$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2baafe88-09a4-453d-abe6-7913ac62d970.roa File: 2baafe88-09a4-453d-abe6-7913ac62d970.roa (raw, json) Hash identifier: vE9eUSa2xP5J2Ul6NwkoptYrm0sHmCL+4GQ6oYW8dDI= Subject key identifier: 8A:13:B9:9B:43:2C:6A:E7:9B:4C:98:73:92:F8:9C:36:94:BF:84:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6ABC617EDBE8E3F3EC1572BC6D5B75D806BEC925 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2baafe88-09a4-453d-abe6-7913ac62d970.roa Signing time: Fri 17 Apr 2026 00:00:17 +0000 ROA not before: Fri 17 Apr 2026 00:00:17 +0000 ROA not after: Thu 16 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 209.107.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:bc:61:7e:db:e8:e3:f3:ec:15:72:bc:6d:5b:75:d8:06:be:c9:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 17 00:00:17 2026 GMT Not After : Jul 16 23:59:59 2026 GMT Subject: serialNumber=246839fefe96c2dddfd470c59c5f7f67124bd300c5476bbc590b5ab1848e9306, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:1d:e3:dd:ea:bd:11:b0:58:8b:3d:1b:45: 4f:e2:db:8c:db:a7:4a:09:4d:93:1b:02:e4:0a:10: e5:bd:b7:d9:fe:00:a3:fc:c1:a3:14:4e:8d:ee:0c: 7a:81:13:e3:9d:b7:5d:10:9c:ea:e6:3f:86:60:8a: b6:83:ff:0f:1b:e4:8b:de:7e:26:ed:a4:d4:df:b5: 50:72:4b:30:e9:69:2f:b5:97:62:ca:f2:7b:82:72: 63:c5:d2:e5:d3:74:bf:29:89:86:86:bf:56:17:c2: 50:70:1d:db:41:f2:f1:3e:af:f3:70:d0:73:76:c6: 23:1c:a8:ee:b9:c0:14:86:94:44:56:42:99:f1:5b: b6:97:cc:eb:29:76:68:8f:6e:5b:35:ec:63:96:8a: 01:27:37:0f:4b:87:47:52:09:6a:09:ed:d5:8b:33: b9:3b:2d:e0:12:f7:81:51:0b:8f:98:47:f4:a4:3b: a4:09:ff:e8:bd:dd:2a:ae:ca:13:6f:44:a9:d2:2f: 55:3d:72:fa:da:ca:51:32:3a:0e:c9:d1:11:26:21: 7e:8f:bd:ea:52:28:9c:46:21:fa:7b:08:45:73:31: 96:8d:ff:50:64:46:a4:bc:95:b7:4d:64:31:b5:4b: d8:8c:48:34:84:82:87:05:a0:c1:e1:f3:26:82:ea: e5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:13:B9:9B:43:2C:6A:E7:9B:4C:98:73:92:F8:9C:36:94:BF:84:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2baafe88-09a4-453d-abe6-7913ac62d970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.107.197.0/24 Signature Algorithm: sha256WithRSAEncryption ad:53:93:d3:90:59:80:0b:f3:3c:43:b3:78:f4:75:b1:d6:7e: 99:41:6c:1d:80:47:e6:d2:7a:64:d4:a1:19:ce:66:e7:ff:c3: 41:9e:57:06:f2:4b:dc:c8:95:10:88:cd:c9:e4:ac:3a:84:3a: 3a:fd:a4:7e:5e:ff:f8:02:18:ed:6b:a1:ce:8e:15:8f:05:bf: fb:26:11:5e:84:e1:35:ed:d9:a4:5b:53:df:11:50:d2:65:2d: d0:c9:4c:90:19:55:11:39:1d:10:b3:e2:d2:80:d1:19:72:41: 31:d9:04:b0:6c:77:36:ff:e7:d7:e3:a9:82:34:2b:0d:32:26: 2a:59:76:55:f6:9f:d3:45:18:30:27:fc:8c:92:a7:82:10:fc: d3:d2:46:7b:c6:ef:04:2e:ed:12:13:45:e1:99:62:74:2e:1e: c2:08:45:9c:f6:89:29:63:64:fa:e0:de:fe:a2:fe:6f:8e:50: 83:8f:8e:1a:ed:d6:a8:99:89:8c:24:27:03:bb:73:de:d0:41: 74:db:5e:70:c0:6b:a8:8e:e3:53:80:63:c6:25:1e:b6:fc:a5: 82:20:68:53:4c:db:d2:67:e1:77:f7:01:dc:4b:48:fe:19:cc: 3f:3d:ed:ec:bb:4a:de:65:25:9b:27:a9:f8:09:45:f6:e9:6f: b8:16:8f:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUarxhftvo4/PsFXK8bVt12Aa+ySUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDE3MDAwMDE3WhcNMjYwNzE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNDY4MzlmZWZlOTZjMmRkZGZkNDcwYzU5YzVmN2Y2NzEy NGJkMzAwYzU0NzZiYmM1OTBiNWFiMTg0OGU5MzA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtiB3j3eq9EbBYiz0bRU/i24zbp0oJTZMbAuQKEOW9t9n+ AKP8waMUTo3uDHqBE+Odt10QnOrmP4ZgiraD/w8b5IvefibtpNTftVBySzDpaS+1 l2LK8nuCcmPF0uXTdL8piYaGv1YXwlBwHdtB8vE+r/Nw0HN2xiMcqO65wBSGlERW QpnxW7aXzOspdmiPbls17GOWigEnNw9Lh0dSCWoJ7dWLM7k7LeAS94FRC4+YR/Sk O6QJ/+i93SquyhNvRKnSL1U9cvraylEyOg7J0REmIX6PvepSKJxGIfp7CEVzMZaN /1BkRqS8lbdNZDG1S9iMSDSEgocFoMHh8yaC6uVjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUihO5m0MsauebTJhzkvicNpS/hOEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiYWFmZTg4LTA5YTQtNDUzZC1hYmU2LTc5MTNhYzYyZDk3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADRa8UwDQYJKoZIhvcNAQELBQADggEBAK1Tk9OQWYAL8zxDs3j0dbHWfplB bB2AR+bSemTUoRnOZuf/w0GeVwbyS9zIlRCIzcnkrDqEOjr9pH5e//gCGO1roc6O FY8Fv/smEV6E4TXt2aRbU98RUNJlLdDJTJAZVRE5HRCz4tKA0RlyQTHZBLBsdzb/ 59fjqYI0Kw0yJipZdlX2n9NFGDAn/IySp4IQ/NPSRnvG7wQu7RITReGZYnQuHsII RZz2iSljZPrg3v6i/m+OUIOPjhrt1qiZiYwkJwO7c97QQXTbXnDAa6iO41OAY8Yl Hrb8pYIgaFNM29Jn4Xf3AdxLSP4ZzD897ey7St5lJZsnqfgJRfbpb7gWj+4= -----END CERTIFICATE-----Generated at Fri Apr 17 11:05:10 2026 by rpki-client