$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20ecd83d-e6c2-4d75-b9cb-8a7898172ad5.roa File: 20ecd83d-e6c2-4d75-b9cb-8a7898172ad5.roa (raw, json) Hash identifier: 8A8RMdQAmY/m7kRIrhBruo941bikJK1Y5CUXNydB4o4= Subject key identifier: 54:31:08:E2:E5:CC:EA:64:7E:37:8C:6E:03:55:51:B0:86:5F:0C:01 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 71ABBB1062E3E81288AA84466EEE60D8AE22BF0F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20ecd83d-e6c2-4d75-b9cb-8a7898172ad5.roa Signing time: Wed 20 May 2026 00:30:42 +0000 ROA not before: Wed 20 May 2026 00:30:42 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 16.57.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ab:bb:10:62:e3:e8:12:88:aa:84:46:6e:ee:60:d8:ae:22:bf:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 00:30:42 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=25a860850539161ad1be8167399b92345193a1c5e5913ce44b9e5cba93df03aa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:45:77:dc:d6:3f:a5:74:17:71:d4:40:31:ff: 39:c8:7e:45:b0:16:c1:28:96:17:09:09:a3:92:e5: e4:c9:9b:0a:b4:a2:e9:67:28:b6:27:3c:ce:65:23: dc:65:de:e7:65:47:86:7c:9e:ad:28:c2:c2:b1:e5: fd:1e:e3:1b:53:69:9d:69:d1:e0:60:d8:be:b1:44: df:84:e0:dc:59:52:cd:09:cb:8c:e7:d4:fc:1e:14: 1d:bf:63:6c:fa:04:c1:0e:ba:28:60:01:84:99:f5: 88:e4:b6:d3:50:d0:2a:8c:b3:22:21:d9:28:d3:f5: 5f:4d:39:f5:79:0f:b3:ef:80:10:b2:4a:f0:0b:9c: fb:a5:7d:d5:e5:c8:bc:4c:c0:98:8a:c8:bc:ca:b4: 6e:f1:a2:f6:4c:77:97:0b:19:6d:fa:af:a0:80:8d: ce:04:45:f2:1a:22:c0:fa:e9:97:52:4d:be:91:cd: 03:fc:68:c5:1b:f2:60:9a:2c:50:25:a0:e8:60:b0: 33:ca:15:4e:1a:aa:2d:7f:a7:56:04:04:56:3f:17: 6b:83:01:c1:63:c2:9d:73:eb:37:1c:a8:a8:cb:49: 08:43:14:a9:7f:ca:3e:7f:ee:d0:fc:79:d5:bd:bb: b8:a9:dc:a5:c1:15:ad:16:0b:eb:c3:0a:72:05:f6: 08:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:31:08:E2:E5:CC:EA:64:7E:37:8C:6E:03:55:51:B0:86:5F:0C:01 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20ecd83d-e6c2-4d75-b9cb-8a7898172ad5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 16.57.32.0/19 Signature Algorithm: sha256WithRSAEncryption 72:ae:93:0c:bf:01:b6:71:2b:bf:1e:16:0f:b2:ee:7a:d7:76: 41:77:90:33:c3:b2:bb:20:97:e9:76:a2:d2:52:65:a6:68:0e: 67:8c:de:59:d9:d1:06:72:51:63:69:6e:c8:3c:3e:f0:79:f0: 31:14:3f:17:04:50:79:53:d0:67:6a:07:56:17:41:14:a7:61: 74:47:30:bc:16:a3:37:21:1b:37:86:ef:39:20:55:fb:c3:5f: 24:84:a5:93:97:8d:b8:f9:2b:b0:5d:9c:73:85:3d:bd:34:cc: 63:48:b2:84:c5:8b:eb:78:b7:36:35:5f:73:1e:7c:79:da:f2: 93:88:e4:59:1f:9f:c6:f7:d2:7c:ee:0f:60:11:06:ad:9e:d8: 77:76:f5:25:4a:d0:d2:2c:6a:9b:d5:8e:97:c6:df:7e:05:85: a2:d6:d7:b4:f7:7b:b0:70:fe:bf:23:a2:b1:26:da:e2:a2:1f: 52:66:d4:b8:f7:00:ff:0f:f6:86:1d:65:5c:95:36:cf:71:12: ca:b5:4d:3e:52:a0:f3:e7:37:dd:7c:66:01:64:60:d9:b2:8e: a1:33:a8:19:f4:d0:37:7d:3d:91:7d:33:5d:fb:5f:4e:7b:0a: 66:b3:9b:93:ba:87:04:b4:50:3c:2d:88:96:bf:e6:50:4f:f6: c8:d9:89:f1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcau7EGLj6BKIqoRGbu5g2K4ivw8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIwMDAzMDQyWhcNMjYwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNWE4NjA4NTA1MzkxNjFhZDFiZTgxNjczOTliOTIzNDUx OTNhMWM1ZTU5MTNjZTQ0YjllNWNiYTkzZGYwM2FhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYRXfc1j+ldBdx1EAx/znIfkWwFsEolhcJCaOS5eTJmwq0 oulnKLYnPM5lI9xl3udlR4Z8nq0owsKx5f0e4xtTaZ1p0eBg2L6xRN+E4NxZUs0J y4zn1PweFB2/Y2z6BMEOuihgAYSZ9YjkttNQ0CqMsyIh2SjT9V9NOfV5D7PvgBCy SvALnPulfdXlyLxMwJiKyLzKtG7xovZMd5cLGW36r6CAjc4ERfIaIsD66ZdSTb6R zQP8aMUb8mCaLFAloOhgsDPKFU4aqi1/p1YEBFY/F2uDAcFjwp1z6zccqKjLSQhD FKl/yj5/7tD8edW9u7ip3KXBFa0WC+vDCnIF9ghLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVDEI4uXM6mR+N4xuA1VRsIZfDAEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIwZWNkODNkLWU2YzItNGQ3NS1iOWNiLThhNzg5ODE3MmFkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUQOSAwDQYJKoZIhvcNAQELBQADggEBAHKukwy/AbZxK78eFg+y7nrXdkF3 kDPDsrsgl+l2otJSZaZoDmeM3lnZ0QZyUWNpbsg8PvB58DEUPxcEUHlT0GdqB1YX QRSnYXRHMLwWozchGzeG7zkgVfvDXySEpZOXjbj5K7BdnHOFPb00zGNIsoTFi+t4 tzY1X3MefHna8pOI5Fkfn8b30nzuD2ARBq2e2Hd29SVK0NIsapvVjpfG334FhaLW 17T3e7Bw/r8jorEm2uKiH1Jm1Lj3AP8P9oYdZVyVNs9xEsq1TT5SoPPnN918ZgFk YNmyjqEzqBn00Dd9PZF9M137X057Cmazm5O6hwS0UDwtiJa/5lBP9sjZifE= -----END CERTIFICATE-----Generated at Sat Jun 13 05:44:13 2026 by rpki-client