$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11ebb592-0bb8-4d49-a327-97483ff6fae1.roa File: 11ebb592-0bb8-4d49-a327-97483ff6fae1.roa (raw, json) Hash identifier: QVFMQZ1tUbtskIvXAwpr5h4CNp0rgFNDJRYt6UEdkLc= Subject key identifier: 4B:EF:D5:37:4B:7B:51:5E:75:A9:44:DB:68:5C:B4:D6:AE:5F:B2:65 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4FB03A78F387FF6DBD645DA5A9EB7141669E3D78 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11ebb592-0bb8-4d49-a327-97483ff6fae1.roa Signing time: Mon 25 May 2026 00:00:37 +0000 ROA not before: Mon 25 May 2026 00:00:37 +0000 ROA not after: Sun 23 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.60.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b0:3a:78:f3:87:ff:6d:bd:64:5d:a5:a9:eb:71:41:66:9e:3d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 25 00:00:37 2026 GMT Not After : Aug 23 23:59:59 2026 GMT Subject: serialNumber=b2829e40644af019b0699b796bf256c4eea34c5d76e90f2d02d3d8ccece29740, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9b:7b:43:82:8d:f4:9a:3b:33:a3:68:88:22: 95:27:ac:1e:13:71:9e:a6:ea:74:f3:45:4d:e7:1d: c8:68:5d:b3:1e:57:e7:4b:75:da:34:88:30:82:51: 6f:fb:7a:0f:fd:12:3a:1f:58:73:16:28:2c:65:73: 6e:0f:8b:0b:63:54:8f:49:4b:ca:d2:eb:40:0b:4f: ce:81:c0:87:38:74:93:54:76:3e:20:d6:9d:53:d4: 03:70:92:79:64:7a:08:2f:92:35:92:ea:95:e1:42: 90:a5:09:ef:17:49:44:78:c5:f7:a9:04:3b:26:59: 86:83:51:2b:ab:9f:ed:7b:a4:de:e4:e8:cf:80:57: 70:c1:ca:46:cb:b0:73:03:85:6c:43:9b:43:1a:41: fa:da:15:27:8c:5a:08:14:96:5e:7d:4f:0a:cb:2f: 26:ce:ef:71:6c:83:a8:41:1c:57:f2:9d:65:78:0b: b5:1e:06:19:98:b2:fd:07:2f:25:15:d4:b4:08:58: 5c:8b:f8:a7:6e:54:d5:2c:8c:de:bc:0d:24:e3:9b: 87:bd:90:eb:d4:d0:0e:5c:1e:bf:d4:7f:1b:81:ce: 37:d7:ef:e7:e6:ef:91:95:cf:61:98:86:bf:57:dd: 8e:25:86:84:2f:1a:78:83:25:d6:65:67:11:aa:77: 5a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EF:D5:37:4B:7B:51:5E:75:A9:44:DB:68:5C:B4:D6:AE:5F:B2:65 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11ebb592-0bb8-4d49-a327-97483ff6fae1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.60.0.0/17 Signature Algorithm: sha256WithRSAEncryption 43:58:0c:95:37:4f:4c:f3:f0:68:dd:7f:f6:2f:68:ff:20:6e: f9:ca:be:87:33:91:77:e1:06:f2:63:84:3c:6e:a6:48:1f:3b: f8:96:be:40:48:09:a4:f8:d1:5f:cd:94:d6:b4:55:80:83:e1: 86:20:cf:06:b4:47:61:f2:15:34:37:9f:65:1f:44:62:51:3f: d1:55:4d:fb:7c:ca:83:06:41:86:42:7d:0b:2b:0c:ad:dc:ef: 22:c6:59:3e:03:ef:8b:fe:51:2d:e6:e2:39:7d:4c:30:9b:c8: d2:76:f1:5c:c5:52:2a:6b:5f:a9:e4:4c:1f:17:25:59:d4:b4: 3b:21:8f:86:32:4a:4f:6e:77:16:79:62:fe:da:80:cb:fc:79: 08:76:19:59:0d:f1:2b:a1:59:6e:dd:b4:5b:3d:a5:c8:f5:4a: fa:1d:cd:80:84:a0:3f:fb:59:8d:d5:95:2d:16:17:15:0f:b8: 13:f2:2c:95:8d:4e:00:02:dd:88:bc:33:80:a6:fc:21:d4:fb: ef:e4:d6:69:e2:07:46:55:aa:b2:37:a1:1a:ec:02:d3:27:ad: 90:22:c8:96:cd:af:20:6f:b0:ca:6c:5c:3b:2c:54:80:51:c4: 3d:6d:d5:77:5e:25:72:11:66:c5:ac:26:e5:3b:1a:bc:43:95: c2:bc:33:1b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT7A6ePOH/229ZF2lqetxQWaePXgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTI1MDAwMDM3WhcNMjYwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMjgyOWU0MDY0NGFmMDE5YjA2OTliNzk2YmYyNTZjNGVl YTM0YzVkNzZlOTBmMmQwMmQzZDhjY2VjZTI5NzQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClm3tDgo30mjszo2iIIpUnrB4TcZ6m6nTzRU3nHchoXbMe V+dLddo0iDCCUW/7eg/9EjofWHMWKCxlc24PiwtjVI9JS8rS60ALT86BwIc4dJNU dj4g1p1T1ANwknlkeggvkjWS6pXhQpClCe8XSUR4xfepBDsmWYaDUSurn+17pN7k 6M+AV3DBykbLsHMDhWxDm0MaQfraFSeMWggUll59TwrLLybO73Fsg6hBHFfynWV4 C7UeBhmYsv0HLyUV1LQIWFyL+KduVNUsjN68DSTjm4e9kOvU0A5cHr/UfxuBzjfX 7+fm75GVz2GYhr9X3Y4lhoQvGniDJdZlZxGqd1obAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUS+/VN0t7UV51qUTbaFy01q5fsmUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzExZWJiNTkyLTBiYjgtNGQ0OS1hMzI3LTk3NDgzZmY2ZmFlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcQPAAwDQYJKoZIhvcNAQELBQADggEBAENYDJU3T0zz8Gjdf/YvaP8gbvnK voczkXfhBvJjhDxupkgfO/iWvkBICaT40V/NlNa0VYCD4YYgzwa0R2HyFTQ3n2Uf RGJRP9FVTft8yoMGQYZCfQsrDK3c7yLGWT4D74v+US3m4jl9TDCbyNJ28VzFUipr X6nkTB8XJVnUtDshj4YySk9udxZ5Yv7agMv8eQh2GVkN8SuhWW7dtFs9pcj1Svod zYCEoD/7WY3VlS0WFxUPuBPyLJWNTgAC3Yi8M4Cm/CHU++/k1mniB0ZVqrI3oRrs AtMnrZAiyJbNryBvsMpsXDssVIBRxD1t1XdeJXIRZsWsJuU7GrxDlcK8Mxs= -----END CERTIFICATE-----Generated at Sat Jun 13 07:11:48 2026 by rpki-client