$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fdfb9fa5-85eb-4a87-9293-6efcee6e67ae.roa File: fdfb9fa5-85eb-4a87-9293-6efcee6e67ae.roa (raw, json) Hash identifier: ALxLitzX/RDh01N2HuhRByUru8dL/SyjMQ0fZPSnbTU= Subject key identifier: 85:B1:1D:98:EA:80:49:94:44:7F:B9:93:57:F1:2E:AB:8D:7B:D8:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1C3BC70FB6EC17E08D8A7A311F0E7DD79421C99C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fdfb9fa5-85eb-4a87-9293-6efcee6e67ae.roa Signing time: Tue 28 Apr 2026 00:30:12 +0000 ROA not before: Tue 28 Apr 2026 00:30:12 +0000 ROA not after: Mon 27 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 15.233.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:3b:c7:0f:b6:ec:17:e0:8d:8a:7a:31:1f:0e:7d:d7:94:21:c9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 00:30:12 2026 GMT Not After : Jul 27 23:59:59 2026 GMT Subject: serialNumber=85e0ce08bf3bfaf57c28bc72d4a999bc2e41d81f1640ff5fa690c54842b4151e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:da:14:39:c5:92:71:d3:26:68:d9:35:44:13: b2:86:53:03:70:97:14:cd:67:50:b7:9a:f0:bb:c7: 68:08:2e:e9:33:95:4a:d6:07:f6:f4:55:29:bd:2a: 07:40:8c:a1:79:f6:1b:b6:08:ff:0e:76:3b:28:6a: 17:9e:21:5c:9d:60:5e:e9:64:05:ac:8e:22:8b:3a: 4d:8a:48:46:f9:83:58:7f:fb:5b:b7:d7:c6:29:82: 34:b5:aa:12:cc:ac:a7:a0:16:ce:e3:4e:ab:97:79: a7:f9:7d:d0:63:78:f9:82:3a:ed:94:21:a2:5b:dc: a7:23:f2:9d:6f:35:b0:4e:19:00:be:b3:d4:d9:60: c0:30:61:ec:84:40:db:05:52:62:85:26:0f:53:61: a0:67:48:bc:a1:68:4f:5d:a3:9f:7f:f3:98:56:54: 51:46:1d:5b:4a:86:34:40:cd:8d:49:a3:b9:23:13: 1d:cd:de:f1:ea:fe:83:87:c2:a7:80:28:d0:70:2c: 5f:7d:fa:a8:11:a9:fa:43:49:17:dc:e7:bb:fc:b5: 0c:f4:af:f7:71:6d:a6:49:d7:cd:d2:8a:ea:35:6a: 66:e4:f9:38:13:79:93:f2:ab:5e:30:a5:64:db:af: 67:17:c5:be:83:68:76:55:0d:85:24:ad:de:a7:7a: b9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B1:1D:98:EA:80:49:94:44:7F:B9:93:57:F1:2E:AB:8D:7B:D8:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fdfb9fa5-85eb-4a87-9293-6efcee6e67ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.233.128.0/17 Signature Algorithm: sha256WithRSAEncryption 23:67:d5:b6:c4:9f:cc:f5:ba:7f:37:f7:a7:48:0b:eb:e7:94: f3:53:f9:23:60:d4:73:b4:7d:a6:d8:b1:5a:83:91:6b:76:04: 5e:1f:94:00:e3:f3:39:79:5b:23:bd:88:66:60:a3:ed:ca:10: e9:7f:d4:01:15:03:2d:98:0c:ed:d7:09:df:1f:b8:08:4b:4a: 2e:e3:8f:04:e8:56:b7:3a:41:f3:2b:c6:40:10:68:9c:60:ad: 6c:04:9c:89:c5:16:00:c6:8a:f4:49:c2:4a:ce:0a:e2:2c:e8: a2:4f:7a:f7:70:64:05:bb:ab:38:eb:ce:a9:3f:62:93:72:6d: af:f3:39:a5:d0:15:78:26:d7:10:d8:c1:4c:5b:cb:0f:d7:58: 4f:aa:80:0d:65:04:70:6f:6b:8f:48:4b:3b:9f:7a:34:18:b2: ff:20:4d:be:bd:8a:59:ff:66:42:5f:c8:dc:3f:6d:75:8e:e8: cb:70:12:1b:2d:d6:da:52:4e:3e:7d:d4:c6:9c:49:79:35:17: 45:d9:4a:c2:a7:1a:bf:36:d5:c1:38:ea:17:21:68:4f:76:cd: 09:71:0c:f6:15:53:64:58:ed:55:0a:c8:e4:00:aa:f0:29:b4: 06:fc:d0:8b:8a:10:56:fc:e0:13:9e:fa:43:31:c2:3a:13:b2: ba:7b:41:de -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHDvHD7bsF+CNinoxHw5915QhyZwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI4MDAzMDEyWhcNMjYwNzI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NWUwY2UwOGJmM2JmYWY1N2MyOGJjNzJkNGE5OTliYzJl NDFkODFmMTY0MGZmNWZhNjkwYzU0ODQyYjQxNTFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI2hQ5xZJx0yZo2TVEE7KGUwNwlxTNZ1C3mvC7x2gILukz lUrWB/b0VSm9KgdAjKF59hu2CP8OdjsoaheeIVydYF7pZAWsjiKLOk2KSEb5g1h/ +1u318YpgjS1qhLMrKegFs7jTquXeaf5fdBjePmCOu2UIaJb3Kcj8p1vNbBOGQC+ s9TZYMAwYeyEQNsFUmKFJg9TYaBnSLyhaE9do59/85hWVFFGHVtKhjRAzY1Jo7kj Ex3N3vHq/oOHwqeAKNBwLF99+qgRqfpDSRfc57v8tQz0r/dxbaZJ183Siuo1ambk +TgTeZPyq14wpWTbr2cXxb6DaHZVDYUkrd6nermfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhbEdmOqASZREf7mTV/Euq4172DswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZkZmI5ZmE1LTg1ZWItNGE4Ny05MjkzLTZlZmNlZTZlNjdhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcP6YAwDQYJKoZIhvcNAQELBQADggEBACNn1bbEn8z1un8396dIC+vnlPNT +SNg1HO0fabYsVqDkWt2BF4flADj8zl5WyO9iGZgo+3KEOl/1AEVAy2YDO3XCd8f uAhLSi7jjwToVrc6QfMrxkAQaJxgrWwEnInFFgDGivRJwkrOCuIs6KJPevdwZAW7 qzjrzqk/YpNyba/zOaXQFXgm1xDYwUxbyw/XWE+qgA1lBHBva49ISzufejQYsv8g Tb69iln/ZkJfyNw/bXWO6MtwEhst1tpSTj591MacSXk1F0XZSsKnGr821cE46hch aE92zQlxDPYVU2RY7VUKyOQAqvAptAb80IuKEFb84BOe+kMxwjoTsrp7Qd4= -----END CERTIFICATE-----Generated at Sun May 3 16:12:20 2026 by rpki-client