$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edf3c604-746a-46b8-b1b2-34f62c038c9c.roa File: edf3c604-746a-46b8-b1b2-34f62c038c9c.roa (raw, json) Hash identifier: k8LGFvHpZEwEmOGICPs11nXAhnF/G8rOb+23kg0s/Sg= Subject key identifier: 5E:C5:DE:0E:59:36:28:FD:2B:32:9F:99:D5:50:DC:4E:9D:76:AA:A0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E0AA0909877A171F9C5C1D290FC2DAD49933879 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edf3c604-746a-46b8-b1b2-34f62c038c9c.roa Signing time: Sat 02 May 2026 01:10:11 +0000 ROA not before: Sat 02 May 2026 01:10:11 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 162.61.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:0a:a0:90:98:77:a1:71:f9:c5:c1:d2:90:fc:2d:ad:49:93:38:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 2 01:10:11 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=838610671075fb17ba55a43dc7f6b2439c89a7526c7e7f6d4d5b0aa38e9226e4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:13:f6:9e:7a:24:bb:eb:81:74:7b:cf:eb:73: b3:95:bd:5c:10:53:d1:cc:aa:d2:74:68:d8:a5:d4: 6e:d0:bc:38:92:b4:6d:07:77:9a:83:17:ea:07:7a: 55:9f:e2:38:1e:55:aa:ae:d2:c5:33:4d:64:9f:a4: 54:9e:6c:3e:90:72:82:a2:c0:44:9d:55:e6:b5:83: d9:f0:4b:3c:86:6d:35:db:d4:15:21:ec:2c:3f:62: 8d:f7:50:2e:3e:b7:61:f1:43:a2:bf:a9:d0:91:b9: c5:04:49:14:9d:ab:19:8d:00:a7:c4:0c:f6:29:78: dc:a2:22:39:4b:8d:04:23:12:28:a3:06:86:1c:55: cd:cb:c7:0a:e2:5a:e0:f1:de:88:a5:6f:2e:dd:78: 4c:db:59:af:05:2a:b0:8a:f9:cc:21:5b:41:73:0c: f4:f6:4e:e4:2c:16:47:0a:9d:4b:45:97:90:3e:8e: 42:92:ad:f2:71:5e:fc:58:08:a0:fc:07:11:59:bc: 75:bf:91:01:77:50:35:0e:76:21:07:fe:0a:b1:a4: f3:66:71:c2:af:aa:21:47:f7:18:99:8b:91:dd:6d: 7e:d1:59:5b:12:ba:86:2e:76:72:95:e1:bb:45:cd: 74:ca:dc:5d:23:d6:2a:4d:66:1f:aa:d5:76:9a:a9: 93:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C5:DE:0E:59:36:28:FD:2B:32:9F:99:D5:50:DC:4E:9D:76:AA:A0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edf3c604-746a-46b8-b1b2-34f62c038c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.61.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5e:88:06:6b:88:db:28:b4:a4:4a:b2:03:53:78:a9:31:49:20: 83:1d:89:76:3f:bc:48:6f:c6:b3:15:41:10:4f:65:26:ab:8a: 19:6e:6f:5b:7f:6d:11:30:6d:2f:0b:a5:97:7a:14:0b:0f:ea: d9:1a:65:95:cc:3f:cf:6a:37:73:ae:f8:c9:34:48:4e:a5:29: f3:e8:2a:d7:92:a1:a3:81:99:db:51:28:bc:88:68:42:a9:94: 3b:21:98:22:00:88:92:56:08:3d:33:1d:a1:2c:76:81:c9:f3: 76:ac:ce:54:33:17:0a:b1:1c:30:71:65:c8:28:02:38:80:c0: 9b:01:0a:b8:eb:ad:93:3b:1a:a2:8b:0d:d2:3b:ba:62:83:3c: a1:a4:e5:d8:fd:42:72:9f:7b:a9:36:85:0d:23:14:52:e0:f3: 4c:a4:d1:4f:71:61:4d:c5:8b:e2:f4:da:40:e4:b7:f3:e6:0f: 37:22:84:0b:e7:b7:15:27:f0:3d:06:95:7c:ac:79:66:34:3b: 7e:bf:fa:9b:b9:bc:10:00:b7:54:d0:20:07:8d:9f:70:6f:ec: 08:f2:32:5e:6f:09:0c:33:c5:e1:47:31:d6:87:0a:77:48:c2: aa:a3:bf:71:2c:9b:84:63:c2:87:80:07:51:b6:19:1d:7d:db: 4e:2d:dd:67 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULgqgkJh3oXH5xcHSkPwtrUmTOHkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAyMDExMDExWhcNMjYwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4Mzg2MTA2NzEwNzVmYjE3YmE1NWE0M2RjN2Y2YjI0Mzlj ODlhNzUyNmM3ZTdmNmQ0ZDViMGFhMzhlOTIyNmU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYE/aeeiS764F0e8/rc7OVvVwQU9HMqtJ0aNil1G7QvDiS tG0Hd5qDF+oHelWf4jgeVaqu0sUzTWSfpFSebD6QcoKiwESdVea1g9nwSzyGbTXb 1BUh7Cw/Yo33UC4+t2HxQ6K/qdCRucUESRSdqxmNAKfEDPYpeNyiIjlLjQQjEiij BoYcVc3LxwriWuDx3oilby7deEzbWa8FKrCK+cwhW0FzDPT2TuQsFkcKnUtFl5A+ jkKSrfJxXvxYCKD8BxFZvHW/kQF3UDUOdiEH/gqxpPNmccKvqiFH9xiZi5HdbX7R WVsSuoYudnKV4btFzXTK3F0j1ipNZh+q1XaaqZNxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUXsXeDlk2KP0rMp+Z1VDcTp12qqAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VkZjNjNjA0LTc0NmEtNDZiOC1iMWIyLTM0ZjYyYzAzOGM5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCiPTANBgkqhkiG9w0BAQsFAAOCAQEAXogGa4jbKLSkSrIDU3ipMUkggx2J dj+8SG/GsxVBEE9lJquKGW5vW39tETBtLwull3oUCw/q2Rpllcw/z2o3c674yTRI TqUp8+gq15Kho4GZ21EovIhoQqmUOyGYIgCIklYIPTMdoSx2gcnzdqzOVDMXCrEc MHFlyCgCOIDAmwEKuOutkzsaoosN0ju6YoM8oaTl2P1Ccp97qTaFDSMUUuDzTKTR T3FhTcWL4vTaQOS38+YPNyKEC+e3FSfwPQaVfKx5ZjQ7fr/6m7m8EAC3VNAgB42f cG/sCPIyXm8JDDPF4Ucx1ocKd0jCqqO/cSybhGPCh4AHUbYZHX3bTi3dZw== -----END CERTIFICATE-----Generated at Sun May 3 16:14:22 2026 by rpki-client