$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6e76d16-59e3-4ef2-9a18-38d016b50c9b.roa File: f6e76d16-59e3-4ef2-9a18-38d016b50c9b.roa (raw, json) Hash identifier: 1Denk56LLOed/myp5ZfYtFLB3sX/xTVrLDSfVteTlj4= Subject key identifier: C0:0A:D9:33:94:BA:8C:A8:D5:49:52:4F:49:3C:57:E5:9C:A5:EC:2B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 380709B64067359782A7E7C1EF74D3E8EF43C171 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6e76d16-59e3-4ef2-9a18-38d016b50c9b.roa Signing time: Thu 30 Apr 2026 00:00:06 +0000 ROA not before: Thu 30 Apr 2026 00:00:06 +0000 ROA not after: Wed 29 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 89.59.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:07:09:b6:40:67:35:97:82:a7:e7:c1:ef:74:d3:e8:ef:43:c1:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 30 00:00:06 2026 GMT Not After : Jul 29 23:59:59 2026 GMT Subject: serialNumber=dfcd37f4d3d1de36c4379d8dd3e95733a15b8ee9e2dd00ffb71c88643ff6327c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:71:92:15:fe:5c:4d:92:a3:a7:4e:2c:9f:dc: 47:7a:cc:dd:d0:52:4d:45:e1:02:66:63:b2:cf:33: a8:8f:4a:aa:92:b4:f0:b2:a6:c5:f4:75:4e:64:51: 3f:57:53:d3:33:bf:e2:d8:cb:91:3a:b3:5e:76:6b: 2a:9c:e3:88:ec:d6:8a:af:95:13:e6:5f:81:a9:ba: 5e:15:37:17:1c:65:cd:80:e1:51:f9:cb:7e:70:26: c2:2c:45:4c:09:4f:41:c6:46:3a:b6:f5:be:2e:bc: 98:e6:38:22:e4:3b:74:e9:91:7b:12:78:ad:dc:74: d6:7b:6a:ec:74:cc:21:65:39:1c:58:49:75:d2:4c: 52:5b:18:b3:54:7e:29:11:69:80:99:88:84:64:13: 7a:69:f6:fb:4e:c3:9d:40:6f:bc:a6:cd:af:2c:79: 25:28:72:f1:de:ef:75:86:0f:f5:95:37:f2:ca:e0: 56:40:17:2b:75:4d:e2:3b:46:09:2b:e5:3e:5c:0d: 14:ce:ef:46:dd:ed:4d:84:cd:4a:55:6d:aa:25:32: 2e:a4:cf:8f:8e:87:54:25:fd:dd:63:73:26:9f:1c: b9:bf:01:ed:d1:57:fd:d9:ad:67:00:f6:6d:32:b8: c0:ff:8c:44:af:cd:3b:07:a7:e7:67:1a:60:45:6c: 53:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0A:D9:33:94:BA:8C:A8:D5:49:52:4F:49:3C:57:E5:9C:A5:EC:2B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6e76d16-59e3-4ef2-9a18-38d016b50c9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.59.0.0/16 Signature Algorithm: sha256WithRSAEncryption aa:60:46:51:99:a9:07:89:1a:a7:df:a5:ce:bc:3a:ea:4c:51: 79:43:d1:24:fa:89:84:6a:37:41:a1:7c:64:20:1f:45:7b:0a: 75:43:72:bd:c1:2d:80:e1:ff:56:69:f3:18:df:e8:26:83:a2: ca:40:1e:7d:35:47:6b:ad:81:f9:90:ac:d8:77:66:cc:54:bc: c3:6d:42:19:08:4e:dc:87:9e:fa:8b:c9:80:6e:c7:8e:d9:8b: d5:00:ca:f5:f1:13:a9:72:e9:16:ad:2a:7f:68:66:43:4d:12: 2e:9b:30:e5:24:eb:33:fc:49:30:ea:1b:2d:91:20:f2:20:57: 97:62:61:2e:40:cf:0c:e0:3f:b6:58:51:cf:e3:8f:60:b4:b5: 2b:be:86:57:23:f3:c9:2f:c6:d3:eb:c8:07:51:3d:1d:e9:e9: 54:f9:93:62:f2:7c:d0:07:bc:44:a3:0e:fe:1f:9a:ab:6c:33: 38:19:9d:89:20:a5:25:19:0a:6a:4f:20:55:1a:d7:65:0e:3c: 9f:1a:32:74:e2:c7:3e:e1:4d:5e:6a:d8:20:65:fa:ad:e3:6a: 41:af:5d:90:21:90:5c:79:80:a7:e0:ba:3c:5d:a2:6d:42:e9: 65:70:53:db:05:87:b8:bc:da:c4:35:98:53:05:ea:39:04:32: cb:e4:49:50 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOAcJtkBnNZeCp+fB73TT6O9DwXEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDMwMDAwMDA2WhcNMjYwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmNkMzdmNGQzZDFkZTM2YzQzNzlkOGRkM2U5NTczM2Ex NWI4ZWU5ZTJkZDAwZmZiNzFjODg2NDNmZjYzMjdjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDucZIV/lxNkqOnTiyf3Ed6zN3QUk1F4QJmY7LPM6iPSqqS tPCypsX0dU5kUT9XU9Mzv+LYy5E6s152ayqc44js1oqvlRPmX4Gpul4VNxccZc2A 4VH5y35wJsIsRUwJT0HGRjq29b4uvJjmOCLkO3TpkXsSeK3cdNZ7aux0zCFlORxY SXXSTFJbGLNUfikRaYCZiIRkE3pp9vtOw51Ab7ymza8seSUocvHe73WGD/WVN/LK 4FZAFyt1TeI7Rgkr5T5cDRTO70bd7U2EzUpVbaolMi6kz4+Oh1Ql/d1jcyafHLm/ Ae3RV/3ZrWcA9m0yuMD/jESvzTsHp+dnGmBFbFPrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUwArZM5S6jKjVSVJPSTxX5Zyl7CswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y2ZTc2ZDE2LTU5ZTMtNGVmMi05YTE4LTM4ZDAxNmI1MGM5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBZOzANBgkqhkiG9w0BAQsFAAOCAQEAqmBGUZmpB4kap9+lzrw66kxReUPR JPqJhGo3QaF8ZCAfRXsKdUNyvcEtgOH/VmnzGN/oJoOiykAefTVHa62B+ZCs2Hdm zFS8w21CGQhO3Iee+ovJgG7HjtmL1QDK9fETqXLpFq0qf2hmQ00SLpsw5STrM/xJ MOobLZEg8iBXl2JhLkDPDOA/tlhRz+OPYLS1K76GVyPzyS/G0+vIB1E9HenpVPmT YvJ80Ae8RKMO/h+aq2wzOBmdiSClJRkKak8gVRrXZQ48nxoydOLHPuFNXmrYIGX6 reNqQa9dkCGQXHmAp+C6PF2ibULpZXBT2wWHuLzaxDWYUwXqOQQyy+RJUA== -----END CERTIFICATE-----Generated at Mon May 4 21:38:42 2026 by rpki-client