.198.192.0/18 Signature Algorithm: sha256WithRSAEncryption 53:f7:67:c4:08:13:95:46:84:e8:93:dc:f2:73:15:04:70:f1: 2b:b3:20:af:aa:ef:d5:b3:4d:03:bd:f8:2d:11:4a:bc:c8:96: 3c:4d:1f:e4:b9:63:88:f1:2b:61:d4:f9:b4:4f:c2:76:07:31: f8:46:04:ef:b1:e6:16:71:7d:6c:9e:16:cc:56:03:d8:52:f5: 6d:3b:73:37:a1:45:05:ef:10:c3:a8:26:e8:ce:41:6e:0a:c1: 5e:90:d6:28:d8:86:20:d5:13:3e:89:6e:31:3c:17:fd:c1:c3: a2:cf:22:e2:5f:4a:21:2b:97:c4:d7:f1:96:5f:1b:00:fc:df: 0a:3b:a5:e0:34:d7:f0:6a:c5:39:d0:68:0c:5c:d7:27:6d:87: 72:d1:8d:46:f1:85:5d:c2:2d:79:59:6e:33:c9:f3:f9:21:52: 92:62:f3:5b:c3:fb:96:a6:b8:10:43:ff:1c:ef:fb:70:1a:e0: ab:01:90:e4:d9:88:ac:ef:72:e9:6a:ca:0b:81:5f:0c:fe:11: 88:59:7a:de:13:d1:58:42:19:23:6e:bb:77:50:3e:df:f6:1a: 83:17:ba:b0:11:e2:f8:80:6f:eb:c5:a8:76:27:44:d8:1a:76: e7:36:cc:32:f6:e4:4f:55:dc:99:66:ca:99:96:1d:36:66:0e: d9:dd:c7:89 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYnRAOqQXVradtVWkiP3dDw2mE0QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDAzMTI5WhcNMjYwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MTYxZDAzOGYxZjE1YzFmMzQxMDU5NjlhZGMyZGE0ODNj NzA1MjY1MzViZTJiMzFiNjcxOGY1NTI3MWI1NGM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+5+fNiUYEhAiU+ev+sFWNz7mHlCYcN+DwkKTRf8iAyL/c 4PpCVoKeQuoS6qvVPppw1xdEuR1VIoYS8vL/lqn1almH0/Zvfm+c9a0a8XS/nMzP P/YkKYQOgv8Rc5EaQal+As6rQqNZn1QQaUQv0ywv3WNZNJZKqqr0wRE5kWB9kDY2 WedRXo4RrZgZVdCCTnSjLWWY5ZJoZV6ixiyhlPU2c5aqIoelWc+GP/uL2PWeQ5eI oxaA2OGqa+1LhvPO/4m7LZejIe2WJMofXUdNUR75qujaWit7K4VHiOz/jonZk2NZ 2BhznYwQlwXCHcvT1GGF2FmYaShAXs9bc0oibLolAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6qBSrXU+m2lWvI0WX9mxmNRCtDwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RmYWM1YTUwLTg2NWYtNDU0MC05NDExLTA0NGNlNDAxYjZmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbYxsAwDQYJKoZIhvcNAQELBQADggEBAFP3Z8QIE5VGhOiT3PJzFQRw8Suz IK+q79WzTQO9+C0RSrzIljxNH+S5Y4jxK2HU+bRPwnYHMfhGBO+x5hZxfWyeFsxW A9hS9W07czehRQXvEMOoJujOQW4KwV6Q1ijYhiDVEz6JbjE8F/3Bw6LPIuJfSiEr l8TX8ZZfGwD83wo7peA01/BqxTnQaAxc1ydth3LRjUbxhV3CLXlZbjPJ8/khUpJi 81vD+5amuBBD/xzv+3Aa4KsBkOTZiKzvculqyguBXwz+EYhZet4T0VhCGSNuu3dQ Pt/2GoMXurAR4viAb+vFqHYnRNgaduc2zDL25E9V3JlmypmWHTZmDtndx4k= -----END CERTIFICATE-----Generated at Mon May 4 21:38:33 2026 by rpki-client