$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e834e04c-f563-4064-a1f9-706839ae47eb.roa File: e834e04c-f563-4064-a1f9-706839ae47eb.roa (raw, json) Hash identifier: he5a145XJCDoRpR/7QMhygoCK/aSnx6VUbe5pBaXrIk= Subject key identifier: 0A:6A:DB:BA:02:8B:B5:11:0D:19:1F:84:B4:63:BF:5F:2B:9F:5D:1F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 020312ED8AA6C3F2106ACBCB4CE667243FC9A35B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e834e04c-f563-4064-a1f9-706839ae47eb.roa Signing time: Tue 28 Apr 2026 00:11:08 +0000 ROA not before: Tue 28 Apr 2026 00:11:08 +0000 ROA not after: Mon 27 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.116.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:03:12:ed:8a:a6:c3:f2:10:6a:cb:cb:4c:e6:67:24:3f:c9:a3:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 00:11:08 2026 GMT Not After : Jul 27 23:59:59 2026 GMT Subject: serialNumber=8e4978985e8bd134dce99d61683ca74c925ed4d3a4f7726c0aa0c20ff035649e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:de:3c:8a:5d:4d:57:c8:08:f7:29:e1:97:12: 7f:c5:f1:b1:bb:b7:ed:7b:1e:eb:df:ba:ac:4a:51: 95:6b:70:5c:08:9b:19:c5:d8:55:43:2b:71:de:31: f3:aa:6e:dc:12:7f:02:4d:e5:78:c0:de:78:fd:dc: bb:14:ef:29:bb:99:27:bf:a3:8e:c2:92:ce:9c:ba: 04:a6:72:b4:28:5c:e9:2b:65:4f:b5:fa:dc:48:a5: e1:a2:ac:8d:d4:3a:b6:3b:e2:6a:dd:05:ed:69:ae: 8b:0b:c1:f0:2f:d8:64:89:01:0f:c7:3e:97:d7:04: 83:0a:73:4e:15:6e:b4:70:12:6c:f2:6c:54:a9:e1: e8:5c:a8:1f:9f:73:d9:a8:76:e9:6a:b2:2e:03:f8: 44:ad:2a:e3:5b:6a:4f:47:5f:37:4c:59:08:b8:ea: 89:4c:46:43:a5:53:e3:ce:03:04:e9:c6:ec:35:70: 82:ab:f4:12:54:83:41:da:cf:9b:4a:e9:52:2b:ae: 2d:f6:70:4b:e2:b4:c4:c1:15:a3:7b:68:0e:d6:88: 3a:ff:bd:b7:41:ed:4e:ae:8a:b1:b8:dc:66:0a:10: b3:6e:54:75:fc:ea:23:b7:ca:88:f3:23:b3:f3:88: 32:dd:86:72:d6:da:c8:45:33:95:7e:ec:13:29:ac: c5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6A:DB:BA:02:8B:B5:11:0D:19:1F:84:B4:63:BF:5F:2B:9F:5D:1F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e834e04c-f563-4064-a1f9-706839ae47eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.116.0.0/16 Signature Algorithm: sha256WithRSAEncryption a7:0e:ea:69:15:b6:d7:31:59:dd:f0:ee:ff:69:95:e0:45:0b: 96:fb:6a:a7:02:2b:9a:53:57:ae:83:dc:00:8a:1a:19:1d:06: 3a:f0:d4:c3:83:38:23:35:35:e8:94:f6:d3:de:24:b9:59:89: fa:ec:f5:bf:dd:37:1e:b9:9b:42:2c:e3:8d:e6:0a:be:04:d0: 2c:31:8a:9c:43:b8:08:b6:10:8c:e0:8f:31:a5:00:bd:c8:6d: d4:27:a6:30:2d:0d:38:4d:47:23:d4:90:da:58:49:d2:f7:67: c2:6a:bd:c5:dd:93:a1:f4:d1:c9:8b:53:7f:84:0f:9c:bc:74: d5:1a:50:be:e3:59:1d:fb:df:2f:7a:ec:47:8f:90:65:04:bd: 36:d7:a2:ac:eb:45:02:d7:88:09:fb:44:97:ba:35:35:d0:30: d4:2a:b6:33:fc:31:39:d3:a0:ae:0f:cc:67:1a:10:34:3a:12: ef:85:f3:94:e9:c5:d3:7e:18:f2:44:9c:63:08:61:09:85:cb: 75:1a:52:75:e6:1e:03:22:96:75:fe:6f:be:c1:1d:b1:23:fb: df:9f:0d:81:c4:ad:8a:86:04:fa:dc:86:03:02:c4:7b:e0:c9: 07:f2:14:c6:a6:d2:8f:de:87:5f:69:e7:b1:a4:0a:5e:91:69: 1f:91:c3:7c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAgMS7Yqmw/IQasvLTOZnJD/Jo1swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI4MDAxMTA4WhcNMjYwNzI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTQ5Nzg5ODVlOGJkMTM0ZGNlOTlkNjE2ODNjYTc0Yzky NWVkNGQzYTRmNzcyNmMwYWEwYzIwZmYwMzU2NDllMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF3jyKXU1XyAj3KeGXEn/F8bG7t+17HuvfuqxKUZVrcFwI mxnF2FVDK3HeMfOqbtwSfwJN5XjA3nj93LsU7ym7mSe/o47Cks6cugSmcrQoXOkr ZU+1+txIpeGirI3UOrY74mrdBe1prosLwfAv2GSJAQ/HPpfXBIMKc04VbrRwEmzy bFSp4ehcqB+fc9modulqsi4D+EStKuNbak9HXzdMWQi46olMRkOlU+POAwTpxuw1 cIKr9BJUg0Haz5tK6VIrri32cEvitMTBFaN7aA7WiDr/vbdB7U6uirG43GYKELNu VHX86iO3yojzI7PziDLdhnLW2shFM5V+7BMprMXBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUCmrbugKLtRENGR+EtGO/XyufXR8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U4MzRlMDRjLWY1NjMtNDA2NC1hMWY5LTcwNjgzOWFlNDdlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAQdDANBgkqhkiG9w0BAQsFAAOCAQEApw7qaRW21zFZ3fDu/2mV4EULlvtq pwIrmlNXroPcAIoaGR0GOvDUw4M4IzU16JT2094kuVmJ+uz1v903HrmbQizjjeYK vgTQLDGKnEO4CLYQjOCPMaUAvcht1CemMC0NOE1HI9SQ2lhJ0vdnwmq9xd2TofTR yYtTf4QPnLx01RpQvuNZHfvfL3rsR4+QZQS9NteirOtFAteICftEl7o1NdAw1Cq2 M/wxOdOgrg/MZxoQNDoS74XzlOnF034Y8kScYwhhCYXLdRpSdeYeAyKWdf5vvsEd sSP7358NgcStioYE+tyGAwLEe+DJB/IUxqbSj96HX2nnsaQKXpFpH5HDfA== -----END CERTIFICATE-----Generated at Sun May 3 15:34:09 2026 by rpki-client